Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/VUjcFHlyJwvU8lnYgnnCDtrkD-Y.roa
File: VUjcFHlyJwvU8lnYgnnCDtrkD-Y.roa (raw, json)
Hash identifier: R1nssIrWAaXiVUZv/Mk3jYy538CHrqdTuBDt46dagsU=
Subject key identifier: 55:48:DC:14:79:72:27:0B:D4:F2:59:D8:82:79:C2:0E:DA:E4:0F:E6
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 018C448AB4D10DA19805FF5B1FD45E09C812
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/VUjcFHlyJwvU8lnYgnnCDtrkD-Y.roa
Signing time: Thu 07 Dec 2023 13:49:50 +0000
ROA not before: Thu 07 Dec 2023 13:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21246
IP address blocks: 80.80.162.0/24 maxlen: 24
80.80.161.0/24 maxlen: 24
80.80.160.0/20 maxlen: 20
80.80.160.0/24 maxlen: 24
80.80.166.0/24 maxlen: 24
80.80.164.0/23 maxlen: 23
80.80.163.0/24 maxlen: 24
80.80.169.0/24 maxlen: 24
80.80.168.0/24 maxlen: 24
80.80.167.0/24 maxlen: 24
80.80.172.0/24 maxlen: 24
80.80.171.0/24 maxlen: 24
80.80.170.0/24 maxlen: 24
80.80.173.0/24 maxlen: 24
80.80.175.0/24 maxlen: 24
80.80.174.0/24 maxlen: 24
46.99.149.0/24 maxlen: 24
46.99.148.0/24 maxlen: 24
46.99.147.0/24 maxlen: 24
46.99.146.0/24 maxlen: 24
46.99.152.0/22 maxlen: 22
46.99.151.0/24 maxlen: 24
46.99.150.0/24 maxlen: 24
46.99.156.0/23 maxlen: 23
46.99.159.0/24 maxlen: 24
46.99.158.0/24 maxlen: 24
46.99.163.0/24 maxlen: 24
46.99.162.0/24 maxlen: 24
46.99.161.0/24 maxlen: 24
46.99.160.0/24 maxlen: 24
46.99.166.0/24 maxlen: 24
46.99.165.0/24 maxlen: 24
46.99.164.0/24 maxlen: 24
46.99.170.0/24 maxlen: 24
46.99.169.0/24 maxlen: 24
46.99.168.0/24 maxlen: 24
46.99.167.0/24 maxlen: 24
46.99.171.0/24 maxlen: 24
46.99.179.0/24 maxlen: 24
46.99.178.0/24 maxlen: 24
46.99.173.0/24 maxlen: 24
46.99.177.0/24 maxlen: 24
46.99.176.0/24 maxlen: 24
46.99.175.0/24 maxlen: 24
46.99.174.0/24 maxlen: 24
46.99.180.0/24 maxlen: 24
46.99.184.0/24 maxlen: 24
46.99.183.0/24 maxlen: 24
46.99.182.0/24 maxlen: 24
46.99.181.0/24 maxlen: 24
46.99.186.0/24 maxlen: 24
46.99.185.0/24 maxlen: 24
46.99.187.0/24 maxlen: 24
46.99.190.0/24 maxlen: 24
46.99.189.0/24 maxlen: 24
46.99.188.0/24 maxlen: 24
46.99.192.0/24 maxlen: 24
46.99.196.0/24 maxlen: 24
46.99.199.0/24 maxlen: 24
46.99.128.0/24 maxlen: 24
46.99.131.0/24 maxlen: 24
46.99.130.0/24 maxlen: 24
46.99.129.0/24 maxlen: 24
46.99.132.0/24 maxlen: 24
46.99.135.0/24 maxlen: 24
46.99.134.0/24 maxlen: 24
46.99.133.0/24 maxlen: 24
46.99.138.0/24 maxlen: 24
46.99.137.0/24 maxlen: 24
46.99.136.0/24 maxlen: 24
46.99.139.0/24 maxlen: 24
46.99.142.0/24 maxlen: 24
46.99.141.0/24 maxlen: 24
46.99.140.0/24 maxlen: 24
46.99.145.0/24 maxlen: 24
46.99.144.0/24 maxlen: 24
46.99.143.0/24 maxlen: 24
46.99.254.0/23 maxlen: 23
91.187.97.0/24 maxlen: 24
91.187.96.0/19 maxlen: 19
91.187.96.0/24 maxlen: 24
46.99.203.0/24 maxlen: 24
46.99.202.0/23 maxlen: 23
46.99.202.0/24 maxlen: 24
91.187.98.0/24 maxlen: 24
91.187.100.0/24 maxlen: 24
91.187.99.0/24 maxlen: 24
91.187.104.0/24 maxlen: 24
91.187.104.0/23 maxlen: 23
91.187.103.0/24 maxlen: 24
91.187.102.0/24 maxlen: 24
91.187.101.0/24 maxlen: 24
91.187.107.0/24 maxlen: 24
91.187.106.0/24 maxlen: 24
91.187.111.0/24 maxlen: 24
91.187.110.0/24 maxlen: 24
91.187.109.0/24 maxlen: 24
91.187.108.0/24 maxlen: 24
91.187.112.0/24 maxlen: 24
91.187.114.0/24 maxlen: 24
91.187.113.0/24 maxlen: 24
46.99.224.0/20 maxlen: 20
91.187.117.0/24 maxlen: 24
91.187.116.0/24 maxlen: 24
91.187.115.0/24 maxlen: 24
91.187.118.0/24 maxlen: 24
91.187.125.0/24 maxlen: 24
91.187.121.0/24 maxlen: 24
91.187.120.0/24 maxlen: 24
91.187.119.0/24 maxlen: 24
91.187.124.0/24 maxlen: 24
91.187.123.0/24 maxlen: 24
91.187.122.0/24 maxlen: 24
91.187.127.0/24 maxlen: 24
91.187.126.0/24 maxlen: 24
46.99.239.0/24 maxlen: 24
46.99.250.0/24 maxlen: 24
46.99.249.0/24 maxlen: 24
46.99.252.0/23 maxlen: 23
46.99.251.0/24 maxlen: 24
46.99.64.0/19 maxlen: 19
46.99.64.0/18 maxlen: 18
46.99.0.0/18 maxlen: 18
46.99.0.0/16 maxlen: 16
185.78.224.0/22 maxlen: 22
46.99.32.0/19 maxlen: 19
2a03:4b80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:8a:b4:d1:0d:a1:98:05:ff:5b:1f:d4:5e:09:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Dec 7 13:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5548dc147972270bd4f259d88279c20edae40fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:af:b4:90:79:88:29:0a:08:5f:50:f3:2c:
94:d7:c4:72:24:18:21:b9:0d:db:7d:41:5c:1e:a1:
5c:79:d5:66:6e:16:a1:0f:6b:25:74:53:13:ad:01:
90:2e:6c:ba:97:71:2b:24:7f:a9:32:62:99:e3:34:
03:51:cb:65:20:40:24:b4:47:29:93:49:75:d5:1a:
7e:b3:bd:42:4e:48:08:9e:e7:e4:21:f2:c1:b6:80:
72:5b:ad:8b:a3:29:1c:07:38:76:57:bb:c0:57:bb:
b5:00:fe:2f:1e:6d:14:88:30:3e:91:36:94:4a:14:
37:55:b4:d4:f1:e3:f1:12:b8:0b:5f:c6:0a:8e:42:
b4:11:5c:e2:b3:05:5e:08:04:af:d5:47:41:a8:a8:
62:6f:6f:d4:d2:df:7b:20:a7:6a:6e:7f:45:94:4c:
72:a2:da:9b:ce:82:4d:f8:af:ca:58:f8:f8:3a:af:
7c:22:e0:90:31:8c:bf:0b:73:56:1e:0a:78:1a:e8:
5e:6a:14:2d:f1:96:7e:2e:19:4f:38:92:fd:8b:ba:
95:18:e8:10:1b:7f:ca:6c:26:f0:5b:40:11:07:cc:
ec:83:2c:38:21:20:e1:63:59:e8:8e:c8:06:d1:aa:
89:9a:40:a0:43:ed:8f:b8:d7:18:08:f6:b3:af:70:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:48:DC:14:79:72:27:0B:D4:F2:59:D8:82:79:C2:0E:DA:E4:0F:E6
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/VUjcFHlyJwvU8lnYgnnCDtrkD-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.99.0.0/16
80.80.160.0/20
91.187.96.0/19
185.78.224.0/22
IPv6:
2a03:4b80::/32
Signature Algorithm: sha256WithRSAEncryption
be:ae:81:9a:2a:7d:2a:23:e8:b3:98:be:6f:c9:77:64:7a:8f:
9f:2e:8c:4a:34:67:e4:43:46:1b:bf:a3:bf:af:1b:74:e5:71:
1d:0c:c1:6a:56:39:22:79:9d:62:85:80:c7:b5:e0:7d:99:c1:
45:48:3b:b2:0b:aa:3e:14:50:1f:54:42:16:46:14:3b:51:b0:
db:5b:cb:29:47:14:d6:f5:17:9f:04:84:98:d1:a4:50:69:5e:
80:d8:e6:cc:3c:4e:6b:8e:9f:d6:ce:29:e7:a5:3e:15:e9:7d:
5e:c9:df:40:94:dc:93:39:e6:82:69:96:fc:8a:de:99:ac:5b:
f8:77:7c:13:d1:60:6e:1c:e1:59:57:a3:ac:eb:7a:86:8c:cb:
64:aa:31:a0:66:4e:c4:ad:33:bf:d6:2a:a5:c7:a9:2f:82:f1:
00:a8:4e:5f:3e:cb:75:5a:7b:74:74:8e:bd:dc:42:e9:f8:90:
cc:64:b6:2d:11:9c:8a:15:fa:c7:28:fd:77:15:b1:7f:72:ae:
30:ec:65:0f:52:e5:e3:00:cb:30:d9:a9:eb:ef:e5:2f:43:e9:
99:ee:19:46:5b:d7:44:23:5b:c2:b3:d6:36:98:ca:02:c5:03:
29:21:8c:61:40:95:61:e1:b9:01:40:a4:86:47:2b:39:fe:34:
cd:19:8d:27
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYxEirTRDaGYBf9bH9ReCcgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDFjNWJjMDkxNWEyZjdjYjE2NWIwYjdkNzEzMjEyZmE1
NzMzMmQwHhcNMjMxMjA3MTM0OTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTQ4ZGMxNDc5NzIyNzBiZDRmMjU5ZDg4Mjc5YzIwZWRhZTQwZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFqvtJB5iCkKCF9Q8yyU18RyJBgh
uQ3bfUFcHqFcedVmbhahD2sldFMTrQGQLmy6l3ErJH+pMmKZ4zQDUctlIEAktEcp
k0l11Rp+s71CTkgInufkIfLBtoByW62LoykcBzh2V7vAV7u1AP4vHm0UiDA+kTaU
ShQ3VbTU8ePxErgLX8YKjkK0EVziswVeCASv1UdBqKhib2/U0t97IKdqbn9FlExy
otqbzoJN+K/KWPj4Oq98IuCQMYy/C3NWHgp4GuheahQt8ZZ+LhlPOJL9i7qVGOgQ
G3/KbCbwW0ARB8zsgyw4ISDhY1nojsgG0aqJmkCgQ+2PuNcYCPazr3ApFQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFFVI3BR5cicL1PJZ2IJ5wg7a5A/mMB8GA1UdIwQY
MBaAFMEBxbwJFaL3yxZbC31xMhL6VzMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4Zjct
OTI4ZDkxNzkxOTA3LzEvVlVqY0ZIbHlKd3ZVOGxuWWdubkNEdHJrRC1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4ZjctOTI4ZDkxNzkxOTA3
LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMALmMDBARQ
UKADBAVbu2ADBAK5TuAwDQQCAAIwBwMFACoDS4AwDQYJKoZIhvcNAQELBQADggEB
AL6ugZoqfSoj6LOYvm/Jd2R6j58ujEo0Z+RDRhu/o7+vG3TlcR0MwWpWOSJ5nWKF
gMe14H2ZwUVIO7ILqj4UUB9UQhZGFDtRsNtbyylHFNb1F58EhJjRpFBpXoDY5sw8
TmuOn9bOKeelPhXpfV7J30CU3JM55oJplvyK3pmsW/h3fBPRYG4c4VlXo6zreoaM
y2SqMaBmTsStM7/WKqXHqS+C8QCoTl8+y3Vae3R0jr3cQun4kMxkti0RnIoV+sco
/XcVsX9yrjDsZQ9S5eMAyzDZqevv5S9D6ZnuGUZb10QjW8Kz1jaYygLFAykhjGFA
lWHhuQFApIZHKzn+NM0ZjSc=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:01 2025 by rpki-client