Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/Dl841I13SS0lBM9RN_HiRK5ZYg8.roa
File: Dl841I13SS0lBM9RN_HiRK5ZYg8.roa (raw, json)
Hash identifier: fAOabXktLYU8Yl7rOXVgeXxjtyEbu9N1RobIDwWG3+8=
Subject key identifier: 0E:5F:38:D4:8D:77:49:2D:25:04:CF:51:37:F1:E2:44:AE:59:62:0F
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 01840937B7068176E94FA92AD16B613AA9F3
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/Dl841I13SS0lBM9RN_HiRK5ZYg8.roa
Signing time: Mon 24 Oct 2022 08:59:17 +0000
ROA not before: Mon 24 Oct 2022 08:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206067
IP address blocks: 92.40.48.0/20 maxlen: 20
185.153.236.0/24 maxlen: 24
185.153.237.0/24 maxlen: 24
185.153.238.0/24 maxlen: 24
185.153.239.0/24 maxlen: 24
188.31.96.0/20 maxlen: 20
188.31.112.0/20 maxlen: 20
188.31.128.0/19 maxlen: 19
188.31.64.0/22 maxlen: 22
188.31.68.0/22 maxlen: 22
188.31.72.0/22 maxlen: 22
188.31.76.0/22 maxlen: 22
188.31.80.0/22 maxlen: 22
188.31.84.0/22 maxlen: 22
188.31.208.0/21 maxlen: 21
188.31.224.0/20 maxlen: 20
188.31.248.0/23 maxlen: 23
188.31.251.0/24 maxlen: 24
188.31.176.0/20 maxlen: 20
188.31.192.0/21 maxlen: 21
188.30.136.0/21 maxlen: 21
188.30.144.0/21 maxlen: 21
188.30.160.0/19 maxlen: 19
188.30.80.0/22 maxlen: 22
188.30.84.0/22 maxlen: 22
188.30.96.0/19 maxlen: 19
188.30.128.0/21 maxlen: 21
188.30.240.0/21 maxlen: 21
188.31.0.0/21 maxlen: 21
188.31.8.0/21 maxlen: 21
188.31.16.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
188.31.32.0/19 maxlen: 19
188.30.192.0/21 maxlen: 21
188.30.200.0/21 maxlen: 21
188.30.208.0/20 maxlen: 20
188.30.224.0/20 maxlen: 20
188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.224.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.29.160.0/22 maxlen: 22
188.30.32.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.68.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.30.72.0/22 maxlen: 22
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
188.30.8.0/21 maxlen: 21
188.30.16.0/21 maxlen: 21
188.30.24.0/21 maxlen: 21
94.197.104.0/21 maxlen: 21
188.29.0.0/20 maxlen: 20
94.197.112.0/21 maxlen: 21
188.28.160.0/19 maxlen: 19
188.28.192.0/18 maxlen: 18
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.48.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.28.0.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
94.196.144.0/20 maxlen: 20
188.28.32.0/20 maxlen: 20
92.41.160.0/21 maxlen: 21
188.28.48.0/20 maxlen: 20
188.28.112.0/20 maxlen: 20
94.196.224.0/19 maxlen: 19
188.28.128.0/19 maxlen: 19
188.28.64.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
188.28.96.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.176.0/23 maxlen: 23
92.40.178.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.180.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
92.40.184.0/23 maxlen: 23
92.40.188.0/23 maxlen: 23
92.40.190.0/23 maxlen: 23
92.40.192.0/23 maxlen: 23
92.40.194.0/23 maxlen: 23
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
92.40.112.0/20 maxlen: 20
92.41.16.0/20 maxlen: 20
94.196.0.0/18 maxlen: 18
92.40.216.0/23 maxlen: 23
92.40.218.0/23 maxlen: 23
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
2a04:4a45:b::/48 maxlen: 48
2a04:4a45:a::/48 maxlen: 48
2a04:4a45:f::/48 maxlen: 48
2a04:4a43:5600::/40 maxlen: 40
2a04:4a43:4000::/34 maxlen: 34
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:4c00::/40 maxlen: 40
2a04:4a43:9600::/40 maxlen: 40
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:4f00::/40 maxlen: 40
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:5800::/40 maxlen: 40
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:5200::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
2a04:4a43:5000::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:4a00::/40 maxlen: 40
2a04:4a43:9700::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
2a04:4a43:4600::/40 maxlen: 40
2a04:4a43:5700::/40 maxlen: 40
2a04:4a43:5100::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:9500::/40 maxlen: 40
2a04:4a43:4e00::/40 maxlen: 40
2a04:4a43:4800::/40 maxlen: 40
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:4b00::/40 maxlen: 40
2a04:4a43:9800::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:37:b7:06:81:76:e9:4f:a9:2a:d1:6b:61:3a:a9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Oct 24 08:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e5f38d48d77492d2504cf5137f1e244ae59620f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7d:9e:2e:b9:94:ab:2b:78:61:6d:57:02:cf:
93:a4:49:cb:54:0d:b3:a7:17:c8:31:56:ea:42:f5:
5d:fa:4a:4d:79:df:4d:90:38:ab:ca:64:c3:21:36:
7b:a0:b1:59:8c:17:5f:af:4a:c3:96:6c:a3:2b:ea:
12:d0:05:00:0c:e9:bd:ad:8e:92:65:2b:80:12:b9:
01:94:34:62:6e:34:ed:58:64:a0:5e:bd:76:38:2e:
e1:38:77:e7:ce:0f:ea:ec:f4:c3:3a:e4:30:d6:51:
03:76:85:43:29:96:b5:b0:bd:be:3d:8a:1c:81:bd:
40:58:30:e9:b5:e2:71:e5:a3:2a:18:15:06:9d:e1:
09:c0:55:00:d8:d2:6c:cd:2d:42:5c:d6:7f:08:1b:
9e:b9:b6:a7:c6:c9:bd:f3:29:3b:5a:bf:c3:4a:e5:
76:c3:ba:06:28:cf:14:61:fe:a0:93:16:f1:89:09:
78:af:c9:6d:45:0e:af:ed:14:af:e0:b0:ab:cc:f1:
29:ec:64:0a:c5:0e:7e:19:68:11:c8:a9:6c:0a:2a:
67:76:c6:69:6d:8b:3d:33:ba:9a:1a:28:57:d7:46:
7c:89:0e:e0:9e:3c:17:3f:f4:39:4b:62:68:6c:4e:
03:9b:19:9e:63:45:ab:32:cd:e2:9c:e1:5a:7a:6b:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:38:D4:8D:77:49:2D:25:04:CF:51:37:F1:E2:44:AE:59:62:0F
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/Dl841I13SS0lBM9RN_HiRK5ZYg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.48.0/20
92.40.112.0/20
92.40.160.0-92.40.205.255
92.40.208.0-92.40.213.255
92.40.216.0/22
92.40.248.0/24
92.41.0.0/19
92.41.144.0/21
92.41.156.0-92.41.167.255
92.41.208.0-92.41.239.255
94.196.0.0/18
94.196.144.0/20
94.196.208.0-94.196.255.255
94.197.104.0-94.197.119.255
185.153.236.0/22
188.28.0.0-188.29.163.255
188.29.184.0-188.29.251.255
188.30.0.0-188.30.87.255
188.30.96.0-188.30.151.255
188.30.160.0-188.30.247.255
188.31.0.0-188.31.87.255
188.31.96.0-188.31.159.255
188.31.176.0-188.31.199.255
188.31.208.0/21
188.31.224.0/20
188.31.248.0/23
188.31.251.0/24
IPv6:
2a04:4a43:4000::/34
2a04:4a43:9500::-2a04:4a43:98ff:ffff:ffff:ffff:ffff:ffff
2a04:4a45:a::/47
2a04:4a45:f::/48
Signature Algorithm: sha256WithRSAEncryption
7f:8d:73:1a:45:9e:d3:a2:6a:ec:b5:d4:c6:2d:d5:50:90:38:
b9:b1:09:8d:4c:2c:d1:89:15:55:ad:27:95:b8:3d:0a:66:e5:
7b:20:c6:16:ad:eb:fe:21:b1:b1:c6:1f:ef:23:48:b3:63:2a:
5d:8c:9e:7b:bc:71:6e:d1:6b:f7:60:c6:cf:3b:92:c3:94:4f:
2e:38:d2:86:5a:30:ad:b6:0b:3a:8f:c1:20:07:e3:50:e7:35:
ed:81:dc:c7:a7:d7:31:88:be:9d:b8:5d:27:16:76:51:87:e9:
c0:10:fc:2b:61:d8:8d:31:14:a3:b3:c3:d1:9d:03:a9:3a:14:
20:a7:d4:c2:ce:dd:6a:d2:4e:60:3d:aa:37:40:d4:01:d4:70:
a9:22:63:8f:ba:0b:04:0b:66:84:37:bf:14:3a:43:13:b3:db:
6a:ec:d5:f0:9c:08:e3:9b:8e:f5:47:3c:54:21:b2:ba:80:be:
80:0a:a6:a1:a9:e7:07:0a:26:c0:fb:98:1a:b1:a1:56:71:76:
fc:5d:ba:64:44:5a:89:33:57:5d:ec:10:db:17:26:9f:1d:b1:
1d:cf:c0:69:0c:b8:23:07:21:0a:4f:fb:ad:a8:a0:85:9b:7a:
be:a6:4a:ad:39:0f:bb:0b:39:71:90:04:c5:fc:ac:2f:be:e7:
39:d6:c9:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgISAYQJN7cGgXbpT6kq0WthOqnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl
MzIyZGQwHhcNMjIxMDI0MDg1OTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTVmMzhkNDhkNzc0OTJkMjUwNGNmNTEzN2YxZTI0NGFlNTk2MjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX2eLrmUqyt4YW1XAs+TpEnLVA2z
pxfIMVbqQvVd+kpNed9NkDirymTDITZ7oLFZjBdfr0rDlmyjK+oS0AUADOm9rY6S
ZSuAErkBlDRibjTtWGSgXr12OC7hOHfnzg/q7PTDOuQw1lEDdoVDKZa1sL2+PYoc
gb1AWDDpteJx5aMqGBUGneEJwFUA2NJszS1CXNZ/CBueubanxsm98yk7Wr/DSuV2
w7oGKM8UYf6gkxbxiQl4r8ltRQ6v7RSv4LCrzPEp7GQKxQ5+GWgRyKlsCipndsZp
bYs9M7qaGihX10Z8iQ7gnjwXP/Q5S2JobE4DmxmeY0WrMs3inOFaemucIQIDAQAB
o4IDTzCCA0swHQYDVR0OBBYEFA5fONSNd0ktJQTPUTfx4kSuWWIPMB8GA1UdIwQY
MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt
NTlmYzczZDYwMzIyLzEvRGw4NDFJMTNTUzBsQk05Uk5fSGlSSzVaWWc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy
LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYwYIKwYBBQUHAQcBAf8EggFSMIIBTjCCARYEAgABMIIB
DgMEBFwoMAMEBFwocDAMAwQFXCigAwQBXCjMMAwDBARcKNADBAFcKNQDBAJcKNgD
BABcKPgDBAVcKQADBANcKZAwDAMEAlwpnAMEA1wpoDAMAwQEXCnQAwQEXCngAwQG
XsQAAwQEXsSQMAsDBARexNADAwBexDAMAwQDXsVoAwQDXsVwAwQCuZnsMAsDAwK8
HAMEArwdoDAMAwQDvB24AwQCvB34MAsDAwG8HgMEA7weUDAMAwQFvB5gAwQDvB6Q
MAwDBAW8HqADBAO8HvAwCwMDALwfAwQDvB9QMAwDBAW8H2ADBAW8H4AwDAMEBLwf
sAMEA7wfwAMEA7wf0AMEBLwf4AMEAbwf+AMEALwf+zAyBAIAAjAsAwYGKgRKQ0Aw
EAMGACoESkOVAwYAKgRKQ5gDBwEqBEpFAAoDBwAqBEpFAA8wDQYJKoZIhvcNAQEL
BQADggEBAH+NcxpFntOiauy11MYt1VCQOLmxCY1MLNGJFVWtJ5W4PQpm5Xsgxhat
6/4hsbHGH+8jSLNjKl2Mnnu8cW7Ra/dgxs87ksOUTy440oZaMK22CzqPwSAH41Dn
Ne2B3Men1zGIvp24XScWdlGH6cAQ/Cth2I0xFKOzw9GdA6k6FCCn1MLO3WrSTmA9
qjdA1AHUcKkiY4+6CwQLZoQ3vxQ6QxOz22rs1fCcCOObjvVHPFQhsrqAvoAKpqGp
5wcKJsD7mBqxoVZxdvxdumREWokzV13sENsXJp8dsR3PwGkMuCMHIQpP+62ooIWb
er6mSq05D7sLOXGQBMX8rC++5znWyYM=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:26 2023 by rpki-client on console-fra.rpki-client.org