Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/oGQcWBHGgGbdkfq0oGl_95NNVac.roa
File: oGQcWBHGgGbdkfq0oGl_95NNVac.roa (raw, json)
Hash identifier: 55W68zdQZaxhE/N5d4Ajni+qFIOOwZjybZHDJQncjJE=
Subject key identifier: A0:64:1C:58:11:C6:80:66:DD:91:FA:B4:A0:69:7F:F7:93:4D:55:A7
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0200EDC4
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/oGQcWBHGgGbdkfq0oGl_95NNVac.roa
Signing time: Wed 30 Mar 2022 14:36:38 +0000
ROA not before: Wed 30 Mar 2022 14:36:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.0.0/17 maxlen: 17
88.202.4.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.175.0/24 maxlen: 24
176.227.128.0/20 maxlen: 20
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.128.0/18 maxlen: 18
84.254.190.0/24 maxlen: 24
95.210.192.0/20 maxlen: 20
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
5.61.192.0/21 maxlen: 21
5.61.197.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.0.0/22 maxlen: 22
95.210.0.0/16 maxlen: 16
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
95.210.94.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.34.0/24 maxlen: 24
95.210.55.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.85.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/20 maxlen: 20
88.202.47.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
88.202.66.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
2a00:ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33615300 (0x200edc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Mar 30 14:36:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0641c5811c68066dd91fab4a0697ff7934d55a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:79:2e:43:65:c4:a7:4c:44:6d:b3:75:20:
aa:84:8e:a7:2b:95:f8:00:71:02:3f:1f:9c:9f:75:
8b:62:e4:ab:de:8b:d4:85:a3:a0:d5:68:71:6b:55:
83:4c:3d:62:d6:db:f5:63:ae:fa:cd:f5:ee:1c:34:
e1:14:9a:90:01:fa:73:e2:a9:ff:d5:15:2a:07:a9:
ae:5a:c7:35:49:4c:8b:41:62:9a:75:ed:d6:dc:46:
35:76:4f:22:1f:f4:97:ef:8f:ce:06:0a:02:2e:a8:
48:9e:d1:76:e4:8d:12:62:5f:83:ac:de:62:07:29:
ab:a1:b5:e2:d7:22:ba:72:5a:ba:6d:b9:2b:53:06:
e3:51:46:81:70:09:a8:35:4b:a9:2c:26:4e:d2:b6:
2f:0d:6a:a9:86:d9:3f:3d:f5:2d:b0:3b:07:96:83:
69:db:52:33:b1:00:c0:69:df:60:01:2e:2e:ed:50:
5f:41:40:ac:5a:a6:f0:8a:7c:3a:7d:9d:36:3d:d5:
62:9c:fa:a7:a0:61:f3:47:8d:cf:6c:15:09:bb:6c:
0a:11:88:54:46:65:51:18:bc:0d:b4:e6:88:86:ab:
77:4f:10:6e:8d:25:8a:b1:28:dd:d9:a7:fb:a8:c8:
00:58:03:7f:3c:08:4f:c7:d9:98:41:7d:ef:c7:09:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:64:1C:58:11:C6:80:66:DD:91:FA:B4:A0:69:7F:F7:93:4D:55:A7
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/oGQcWBHGgGbdkfq0oGl_95NNVac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:a5:7e:6a:ff:50:4a:7f:90:14:d3:b4:a0:28:88:28:f0:2f:
72:35:e6:e8:c8:2c:aa:b9:3b:d5:23:c5:69:86:96:11:39:37:
11:81:03:cc:89:e9:f8:3f:c6:85:82:c9:f7:d3:b8:ed:19:cf:
70:da:bc:e7:a0:da:dc:64:8a:3f:73:61:1a:52:57:41:41:49:
34:a2:bd:cc:d6:d6:ac:b1:1d:20:0b:5f:14:df:b2:35:5e:8c:
63:96:99:96:1f:a6:6e:77:70:13:b5:63:56:da:c0:0a:e3:98:
ed:2e:13:13:3c:64:d2:64:9f:e8:a1:4d:d9:22:ae:16:b2:7a:
32:90:ac:04:89:c5:c5:42:e8:3e:04:81:80:31:5b:61:41:75:
b9:5d:89:ee:52:5f:ce:c0:9f:2b:2b:fd:c8:b6:40:26:91:1c:
f5:6d:96:de:06:c7:c9:89:0f:37:fa:d7:77:97:11:d9:78:f4:
32:50:a1:8a:a1:56:57:9f:50:79:95:64:7f:7c:60:f4:ce:f5:
32:6d:8a:a4:9a:33:af:40:a6:1f:2c:24:0d:9a:0a:eb:28:21:
a6:25:4a:5d:cf:e7:f7:0e:e3:84:63:f2:8a:80:b7:ee:70:15:
a3:51:4f:dc:c2:d0:8d:2d:cf:89:6f:2f:94:ce:df:97:f3:98:
58:d4:52:ec
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIEAgDtxDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NzU1NzAyNDY3NzcwZWQ2OWIzNjdiNzdiYmU2NDBiYzZkYjQxNTNlMB4XDTIyMDMz
MDE0MzYzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTA2NDFjNTgxMWM2
ODA2NmRkOTFmYWI0YTA2OTdmZjc5MzRkNTVhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOYTeS5DZcSnTERts3UgqoSOpyuV+ABxAj8fnJ91i2Lkq96L
1IWjoNVocWtVg0w9Ytbb9WOu+s317hw04RSakAH6c+Kp/9UVKgeprlrHNUlMi0Fi
mnXt1txGNXZPIh/0l++PzgYKAi6oSJ7RduSNEmJfg6zeYgcpq6G14tciunJaum25
K1MG41FGgXAJqDVLqSwmTtK2Lw1qqYbZPz31LbA7B5aDadtSM7EAwGnfYAEuLu1Q
X0FArFqm8Ip8On2dNj3VYpz6p6Bh80eNz2wVCbtsChGIVEZlURi8DbTmiIard08Q
bo0lirEo3dmn+6jIAFgDfzwIT8fZmEF978cJ1WMCAwEAAaOCAjswggI3MB0GA1Ud
DgQWBBSgZBxYEcaAZt2R+rSgaX/3k01VpzAfBgNVHSMEGDAWgBTHVXAkZ3cO1ps2
e3e75kC8bbQVPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3gxVndKR2QzRHRhYk5udDN1LVpBdkcyMEZUNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvMjQzZjkxLTg3NDctNDk4MS05Y2JmLTFkMzczNDk5OTI0ZS8x
L29HUWNXQkhHZ0diZGtmcTBvR2xfOTVOTlZhYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
MjQzZjkxLTg3NDctNDk4MS05Y2JmLTFkMzczNDk5OTI0ZS8xL3gxVndKR2QzRHRh
Yk5udDN1LVpBdkcyMEZUNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwLwQCAAEwKQMEAwU9wAMEBAWvQAMEBlT+gAMEB1jK
AAMDAF/SAwQEsOOAAwQF1dGgMA0EAgACMAcDBQAqAAygMA0GCSqGSIb3DQEBCwUA
A4IBAQCepX5q/1BKf5AU07SgKIgo8C9yNeboyCyquTvVI8VphpYROTcRgQPMien4
P8aFgsn307jtGc9w2rznoNrcZIo/c2EaUldBQUk0or3M1tassR0gC18U37I1Xoxj
lpmWH6Zud3ATtWNW2sAK45jtLhMTPGTSZJ/ooU3ZIq4WsnoykKwEicXFQug+BIGA
MVthQXW5XYnuUl/OwJ8rK/3ItkAmkRz1bZbeBsfJiQ83+td3lxHZePQyUKGKoVZX
n1B5lWR/fGD0zvUybYqkmjOvQKYfLCQNmgrrKCGmJUpdz+f3DuOEY/KKgLfucBWj
UU/cwtCNLc+Jby+Uzt+X85hY1FLs
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:58 2025 by rpki-client