Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/yaa-HiU0D0IxYkAPfuWkierf20Q.roa
File: yaa-HiU0D0IxYkAPfuWkierf20Q.roa (raw, json)
Hash identifier: 1HiEri9R/WAQzISCrq6I4+OFUphW4ma4GkvwkeCEKBY=
Subject key identifier: C9:A6:BE:1E:25:34:0F:42:31:62:40:0F:7E:E5:A4:89:EA:DF:DB:44
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0185720C5B87C3609A03E3478C1CD41E9118
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/yaa-HiU0D0IxYkAPfuWkierf20Q.roa
Signing time: Mon 02 Jan 2023 10:34:50 +0000
ROA not before: Mon 02 Jan 2023 10:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.4.0/24 maxlen: 24
88.202.9.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.135.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.139.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.140.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.170.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.175.0/24 maxlen: 24
176.227.132.0/24 maxlen: 24
176.227.128.0/24 maxlen: 24
176.227.130.0/24 maxlen: 24
176.227.139.0/24 maxlen: 24
176.227.138.0/24 maxlen: 24
176.227.137.0/24 maxlen: 24
84.254.132.0/24 maxlen: 24
176.227.142.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
176.227.143.0/24 maxlen: 24
176.227.141.0/24 maxlen: 24
176.227.140.0/24 maxlen: 24
84.254.190.0/24 maxlen: 24
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
95.210.169.0/24 maxlen: 24
95.210.255.0/24 maxlen: 24
95.210.254.0/24 maxlen: 24
5.61.197.0/24 maxlen: 24
5.61.199.0/24 maxlen: 24
5.61.198.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.7.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
95.210.13.0/24 maxlen: 24
95.210.79.0/24 maxlen: 24
95.210.82.0/24 maxlen: 24
95.210.81.0/24 maxlen: 24
95.210.94.0/24 maxlen: 24
95.210.93.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.128.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.35.0/24 maxlen: 24
95.210.34.0/24 maxlen: 24
95.210.43.0/24 maxlen: 24
95.210.40.0/24 maxlen: 24
95.210.42.0/24 maxlen: 24
95.210.55.0/24 maxlen: 24
95.210.61.0/24 maxlen: 24
95.210.63.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.116.0/22 maxlen: 22
5.175.64.0/20 maxlen: 20
88.202.68.0/23 maxlen: 23
88.202.70.0/23 maxlen: 23
88.202.76.0/23 maxlen: 23
88.202.72.0/22 maxlen: 22
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
88.202.0.0/17 maxlen: 17
88.202.0.0/18 maxlen: 18
84.254.164.0/23 maxlen: 23
84.254.176.0/21 maxlen: 21
84.254.184.0/22 maxlen: 22
176.227.128.0/20 maxlen: 20
84.254.128.0/18 maxlen: 18
84.254.188.0/23 maxlen: 23
95.210.192.0/20 maxlen: 20
95.210.192.0/19 maxlen: 19
95.210.224.0/20 maxlen: 20
95.210.160.0/19 maxlen: 19
95.210.240.0/21 maxlen: 21
95.210.252.0/23 maxlen: 23
95.210.248.0/22 maxlen: 22
5.61.192.0/21 maxlen: 21
95.210.0.0/22 maxlen: 22
95.210.8.0/21 maxlen: 21
95.210.0.0/16 maxlen: 16
213.209.184.0/22 maxlen: 22
95.210.96.0/21 maxlen: 24
95.210.112.0/22 maxlen: 22
95.210.116.0/22 maxlen: 22
185.28.64.0/24 maxlen: 24
95.210.32.0/23 maxlen: 23
95.210.44.0/23 maxlen: 23
185.28.65.0/24 maxlen: 24
95.210.46.0/23 maxlen: 23
95.210.48.0/22 maxlen: 22
95.210.64.0/20 maxlen: 20
88.202.85.0/24 maxlen: 24
88.202.81.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.79.0/24 maxlen: 24
88.202.88.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.87.0/24 maxlen: 24
88.202.86.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.112.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.123.0/24 maxlen: 24
88.202.122.0/24 maxlen: 24
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/24 maxlen: 24
88.202.51.0/24 maxlen: 24
88.202.47.0/24 maxlen: 24
88.202.46.0/24 maxlen: 24
88.202.48.0/24 maxlen: 24
5.175.68.0/24 maxlen: 24
5.175.71.0/24 maxlen: 24
5.175.70.0/24 maxlen: 24
5.175.67.0/24 maxlen: 24
5.175.69.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.66.0/24 maxlen: 24
5.175.65.0/24 maxlen: 24
5.175.74.0/24 maxlen: 24
5.175.78.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
88.202.61.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
5.175.75.0/24 maxlen: 24
88.202.62.0/24 maxlen: 24
5.175.73.0/24 maxlen: 24
5.175.72.0/24 maxlen: 24
88.202.66.0/24 maxlen: 24
5.175.79.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.172.0/22 maxlen: 24
2a00:ca0:201e::/48 maxlen: 48
2a00:ca0:2008::/48 maxlen: 48
2a00:ca0:2005::/48 maxlen: 48
2a00:ca0:2002::/48 maxlen: 48
2a00:ca0:2003::/48 maxlen: 48
2a00:ca0:2000::/48 maxlen: 48
2a00:ca0:2012::/48 maxlen: 48
2a00:ca0:200c::/48 maxlen: 48
2a00:ca0:200f::/48 maxlen: 48
2a00:ca0:2006::/48 maxlen: 48
2a00:ca0:200a::/48 maxlen: 48
2a00:ca0:2004::/48 maxlen: 48
2a00:ca0:2001::/48 maxlen: 48
2a00:ca0:2016::/48 maxlen: 48
2a00:ca0::/32 maxlen: 32
2a00:ca0:2013::/48 maxlen: 48
2a00:ca0:2017::/48 maxlen: 48
2a00:ca0:200e::/48 maxlen: 48
2a00:ca0:201d::/48 maxlen: 48
2a00:ca0:201a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5b:87:c3:60:9a:03:e3:47:8c:1c:d4:1e:91:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jan 2 10:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9a6be1e25340f423162400f7ee5a489eadfdb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:59:a4:d4:cb:f3:34:e7:e3:74:a9:77:5d:
03:ef:b9:b8:3b:5d:af:95:d6:31:a3:dc:75:92:55:
2b:46:70:ca:04:bd:a3:8e:e9:89:14:fd:1c:98:ad:
37:c5:ea:e0:9b:87:10:62:22:32:51:d6:35:fb:3b:
9d:f7:04:6f:7a:3e:d2:5c:57:ab:38:5f:7d:3b:fb:
77:d3:e2:67:a1:aa:95:e3:9e:1f:57:99:44:fe:29:
22:70:c5:c3:9a:fa:54:da:fc:2c:29:d2:62:89:5f:
3c:1e:13:62:aa:2b:ed:4a:b2:1a:8f:b5:c8:06:ef:
de:d8:6d:74:f2:27:b5:e8:31:f6:e2:cf:91:a7:cb:
5f:da:97:a5:c0:9f:11:86:80:0b:8c:82:80:9a:ac:
5c:b7:0c:02:6f:12:ca:0f:40:13:30:83:df:43:18:
24:d8:ad:1a:b8:87:42:07:eb:f2:06:f4:ca:ef:ff:
b0:70:14:81:95:15:af:15:f9:a3:59:03:7b:30:25:
ee:3f:09:ca:91:fa:c4:a3:76:a4:34:cd:ca:32:0a:
cf:25:3f:01:46:92:62:8e:7b:ba:3b:17:8a:64:b6:
b8:b3:28:89:a8:ee:6c:08:e6:e2:1f:a2:13:91:a5:
7c:89:88:0a:a1:9f:ed:e9:14:66:87:99:ca:34:38:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A6:BE:1E:25:34:0F:42:31:62:40:0F:7E:E5:A4:89:EA:DF:DB:44
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/yaa-HiU0D0IxYkAPfuWkierf20Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
185.28.64.0/23
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
33:c7:8a:87:79:5b:77:1c:fa:d0:bc:3a:5c:fe:ea:80:00:aa:
e0:10:a6:ea:27:4f:dd:0e:5f:34:59:19:00:86:c4:7f:19:c9:
7e:19:28:c4:ad:45:c8:79:91:f4:5f:9a:14:b4:4c:9a:9b:9d:
07:44:43:33:81:2b:ed:a9:ef:83:d4:fb:78:a5:ec:9d:7e:eb:
9b:84:ef:c2:07:f9:21:8c:20:70:4c:d7:ea:07:b9:f0:a1:5a:
b2:e2:76:50:f0:42:02:12:60:19:8d:25:90:7b:eb:a5:53:35:
d8:19:2e:02:f8:6a:c9:bc:83:cf:04:4e:c4:75:3d:4b:d3:9f:
e2:77:cf:ec:c8:99:b0:7f:26:31:3a:9a:7a:86:6f:4b:a3:c3:
b9:6f:85:67:a0:12:c5:e3:70:28:a3:81:54:7c:48:56:21:75:
26:85:79:3a:2d:68:c7:9f:8b:7f:6b:17:b7:02:08:ca:80:7f:
2a:a3:28:31:d0:36:f1:0b:06:2a:23:98:eb:3f:0c:29:72:c9:
87:20:ba:e4:85:5c:07:44:ab:53:22:03:6b:d5:f9:12:f8:55:
90:ff:5b:62:77:85:6c:0a:4e:5f:9c:e4:c9:e6:9c:e1:ad:45:
29:1e:6e:b4:e0:25:bf:8e:2c:b2:07:66:e3:b5:4d:ce:dc:0d:
e8:3e:cf:1f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYVyDFuHw2CaA+NHjBzUHpEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjMwMTAyMTAzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWE2YmUxZTI1MzQwZjQyMzE2MjQwMGY3ZWU1YTQ4OWVhZGZkYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt5ZpNTL8zTn43Spd10D77m4O12v
ldYxo9x1klUrRnDKBL2jjumJFP0cmK03xergm4cQYiIyUdY1+zud9wRvej7SXFer
OF99O/t30+JnoaqV454fV5lE/ikicMXDmvpU2vwsKdJiiV88HhNiqivtSrIaj7XI
Bu/e2G108ie16DH24s+Rp8tf2pelwJ8RhoALjIKAmqxctwwCbxLKD0ATMIPfQxgk
2K0auIdCB+vyBvTK7/+wcBSBlRWvFfmjWQN7MCXuPwnKkfrEo3akNM3KMgrPJT8B
RpJijnu6OxeKZLa4syiJqO5sCObiH6ITkaV8iYgKoZ/t6RRmh5nKNDgTfQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFMmmvh4lNA9CMWJAD37lpInq39tEMB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEveWFhLUhpVTBEMEl4WWtBUGZ1V2tpZXJmMjBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwQDBT3AAwQE
Ba9AAwQGVP6AAwQHWMoAAwMAX9IDBASw44ADBAG5HEADBAXV0aAwDQQCAAIwBwMF
ACoADKAwDQYJKoZIhvcNAQELBQADggEBADPHiod5W3cc+tC8Olz+6oAAquAQpuon
T90OXzRZGQCGxH8ZyX4ZKMStRch5kfRfmhS0TJqbnQdEQzOBK+2p74PU+3il7J1+
65uE78IH+SGMIHBM1+oHufChWrLidlDwQgISYBmNJZB766VTNdgZLgL4asm8g88E
TsR1PUvTn+J3z+zImbB/JjE6mnqGb0ujw7lvhWegEsXjcCijgVR8SFYhdSaFeTot
aMefi39rF7cCCMqAfyqjKDHQNvELBiojmOs/DClyyYcguuSFXAdEq1MiA2vV+RL4
VZD/W2J3hWwKTl+c5MnmnOGtRSkebrTgJb+OLLIHZuO1Tc7cDeg+zx8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:41 2025 by rpki-client