Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/vXHNA5zjxfPe4z3McIQV07yaqxI.roa
File: vXHNA5zjxfPe4z3McIQV07yaqxI.roa (raw, json)
Hash identifier: AIxuwvoOVhOr9DdgZVxHlb+kBOxl5/aJtgqepCEoONc=
Subject key identifier: BD:71:CD:03:9C:E3:C5:F3:DE:E3:3D:CC:70:84:15:D3:BC:9A:AB:12
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 018383E2E1A7E2FC796103579AA2D9A42204
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/vXHNA5zjxfPe4z3McIQV07yaqxI.roa
Signing time: Wed 28 Sep 2022 11:37:07 +0000
ROA not before: Wed 28 Sep 2022 11:37:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9123
IP address blocks: 94.228.112.0/24 maxlen: 24
94.228.117.0/24 maxlen: 24
92.255.104.0/24 maxlen: 24
92.255.105.0/24 maxlen: 24
94.228.118.0/24 maxlen: 24
94.228.113.0/24 maxlen: 24
94.228.114.0/24 maxlen: 24
94.228.115.0/24 maxlen: 24
94.228.116.0/24 maxlen: 24
94.228.120.0/24 maxlen: 24
94.228.124.0/24 maxlen: 24
92.255.110.0/24 maxlen: 24
92.255.111.0/24 maxlen: 24
92.255.109.0/24 maxlen: 24
94.228.125.0/24 maxlen: 24
92.255.107.0/24 maxlen: 24
94.228.119.0/24 maxlen: 24
94.228.121.0/24 maxlen: 24
94.228.122.0/24 maxlen: 24
94.228.123.0/24 maxlen: 24
92.255.108.0/24 maxlen: 24
92.255.106.0/24 maxlen: 24
94.228.127.0/24 maxlen: 24
94.228.126.0/24 maxlen: 24
92.53.97.0/24 maxlen: 24
92.53.98.0/24 maxlen: 24
92.53.96.0/24 maxlen: 24
92.53.104.0/24 maxlen: 24
92.53.105.0/24 maxlen: 24
92.53.99.0/24 maxlen: 24
92.53.112.0/24 maxlen: 24
92.53.106.0/24 maxlen: 24
92.53.107.0/24 maxlen: 24
92.53.113.0/24 maxlen: 24
92.53.114.0/24 maxlen: 24
92.53.118.0/24 maxlen: 24
92.53.115.0/24 maxlen: 24
92.53.116.0/24 maxlen: 24
92.53.117.0/24 maxlen: 24
92.255.76.0/24 maxlen: 24
92.255.77.0/24 maxlen: 24
92.255.78.0/24 maxlen: 24
92.255.79.0/24 maxlen: 24
92.53.125.0/24 maxlen: 24
92.53.121.0/24 maxlen: 24
92.53.122.0/24 maxlen: 24
92.53.123.0/24 maxlen: 24
92.53.124.0/24 maxlen: 24
92.53.119.0/24 maxlen: 24
92.53.120.0/24 maxlen: 24
92.53.126.0/24 maxlen: 24
92.53.127.0/24 maxlen: 24
217.25.88.0/24 maxlen: 24
217.25.89.0/24 maxlen: 24
217.25.90.0/24 maxlen: 24
217.25.91.0/24 maxlen: 24
217.25.92.0/24 maxlen: 24
217.25.93.0/24 maxlen: 24
217.25.94.0/24 maxlen: 24
185.200.240.0/24 maxlen: 24
185.200.241.0/24 maxlen: 24
185.200.242.0/24 maxlen: 24
185.200.243.0/24 maxlen: 24
185.119.58.0/24 maxlen: 24
185.119.56.0/24 maxlen: 24
185.119.57.0/24 maxlen: 24
185.119.59.0/24 maxlen: 24
185.104.113.0/24 maxlen: 24
185.104.114.0/24 maxlen: 24
176.57.222.0/23 maxlen: 24
188.225.15.0/24 maxlen: 24
188.225.16.0/24 maxlen: 24
188.225.17.0/24 maxlen: 24
188.225.12.0/24 maxlen: 24
188.225.13.0/24 maxlen: 24
188.225.14.0/24 maxlen: 24
188.225.22.0/24 maxlen: 24
188.225.23.0/24 maxlen: 24
188.225.24.0/24 maxlen: 24
188.225.19.0/24 maxlen: 24
188.225.20.0/24 maxlen: 24
188.225.21.0/24 maxlen: 24
188.225.18.0/24 maxlen: 24
188.225.29.0/24 maxlen: 24
188.225.30.0/24 maxlen: 24
188.225.31.0/24 maxlen: 24
188.225.26.0/24 maxlen: 24
188.225.27.0/24 maxlen: 24
188.225.28.0/24 maxlen: 24
188.225.25.0/24 maxlen: 24
188.225.32.0/24 maxlen: 24
188.225.36.0/24 maxlen: 24
188.225.37.0/24 maxlen: 24
188.225.38.0/24 maxlen: 24
188.225.33.0/24 maxlen: 24
188.225.34.0/24 maxlen: 24
188.225.35.0/24 maxlen: 24
188.225.43.0/24 maxlen: 24
188.225.44.0/24 maxlen: 24
188.225.40.0/24 maxlen: 24
188.225.41.0/24 maxlen: 24
188.225.42.0/24 maxlen: 24
188.225.39.0/24 maxlen: 24
188.225.47.0/24 maxlen: 24
188.225.45.0/24 maxlen: 24
188.225.46.0/24 maxlen: 24
188.225.57.0/24 maxlen: 24
188.225.58.0/24 maxlen: 24
188.225.56.0/24 maxlen: 24
188.225.59.0/24 maxlen: 24
188.225.61.0/24 maxlen: 24
188.225.62.0/24 maxlen: 24
188.225.63.0/24 maxlen: 24
188.225.8.0/24 maxlen: 24
188.225.9.0/24 maxlen: 24
188.225.10.0/24 maxlen: 24
188.225.11.0/24 maxlen: 24
37.77.104.0/24 maxlen: 24
37.77.105.0/24 maxlen: 24
37.77.106.0/24 maxlen: 24
37.77.107.0/24 maxlen: 24
188.225.73.0/24 maxlen: 24
5.23.48.0/24 maxlen: 24
5.23.51.0/24 maxlen: 24
188.225.78.0/24 maxlen: 24
188.225.72.0/24 maxlen: 24
188.225.74.0/24 maxlen: 24
188.225.75.0/24 maxlen: 24
5.23.49.0/24 maxlen: 24
188.225.76.0/24 maxlen: 24
5.23.50.0/24 maxlen: 24
188.225.77.0/24 maxlen: 24
188.225.81.0/24 maxlen: 24
188.225.85.0/24 maxlen: 24
5.23.55.0/24 maxlen: 24
188.225.82.0/24 maxlen: 24
188.225.83.0/24 maxlen: 24
188.225.84.0/24 maxlen: 24
5.23.52.0/24 maxlen: 24
5.23.54.0/24 maxlen: 24
188.225.79.0/24 maxlen: 24
188.225.80.0/24 maxlen: 24
5.23.53.0/24 maxlen: 24
188.225.86.0/24 maxlen: 24
188.225.87.0/24 maxlen: 24
91.210.170.0/24 maxlen: 24
91.210.171.0/24 maxlen: 24
91.210.168.0/24 maxlen: 24
91.210.169.0/24 maxlen: 24
188.225.40.78/32 maxlen: 32
89.223.124.0/24 maxlen: 24
89.223.125.0/24 maxlen: 24
89.223.121.0/24 maxlen: 24
89.223.122.0/24 maxlen: 24
89.223.123.0/24 maxlen: 24
89.223.120.0/24 maxlen: 24
89.223.126.0/24 maxlen: 24
89.223.127.0/24 maxlen: 24
89.223.64.0/24 maxlen: 24
89.223.68.0/24 maxlen: 24
89.223.69.0/24 maxlen: 24
89.223.70.0/24 maxlen: 24
89.223.71.0/24 maxlen: 24
89.223.65.0/24 maxlen: 24
89.223.66.0/24 maxlen: 24
89.223.67.0/24 maxlen: 24
185.114.246.0/24 maxlen: 24
185.114.244.0/24 maxlen: 24
185.114.245.0/24 maxlen: 24
185.114.247.0/24 maxlen: 24
87.249.38.0/24 maxlen: 24
87.249.43.0/24 maxlen: 24
87.249.44.0/24 maxlen: 24
87.249.41.0/24 maxlen: 24
87.249.49.0/24 maxlen: 24
87.249.54.0/24 maxlen: 24
87.249.53.0/24 maxlen: 24
193.168.3.0/24 maxlen: 24
91.220.109.0/24 maxlen: 24
85.193.85.0/24 maxlen: 24
85.193.81.0/24 maxlen: 24
85.193.82.0/24 maxlen: 24
85.193.83.0/24 maxlen: 24
85.193.84.0/24 maxlen: 24
85.193.80.0/24 maxlen: 24
85.193.89.0/24 maxlen: 24
85.193.88.0/24 maxlen: 24
85.193.90.0/24 maxlen: 24
85.193.91.0/24 maxlen: 24
85.193.86.0/24 maxlen: 24
85.193.87.0/24 maxlen: 24
85.193.95.0/24 maxlen: 24
85.193.93.0/24 maxlen: 24
85.193.94.0/24 maxlen: 24
176.57.210.0/24 maxlen: 24
176.57.211.0/24 maxlen: 24
176.57.212.0/24 maxlen: 24
176.57.213.0/24 maxlen: 24
176.57.208.0/24 maxlen: 24
176.57.209.0/24 maxlen: 24
176.57.217.0/24 maxlen: 24
176.57.218.0/24 maxlen: 24
176.57.219.0/24 maxlen: 24
176.57.214.0/24 maxlen: 24
176.57.215.0/24 maxlen: 24
176.57.216.0/24 maxlen: 24
176.57.221.0/24 maxlen: 24
176.57.220.0/24 maxlen: 24
193.164.152.0/24 maxlen: 24
193.164.149.0/24 maxlen: 24
193.164.150.0/24 maxlen: 24
5.23.48.0/21 maxlen: 21
185.178.44.0/24 maxlen: 24
185.178.45.0/24 maxlen: 24
185.178.46.0/24 maxlen: 24
185.178.47.0/24 maxlen: 24
109.68.214.0/24 maxlen: 24
109.68.215.0/24 maxlen: 24
109.68.212.0/24 maxlen: 24
109.68.213.0/24 maxlen: 24
46.229.212.0/24 maxlen: 24
46.229.213.0/24 maxlen: 24
46.229.215.0/24 maxlen: 24
46.229.214.0/24 maxlen: 24
78.40.219.0/24 maxlen: 24
78.40.216.0/24 maxlen: 24
78.40.217.0/24 maxlen: 24
78.40.218.0/24 maxlen: 24
2a03:6f00:9::/48 maxlen: 48
2a03:6f00:6::/48 maxlen: 48
2a03:6f00:3::/48 maxlen: 48
2a03:6f00::/48 maxlen: 48
2a03:6f00:7::/48 maxlen: 48
2a03:6f00:4::/48 maxlen: 48
2a03:6f01:1::/48 maxlen: 48
2a03:6f00:1::/48 maxlen: 48
2a03:6f00:5::/48 maxlen: 48
2a03:6f00:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:e2:e1:a7:e2:fc:79:61:03:57:9a:a2:d9:a4:22:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Sep 28 11:37:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd71cd039ce3c5f3dee33dcc708415d3bc9aab12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:ce:54:7c:3f:7b:32:10:41:a7:d5:49:88:
eb:70:ea:1c:44:a2:2a:4c:26:98:bb:a1:89:33:ee:
ad:6f:2f:9e:81:f2:ec:88:23:01:d8:97:02:46:a3:
6d:27:8d:cd:8a:b1:04:d1:6a:c3:d8:25:8b:d4:ca:
2c:0a:86:de:bd:60:82:9f:fd:da:11:74:ed:d6:69:
e9:c9:c5:20:9b:f0:b1:80:4e:ff:5d:ac:8d:c1:e9:
de:e1:fd:74:85:98:87:bc:d9:e2:e5:c2:52:9b:cd:
db:28:f3:c8:78:48:77:15:69:27:21:21:55:f2:14:
85:46:f0:6b:d1:51:34:d4:76:3c:2d:27:14:95:a2:
19:11:c2:19:c7:dc:75:80:50:2c:5d:af:9a:f0:b0:
16:d9:fa:d0:ce:70:50:e1:f1:f1:e9:a7:4e:b8:6a:
46:8b:2b:b0:8d:bd:f7:34:c6:1d:ce:c3:9d:eb:49:
a8:34:6f:01:13:cd:ad:57:5d:e6:c3:c0:0f:5e:a8:
bf:cb:41:92:e1:ff:fe:1d:7c:15:0f:2e:12:d4:3c:
8d:5d:4a:de:72:ad:95:f4:60:6b:21:6d:b6:a1:36:
e3:d4:96:d8:96:a6:ba:13:98:4f:ce:af:87:05:a2:
32:81:41:7f:85:7c:5c:40:b3:44:4c:01:3b:ba:c5:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:CD:03:9C:E3:C5:F3:DE:E3:3D:CC:70:84:15:D3:BC:9A:AB:12
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/vXHNA5zjxfPe4z3McIQV07yaqxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.48.0/21
37.77.104.0/22
46.229.212.0/22
78.40.216.0/22
85.193.80.0-85.193.91.255
85.193.93.0-85.193.95.255
87.249.38.0/24
87.249.41.0/24
87.249.43.0-87.249.44.255
87.249.49.0/24
87.249.53.0-87.249.54.255
89.223.64.0/21
89.223.120.0/21
91.210.168.0/22
91.220.109.0/24
92.53.96.0/22
92.53.104.0/22
92.53.112.0/20
92.255.76.0/22
92.255.104.0/21
94.228.112.0/20
109.68.212.0/22
176.57.208.0/20
185.104.113.0-185.104.114.255
185.114.244.0/22
185.119.56.0/22
185.178.44.0/22
185.200.240.0/22
188.225.8.0-188.225.47.255
188.225.56.0/22
188.225.61.0-188.225.63.255
188.225.72.0-188.225.87.255
193.164.149.0-193.164.150.255
193.164.152.0/24
193.168.3.0/24
217.25.88.0-217.25.94.255
IPv6:
2a03:6f00::/45
2a03:6f00:9::/48
2a03:6f01:1::/48
Signature Algorithm: sha256WithRSAEncryption
5e:3f:13:0d:2d:4c:bb:ae:35:04:b6:63:4d:0f:03:eb:01:dd:
94:66:cc:db:ad:5e:d0:a7:f8:12:5d:ee:45:a4:07:55:81:41:
d1:9e:e5:48:0f:7e:39:19:d6:b5:a7:6f:e8:97:ee:4f:16:29:
ce:d2:15:ca:30:43:60:14:8c:bf:93:2d:95:ac:82:86:69:01:
31:d1:a6:9a:17:d9:a4:a9:d5:6f:9a:54:84:84:2d:7d:ec:b5:
f5:2a:3e:96:d9:f0:25:ab:45:35:9b:5f:3d:32:1a:21:39:4d:
2e:cd:11:36:26:00:3a:f2:b0:de:d2:01:fa:48:d4:74:af:c1:
f9:73:25:7a:ca:15:17:24:5c:ff:83:66:be:f9:f1:ac:81:a8:
01:21:1f:28:f1:72:14:8c:4a:56:f3:a3:02:f7:57:d5:20:d4:
0b:4a:e2:d7:90:f0:86:09:83:11:e2:bc:db:28:85:19:e4:56:
fc:4e:d2:7a:a2:fe:68:79:90:c2:5d:bd:f3:9c:a1:92:89:0d:
2d:5d:fa:22:d7:36:e8:83:51:c0:c5:6a:26:59:b5:3a:9e:f3:
df:a8:77:ee:cb:58:f6:1d:98:6c:67:8c:6d:90:e4:98:bd:61:
bd:8c:27:06:e9:57:07:44:a0:80:f6:38:fe:87:dc:ae:4b:fc:
97:42:e5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:41 2023 by rpki-client on console-ams.rpki-client.org