Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iM_nJxbydUMu2l5v-mXZVpAmbng.roa
File: iM_nJxbydUMu2l5v-mXZVpAmbng.roa (raw, json)
Hash identifier: 24FIRdOjK/6B2YsEnAWVWuRhBQohzNdFFVUP4uz2OWA=
Subject key identifier: 88:CF:E7:27:16:F2:75:43:2E:DA:5E:6F:FA:65:D9:56:90:26:6E:78
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0182E006AACDB004C2AB91A067492CF92ED2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iM_nJxbydUMu2l5v-mXZVpAmbng.roa
Signing time: Sat 27 Aug 2022 15:58:29 +0000
ROA not before: Sat 27 Aug 2022 15:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 24
185.204.244.0/22 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.124.108.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
185.228.160.0/23 maxlen: 23
185.228.162.0/24 maxlen: 24
185.232.8.0/22 maxlen: 24
193.26.152.0/22 maxlen: 24
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
31.170.100.0/22 maxlen: 24
185.163.168.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.220.248.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.210.232.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
193.8.112.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
185.210.152.0/22 maxlen: 24
95.214.144.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 24
185.221.20.0/22 maxlen: 24
185.200.228.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.36.0/22 maxlen: 24
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
185.230.52.0/22 maxlen: 24
185.230.64.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
85.31.60.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
185.223.80.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
185.119.48.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.250.180.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.209.72.0/22 maxlen: 24
185.199.52.0/22 maxlen: 24
185.91.108.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
185.162.52.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e0:06:aa:cd:b0:04:c2:ab:91:a0:67:49:2c:f9:2e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 27 15:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88cfe72716f275432eda5e6ffa65d95690266e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2a:a8:cd:47:f4:60:a2:06:9d:3b:39:1e:70:
ce:e4:5e:53:4d:5c:0b:b3:45:19:1e:03:d3:c3:ec:
b1:5f:21:e8:16:5e:23:c8:22:e2:42:39:ce:bf:5b:
9d:6c:e7:03:e4:f8:cc:b5:b1:30:84:2b:b0:2d:cc:
55:48:8a:35:51:3a:1e:6e:32:46:d8:1d:c2:dc:7d:
8b:f2:db:23:79:ff:53:00:15:b1:de:7e:fa:0a:ad:
9f:e8:e8:10:e3:9e:52:1e:d7:c2:3c:70:05:97:8c:
ba:2d:49:bd:e3:7a:e6:ca:f9:64:7b:9d:3f:82:40:
5b:46:b9:15:91:fd:22:9c:6a:97:c4:17:64:ce:28:
9d:d5:d7:0e:50:fb:e6:d9:74:ea:c0:f8:e7:8e:68:
aa:c3:16:f0:c2:06:ad:7b:51:83:99:e7:6f:39:2f:
f0:db:12:27:b4:43:92:c9:d7:24:f9:75:3d:bf:93:
25:19:05:14:e2:a5:ed:8e:54:a5:43:a3:00:28:52:
ab:bf:f1:0c:eb:e6:d5:56:d4:9a:cd:ce:e1:e1:b0:
90:2a:d4:dd:c8:76:b9:a0:61:df:92:e8:cf:e9:99:
c8:2e:35:a9:1b:d7:f7:ca:42:ec:a9:ba:96:8a:78:
06:54:35:84:9c:30:d2:4a:4a:b4:6f:4f:14:a2:f6:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:E7:27:16:F2:75:43:2E:DA:5E:6F:FA:65:D9:56:90:26:6E:78
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iM_nJxbydUMu2l5v-mXZVpAmbng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.209.72.0/22
185.210.152.0/22
185.210.232.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.220.248.0/22
185.221.16.0/21
185.222.188.0/22
185.223.80.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.228.160.0-185.228.162.255
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
185.250.180.0/22
193.8.112.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:4a:4d:d5:08:2b:8e:27:a5:e2:62:f5:b0:81:c1:b7:0c:c6:
13:0f:2f:5a:37:53:3e:d1:26:86:4b:db:4c:6f:3e:5e:eb:ce:
ad:30:75:da:b3:c1:07:73:97:3e:4e:20:6e:64:93:24:b4:e3:
ea:5b:7f:f3:af:82:64:66:f8:8f:01:d8:97:c9:24:0a:31:a8:
8f:67:7b:60:f3:e8:49:05:5c:d4:cd:c0:08:3a:0b:55:68:82:
be:d3:a3:be:47:cb:28:66:18:90:5d:f8:fc:60:f2:42:32:5a:
1c:26:9c:26:80:2c:5c:74:01:ea:7b:fd:0f:15:e5:ec:ce:55:
96:20:e5:87:33:da:88:f1:f2:f0:c0:14:de:7a:ce:2f:21:41:
d5:26:45:12:e3:83:45:1e:e4:27:a2:4d:8e:c9:4a:75:d5:e1:
ac:b7:6e:5b:ea:6a:ce:7b:bf:93:a0:1c:7f:62:75:6f:99:25:
62:ff:2d:99:ba:08:f8:f7:9a:72:05:7d:12:2e:c5:48:6a:26:
13:cc:86:9f:6e:4b:cb:74:3c:08:ab:38:30:5f:03:ce:a0:ee:
40:4f:9a:5d:3a:dd:da:a8:ec:77:46:46:32:fd:29:79:2a:ba:
c7:17:82:d8:0a:c5:a0:e6:70:1e:5d:dc:91:e1:aa:b0:2d:ee:
ea:d8:4f:f8
-----BEGIN CERTIFICATE-----
MIIG9zCCBd+gAwIBAgISAYLgBqrNsATCq5GgZ0ks+S7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjIwODI3MTU1ODI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGNmZTcyNzE2ZjI3NTQzMmVkYTVlNmZmYTY1ZDk1NjkwMjY2ZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiqozUf0YKIGnTs5HnDO5F5TTVwL
s0UZHgPTw+yxXyHoFl4jyCLiQjnOv1udbOcD5PjMtbEwhCuwLcxVSIo1UToebjJG
2B3C3H2L8tsjef9TABWx3n76Cq2f6OgQ455SHtfCPHAFl4y6LUm943rmyvlke50/
gkBbRrkVkf0inGqXxBdkziid1dcOUPvm2XTqwPjnjmiqwxbwwgate1GDmedvOS/w
2xIntEOSydck+XU9v5MlGQUU4qXtjlSlQ6MAKFKrv/EM6+bVVtSazc7h4bCQKtTd
yHa5oGHfkujP6ZnILjWpG9f3ykLsqbqWingGVDWEnDDSSkq0b08UovZTNwIDAQAB
o4IEAzCCA/8wHQYDVR0OBBYEFIjP5ycW8nVDLtpeb/pl2VaQJm54MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvaU1fbkp4YnlkVU11Mmw1di1tWFpWcEFtYm5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICFwYIKwYBBQUHAQcBAf8EggIGMIICAjCCAf4EAgABMIIB
9gMEAh+qZAMEAi1RmAMEAi2JoAMEAi2TaAMEAi2TdAMEAi2fTAMEAlEV5AMEAlUf
PAMEAlVzwAMEAliHQAMEAVvrKAMEAl1c5AMEAF29eAMEAF29ewMEAl/WkAMEAG3m
wgMEAG3m+gMEArlbbAMEArlpDAMEArlp6AMEArlqfAMEArlrmAMEArl2NAMEArl3
MAMEArl8bAMEArmANAMEArmBaAMEAbmWTgMEArmiNAMEArmjqAMEArmj6AMEArmm
JAMEArmmrAMEArmvmAMEArmwvDAMAwQCubPkAwQCubPoAwQCub1AAwQCucQoAwQC
ucXYAwQCuccsAwQCucc0AwQCucjkAwQCucmYAwQCucrMAwQCucz0AwQCudFIAwQC
udKYAwQCudLoAwQCudRUAwQCudgcAwQCudkMAwQCudoQAwQCudzwAwQCudz4AwQD
ud0QAwQCud68AwQCud9QAwQCud/cAwQCueC4AwQCueDcAwQCueIIAwQCueIcAwQC
ueOwAwQAuePMMAwDBAW55KADBAC55KIDBAO55jADBAK55kADBAK56AgDBAK57/wD
BAG59SADBAC59wQDBAK5+rQDBALBCHADBALBEbQDBALBGpgDBALBI1gDBADCIygD
BALCJjgDBALCKXQDBALUUNADBALUcywwDQYJKoZIhvcNAQELBQADggEBAE5KTdUI
K44npeJi9bCBwbcMxhMPL1o3Uz7RJoZL20xvPl7rzq0wddqzwQdzlz5OIG5kkyS0
4+pbf/OvgmRm+I8B2JfJJAoxqI9ne2Dz6EkFXNTNwAg6C1Vogr7To75HyyhmGJBd
+Pxg8kIyWhwmnCaALFx0Aep7/Q8V5ezOVZYg5Ycz2ojx8vDAFN56zi8hQdUmRRLj
g0Ue5CeiTY7JSnXV4ay3blvqas57v5OgHH9idW+ZJWL/LZm6CPj3mnIFfRIuxUhq
JhPMhp9uS8t0PAirODBfA86g7kBPml063dqo7HdGRjL9KXkquscXgtgKxaDmcB5d
3JHhqrAt7urYT/g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org