Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/_y0zl-pBC8R8pjW9Md3OBzRz6Z4.roa
File: _y0zl-pBC8R8pjW9Md3OBzRz6Z4.roa (raw, json)
Hash identifier: 8QtNvvnxiBcmAVu/qTRj8RuJA8aOAxNbIdyDzkf1iA4=
Subject key identifier: FF:2D:33:97:EA:41:0B:C4:7C:A6:35:BD:31:DD:CE:07:34:73:E9:9E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 028FC04F
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/_y0zl-pBC8R8pjW9Md3OBzRz6Z4.roa
Signing time: Tue 10 May 2022 08:41:26 +0000
ROA not before: Tue 10 May 2022 08:41:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.0.0/17 maxlen: 17
88.202.0.0/18 maxlen: 18
88.202.4.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.139.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.135.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.164.0/23 maxlen: 23
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.170.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.176.0/21 maxlen: 21
84.254.175.0/24 maxlen: 24
84.254.184.0/22 maxlen: 22
176.227.128.0/20 maxlen: 20
84.254.132.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.128.0/18 maxlen: 18
84.254.188.0/23 maxlen: 23
84.254.190.0/24 maxlen: 24
95.210.192.0/20 maxlen: 20
95.210.192.0/19 maxlen: 19
95.210.224.0/20 maxlen: 20
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
95.210.160.0/19 maxlen: 19
95.210.240.0/21 maxlen: 21
95.210.252.0/23 maxlen: 23
95.210.248.0/22 maxlen: 22
95.210.255.0/24 maxlen: 24
95.210.254.0/24 maxlen: 24
5.61.192.0/21 maxlen: 21
5.61.197.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.0.0/22 maxlen: 22
95.210.8.0/21 maxlen: 21
95.210.0.0/16 maxlen: 16
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.7.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
213.209.176.0/20 maxlen: 24
213.209.184.0/22 maxlen: 22
95.210.94.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.112.0/22 maxlen: 22
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.116.0/22 maxlen: 22
95.210.128.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.32.0/23 maxlen: 23
95.210.34.0/24 maxlen: 24
95.210.44.0/23 maxlen: 23
95.210.43.0/24 maxlen: 24
95.210.42.0/24 maxlen: 24
95.210.46.0/23 maxlen: 23
95.210.48.0/22 maxlen: 22
95.210.55.0/24 maxlen: 24
95.210.64.0/20 maxlen: 20
95.210.61.0/24 maxlen: 24
95.210.63.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.85.0/24 maxlen: 24
88.202.81.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.79.0/24 maxlen: 24
88.202.88.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.87.0/24 maxlen: 24
88.202.86.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.112.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.116.0/22 maxlen: 22
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/20 maxlen: 20
88.202.47.0/24 maxlen: 24
88.202.46.0/24 maxlen: 24
88.202.48.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
88.202.68.0/23 maxlen: 23
88.202.70.0/23 maxlen: 23
88.202.66.0/24 maxlen: 24
88.202.76.0/23 maxlen: 23
88.202.72.0/22 maxlen: 22
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
213.209.172.0/22 maxlen: 24
2a00:ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42975311 (0x28fc04f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: May 10 08:41:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff2d3397ea410bc47ca635bd31ddce073473e99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:dc:5a:da:b7:b1:50:94:06:04:23:62:de:
92:bf:7f:e0:8d:7e:ab:a6:dd:d1:05:e6:90:82:83:
42:9d:7d:d2:08:ff:ef:25:1e:41:45:f3:1b:9b:8f:
14:46:41:60:96:e8:db:cc:3d:aa:b8:ac:3c:90:6d:
6a:89:e1:56:a9:9e:5f:01:a9:71:1e:5c:0f:80:45:
a7:c0:83:39:61:62:e0:ef:e7:d8:63:45:f1:ac:5d:
3b:a2:87:fd:07:38:6c:75:94:2e:37:aa:33:9b:94:
cd:28:db:c4:cc:87:0e:ea:10:b7:37:26:03:21:42:
07:a0:33:0e:ad:1a:35:41:c7:1a:8d:20:56:fe:c4:
c3:0f:9a:ec:18:51:38:ff:e7:94:89:52:68:82:06:
0a:2d:55:96:6e:7f:60:1b:7f:99:77:8c:c5:d1:3f:
87:c5:54:71:0d:d3:2c:59:16:d9:67:25:c5:57:19:
f1:7f:c3:52:56:4d:aa:45:ee:dd:79:5c:dc:54:2c:
c8:6d:63:94:77:99:ab:29:48:db:f3:74:d8:7b:18:
88:31:8d:6c:e0:76:52:78:69:38:c0:36:d2:cd:9e:
16:25:da:66:7a:f4:a7:15:7f:62:60:15:a1:00:00:
0f:0f:28:94:ed:64:b4:9b:21:94:24:16:1b:c7:78:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2D:33:97:EA:41:0B:C4:7C:A6:35:BD:31:DD:CE:07:34:73:E9:9E
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/_y0zl-pBC8R8pjW9Md3OBzRz6Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
96:38:ac:ee:a4:87:78:04:b6:2e:b5:58:15:33:4e:81:f6:0d:
1e:89:75:33:a1:0a:22:af:ff:96:35:21:57:1d:1b:8f:97:79:
6d:39:c8:a6:7a:5f:7d:53:2d:a9:4a:31:5b:40:56:9c:4d:ed:
e4:46:70:64:a8:03:9b:7b:4c:b5:31:d2:d4:68:ae:4d:a9:33:
23:51:00:56:3a:27:01:44:98:c7:d3:00:bc:b0:eb:ec:ad:08:
2e:ae:2b:95:b0:50:55:87:92:ee:c6:21:65:b7:a1:be:a3:30:
29:50:17:c7:68:7e:09:cd:f8:c7:ac:5c:59:14:12:25:4c:4a:
35:2d:b7:14:62:37:d3:1e:c8:32:23:6c:60:d9:51:43:2b:c6:
ee:84:3f:d0:a7:79:65:38:2d:55:1b:fd:1e:37:e7:b9:b5:01:
e9:c8:f0:43:bb:3c:76:6f:20:6c:57:63:0c:f5:2a:e7:60:b2:
da:48:10:ec:43:77:65:21:b8:23:25:a6:df:77:be:95:c7:0a:
8b:28:dc:07:93:44:4d:30:88:81:c3:25:36:7d:62:12:8d:50:
3d:24:31:ad:80:88:69:58:08:ff:ff:22:cf:e9:a9:ed:32:91:
59:67:40:95:5e:b3:cc:b5:b5:d7:45:94:8b:0d:38:23:cd:09:
1c:f1:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:46 2025 by rpki-client