Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/0MEkshaDb2eXoDaVBQu_rMrv3CE.roa
File: 0MEkshaDb2eXoDaVBQu_rMrv3CE.roa (raw, json)
Hash identifier: bURfkrHtXfZbF4tahdt6rap1Xb1GN+aqEW3FGKITkJ0=
Subject key identifier: D0:C1:24:B2:16:83:6F:67:97:A0:36:95:05:0B:BF:AC:CA:EF:DC:21
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0182C75C1105E7FDBA9445551C58C1478389
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/0MEkshaDb2eXoDaVBQu_rMrv3CE.roa
Signing time: Mon 22 Aug 2022 21:01:15 +0000
ROA not before: Mon 22 Aug 2022 21:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206067
IP address blocks: 188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
92.40.48.0/20 maxlen: 20
94.197.104.0/21 maxlen: 21
188.29.0.0/20 maxlen: 20
94.197.112.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.31.96.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
94.196.144.0/20 maxlen: 20
92.41.160.0/21 maxlen: 21
188.31.208.0/21 maxlen: 21
94.196.224.0/19 maxlen: 19
188.31.224.0/20 maxlen: 20
188.28.64.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
188.30.136.0/21 maxlen: 21
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
188.30.160.0/19 maxlen: 19
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
188.30.80.0/22 maxlen: 22
92.40.112.0/20 maxlen: 20
188.30.96.0/19 maxlen: 19
92.41.16.0/20 maxlen: 20
94.196.0.0/18 maxlen: 18
188.31.8.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
2a04:4a45:a::/48 maxlen: 48
2a04:4a45:b::/48 maxlen: 48
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:8000::/34 maxlen: 34
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:5200::/40 maxlen: 40
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:4b00::/40 maxlen: 40
2a04:4a43:9500::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c7:5c:11:05:e7:fd:ba:94:45:55:1c:58:c1:47:83:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Aug 22 21:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0c124b216836f6797a03695050bbfaccaefdc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:15:e9:1c:67:52:46:c5:5f:47:d8:0f:cd:
9b:63:79:ba:b7:25:c7:5d:93:42:d1:80:e5:13:de:
19:16:f8:d7:b7:93:b8:f1:7a:fa:41:dc:a8:f0:72:
b8:df:11:7f:09:cc:10:4d:84:84:78:2b:41:dc:98:
f5:bc:50:bb:1f:cb:ae:b6:61:c0:cd:1e:31:44:38:
dd:ef:2a:75:96:a0:9c:ed:49:5f:da:5c:89:c4:dc:
2b:c4:95:f9:62:fc:1d:e5:b4:15:e5:f2:a8:49:a2:
74:fd:1d:a7:68:4d:7c:b5:4e:9c:e6:64:0a:60:d5:
cf:c8:ce:fe:90:81:36:5d:f1:fc:58:d6:b9:9f:66:
ff:1e:04:dc:d2:4c:68:af:93:56:35:6b:9b:62:c7:
85:58:e6:74:10:2a:66:b7:0e:b7:26:e0:f3:5a:20:
d5:02:b6:38:af:74:ba:aa:a3:a9:7d:38:a7:e8:fd:
94:82:fa:db:8f:b1:98:20:89:52:fe:96:58:3d:2e:
b9:cd:1a:bc:87:a2:cb:3a:2b:62:6d:86:88:17:2f:
57:64:14:65:6b:a7:49:1a:05:ee:90:b4:cb:be:a5:
09:72:68:f1:27:8f:eb:03:6a:fd:0a:26:43:68:69:
57:c9:6d:9f:eb:03:91:fa:f8:24:c5:30:e0:e0:3f:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C1:24:B2:16:83:6F:67:97:A0:36:95:05:0B:BF:AC:CA:EF:DC:21
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/0MEkshaDb2eXoDaVBQu_rMrv3CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.48.0/20
92.40.112.0/20
92.40.160.0/20
92.40.182.0/23
92.40.186.0/23
92.40.196.0-92.40.205.255
92.40.208.0-92.40.213.255
92.40.248.0/24
92.41.0.0/19
92.41.144.0/21
92.41.156.0-92.41.167.255
92.41.208.0-92.41.239.255
94.196.0.0/18
94.196.144.0/20
94.196.208.0-94.196.255.255
94.197.104.0-94.197.119.255
188.28.16.0/20
188.28.64.0/19
188.28.192.0-188.29.47.255
188.29.64.0-188.29.159.255
188.29.184.0-188.29.223.255
188.29.240.0-188.29.251.255
188.30.0.0/21
188.30.64.0/22
188.30.76.0-188.30.83.255
188.30.96.0/19
188.30.136.0/21
188.30.160.0/19
188.31.8.0/21
188.31.24.0/21
188.31.96.0/20
188.31.176.0/20
188.31.208.0/21
188.31.224.0/20
IPv6:
2a04:4a43:4000::-2a04:4a43:45ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:4700::/40
2a04:4a43:4900::/40
2a04:4a43:4b00::/40
2a04:4a43:4d00::/40
2a04:4a43:5200::-2a04:4a43:55ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:8000::/34
2a04:4a45:a::/47
Signature Algorithm: sha256WithRSAEncryption
9e:f3:19:cb:20:70:f0:8e:0b:41:18:0a:61:bf:ed:cd:49:40:
56:41:5d:b0:ae:98:70:33:46:99:3e:7a:c6:f1:e9:10:78:f5:
55:ba:03:2e:58:a2:c5:1a:d6:a1:72:78:a2:60:03:d8:35:63:
15:ba:79:3b:50:6f:94:31:47:1e:6f:6a:3d:cd:93:02:c9:c2:
44:c4:d1:cc:97:45:f7:3b:c8:61:a7:e8:63:59:bb:0b:3e:5b:
53:c2:86:a5:1e:ab:2a:4e:2a:75:08:e8:c4:72:68:3f:fd:98:
26:93:c3:4c:a2:9e:03:1c:91:24:18:b7:40:25:16:8c:28:b0:
83:66:39:60:bf:5d:38:0f:81:51:86:bd:59:19:b6:41:12:b9:
54:65:fa:06:23:b2:78:1f:ee:0e:43:26:03:45:c0:42:be:74:
00:9b:c7:b9:f5:e2:7e:4f:5c:52:12:1d:76:e8:f9:b8:ec:1c:
03:24:56:73:f0:e1:b3:74:d0:e8:88:f3:fd:bd:c5:9f:00:29:
87:af:db:8d:43:96:18:8b:fe:4e:55:a9:c6:59:aa:2e:7c:eb:
74:60:42:3e:cf:7a:ef:1c:82:9a:30:08:a9:20:d1:d3:d4:7e:
df:49:36:40:aa:43:02:9c:f9:0a:06:b7:8a:ad:0e:9f:e1:82:
86:a9:07:46
-----BEGIN CERTIFICATE-----
MIIGgTCCBWmgAwIBAgISAYLHXBEF5/26lEVVHFjBR4OJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl
MzIyZGQwHhcNMjIwODIyMjEwMTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGMxMjRiMjE2ODM2ZjY3OTdhMDM2OTUwNTBiYmZhY2NhZWZkYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnAV6RxnUkbFX0fYD82bY3m6tyXH
XZNC0YDlE94ZFvjXt5O48Xr6Qdyo8HK43xF/CcwQTYSEeCtB3Jj1vFC7H8uutmHA
zR4xRDjd7yp1lqCc7Ulf2lyJxNwrxJX5Yvwd5bQV5fKoSaJ0/R2naE18tU6c5mQK
YNXPyM7+kIE2XfH8WNa5n2b/HgTc0kxor5NWNWubYseFWOZ0ECpmtw63JuDzWiDV
ArY4r3S6qqOpfTin6P2Ugvrbj7GYIIlS/pZYPS65zRq8h6LLOitibYaIFy9XZBRl
a6dJGgXukLTLvqUJcmjxJ4/rA2r9CiZDaGlXyW2f6wOR+vgkxTDg4D8b2wIDAQAB
o4IDjTCCA4kwHQYDVR0OBBYEFNDBJLIWg29nl6A2lQULv6zK79whMB8GA1UdIwQY
MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt
NTlmYzczZDYwMzIyLzEvME1Fa3NoYURiMmVYb0RhVkJRdV9yTXJ2M0NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy
LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBoQYIKwYBBQUHAQcBAf8EggGQMIIBjDCCASsEAgABMIIB
IwMEBFwoMAMEBFwocAMEBFwooAMEAVwotgMEAVwoujAMAwQCXCjEAwQBXCjMMAwD
BARcKNADBAFcKNQDBABcKPgDBAVcKQADBANcKZAwDAMEAlwpnAMEA1wpoDAMAwQE
XCnQAwQEXCngAwQGXsQAAwQEXsSQMAsDBARexNADAwBexDAMAwQDXsVoAwQDXsVw
AwQEvBwQAwQFvBxAMAwDBAa8HMADBAS8HSAwDAMEBrwdQAMEBbwdgDAMAwQDvB24
AwQFvB3AMAwDBAS8HfADBAK8HfgDBAO8HgADBAK8HkAwDAMEArweTAMEArweUAME
BbweYAMEA7weiAMEBbweoAMEA7wfCAMEA7wfGAMEBLwfYAMEBLwfsAMEA7wf0AME
BLwf4DBbBAIAAjBVMBADBgYqBEpDQAMGASoESkNEAwYAKgRKQ0cDBgAqBEpDSQMG
ACoESkNLAwYAKgRKQ00wEAMGASoESkNSAwYBKgRKQ1QDBgYqBEpDgAMHASoESkUA
CjANBgkqhkiG9w0BAQsFAAOCAQEAnvMZyyBw8I4LQRgKYb/tzUlAVkFdsK6YcDNG
mT56xvHpEHj1VboDLliixRrWoXJ4omAD2DVjFbp5O1BvlDFHHm9qPc2TAsnCRMTR
zJdF9zvIYafoY1m7Cz5bU8KGpR6rKk4qdQjoxHJoP/2YJpPDTKKeAxyRJBi3QCUW
jCiwg2Y5YL9dOA+BUYa9WRm2QRK5VGX6BiOyeB/uDkMmA0XAQr50AJvHufXifk9c
UhIdduj5uOwcAyRWc/Dhs3TQ6Ijz/b3FnwAph6/bjUOWGIv+TlWpxlmqLnzrdGBC
Ps967xyCmjAIqSDR09R+30k2QKpDApz5Cga3iq0On+GChqkHRg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:21 2023 by rpki-client on console-ams.rpki-client.org