Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/xib6gkbtVwSnhNI_TuoGZz5GQh8.roa
File: xib6gkbtVwSnhNI_TuoGZz5GQh8.roa (raw, json)
Hash identifier: Vqy2MmdAJWM2A0rK44mEfqr5ur9TmN16+xE51SsTKOI=
Subject key identifier: C6:26:FA:82:46:ED:57:04:A7:84:D2:3F:4E:EA:06:67:3E:46:42:1F
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 018C86AE6A7E058819FF07FEFC96FA88918F
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/xib6gkbtVwSnhNI_TuoGZz5GQh8.roa
Signing time: Wed 20 Dec 2023 10:03:46 +0000
ROA not before: Wed 20 Dec 2023 10:03:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41897
IP address blocks: 94.248.184.0/21 maxlen: 21
46.40.56.0/22 maxlen: 22
46.40.63.0/24 maxlen: 24
46.40.60.0/23 maxlen: 23
46.40.62.0/24 maxlen: 24
46.40.0.0/18 maxlen: 18
46.40.1.0/24 maxlen: 24
46.40.8.0/22 maxlen: 22
46.40.6.0/24 maxlen: 24
94.248.233.0/24 maxlen: 24
94.248.232.0/24 maxlen: 24
46.40.16.0/21 maxlen: 21
94.248.232.0/22 maxlen: 22
94.248.232.0/21 maxlen: 21
46.40.15.0/24 maxlen: 24
46.40.12.0/23 maxlen: 23
94.248.238.0/24 maxlen: 24
94.248.239.0/24 maxlen: 24
94.248.237.0/24 maxlen: 24
94.248.235.0/24 maxlen: 24
94.248.236.0/24 maxlen: 24
94.248.234.0/24 maxlen: 24
46.40.26.0/24 maxlen: 24
46.40.27.0/24 maxlen: 24
46.40.31.0/24 maxlen: 24
46.40.30.0/24 maxlen: 24
46.40.30.0/23 maxlen: 23
46.40.29.0/24 maxlen: 24
46.40.37.0/24 maxlen: 24
46.40.35.0/24 maxlen: 24
46.40.33.0/24 maxlen: 24
46.40.34.0/24 maxlen: 24
46.40.32.0/24 maxlen: 24
91.147.244.0/22 maxlen: 22
46.40.40.0/21 maxlen: 21
46.40.48.0/21 maxlen: 21
89.147.84.0/22 maxlen: 22
89.147.82.0/24 maxlen: 24
89.147.80.0/20 maxlen: 20
89.147.83.0/24 maxlen: 24
89.147.80.0/22 maxlen: 22
89.147.80.0/24 maxlen: 24
89.147.81.0/24 maxlen: 24
89.147.89.0/24 maxlen: 24
89.147.88.0/24 maxlen: 24
195.192.244.0/22 maxlen: 22
95.85.173.0/24 maxlen: 24
95.85.176.0/22 maxlen: 22
95.85.184.0/23 maxlen: 23
95.85.186.0/23 maxlen: 23
95.85.128.0/22 maxlen: 22
95.85.128.0/18 maxlen: 18
95.85.136.0/22 maxlen: 22
95.85.135.0/24 maxlen: 24
95.85.144.0/21 maxlen: 21
95.85.152.0/24 maxlen: 24
95.85.152.0/23 maxlen: 23
81.24.240.0/21 maxlen: 21
95.85.156.0/22 maxlen: 22
95.85.154.0/24 maxlen: 24
95.85.155.0/24 maxlen: 24
81.24.247.0/24 maxlen: 24
95.85.153.0/24 maxlen: 24
95.85.154.0/23 maxlen: 23
95.85.172.0/24 maxlen: 24
185.10.204.0/22 maxlen: 22
185.10.204.0/24 maxlen: 24
217.17.97.0/24 maxlen: 24
217.17.98.0/24 maxlen: 24
217.17.96.0/24 maxlen: 24
217.17.96.0/20 maxlen: 24
217.17.100.0/24 maxlen: 24
217.17.111.0/24 maxlen: 24
217.17.110.0/24 maxlen: 24
217.17.107.0/24 maxlen: 24
217.17.108.0/24 maxlen: 24
185.37.170.0/24 maxlen: 24
185.37.169.0/24 maxlen: 24
185.37.168.0/22 maxlen: 22
80.245.96.0/22 maxlen: 22
45.158.16.0/22 maxlen: 22
46.251.8.0/22 maxlen: 22
91.102.224.0/21 maxlen: 21
91.102.229.0/24 maxlen: 24
185.231.128.0/22 maxlen: 22
185.169.248.0/22 maxlen: 22
185.169.248.0/24 maxlen: 24
185.169.250.0/23 maxlen: 23
185.169.249.0/24 maxlen: 24
185.156.152.0/22 maxlen: 22
185.141.198.0/24 maxlen: 24
185.141.199.0/24 maxlen: 24
185.141.196.0/22 maxlen: 22
185.141.196.0/23 maxlen: 23
85.222.178.0/24 maxlen: 24
85.222.179.0/24 maxlen: 24
85.222.177.0/24 maxlen: 24
85.222.176.0/20 maxlen: 20
85.222.176.0/21 maxlen: 21
85.222.176.0/24 maxlen: 24
85.222.180.0/22 maxlen: 22
185.6.190.0/24 maxlen: 24
185.6.191.0/24 maxlen: 24
185.6.189.0/24 maxlen: 24
185.6.188.0/24 maxlen: 24
185.6.188.0/22 maxlen: 22
178.20.200.0/24 maxlen: 24
178.20.202.0/23 maxlen: 23
178.20.201.0/24 maxlen: 24
2a0f:7bc0::/29 maxlen: 29
2a04:f040::/29 maxlen: 29
2a00:ad07:3000::/36 maxlen: 36
2a0c:6300::/30 maxlen: 30
2a00:ad00::/29 maxlen: 29
2a00:ad03::/32 maxlen: 32
2a00:ad00:2010::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:ae:6a:7e:05:88:19:ff:07:fe:fc:96:fa:88:91:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Dec 20 10:03:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c626fa8246ed5704a784d23f4eea06673e46421f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:d5:ac:bf:d4:2f:3f:ee:32:ce:dc:b8:79:
a4:8f:20:12:54:36:5f:8c:4a:64:1e:93:5f:c7:0a:
4f:2d:e5:11:82:47:4f:ca:de:7f:e3:47:cc:f7:fb:
63:ad:64:61:68:4d:73:17:9f:08:89:44:bd:97:4a:
20:e7:9c:e2:4c:d4:d0:ca:bc:e4:f6:75:d8:f7:5c:
d6:f8:74:b6:3d:26:9f:5a:09:ad:bc:89:0e:90:38:
37:88:76:5b:c0:44:7b:96:81:e2:02:ba:6e:42:0e:
14:94:0d:e3:88:be:68:d6:51:14:90:47:95:8c:39:
b3:3b:bc:d2:ea:86:2a:58:c2:ef:f7:ad:d8:30:1c:
fe:e1:ee:65:0e:5f:3b:0e:b1:9f:7c:e1:b7:7d:ab:
27:53:c1:64:18:0f:77:d3:12:cb:55:a7:6a:7a:c9:
c0:13:1e:18:4f:ce:57:60:10:53:f2:d0:f8:58:36:
36:c2:87:fa:30:b1:46:68:98:50:04:f4:76:25:b8:
2b:67:33:f8:7c:e5:0a:45:eb:43:57:7b:52:fe:8f:
44:8a:4b:a9:0d:a6:0d:02:d0:b5:81:10:9d:cc:86:
57:06:63:c2:3d:6e:8e:b1:c8:2a:8b:00:db:e2:9a:
8c:3b:45:ca:9e:f9:64:dc:ad:5c:71:d0:58:6d:5f:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:26:FA:82:46:ED:57:04:A7:84:D2:3F:4E:EA:06:67:3E:46:42:1F
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/xib6gkbtVwSnhNI_TuoGZz5GQh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.16.0/22
46.40.0.0/18
46.251.8.0/22
80.245.96.0/22
81.24.240.0/21
85.222.176.0/20
89.147.80.0/20
91.102.224.0/21
91.147.244.0/22
94.248.184.0/21
94.248.232.0/21
95.85.128.0/18
178.20.200.0/22
185.6.188.0/22
185.10.204.0/22
185.37.168.0/22
185.141.196.0/22
185.156.152.0/22
185.169.248.0/22
185.231.128.0/22
195.192.244.0/22
217.17.96.0/20
IPv6:
2a00:ad00::/29
2a04:f040::/29
2a0c:6300::/30
2a0f:7bc0::/29
Signature Algorithm: sha256WithRSAEncryption
43:b7:2c:8e:c5:29:dd:48:38:cd:39:5b:77:55:ad:8a:2c:0e:
d4:fe:0c:61:bb:e0:7a:d1:f3:67:f9:cc:f7:2f:cd:df:c0:3e:
e7:d9:4b:82:7c:4c:9c:35:f6:e7:0c:b3:36:d5:39:8e:9a:2a:
2d:7a:06:ef:4b:07:95:e0:e4:13:e7:77:0e:a7:c0:da:53:1b:
7d:fe:7e:86:8a:c9:dc:61:0b:4c:10:e2:52:e3:5c:98:65:6b:
67:e3:30:c4:36:9c:e1:dd:01:10:a0:0a:7b:ea:a1:0a:eb:a7:
d6:74:7d:49:e9:32:ce:07:34:4d:3f:ff:96:83:d5:e4:cf:23:
c7:4c:a7:6b:6f:dc:15:51:3c:12:33:ab:51:db:f2:17:b9:36:
f6:30:f9:62:75:56:59:a2:03:ba:78:45:e6:97:4e:0c:29:e0:
e1:4f:3a:7a:ec:51:bf:79:e8:54:ff:bf:1f:6a:b6:53:fd:5c:
25:e2:2d:dc:0f:66:a2:f8:05:bd:f8:e2:e4:3e:5c:b7:ff:72:
63:ff:7c:44:b4:10:75:e6:c6:00:6f:66:61:ba:ce:09:61:3a:
d6:ea:77:9f:e7:d5:7e:08:01:ff:04:5f:12:32:c6:53:d5:bc:
78:20:35:2f:0e:3a:d1:4b:32:16:38:8e:23:93:a2:8a:e9:2f:
4e:09:47:30
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAYyGrmp+BYgZ/wf+/Jb6iJGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx
YzRmZTIwHhcNMjMxMjIwMTAwMzQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjI2ZmE4MjQ2ZWQ1NzA0YTc4NGQyM2Y0ZWVhMDY2NzNlNDY0MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmLVrL/ULz/uMs7cuHmkjyASVDZf
jEpkHpNfxwpPLeURgkdPyt5/40fM9/tjrWRhaE1zF58IiUS9l0og55ziTNTQyrzk
9nXY91zW+HS2PSafWgmtvIkOkDg3iHZbwER7loHiArpuQg4UlA3jiL5o1lEUkEeV
jDmzO7zS6oYqWMLv963YMBz+4e5lDl87DrGffOG3fasnU8FkGA930xLLVadqesnA
Ex4YT85XYBBT8tD4WDY2wof6MLFGaJhQBPR2JbgrZzP4fOUKRetDV3tS/o9Eikup
DaYNAtC1gRCdzIZXBmPCPW6OscgqiwDb4pqMO0XKnvlk3K1ccdBYbV9rlQIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFMYm+oJG7VcEp4TSP07qBmc+RkIfMB8GA1UdIwQY
MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt
NzA4N2UzZmUyYTVkLzEveGliNmdrYnRWd1NuaE5JX1R1b0daejVHUWg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk
LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBiwQCAAEwgYQDBAIt
nhADBAYuKAADBAIu+wgDBAJQ9WADBANRGPADBARV3rADBARZk1ADBANbZuADBAJb
k/QDBANe+LgDBANe+OgDBAZfVYADBAKyFMgDBAK5BrwDBAK5CswDBAK5JagDBAK5
jcQDBAK5nJgDBAK5qfgDBAK554ADBALDwPQDBATZEWAwIgQCAAIwHAMFAyoArQAD
BQMqBPBAAwUCKgxjAAMFAyoPe8AwDQYJKoZIhvcNAQELBQADggEBAEO3LI7FKd1I
OM05W3dVrYosDtT+DGG74HrR82f5zPcvzd/APufZS4J8TJw19ucMszbVOY6aKi16
Bu9LB5Xg5BPndw6nwNpTG33+foaKydxhC0wQ4lLjXJhla2fjMMQ2nOHdARCgCnvq
oQrrp9Z0fUnpMs4HNE0//5aD1eTPI8dMp2tv3BVRPBIzq1Hb8he5NvYw+WJ1Vlmi
A7p4ReaXTgwp4OFPOnrsUb956FT/vx9qtlP9XCXiLdwPZqL4Bb344uQ+XLf/cmP/
fES0EHXmxgBvZmG6zglhOtbqd5/n1X4IAf8EXxIyxlPVvHggNS8OOtFLMhY4jiOT
oorpL04JRzA=
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:54 2025 by rpki-client