Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/jTx6hlsDBNJCAOasttnZHnNh5os.roa
File: jTx6hlsDBNJCAOasttnZHnNh5os.roa (raw, json)
Hash identifier: AiUzNvado3sXuJwkMtv5b0Rwz7AA4J8rE8sDBTRGxjs=
Subject key identifier: 8D:3C:7A:86:5B:03:04:D2:42:00:E6:AC:B6:D9:D9:1E:73:61:E6:8B
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 023A2C16
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/jTx6hlsDBNJCAOasttnZHnNh5os.roa
Signing time: Wed 06 Apr 2022 07:59:19 +0000
ROA not before: Wed 06 Apr 2022 07:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.0.0/17 maxlen: 17
88.202.0.0/18 maxlen: 18
88.202.4.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.139.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.135.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.164.0/23 maxlen: 23
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.170.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.176.0/21 maxlen: 21
84.254.175.0/24 maxlen: 24
84.254.184.0/22 maxlen: 22
176.227.128.0/20 maxlen: 20
84.254.132.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.128.0/18 maxlen: 18
84.254.188.0/23 maxlen: 23
84.254.190.0/24 maxlen: 24
95.210.192.0/20 maxlen: 20
95.210.192.0/19 maxlen: 19
95.210.224.0/20 maxlen: 20
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
95.210.160.0/19 maxlen: 19
95.210.240.0/21 maxlen: 21
95.210.252.0/23 maxlen: 23
95.210.248.0/22 maxlen: 22
5.61.192.0/21 maxlen: 21
5.61.197.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.0.0/22 maxlen: 22
95.210.8.0/21 maxlen: 21
95.210.0.0/16 maxlen: 16
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.7.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
213.209.184.0/22 maxlen: 22
95.210.94.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.112.0/22 maxlen: 22
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.116.0/22 maxlen: 22
95.210.128.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.32.0/23 maxlen: 23
95.210.34.0/24 maxlen: 24
95.210.44.0/23 maxlen: 23
95.210.43.0/24 maxlen: 24
95.210.42.0/24 maxlen: 24
95.210.46.0/23 maxlen: 23
95.210.48.0/22 maxlen: 22
95.210.55.0/24 maxlen: 24
95.210.64.0/20 maxlen: 20
95.210.61.0/24 maxlen: 24
95.210.63.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.85.0/24 maxlen: 24
88.202.81.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.79.0/24 maxlen: 24
88.202.88.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.87.0/24 maxlen: 24
88.202.86.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.112.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.116.0/22 maxlen: 22
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/20 maxlen: 20
88.202.47.0/24 maxlen: 24
88.202.46.0/24 maxlen: 24
88.202.48.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
88.202.68.0/23 maxlen: 23
88.202.70.0/23 maxlen: 23
88.202.66.0/24 maxlen: 24
88.202.76.0/23 maxlen: 23
88.202.72.0/22 maxlen: 22
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
2a00:ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37366806 (0x23a2c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Apr 6 07:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d3c7a865b0304d24200e6acb6d9d91e7361e68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:d7:aa:6f:db:90:8f:1b:1c:ba:3e:e9:a6:
4b:4c:e4:97:65:af:47:36:1f:a6:50:7f:fe:08:b0:
5b:63:55:32:8a:1c:79:16:3b:27:46:56:bf:9b:76:
ee:59:15:b7:1b:c6:b2:2b:d3:7e:fa:91:05:e7:81:
69:a9:84:18:62:aa:ce:91:3e:82:30:6b:da:02:2d:
16:a6:4f:cf:65:08:e4:c1:b9:39:a4:f0:d0:90:84:
00:f6:51:6d:e9:b3:b2:fc:2b:81:55:a4:70:4a:57:
9b:3c:59:60:0e:3c:f8:f0:6c:5b:22:f6:1f:1f:2e:
96:fe:7e:73:40:1c:b7:2f:08:4e:c3:05:8e:37:94:
87:0e:e7:da:29:4f:fb:67:62:89:27:96:2b:ff:2a:
43:60:04:2d:73:a9:d7:cf:af:90:19:06:61:b2:46:
85:5a:65:77:ab:74:af:e2:7a:38:42:3b:0c:68:88:
84:c8:1f:79:f2:fe:a5:e6:2c:15:21:65:71:86:5f:
8a:4f:12:aa:09:c0:05:fc:b2:5f:ca:37:95:25:5b:
a5:28:5f:76:e7:b0:d8:61:9e:d3:62:aa:40:ef:7b:
cd:33:dd:cf:04:75:fe:bc:b9:ba:88:90:04:b1:e3:
7b:3c:1c:3a:31:3b:23:00:26:28:2c:54:9b:7c:4c:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3C:7A:86:5B:03:04:D2:42:00:E6:AC:B6:D9:D9:1E:73:61:E6:8B
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/jTx6hlsDBNJCAOasttnZHnNh5os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
27:25:df:a4:86:73:ec:e0:ba:00:d5:05:38:ed:6d:28:ce:6f:
87:6c:ba:d0:ca:ce:ef:2c:58:c4:ea:7d:24:72:60:c7:6a:a3:
ca:2a:02:66:b0:68:f2:e9:eb:4a:57:80:fb:76:01:84:b1:31:
14:af:f3:32:21:b2:92:71:94:12:95:e3:71:f4:bb:97:77:bf:
2a:58:70:75:80:4b:68:49:2a:ec:15:14:93:1c:b4:f1:3f:99:
d2:6c:b3:dc:3e:e4:c1:f4:7e:f6:61:95:d9:a1:21:06:f0:43:
98:df:18:88:4c:1e:26:68:1a:a3:a7:71:98:e2:e9:fb:93:84:
3b:3a:15:2b:60:21:52:f0:6d:49:ef:1b:f4:a9:84:25:92:f0:
26:05:bf:98:4d:85:6b:d5:7d:b0:2a:c5:88:e1:41:0a:28:4c:
21:19:39:75:3d:3c:c6:07:79:6d:c5:e6:5b:47:25:a2:c6:9a:
ef:a1:26:a9:00:9d:22:7c:2d:48:e0:ee:cc:1b:f6:83:50:3b:
b5:03:0f:a0:ca:65:cb:dc:e3:09:20:3b:d9:d8:5a:61:df:2b:
9a:89:34:d2:09:f3:47:e1:e9:ff:cb:c9:3c:33:fe:6f:77:01:
c6:69:39:87:53:f9:85:fa:07:aa:ca:df:f1:66:6d:8d:2d:f1:
4e:9c:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:32 2025 by rpki-client