Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/3s2BqbVtJeKQYYZceBVUVtArYFc.roa
File: 3s2BqbVtJeKQYYZceBVUVtArYFc.roa (raw, json)
Hash identifier: xLBYgENwyR5BLyaUMKGwsMM445wdfiaWK2QG33xGH78=
Subject key identifier: DE:CD:81:A9:B5:6D:25:E2:90:61:86:5C:78:15:54:56:D0:2B:60:57
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 36D8BE5F
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/3s2BqbVtJeKQYYZceBVUVtArYFc.roa
Signing time: Tue 15 Mar 2022 06:42:43 +0000
ROA not before: Tue 15 Mar 2022 06:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9123
IP address blocks: 94.228.112.0/24 maxlen: 24
94.228.117.0/24 maxlen: 24
92.255.104.0/24 maxlen: 24
92.255.105.0/24 maxlen: 24
94.228.118.0/24 maxlen: 24
94.228.113.0/24 maxlen: 24
94.228.114.0/24 maxlen: 24
94.228.115.0/24 maxlen: 24
94.228.116.0/24 maxlen: 24
94.228.120.0/24 maxlen: 24
94.228.124.0/24 maxlen: 24
92.255.110.0/24 maxlen: 24
92.255.111.0/24 maxlen: 24
92.255.109.0/24 maxlen: 24
94.228.125.0/24 maxlen: 24
92.255.107.0/24 maxlen: 24
94.228.119.0/24 maxlen: 24
94.228.121.0/24 maxlen: 24
94.228.122.0/24 maxlen: 24
94.228.123.0/24 maxlen: 24
92.255.108.0/24 maxlen: 24
92.255.106.0/24 maxlen: 24
94.228.127.0/24 maxlen: 24
94.228.126.0/24 maxlen: 24
92.53.97.0/24 maxlen: 24
92.53.98.0/24 maxlen: 24
92.53.96.0/24 maxlen: 24
92.53.104.0/24 maxlen: 24
92.53.105.0/24 maxlen: 24
92.53.99.0/24 maxlen: 24
92.53.112.0/24 maxlen: 24
92.53.106.0/24 maxlen: 24
92.53.107.0/24 maxlen: 24
92.53.113.0/24 maxlen: 24
92.53.114.0/24 maxlen: 24
92.53.118.0/24 maxlen: 24
92.53.115.0/24 maxlen: 24
92.53.116.0/24 maxlen: 24
92.53.117.0/24 maxlen: 24
92.255.76.0/24 maxlen: 24
92.255.77.0/24 maxlen: 24
92.255.78.0/24 maxlen: 24
92.255.79.0/24 maxlen: 24
92.53.125.0/24 maxlen: 24
92.53.121.0/24 maxlen: 24
92.53.122.0/24 maxlen: 24
92.53.123.0/24 maxlen: 24
92.53.124.0/24 maxlen: 24
92.53.119.0/24 maxlen: 24
92.53.120.0/24 maxlen: 24
92.53.126.0/24 maxlen: 24
92.53.127.0/24 maxlen: 24
217.25.88.0/24 maxlen: 24
217.25.89.0/24 maxlen: 24
217.25.90.0/24 maxlen: 24
217.25.91.0/24 maxlen: 24
217.25.92.0/24 maxlen: 24
217.25.93.0/24 maxlen: 24
217.25.94.0/24 maxlen: 24
185.200.240.0/24 maxlen: 24
185.200.241.0/24 maxlen: 24
185.200.242.0/24 maxlen: 24
185.200.243.0/24 maxlen: 24
185.119.58.0/24 maxlen: 24
185.119.56.0/24 maxlen: 24
185.119.57.0/24 maxlen: 24
185.119.59.0/24 maxlen: 24
185.104.115.0/24 maxlen: 24
185.104.113.0/24 maxlen: 24
185.104.114.0/24 maxlen: 24
176.57.222.0/23 maxlen: 24
188.225.15.0/24 maxlen: 24
188.225.16.0/24 maxlen: 24
188.225.17.0/24 maxlen: 24
188.225.12.0/24 maxlen: 24
188.225.13.0/24 maxlen: 24
188.225.14.0/24 maxlen: 24
188.225.22.0/24 maxlen: 24
188.225.23.0/24 maxlen: 24
188.225.24.0/24 maxlen: 24
188.225.19.0/24 maxlen: 24
188.225.20.0/24 maxlen: 24
188.225.21.0/24 maxlen: 24
188.225.18.0/24 maxlen: 24
188.225.29.0/24 maxlen: 24
188.225.30.0/24 maxlen: 24
188.225.31.0/24 maxlen: 24
188.225.26.0/24 maxlen: 24
188.225.27.0/24 maxlen: 24
188.225.28.0/24 maxlen: 24
188.225.25.0/24 maxlen: 24
188.225.32.0/24 maxlen: 24
188.225.36.0/24 maxlen: 24
188.225.37.0/24 maxlen: 24
188.225.38.0/24 maxlen: 24
188.225.33.0/24 maxlen: 24
188.225.34.0/24 maxlen: 24
188.225.35.0/24 maxlen: 24
188.225.43.0/24 maxlen: 24
188.225.44.0/24 maxlen: 24
188.225.40.0/24 maxlen: 24
188.225.41.0/24 maxlen: 24
188.225.42.0/24 maxlen: 24
188.225.39.0/24 maxlen: 24
188.225.47.0/24 maxlen: 24
188.225.45.0/24 maxlen: 24
188.225.46.0/24 maxlen: 24
188.225.57.0/24 maxlen: 24
188.225.58.0/24 maxlen: 24
188.225.56.0/24 maxlen: 24
188.225.59.0/24 maxlen: 24
188.225.60.0/24 maxlen: 24
188.225.61.0/24 maxlen: 24
188.225.62.0/24 maxlen: 24
188.225.63.0/24 maxlen: 24
188.225.8.0/24 maxlen: 24
188.225.9.0/24 maxlen: 24
188.225.10.0/24 maxlen: 24
188.225.11.0/24 maxlen: 24
37.77.104.0/24 maxlen: 24
37.77.105.0/24 maxlen: 24
37.77.106.0/24 maxlen: 24
37.77.107.0/24 maxlen: 24
5.23.48.0/24 maxlen: 24
188.225.78.0/24 maxlen: 24
5.23.51.0/24 maxlen: 24
188.225.75.0/24 maxlen: 24
188.225.72.0/24 maxlen: 24
188.225.73.0/24 maxlen: 24
188.225.74.0/24 maxlen: 24
5.23.49.0/24 maxlen: 24
188.225.76.0/24 maxlen: 24
5.23.50.0/24 maxlen: 24
188.225.77.0/24 maxlen: 24
188.225.80.0/24 maxlen: 24
188.225.81.0/24 maxlen: 24
188.225.85.0/24 maxlen: 24
188.225.82.0/24 maxlen: 24
5.23.55.0/24 maxlen: 24
188.225.83.0/24 maxlen: 24
188.225.84.0/24 maxlen: 24
5.23.52.0/24 maxlen: 24
5.23.54.0/24 maxlen: 24
188.225.79.0/24 maxlen: 24
5.23.53.0/24 maxlen: 24
188.225.86.0/24 maxlen: 24
188.225.87.0/24 maxlen: 24
91.210.170.0/24 maxlen: 24
91.210.171.0/24 maxlen: 24
91.210.168.0/24 maxlen: 24
91.210.169.0/24 maxlen: 24
188.225.40.78/32 maxlen: 32
89.223.124.0/24 maxlen: 24
89.223.125.0/24 maxlen: 24
89.223.121.0/24 maxlen: 24
89.223.122.0/24 maxlen: 24
89.223.123.0/24 maxlen: 24
89.223.120.0/24 maxlen: 24
89.223.126.0/24 maxlen: 24
89.223.127.0/24 maxlen: 24
89.223.64.0/24 maxlen: 24
89.223.68.0/24 maxlen: 24
89.223.69.0/24 maxlen: 24
89.223.70.0/24 maxlen: 24
89.223.71.0/24 maxlen: 24
89.223.65.0/24 maxlen: 24
89.223.66.0/24 maxlen: 24
89.223.67.0/24 maxlen: 24
185.114.246.0/24 maxlen: 24
185.114.244.0/24 maxlen: 24
185.114.245.0/24 maxlen: 24
185.114.247.0/24 maxlen: 24
87.249.38.0/24 maxlen: 24
87.249.43.0/24 maxlen: 24
87.249.44.0/24 maxlen: 24
87.249.41.0/24 maxlen: 24
87.249.49.0/24 maxlen: 24
87.249.54.0/24 maxlen: 24
87.249.53.0/24 maxlen: 24
193.168.3.0/24 maxlen: 24
85.193.81.0/24 maxlen: 24
85.193.82.0/24 maxlen: 24
85.193.83.0/24 maxlen: 24
85.193.84.0/24 maxlen: 24
85.193.80.0/24 maxlen: 24
85.193.89.0/24 maxlen: 24
85.193.88.0/24 maxlen: 24
85.193.90.0/24 maxlen: 24
85.193.91.0/24 maxlen: 24
85.193.86.0/24 maxlen: 24
85.193.87.0/24 maxlen: 24
85.193.95.0/24 maxlen: 24
85.193.92.0/24 maxlen: 24
85.193.93.0/24 maxlen: 24
85.193.94.0/24 maxlen: 24
176.57.210.0/24 maxlen: 24
176.57.211.0/24 maxlen: 24
176.57.212.0/24 maxlen: 24
176.57.213.0/24 maxlen: 24
176.57.208.0/24 maxlen: 24
176.57.209.0/24 maxlen: 24
176.57.217.0/24 maxlen: 24
176.57.218.0/24 maxlen: 24
176.57.219.0/24 maxlen: 24
176.57.214.0/24 maxlen: 24
176.57.215.0/24 maxlen: 24
176.57.216.0/24 maxlen: 24
176.57.221.0/24 maxlen: 24
176.57.220.0/24 maxlen: 24
193.164.149.0/24 maxlen: 24
193.164.150.0/24 maxlen: 24
5.23.48.0/21 maxlen: 21
185.178.44.0/24 maxlen: 24
185.178.45.0/24 maxlen: 24
185.178.46.0/24 maxlen: 24
185.178.47.0/24 maxlen: 24
109.68.214.0/24 maxlen: 24
109.68.215.0/24 maxlen: 24
109.68.212.0/24 maxlen: 24
109.68.213.0/24 maxlen: 24
46.229.212.0/24 maxlen: 24
46.229.213.0/24 maxlen: 24
46.229.215.0/24 maxlen: 24
46.229.214.0/24 maxlen: 24
78.40.219.0/24 maxlen: 24
78.40.216.0/24 maxlen: 24
78.40.217.0/24 maxlen: 24
78.40.218.0/24 maxlen: 24
2a03:6f00:9::/48 maxlen: 48
2a03:6f00:6::/48 maxlen: 48
2a03:6f00:3::/48 maxlen: 48
2a03:6f00::/48 maxlen: 48
2a03:6f00:7::/48 maxlen: 48
2a03:6f00:4::/48 maxlen: 48
2a03:6f01:1::/48 maxlen: 48
2a03:6f00:1::/48 maxlen: 48
2a03:6f00:5::/48 maxlen: 48
2a03:6f00:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920174175 (0x36d8be5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Mar 15 06:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=decd81a9b56d25e29061865c78155456d02b6057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:05:f5:ff:c0:3b:17:c8:2a:63:50:fc:3a:
1e:cb:7e:d6:a2:5a:82:10:b6:51:02:94:b4:53:a3:
95:ec:c3:ea:4e:52:27:a0:05:54:b5:fa:2e:a6:1a:
24:c3:fa:b2:4a:19:6e:11:03:17:f7:56:75:17:e7:
0e:39:c0:c8:aa:bc:ae:32:c1:f8:76:1e:4d:f6:81:
55:ac:b1:d1:21:ed:27:72:d4:b5:86:08:c0:b1:74:
e8:ae:6f:b2:48:38:87:20:d5:e5:66:a5:a2:48:72:
ee:c4:3e:59:d8:db:0e:20:b2:c4:b8:c9:f8:65:dd:
b4:e7:8b:17:a0:af:f4:f1:07:19:57:cf:03:78:f8:
10:bb:54:e1:87:da:8f:2b:0c:a9:85:c0:c0:09:96:
99:24:19:39:98:6a:3a:2b:5d:5b:78:cd:f0:06:dc:
d5:80:e7:1f:83:b6:3b:1b:c7:ab:62:59:cb:ca:dc:
d3:9d:ed:74:d1:ea:27:dc:15:56:6d:dc:4a:05:e2:
fa:c8:ce:3a:fb:75:03:4d:1a:63:07:e7:df:35:38:
5f:42:55:df:e4:5c:29:20:92:2e:ac:02:90:f3:2f:
4c:50:23:cb:d6:23:86:9b:2b:42:4e:4b:8c:80:5c:
37:4d:a9:1e:12:d1:ab:6d:e2:c4:d1:e0:dd:ed:59:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:81:A9:B5:6D:25:E2:90:61:86:5C:78:15:54:56:D0:2B:60:57
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/3s2BqbVtJeKQYYZceBVUVtArYFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.48.0/21
37.77.104.0/22
46.229.212.0/22
78.40.216.0/22
85.193.80.0-85.193.84.255
85.193.86.0-85.193.95.255
87.249.38.0/24
87.249.41.0/24
87.249.43.0-87.249.44.255
87.249.49.0/24
87.249.53.0-87.249.54.255
89.223.64.0/21
89.223.120.0/21
91.210.168.0/22
92.53.96.0/22
92.53.104.0/22
92.53.112.0/20
92.255.76.0/22
92.255.104.0/21
94.228.112.0/20
109.68.212.0/22
176.57.208.0/20
185.104.113.0-185.104.115.255
185.114.244.0/22
185.119.56.0/22
185.178.44.0/22
185.200.240.0/22
188.225.8.0-188.225.47.255
188.225.56.0/21
188.225.72.0-188.225.87.255
193.164.149.0-193.164.150.255
193.168.3.0/24
217.25.88.0-217.25.94.255
IPv6:
2a03:6f00::/45
2a03:6f00:9::/48
2a03:6f01:1::/48
Signature Algorithm: sha256WithRSAEncryption
b6:70:de:37:47:12:3b:6b:cd:2a:fe:3b:55:ce:48:45:73:31:
31:67:df:ce:56:0d:00:f1:b9:1e:70:fa:d7:84:ab:0a:c4:07:
2e:a4:b0:b7:d3:c4:a5:66:2e:a1:6a:6d:c6:84:ce:43:a3:f4:
cb:4a:af:bb:be:5c:3d:d0:aa:2a:25:06:04:3b:41:f5:ed:61:
35:28:05:de:c2:48:8b:bb:5e:9a:0e:8f:4f:89:c3:c9:35:ed:
e9:06:15:3c:ac:bb:40:bf:81:d9:dc:45:6d:55:ce:52:ef:11:
af:76:11:ab:53:62:89:0e:2a:cf:7f:96:22:f1:01:0f:eb:61:
c7:e4:06:99:2d:92:72:27:3d:a8:8f:7f:a3:4d:cf:52:88:df:
3f:74:06:6b:e1:58:66:65:21:69:90:df:00:16:3c:2f:6c:cd:
b3:81:97:b3:43:70:84:dd:15:f0:6c:14:71:5b:52:aa:96:26:
cb:92:c9:da:6d:24:23:0e:cc:20:ec:42:38:e0:30:7f:6d:d5:
ae:27:32:95:08:9e:5c:0f:ae:18:06:75:a4:36:f3:3d:7f:9b:
12:16:59:d0:68:53:7b:fc:90:06:53:1a:3a:a0:4a:72:85:04:
a5:c9:98:75:50:9b:9f:a7:52:c6:8b:57:8a:0e:1b:dc:4e:c0:
05:da:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:49 2023 by rpki-client on console-fra.rpki-client.org