Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/BKW5U8IX0OY5P8KJe5Rc8dsQ1DI.roa
File: BKW5U8IX0OY5P8KJe5Rc8dsQ1DI.roa (raw, json)
Hash identifier: 9q4Aib9Lfedaa0qybDtKCj1lCupzE7JExnHHhyRzkTE=
Subject key identifier: 04:A5:B9:53:C2:17:D0:E6:39:3F:C2:89:7B:94:5C:F1:DB:10:D4:32
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185303BD9E684BCE7471E3DBB1E74FEE2B5
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/BKW5U8IX0OY5P8KJe5Rc8dsQ1DI.roa
Signing time: Tue 20 Dec 2022 15:51:46 +0000
ROA not before: Tue 20 Dec 2022 15:51:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 193.19.148.0/22 maxlen: 24
185.228.120.0/24 maxlen: 24
185.228.123.0/24 maxlen: 24
185.228.122.0/24 maxlen: 24
185.228.121.0/24 maxlen: 24
185.228.120.0/22 maxlen: 24
185.134.40.0/22 maxlen: 24
5.181.100.0/22 maxlen: 24
45.141.4.0/22 maxlen: 24
185.93.120.0/22 maxlen: 24
185.113.186.0/24 maxlen: 24
185.113.185.0/24 maxlen: 24
185.113.184.0/24 maxlen: 24
185.113.187.0/24 maxlen: 24
188.208.24.0/22 maxlen: 24
188.208.20.0/22 maxlen: 24
193.32.236.0/22 maxlen: 24
188.208.21.0/24 maxlen: 24
89.47.4.0/22 maxlen: 24
185.94.48.0/22 maxlen: 24
185.93.232.0/22 maxlen: 24
185.114.64.0/22 maxlen: 24
176.32.54.0/24 maxlen: 24
93.92.224.0/22 maxlen: 24
185.119.236.0/22 maxlen: 24
188.247.168.0/22 maxlen: 24
176.32.50.0/24 maxlen: 24
91.221.76.0/23 maxlen: 24
91.221.86.0/23 maxlen: 24
89.32.194.0/23 maxlen: 24
185.248.96.0/22 maxlen: 24
188.241.96.0/21 maxlen: 24
185.126.232.0/22 maxlen: 24
185.120.44.0/22 maxlen: 24
185.234.186.0/23 maxlen: 23
86.106.184.0/22 maxlen: 24
185.234.184.0/24 maxlen: 24
185.234.185.0/24 maxlen: 24
185.44.233.0/24 maxlen: 24
185.44.234.0/23 maxlen: 24
185.51.108.0/22 maxlen: 24
185.240.44.0/22 maxlen: 24
185.72.52.0/22 maxlen: 24
86.105.234.0/24 maxlen: 24
185.159.212.0/22 maxlen: 24
188.240.204.0/22 maxlen: 24
212.104.160.0/19 maxlen: 24
89.37.80.0/22 maxlen: 24
5.226.16.0/20 maxlen: 24
185.131.188.0/22 maxlen: 24
45.158.84.0/22 maxlen: 24
85.117.245.0/24 maxlen: 24
193.91.0.0/24 maxlen: 24
85.117.244.0/22 maxlen: 24
193.91.10.0/24 maxlen: 24
185.151.176.0/22 maxlen: 24
185.43.252.0/22 maxlen: 24
185.77.168.0/22 maxlen: 24
88.98.98.0/24 maxlen: 24
86.105.28.0/22 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 23
88.98.99.0/24 maxlen: 24
88.98.104.0/23 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.111.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
88.98.108.0/23 maxlen: 24
88.98.108.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.112.0/20 maxlen: 24
141.98.52.0/22 maxlen: 24
188.239.184.0/22 maxlen: 24
212.63.116.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.117.0/24 maxlen: 24
212.63.116.0/24 maxlen: 24
212.63.121.0/24 maxlen: 24
212.63.119.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
185.83.104.0/22 maxlen: 24
45.144.12.0/22 maxlen: 24
45.90.52.0/22 maxlen: 24
185.158.52.0/22 maxlen: 24
91.245.200.0/21 maxlen: 24
185.185.52.0/22 maxlen: 24
185.245.132.0/22 maxlen: 24
185.16.120.0/22 maxlen: 24
185.131.13.0/24 maxlen: 24
185.131.12.0/22 maxlen: 24
85.217.132.0/24 maxlen: 24
85.217.129.0/24 maxlen: 24
85.217.139.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.134.0/24 maxlen: 24
85.217.133.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.142.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.147.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
185.156.248.0/22 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.156.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
185.75.200.0/22 maxlen: 24
139.28.188.0/22 maxlen: 24
194.8.140.0/22 maxlen: 24
194.49.0.0/22 maxlen: 24
89.36.40.0/22 maxlen: 24
89.42.236.0/23 maxlen: 24
185.130.26.0/23 maxlen: 24
185.123.136.0/22 maxlen: 24
45.157.56.0/22 maxlen: 24
185.48.84.0/22 maxlen: 24
185.176.84.0/22 maxlen: 24
185.210.16.0/22 maxlen: 24
79.142.184.0/22 maxlen: 24
185.162.172.0/23 maxlen: 24
185.162.175.0/24 maxlen: 24
185.162.174.0/24 maxlen: 24
195.82.105.0/24 maxlen: 24
195.82.104.0/24 maxlen: 24
195.82.106.0/24 maxlen: 24
195.82.124.0/24 maxlen: 24
195.82.123.0/24 maxlen: 24
195.82.122.0/24 maxlen: 24
195.82.121.0/24 maxlen: 24
195.82.120.0/24 maxlen: 24
185.216.216.0/22 maxlen: 22
185.216.218.0/23 maxlen: 23
185.216.217.0/24 maxlen: 24
139.28.76.0/22 maxlen: 22
185.196.200.0/23 maxlen: 24
185.196.203.0/24 maxlen: 24
185.196.202.0/24 maxlen: 24
185.229.96.0/22 maxlen: 24
91.242.144.0/22 maxlen: 24
45.80.224.0/22 maxlen: 24
185.229.44.0/22 maxlen: 24
185.202.188.0/22 maxlen: 24
2a09:55c0::/29 maxlen: 48
2a06:8840::/29 maxlen: 29
2a06:8f40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:3b:d9:e6:84:bc:e7:47:1e:3d:bb:1e:74:fe:e2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 20 15:51:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04a5b953c217d0e6393fc2897b945cf1db10d432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:aa:3b:6c:2b:f6:aa:4b:4a:a1:b4:b2:48:
b8:90:a3:df:bf:df:0c:43:0e:e5:c7:9e:5d:d7:4c:
7d:f9:d1:2f:4a:93:b6:65:06:8c:e4:1c:b5:23:31:
90:99:15:d1:af:7d:5f:a7:72:cd:41:38:92:4d:23:
a1:06:47:92:44:d0:66:24:7c:2c:70:8b:89:af:1a:
10:97:89:f9:b0:16:5d:70:41:f6:00:63:6b:6d:5a:
47:3e:a5:d2:91:88:b3:00:e8:53:63:15:52:77:2d:
38:ae:0a:4f:51:72:a9:40:88:d2:62:57:1e:d4:cd:
11:07:ee:17:b0:24:d1:31:dd:cc:49:8e:9d:57:d5:
94:08:47:48:b2:48:de:d2:e6:bc:66:24:dd:7f:f4:
1d:10:fc:48:8d:ba:ce:81:c4:9f:35:35:85:8f:56:
9d:ec:51:9c:ce:53:46:4c:c7:80:c6:0f:64:f8:27:
07:36:42:77:25:7d:b2:ab:e5:d2:55:1a:f6:83:03:
25:45:6c:ec:76:1a:8b:0e:cd:d5:20:16:68:ed:0c:
6f:7a:26:09:2f:61:4e:99:6b:96:8e:2d:40:c1:f7:
3c:55:b1:8f:0f:01:c6:31:fc:54:e0:6d:7c:fc:4a:
3a:ee:0a:c5:7e:db:83:14:e4:51:0c:b7:8d:a9:e3:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A5:B9:53:C2:17:D0:E6:39:3F:C2:89:7B:94:5C:F1:DB:10:D4:32
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/BKW5U8IX0OY5P8KJe5Rc8dsQ1DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.100.0/22
5.226.16.0/20
45.80.224.0/22
45.90.52.0/22
45.141.4.0/22
45.144.12.0/22
45.157.56.0/22
45.158.84.0/22
79.142.184.0/22
85.117.244.0/22
85.217.129.0/24
85.217.132.0-85.217.139.255
85.217.141.0-85.217.143.255
85.217.146.0/23
85.217.150.0-85.217.159.255
86.105.28.0/22
86.105.234.0/24
86.106.184.0/22
88.98.96.0/19
89.32.194.0/23
89.36.40.0/22
89.37.80.0/22
89.42.236.0/23
89.47.4.0/22
91.221.76.0/23
91.221.86.0/23
91.242.144.0/22
91.245.200.0/21
93.92.224.0/22
139.28.76.0/22
139.28.188.0/22
141.98.52.0/22
176.32.50.0/24
176.32.54.0/24
185.16.120.0/22
185.43.252.0/22
185.44.233.0-185.44.235.255
185.48.84.0/22
185.51.108.0/22
185.72.52.0/22
185.75.200.0/22
185.77.168.0/22
185.83.104.0/22
185.93.120.0/22
185.93.232.0/22
185.94.48.0/22
185.113.184.0/22
185.114.64.0/22
185.119.236.0/22
185.120.44.0/22
185.123.136.0/22
185.126.232.0/22
185.130.24.0/22
185.131.12.0/22
185.131.188.0/22
185.134.40.0/22
185.151.176.0/22
185.156.248.0/22
185.158.52.0/22
185.159.212.0/22
185.162.172.0/22
185.176.84.0/22
185.185.52.0/22
185.196.200.0/22
185.202.188.0/22
185.210.16.0/22
185.216.216.0/22
185.228.120.0/22
185.229.44.0/22
185.229.96.0/22
185.234.184.0/22
185.240.44.0/22
185.245.132.0/22
185.248.96.0/22
188.208.20.0-188.208.27.255
188.239.184.0/22
188.240.204.0/22
188.241.96.0/21
188.247.168.0/22
193.19.148.0/22
193.32.236.0/22
193.91.0.0/24
193.91.10.0/24
194.8.140.0/22
194.49.0.0/22
195.82.104.0-195.82.106.255
195.82.120.0-195.82.124.255
212.63.116.0/22
212.63.121.0-212.63.123.255
212.104.160.0/19
IPv6:
2a06:8840::/29
2a06:8f40::/29
2a09:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
02:69:dc:51:98:ad:c3:e2:21:86:9e:86:8d:2b:32:c3:5f:a0:
55:3c:1d:c3:48:c6:87:ba:51:3e:86:df:9b:2f:80:8d:7e:e6:
be:89:c3:c5:b6:fa:cc:b4:41:62:a5:fd:26:ec:4c:73:5e:96:
a0:78:e4:51:84:84:90:11:e2:d9:3e:af:74:b7:75:18:be:9b:
5e:94:3d:c8:af:83:3a:fa:1a:cf:54:67:93:c1:ae:65:a6:5b:
1c:69:61:d7:2e:3b:1b:60:fc:c9:a9:a8:1b:03:c5:78:75:bf:
45:4d:d9:4f:50:73:4c:8c:b0:6c:bf:d0:b7:ae:99:d3:2b:d6:
f7:e6:f9:2b:b8:8a:d0:5b:c4:7f:17:35:15:73:b9:40:0e:fa:
99:e6:b5:5d:4d:b6:f6:9e:6a:bf:b4:90:e8:9a:11:33:85:d1:
f2:ec:b8:ef:de:00:50:a8:b4:d1:df:8f:7c:74:c4:97:cf:86:
6b:4c:1a:a0:f1:bb:ae:78:89:d3:ec:ca:8f:fd:83:ff:e2:d1:
f3:a2:54:64:13:d2:8d:c5:fb:e9:2e:71:ad:d8:87:75:81:a9:
a5:f8:29:82:f1:ce:36:b9:61:dc:c5:bb:ac:2b:2b:23:62:37:
9e:12:ac:d3:bf:ae:0c:66:21:9f:1e:23:4a:c4:53:2c:3d:c8:
2e:69:8c:47
-----BEGIN CERTIFICATE-----
MIIHejCCBmKgAwIBAgISAYUwO9nmhLznRx49ux50/uK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMjIwMTU1MTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGE1Yjk1M2MyMTdkMGU2MzkzZmMyODk3Yjk0NWNmMWRiMTBkNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UWqO2wr9qpLSqG0ski4kKPfv98M
Qw7lx55d10x9+dEvSpO2ZQaM5By1IzGQmRXRr31fp3LNQTiSTSOhBkeSRNBmJHws
cIuJrxoQl4n5sBZdcEH2AGNrbVpHPqXSkYizAOhTYxVSdy04rgpPUXKpQIjSYlce
1M0RB+4XsCTRMd3MSY6dV9WUCEdIskje0ua8ZiTdf/QdEPxIjbrOgcSfNTWFj1ad
7FGczlNGTMeAxg9k+CcHNkJ3JX2yq+XSVRr2gwMlRWzsdhqLDs3VIBZo7QxveiYJ
L2FOmWuWji1Awfc8VbGPDwHGMfxU4G18/Eo67grFftuDFORRDLeNqeM2KQIDAQAB
o4IEhjCCBIIwHQYDVR0OBBYEFASluVPCF9DmOT/CiXuUXPHbENQyMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvQktXNVU4SVgwT1k1UDhLSmU1UmM4ZHNRMURJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICmgYIKwYBBQUHAQcBAf8EggKJMIIChTCCAmQEAgABMIIC
XAMEAgW1ZAMEBAXiEAMEAi1Q4AMEAi1aNAMEAi2NBAMEAi2QDAMEAi2dOAMEAi2e
VAMEAk+OuAMEAlV19AMEAFXZgTAMAwQCVdmEAwQCVdmIMAwDBABV2Y0DBARV2YAD
BAFV2ZIwDAMEAVXZlgMEBVXZgAMEAlZpHAMEAFZp6gMEAlZquAMEBVhiYAMEAVkg
wgMEAlkkKAMEAlklUAMEAVkq7AMEAlkvBAMEAVvdTAMEAVvdVgMEAlvykAMEA1v1
yAMEAl1c4AMEAoscTAMEAoscvAMEAo1iNAMEALAgMgMEALAgNgMEArkQeAMEArkr
/DAMAwQAuSzpAwQCuSzoAwQCuTBUAwQCuTNsAwQCuUg0AwQCuUvIAwQCuU2oAwQC
uVNoAwQCuV14AwQCuV3oAwQCuV4wAwQCuXG4AwQCuXJAAwQCuXfsAwQCuXgsAwQC
uXuIAwQCuX7oAwQCuYIYAwQCuYMMAwQCuYO8AwQCuYYoAwQCuZewAwQCuZz4AwQC
uZ40AwQCuZ/UAwQCuaKsAwQCubBUAwQCubk0AwQCucTIAwQCucq8AwQCudIQAwQC
udjYAwQCueR4AwQCueUsAwQCueVgAwQCueq4AwQCufAsAwQCufWEAwQCufhgMAwD
BAK80BQDBAK80BgDBAK877gDBAK88MwDBAO88WADBAK896gDBALBE5QDBALBIOwD
BADBWwADBADBWwoDBALCCIwDBALCMQAwDAMEA8NSaAMEAMNSajAMAwQDw1J4AwQA
w1J8AwQC1D90MAwDBADUP3kDBALUP3gDBAXUaKAwGwQCAAIwFQMFAyoGiEADBQMq
Bo9AAwUDKglVwDANBgkqhkiG9w0BAQsFAAOCAQEAAmncUZitw+Ihhp6GjSsyw1+g
VTwdw0jGh7pRPobfmy+AjX7mvonDxbb6zLRBYqX9JuxMc16WoHjkUYSEkBHi2T6v
dLd1GL6bXpQ9yK+DOvoaz1Rnk8GuZaZbHGlh1y47G2D8yamoGwPFeHW/RU3ZT1Bz
TIywbL/Qt66Z0yvW9+b5K7iK0FvEfxc1FXO5QA76mea1XU229p5qv7SQ6JoRM4XR
8uy4794AUKi00d+PfHTEl8+Ga0waoPG7rniJ0+zKj/2D/+LR86JUZBPSjcX76S5x
rdiHdYGppfgpgvHONrlh3MW7rCsrI2I3nhKs07+uDGYhnx4jSsRTLD3ILmmMRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org