Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/SfJKfe8h633mXsd8jGbxC2THGTs.roa
File: SfJKfe8h633mXsd8jGbxC2THGTs.roa (raw, json)
Hash identifier: wYFiiPOD0mcD/LfPPGvHM7UmpI/WTvsjtkKEg5wggyc=
Subject key identifier: 49:F2:4A:7D:EF:21:EB:7D:E6:5E:C7:7C:8C:66:F1:0B:64:C7:19:3B
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 018A6AA37EB0B82B77B9D45A1BEE1D585722
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/SfJKfe8h633mXsd8jGbxC2THGTs.roa
Signing time: Wed 06 Sep 2023 13:16:54 +0000
ROA not before: Wed 06 Sep 2023 13:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.4.0/24 maxlen: 24
88.202.9.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.135.0/24 maxlen: 24
84.254.137.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.139.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.140.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.146.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.170.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.175.0/24 maxlen: 24
176.227.132.0/24 maxlen: 24
176.227.128.0/24 maxlen: 24
176.227.130.0/24 maxlen: 24
176.227.139.0/24 maxlen: 24
176.227.138.0/24 maxlen: 24
176.227.135.0/24 maxlen: 24
176.227.137.0/24 maxlen: 24
176.227.136.0/24 maxlen: 24
176.227.134.0/24 maxlen: 24
84.254.132.0/24 maxlen: 24
176.227.142.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
176.227.143.0/24 maxlen: 24
176.227.141.0/24 maxlen: 24
176.227.140.0/24 maxlen: 24
84.254.190.0/24 maxlen: 24
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
95.210.169.0/24 maxlen: 24
95.210.255.0/24 maxlen: 24
95.210.254.0/24 maxlen: 24
5.61.197.0/24 maxlen: 24
5.61.199.0/24 maxlen: 24
5.61.198.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.7.0/24 maxlen: 24
95.210.15.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
95.210.13.0/24 maxlen: 24
95.210.79.0/24 maxlen: 24
95.210.82.0/24 maxlen: 24
95.210.81.0/24 maxlen: 24
95.210.83.0/24 maxlen: 24
95.210.94.0/24 maxlen: 24
95.210.93.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.112.0/24 maxlen: 24
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.117.0/24 maxlen: 24
95.210.116.0/24 maxlen: 24
95.210.113.0/24 maxlen: 24
95.210.114.0/24 maxlen: 24
95.210.128.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.32.0/24 maxlen: 24
95.210.35.0/24 maxlen: 24
95.210.34.0/24 maxlen: 24
95.210.43.0/24 maxlen: 24
95.210.40.0/24 maxlen: 24
95.210.42.0/24 maxlen: 24
95.210.41.0/24 maxlen: 24
95.210.55.0/24 maxlen: 24
95.210.64.0/24 maxlen: 24
95.210.61.0/24 maxlen: 24
95.210.63.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.67.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.66.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.116.0/22 maxlen: 22
5.175.64.0/20 maxlen: 20
88.202.68.0/23 maxlen: 23
88.202.70.0/23 maxlen: 23
88.202.76.0/23 maxlen: 23
88.202.72.0/22 maxlen: 22
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
88.202.0.0/17 maxlen: 17
88.202.0.0/18 maxlen: 18
84.254.164.0/23 maxlen: 23
84.254.176.0/21 maxlen: 21
84.254.184.0/22 maxlen: 22
176.227.128.0/20 maxlen: 20
84.254.128.0/18 maxlen: 18
84.254.188.0/23 maxlen: 23
95.210.192.0/20 maxlen: 20
95.210.192.0/19 maxlen: 19
95.210.224.0/20 maxlen: 20
95.210.160.0/19 maxlen: 19
95.210.240.0/21 maxlen: 21
95.210.252.0/23 maxlen: 23
95.210.248.0/22 maxlen: 22
5.61.192.0/21 maxlen: 21
95.210.0.0/22 maxlen: 22
95.210.8.0/21 maxlen: 21
95.210.0.0/16 maxlen: 16
213.209.184.0/22 maxlen: 22
95.210.96.0/21 maxlen: 24
95.210.112.0/22 maxlen: 22
95.210.116.0/22 maxlen: 22
185.28.64.0/24 maxlen: 24
95.210.32.0/23 maxlen: 23
95.210.44.0/23 maxlen: 23
185.28.65.0/24 maxlen: 24
95.210.46.0/23 maxlen: 23
95.210.48.0/22 maxlen: 22
95.210.64.0/20 maxlen: 20
88.202.85.0/24 maxlen: 24
88.202.81.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.79.0/24 maxlen: 24
88.202.88.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.87.0/24 maxlen: 24
88.202.86.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.112.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.123.0/24 maxlen: 24
88.202.122.0/24 maxlen: 24
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/24 maxlen: 24
88.202.51.0/24 maxlen: 24
88.202.47.0/24 maxlen: 24
88.202.46.0/24 maxlen: 24
88.202.48.0/24 maxlen: 24
5.175.68.0/24 maxlen: 24
5.175.71.0/24 maxlen: 24
5.175.70.0/24 maxlen: 24
5.175.67.0/24 maxlen: 24
5.175.69.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.66.0/24 maxlen: 24
5.175.65.0/24 maxlen: 24
5.175.74.0/24 maxlen: 24
5.175.78.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
88.202.61.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
5.175.75.0/24 maxlen: 24
88.202.62.0/24 maxlen: 24
5.175.73.0/24 maxlen: 24
5.175.72.0/24 maxlen: 24
88.202.66.0/24 maxlen: 24
5.175.79.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.172.0/22 maxlen: 24
2a00:ca0:201e::/48 maxlen: 48
2a00:ca0:2008::/48 maxlen: 48
2a00:ca0:2005::/48 maxlen: 48
2a00:ca0:2002::/48 maxlen: 48
2a00:ca0:2003::/48 maxlen: 48
2a00:ca0:2000::/48 maxlen: 48
2a00:ca0:2012::/48 maxlen: 48
2a00:ca0:200c::/48 maxlen: 48
2a00:ca0:200f::/48 maxlen: 48
2a00:ca0:2006::/48 maxlen: 48
2a00:ca0:200a::/48 maxlen: 48
2a00:ca0:2004::/48 maxlen: 48
2a00:ca0:2001::/48 maxlen: 48
2a00:ca0:2016::/48 maxlen: 48
2a00:ca0::/32 maxlen: 32
2a00:ca0:2013::/48 maxlen: 48
2a00:ca0:2017::/48 maxlen: 48
2a00:ca0:200e::/48 maxlen: 48
2a00:ca0:201d::/48 maxlen: 48
2a00:ca0:201a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:a3:7e:b0:b8:2b:77:b9:d4:5a:1b:ee:1d:58:57:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Sep 6 13:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49f24a7def21eb7de65ec77c8c66f10b64c7193b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:c1:7b:3d:1d:35:49:7b:52:61:84:51:37:
af:3f:b4:1c:a7:a3:e8:71:8b:46:56:f6:f6:8a:ec:
f6:bf:73:b6:7e:26:9c:3c:92:49:f8:d4:93:ad:9e:
de:a7:1f:74:85:94:d6:82:d8:52:2b:c0:01:3e:2f:
f1:8b:9a:84:60:a0:dd:9a:c9:b6:b1:77:31:5c:f5:
6f:1d:08:76:e9:8a:2c:ad:81:d4:a5:d3:db:c4:df:
3f:b0:21:39:9b:40:b8:8a:8c:02:f3:d8:d0:98:5f:
75:c6:b0:db:06:99:b8:7e:4b:3d:af:43:fb:02:51:
0a:3b:cd:c9:0d:ae:07:9b:f6:2f:5b:0b:4e:c4:37:
59:dc:4c:1d:f2:bc:82:95:5b:3a:f7:ec:7f:cf:8e:
9c:fd:94:07:35:f8:34:97:d9:cb:e2:37:eb:90:88:
e7:d5:05:ec:c3:ad:26:a0:af:ef:22:b0:c7:1e:ec:
18:76:e4:b0:88:aa:2b:1e:80:ca:b6:5b:9f:76:70:
35:88:8d:7a:79:d6:17:3d:dc:06:8c:e0:82:18:f9:
47:c6:1d:69:5c:e0:1e:2a:9f:32:41:60:26:79:1f:
83:3f:c6:19:3c:dd:2b:3e:25:7c:de:6c:88:0c:35:
10:ed:63:7d:0c:1a:8f:c7:e0:e7:67:ab:90:44:f6:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F2:4A:7D:EF:21:EB:7D:E6:5E:C7:7C:8C:66:F1:0B:64:C7:19:3B
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/SfJKfe8h633mXsd8jGbxC2THGTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
185.28.64.0/23
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
28:19:d7:9d:60:ca:c5:ab:ac:b0:6a:75:ae:54:bf:66:37:28:
d5:da:f9:18:17:d4:be:02:70:50:24:84:27:a9:79:23:fa:94:
10:2e:27:4f:79:e4:d1:a1:be:cd:68:87:08:3d:7e:47:3e:d1:
2d:ba:43:e3:5e:c7:cb:15:10:8c:37:b5:57:2e:ce:2a:af:76:
c0:96:e4:e2:21:91:43:d5:5e:37:f1:a3:e5:aa:75:f0:9e:89:
28:c9:71:72:ee:14:71:24:2b:83:83:d4:72:1a:91:e3:d8:8e:
bd:e9:8b:89:57:16:93:2a:f2:d8:62:b2:df:5f:31:d2:75:5e:
08:88:1f:7d:40:17:c7:20:bc:c8:40:7b:48:32:02:b8:40:0c:
8d:c0:3b:68:0c:ad:a2:0d:45:ca:ee:00:e2:a0:d0:fc:dc:15:
34:1a:ab:57:7e:6a:de:fa:78:36:8a:56:8c:c4:11:2c:57:e7:
f0:74:68:32:75:c4:d7:87:ed:9c:5d:7c:50:83:b8:9a:d2:a7:
c4:b6:cf:64:81:28:be:c7:c7:24:d1:4f:a9:f7:2c:95:d2:3a:
fc:ff:55:66:97:65:c2:e7:92:f1:7f:d3:e6:81:49:4c:b6:37:
86:bb:1d:4c:20:d7:f4:50:49:b0:df:88:79:8d:c0:94:eb:c6:
a5:0c:c0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:03 2025 by rpki-client