Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/klHHh4uLQuHmaceNObyrOdH7qdQ.roa
File: klHHh4uLQuHmaceNObyrOdH7qdQ.roa (raw, json)
Hash identifier: RiaH5NAhSVuYabcwsevOaFF60+vF5BbZOsMwmxbegjw=
Subject key identifier: 92:51:C7:87:8B:8B:42:E1:E6:69:C7:8D:39:BC:AB:39:D1:FB:A9:D4
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 03E4795A
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/klHHh4uLQuHmaceNObyrOdH7qdQ.roa
Signing time: Sun 29 May 2022 18:11:13 +0000
ROA not before: Sun 29 May 2022 18:11:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.134.40.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.117.0/24 maxlen: 24
212.63.116.0/24 maxlen: 24
212.63.121.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
193.32.236.0/22 maxlen: 24
45.90.52.0/22 maxlen: 24
185.94.48.0/22 maxlen: 24
91.245.200.0/21 maxlen: 24
185.93.232.0/22 maxlen: 24
185.131.12.0/22 maxlen: 22
85.217.132.0/24 maxlen: 24
85.217.129.0/24 maxlen: 24
85.217.139.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.134.0/24 maxlen: 24
85.217.133.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.147.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.156.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
185.130.26.0/23 maxlen: 24
188.241.96.0/21 maxlen: 24
45.157.56.0/22 maxlen: 24
185.234.184.0/24 maxlen: 24
185.234.186.0/23 maxlen: 23
185.234.185.0/24 maxlen: 24
185.44.233.0/24 maxlen: 24
185.44.234.0/23 maxlen: 24
185.176.84.0/22 maxlen: 24
79.142.184.0/22 maxlen: 24
185.51.108.0/22 maxlen: 24
185.162.172.0/23 maxlen: 24
185.162.175.0/24 maxlen: 24
185.162.174.0/24 maxlen: 24
195.82.105.0/24 maxlen: 24
195.82.104.0/24 maxlen: 24
195.82.106.0/24 maxlen: 24
195.82.124.0/24 maxlen: 24
185.216.216.0/22 maxlen: 22
185.216.218.0/23 maxlen: 23
185.216.217.0/24 maxlen: 24
139.28.76.0/22 maxlen: 22
185.196.203.0/24 maxlen: 24
185.196.202.0/24 maxlen: 24
185.196.200.0/23 maxlen: 24
5.226.16.0/20 maxlen: 24
91.242.144.0/22 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 23
88.98.104.0/23 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
88.98.108.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.112.0/20 maxlen: 24
141.98.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65304922 (0x3e4795a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: May 29 18:11:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9251c7878b8b42e1e669c78d39bcab39d1fba9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:af:37:e3:7b:83:3b:8b:bb:10:65:3c:04:
b5:77:ff:d8:d3:4a:9f:54:f5:1f:02:d4:49:c5:25:
5c:75:76:a2:88:04:6c:bd:8a:10:59:e1:2a:1a:a8:
c4:42:0c:45:9b:0f:1e:d5:fd:53:ad:12:e6:db:46:
cc:b8:9f:ff:72:06:d6:fd:c0:8e:96:c9:26:0b:8d:
04:0a:df:88:4e:3e:ff:97:5f:fb:17:7f:77:a6:15:
a5:80:ad:c0:65:69:ad:69:45:57:19:90:ba:da:34:
07:23:f0:4c:af:93:ae:b7:54:8c:8e:0d:73:79:b5:
87:15:b6:d8:0b:99:c9:6a:6e:6b:dd:a8:fc:37:e8:
03:44:f7:1f:5b:a1:43:1d:1d:ed:ba:17:c4:82:b2:
2d:3a:e2:c6:0b:f1:06:10:46:ea:e8:45:c5:78:c0:
5c:82:b5:66:49:0f:cc:b4:4b:2a:e6:0c:16:12:78:
73:4f:c7:78:6d:62:b9:1a:9b:2d:74:51:c5:0d:48:
87:dd:23:ed:98:0b:a3:9b:d5:6a:46:33:34:ce:92:
79:58:e1:62:23:96:ff:8f:6f:10:3f:83:ff:a6:bc:
71:56:fb:14:0f:02:25:42:2a:8a:49:a0:79:6a:3e:
9c:d2:e9:e4:0a:6a:71:9d:58:8c:9d:d7:60:10:ff:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:C7:87:8B:8B:42:E1:E6:69:C7:8D:39:BC:AB:39:D1:FB:A9:D4
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/klHHh4uLQuHmaceNObyrOdH7qdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.16.0/20
45.90.52.0/22
45.157.56.0/22
79.142.184.0/22
85.217.129.0/24
85.217.132.0-85.217.139.255
85.217.141.0/24
85.217.143.0/24
85.217.146.0/23
85.217.150.0-85.217.159.255
88.98.96.0/19
91.242.144.0/22
91.245.200.0/21
139.28.76.0/22
141.98.52.0/22
185.44.233.0-185.44.235.255
185.51.108.0/22
185.93.232.0/22
185.94.48.0/22
185.130.24.0/22
185.131.12.0/22
185.134.40.0/22
185.162.172.0/22
185.176.84.0/22
185.196.200.0/22
185.216.216.0/22
185.234.184.0/22
188.241.96.0/21
193.32.236.0/22
195.82.104.0-195.82.106.255
195.82.124.0/24
212.63.116.0-212.63.118.255
212.63.121.0-212.63.123.255
Signature Algorithm: sha256WithRSAEncryption
b0:0b:e4:06:62:8b:ca:29:0c:02:49:8b:75:71:dc:14:73:d1:
13:89:0e:ce:5e:ba:46:43:1f:f9:3c:dd:a2:fe:0f:ab:f0:b7:
d8:3c:4c:81:bf:4e:bf:a0:8f:7d:d8:49:4a:3c:11:aa:85:cb:
a0:63:0f:f7:3f:71:52:92:45:3f:93:90:87:91:b0:fb:90:cb:
b4:e6:f6:ff:f8:11:b3:b3:f6:6d:aa:40:37:fa:4f:f7:82:be:
1c:d0:d4:fc:e8:10:70:40:d3:1b:dc:ce:d4:e6:58:a6:15:7f:
ba:54:85:3c:e2:9b:87:fa:36:8d:ee:9f:43:bc:0f:77:a1:a7:
c6:35:f3:59:a3:9a:71:2a:b9:43:1a:22:f5:29:73:ff:db:1e:
02:f7:5c:0f:9c:96:d5:81:5f:40:eb:e3:d2:ab:34:a4:8e:29:
44:c3:7f:1a:71:e1:2a:bc:87:21:c7:d9:11:3c:f4:1c:15:fc:
a2:c5:ff:8f:a9:ea:7c:85:81:36:bd:37:7b:e4:25:0a:a2:17:
e5:b9:55:15:30:ee:ad:f9:31:58:07:75:5d:1f:d2:7d:76:f0:
57:38:04:17:10:7e:9b:9e:bd:0a:94:23:17:6e:0f:3b:e0:b8:
f9:a2:17:fc:c3:27:37:e3:c5:3f:95:1d:62:13:62:18:df:fa:
52:3f:7c:3c
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgIEA+R5WjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDc1ZmIwOTM0Y2Y2YTU4ZGNjZWYxMTA4NzVkYmU1ZTNlOGI2Yjc1MB4XDTIyMDUy
OTE4MTExM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTI1MWM3ODc4Yjhi
NDJlMWU2NjljNzhkMzliY2FiMzlkMWZiYTlkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlVrzfje4M7i7sQZTwEtXf/2NNKn1T1HwLUScUlXHV2oogE
bL2KEFnhKhqoxEIMRZsPHtX9U60S5ttGzLif/3IG1v3AjpbJJguNBArfiE4+/5df
+xd/d6YVpYCtwGVprWlFVxmQuto0ByPwTK+TrrdUjI4Nc3m1hxW22AuZyWpua92o
/DfoA0T3H1uhQx0d7boXxIKyLTrixgvxBhBG6uhFxXjAXIK1ZkkPzLRLKuYMFhJ4
c0/HeG1iuRqbLXRRxQ1Ih90j7ZgLo5vVakYzNM6SeVjhYiOW/49vED+D/6a8cVb7
FA8CJUIqikmgeWo+nNLp5ApqcZ1YjJ3XYBD/jPcCAwEAAaOCAwEwggL9MB0GA1Ud
DgQWBBSSUceHi4tC4eZpx405vKs50fup1DAfBgNVHSMEGDAWgBTUdfsJNM9qWNzO
8RCHXb5ePotrdTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFIWDdDVFRQYWxqY3p2RVFoMTItWGo2TGEzVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3My8x
L2tsSEhoNHVMUXVIbWFjZU5PYnlyT2RIN3FkUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3My8xLzFIWDdDVFRQYWxq
Y3p2RVFoMTItWGo2TGEzVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ARUGCCsGAQUFBwEHAQH/BIIBBDCCAQAwgf0EAgABMIH2AwQEBeIQAwQCLVo0AwQC
LZ04AwQCT464AwQAVdmBMAwDBAJV2YQDBAJV2YgDBABV2Y0DBABV2Y8DBAFV2ZIw
DAMEAVXZlgMEBVXZgAMEBVhiYAMEAlvykAMEA1v1yAMEAoscTAMEAo1iNDAMAwQA
uSzpAwQCuSzoAwQCuTNsAwQCuV3oAwQCuV4wAwQCuYIYAwQCuYMMAwQCuYYoAwQC
uaKsAwQCubBUAwQCucTIAwQCudjYAwQCueq4AwQDvPFgAwQCwSDsMAwDBAPDUmgD
BADDUmoDBADDUnwwDAMEAtQ/dAMEANQ/djAMAwQA1D95AwQC1D94MA0GCSqGSIb3
DQEBCwUAA4IBAQCwC+QGYovKKQwCSYt1cdwUc9ETiQ7OXrpGQx/5PN2i/g+r8LfY
PEyBv06/oI992ElKPBGqhcugYw/3P3FSkkU/k5CHkbD7kMu05vb/+BGzs/ZtqkA3
+k/3gr4c0NT86BBwQNMb3M7U5limFX+6VIU84puH+jaN7p9DvA93oafGNfNZo5px
KrlDGiL1KXP/2x4C91wPnJbVgV9A6+PSqzSkjilEw38aceEqvIchx9kRPPQcFfyi
xf+Pqep8hYE2vTd75CUKohfluVUVMO6t+TFYB3VdH9J9dvBXOAQXEH6bnr0KlCMX
bg874Lj5ohf8wyc348U/lR1iE2IY3/pSP3w8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org