Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212235.roa
File: AS212235.roa (raw, json)
Hash identifier: MkXNjEuMaSlUO/qjdwFR8WtQSX7uIxnjF5to1+CM/ao=
Subject key identifier: 22:29:AF:2D:10:78:C3:B4:67:FC:71:BE:83:91:CD:89:05:DE:7F:A4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0EDB59BB432312D3B1E512CD0A6F784CDD96DDFB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212235.roa
Signing time: Fri 25 Aug 2023 09:30:30 +0000
ROA not before: Fri 25 Aug 2023 09:25:30 +0000
ROA not after: Fri 23 Aug 2024 09:30:30 +0000
asID: 212235
IP address blocks: 45.137.127.0/24 maxlen: 24
179.61.142.0/24 maxlen: 24
179.61.161.0/24 maxlen: 24
179.61.164.0/24 maxlen: 24
179.61.211.0/24 maxlen: 24
181.214.18.0/24 maxlen: 24
181.214.20.0/24 maxlen: 24
181.214.22.0/24 maxlen: 24
181.214.24.0/24 maxlen: 24
181.214.26.0/24 maxlen: 24
181.214.30.0/24 maxlen: 24
181.214.38.0/24 maxlen: 24
181.214.40.0/24 maxlen: 24
181.214.46.0/24 maxlen: 24
181.214.50.0/24 maxlen: 24
181.214.74.0/24 maxlen: 24
181.214.85.0/24 maxlen: 24
181.214.118.0/24 maxlen: 24
181.214.141.0/24 maxlen: 24
181.214.168.0/24 maxlen: 24
181.214.169.0/24 maxlen: 24
181.214.171.0/24 maxlen: 24
181.214.183.0/24 maxlen: 24
181.214.187.0/24 maxlen: 24
181.214.190.0/24 maxlen: 24
181.214.191.0/24 maxlen: 24
181.214.232.0/24 maxlen: 24
181.215.2.0/24 maxlen: 24
181.215.8.0/24 maxlen: 24
181.215.13.0/24 maxlen: 24
181.215.17.0/24 maxlen: 24
181.215.20.0/24 maxlen: 24
181.215.21.0/24 maxlen: 24
181.215.27.0/24 maxlen: 24
181.215.33.0/24 maxlen: 24
181.215.35.0/24 maxlen: 24
181.215.42.0/24 maxlen: 24
181.215.43.0/24 maxlen: 24
181.215.50.0/24 maxlen: 24
181.215.51.0/24 maxlen: 24
181.215.53.0/24 maxlen: 24
181.215.72.0/24 maxlen: 24
181.215.87.0/24 maxlen: 24
181.215.93.0/24 maxlen: 24
181.215.142.0/24 maxlen: 24
181.215.143.0/24 maxlen: 24
181.215.162.0/24 maxlen: 24
181.215.174.0/24 maxlen: 24
181.215.191.0/24 maxlen: 24
181.215.218.0/24 maxlen: 24
181.215.220.0/24 maxlen: 24
181.215.221.0/24 maxlen: 24
181.215.222.0/24 maxlen: 24
181.215.232.0/24 maxlen: 24
181.215.234.0/24 maxlen: 24
185.139.236.0/24 maxlen: 24
185.143.230.0/24 maxlen: 24
185.173.34.0/24 maxlen: 24
185.174.60.0/24 maxlen: 24
185.174.61.0/24 maxlen: 24
191.96.7.0/24 maxlen: 24
191.96.15.0/24 maxlen: 24
191.96.17.0/24 maxlen: 24
191.96.33.0/24 maxlen: 24
191.96.40.0/24 maxlen: 24
191.96.60.0/24 maxlen: 24
191.96.68.0/24 maxlen: 24
191.96.82.0/24 maxlen: 24
191.96.84.0/24 maxlen: 24
191.96.85.0/24 maxlen: 24
191.96.86.0/24 maxlen: 24
191.96.87.0/24 maxlen: 24
191.96.118.0/24 maxlen: 24
191.96.123.0/24 maxlen: 24
191.96.124.0/24 maxlen: 24
191.96.129.0/24 maxlen: 24
191.96.132.0/24 maxlen: 24
191.96.135.0/24 maxlen: 24
191.96.142.0/24 maxlen: 24
191.96.154.0/24 maxlen: 24
191.96.183.0/24 maxlen: 24
191.96.193.0/24 maxlen: 24
191.96.203.0/24 maxlen: 24
191.96.220.0/24 maxlen: 24
191.96.228.0/24 maxlen: 24
191.96.248.0/24 maxlen: 24
191.96.253.0/24 maxlen: 24
191.101.17.0/24 maxlen: 24
191.101.19.0/24 maxlen: 24
191.101.28.0/24 maxlen: 24
191.101.69.0/24 maxlen: 24
191.101.84.0/24 maxlen: 24
191.101.91.0/24 maxlen: 24
191.101.100.0/24 maxlen: 24
191.101.138.0/24 maxlen: 24
191.101.139.0/24 maxlen: 24
191.101.146.0/24 maxlen: 24
191.101.147.0/24 maxlen: 24
191.101.162.0/24 maxlen: 24
191.101.178.0/24 maxlen: 24
191.101.185.0/24 maxlen: 24
191.101.194.0/24 maxlen: 24
191.101.195.0/24 maxlen: 24
191.101.199.0/24 maxlen: 24
191.101.201.0/24 maxlen: 24
191.101.221.0/24 maxlen: 24
191.101.222.0/24 maxlen: 24
191.101.245.0/24 maxlen: 24
191.101.249.0/24 maxlen: 24
191.101.251.0/24 maxlen: 24
193.7.201.0/24 maxlen: 24
193.31.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:db:59:bb:43:23:12:d3:b1:e5:12:cd:0a:6f:78:4c:dd:96:dd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 25 09:25:30 2023 GMT
Not After : Aug 23 09:30:30 2024 GMT
Subject: CN=2229AF2D1078C3B467FC71BE8391CD8905DE7FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a5:be:d6:59:8a:cb:c6:a9:40:51:88:16:81:
b1:52:1c:85:31:ad:2c:99:e4:df:0d:82:36:f5:a6:
2d:fa:d3:04:46:2a:72:27:84:97:18:dd:cf:11:cb:
23:a2:f5:dc:ea:d8:33:94:10:be:e4:20:a8:57:75:
80:b1:d8:20:74:d5:d6:62:b3:55:bd:2e:b7:27:00:
1a:f9:99:02:4e:88:c3:c3:5f:d8:ac:f2:1f:90:d9:
54:28:22:59:eb:a6:2b:79:f7:55:57:27:45:78:37:
d1:de:d1:a7:6f:c3:0e:b6:2b:53:aa:ed:f8:d6:c4:
ed:e7:38:bc:f5:47:e9:89:33:be:3e:43:34:aa:81:
59:60:61:c1:ad:cb:b2:4f:2c:6e:21:a7:e1:e2:c5:
9f:ee:7d:81:48:69:6f:1d:e2:b7:ca:6c:f8:d4:5e:
b7:ef:b9:9c:1b:9f:22:38:9c:76:46:59:0c:40:c6:
3a:98:29:b0:e1:82:5d:b3:35:3e:2e:2d:bc:6d:e4:
9f:b6:1a:fe:e7:36:f8:7f:b6:33:ac:19:f7:ce:28:
fb:22:67:88:10:be:19:61:d5:1c:5a:d3:49:d5:d3:
b2:60:d9:de:b0:ca:fd:ad:5b:0d:db:4f:b6:79:69:
65:6e:1a:0b:54:40:f8:6e:1c:fd:81:4a:57:35:36:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:AF:2D:10:78:C3:B4:67:FC:71:BE:83:91:CD:89:05:DE:7F:A4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.127.0/24
179.61.142.0/24
179.61.161.0/24
179.61.164.0/24
179.61.211.0/24
181.214.18.0/24
181.214.20.0/24
181.214.22.0/24
181.214.24.0/24
181.214.26.0/24
181.214.30.0/24
181.214.38.0/24
181.214.40.0/24
181.214.46.0/24
181.214.50.0/24
181.214.74.0/24
181.214.85.0/24
181.214.118.0/24
181.214.141.0/24
181.214.168.0/23
181.214.171.0/24
181.214.183.0/24
181.214.187.0/24
181.214.190.0/23
181.214.232.0/24
181.215.2.0/24
181.215.8.0/24
181.215.13.0/24
181.215.17.0/24
181.215.20.0/23
181.215.27.0/24
181.215.33.0/24
181.215.35.0/24
181.215.42.0/23
181.215.50.0/23
181.215.53.0/24
181.215.72.0/24
181.215.87.0/24
181.215.93.0/24
181.215.142.0/23
181.215.162.0/24
181.215.174.0/24
181.215.191.0/24
181.215.218.0/24
181.215.220.0-181.215.222.255
181.215.232.0/24
181.215.234.0/24
185.139.236.0/24
185.143.230.0/24
185.173.34.0/24
185.174.60.0/23
191.96.7.0/24
191.96.15.0/24
191.96.17.0/24
191.96.33.0/24
191.96.40.0/24
191.96.60.0/24
191.96.68.0/24
191.96.82.0/24
191.96.84.0/22
191.96.118.0/24
191.96.123.0-191.96.124.255
191.96.129.0/24
191.96.132.0/24
191.96.135.0/24
191.96.142.0/24
191.96.154.0/24
191.96.183.0/24
191.96.193.0/24
191.96.203.0/24
191.96.220.0/24
191.96.228.0/24
191.96.248.0/24
191.96.253.0/24
191.101.17.0/24
191.101.19.0/24
191.101.28.0/24
191.101.69.0/24
191.101.84.0/24
191.101.91.0/24
191.101.100.0/24
191.101.138.0/23
191.101.146.0/23
191.101.162.0/24
191.101.178.0/24
191.101.185.0/24
191.101.194.0/23
191.101.199.0/24
191.101.201.0/24
191.101.221.0-191.101.222.255
191.101.245.0/24
191.101.249.0/24
191.101.251.0/24
193.7.201.0/24
193.31.43.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0e:76:01:b4:b7:c3:59:cd:74:2f:ef:8d:73:39:cc:69:fc:
94:e6:04:bb:38:71:b8:8e:19:9a:7c:a5:83:d0:fe:dd:37:41:
5a:f7:7c:b3:8e:ef:84:ab:7b:42:18:90:f5:f4:99:04:13:09:
f3:bd:80:63:5d:9c:86:e3:6b:24:17:47:e4:72:77:02:0e:01:
86:3e:bc:cb:54:cc:95:58:0b:80:66:aa:3f:23:71:57:b8:8e:
17:3e:ac:3b:6c:8a:9a:de:0a:dc:c3:eb:10:27:b7:73:33:d7:
23:1c:09:79:cb:0d:09:a1:0b:6a:e3:1f:d7:1b:75:fd:da:56:
b8:ce:7a:c3:b5:d2:5a:a9:3b:34:f3:4a:d1:a2:be:78:16:f0:
dd:ec:c7:55:94:b1:42:3e:e7:67:3d:e3:90:46:08:a6:8c:3e:
06:91:36:85:1b:8a:4d:6a:6a:37:5e:2c:83:9a:88:48:fc:4e:
ea:0a:59:9d:c2:2c:47:4b:fe:b9:46:df:be:15:0b:84:94:53:
f8:f9:de:69:2a:18:01:4c:e1:4c:d4:ea:b5:1a:4c:35:f0:e5:
62:15:e9:cb:be:7b:55:62:29:3e:05:15:35:b4:2c:ef:7f:1c:
66:63:a2:7c:9f:6c:68:1f:ae:90:18:72:3e:85:64:c3:4d:aa:
59:f9:ad:fd
-----BEGIN CERTIFICATE-----
MIIHVjCCBj6gAwIBAgIUDttZu0MjEtOx5RLNCm94TN2W3fswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA4MjUwOTI1MzBaFw0yNDA4MjMwOTMwMzBaMDMxMTAvBgNV
BAMTKDIyMjlBRjJEMTA3OEMzQjQ2N0ZDNzFCRTgzOTFDRDg5MDVERTdGQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzpb7WWYrLxqlAUYgWgbFSHIUx
rSyZ5N8Ngjb1pi360wRGKnInhJcY3c8RyyOi9dzq2DOUEL7kIKhXdYCx2CB01dZi
s1W9LrcnABr5mQJOiMPDX9is8h+Q2VQoIlnrpit591VXJ0V4N9He0advww62K1Oq
7fjWxO3nOLz1R+mJM74+QzSqgVlgYcGty7JPLG4hp+HixZ/ufYFIaW8d4rfKbPjU
XrfvuZwbnyI4nHZGWQxAxjqYKbDhgl2zNT4uLbxt5J+2Gv7nNvh/tjOsGffOKPsi
Z4gQvhlh1Rxa00nV07Jg2d6wyv2tWw3bT7Z5aWVuGgtUQPhuHP2BSlc1NgoPAgMB
AAGjggRgMIIEXDAdBgNVHQ4EFgQUIimvLRB4w7Rn/HG+g5HNiQXef6QwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEyMjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIICcwYIKwYBBQUHAQcBAf8EggJiMIICXjCCAloEAgAB
MIICUgMEAC2JfwMEALM9jgMEALM9oQMEALM9pAMEALM90wMEALXWEgMEALXWFAME
ALXWFgMEALXWGAMEALXWGgMEALXWHgMEALXWJgMEALXWKAMEALXWLgMEALXWMgME
ALXWSgMEALXWVQMEALXWdgMEALXWjQMEAbXWqAMEALXWqwMEALXWtwMEALXWuwME
AbXWvgMEALXW6AMEALXXAgMEALXXCAMEALXXDQMEALXXEQMEAbXXFAMEALXXGwME
ALXXIQMEALXXIwMEAbXXKgMEAbXXMgMEALXXNQMEALXXSAMEALXXVwMEALXXXQME
AbXXjgMEALXXogMEALXXrgMEALXXvwMEALXX2jAMAwQCtdfcAwQAtdfeAwQAtdfo
AwQAtdfqAwQAuYvsAwQAuY/mAwQAua0iAwQBua48AwQAv2AHAwQAv2APAwQAv2AR
AwQAv2AhAwQAv2AoAwQAv2A8AwQAv2BEAwQAv2BSAwQCv2BUAwQAv2B2MAwDBAC/
YHsDBAC/YHwDBAC/YIEDBAC/YIQDBAC/YIcDBAC/YI4DBAC/YJoDBAC/YLcDBAC/
YMEDBAC/YMsDBAC/YNwDBAC/YOQDBAC/YPgDBAC/YP0DBAC/ZREDBAC/ZRMDBAC/
ZRwDBAC/ZUUDBAC/ZVQDBAC/ZVsDBAC/ZWQDBAG/ZYoDBAG/ZZIDBAC/ZaIDBAC/
ZbIDBAC/ZbkDBAG/ZcIDBAC/ZccDBAC/ZckwDAMEAL9l3QMEAL9l3gMEAL9l9QME
AL9l+QMEAL9l+wMEAMEHyQMEAMEfKzANBgkqhkiG9w0BAQsFAAOCAQEAEQ52AbS3
w1nNdC/vjXM5zGn8lOYEuzhxuI4Zmnylg9D+3TdBWvd8s47vhKt7QhiQ9fSZBBMJ
872AY12chuNrJBdH5HJ3Ag4Bhj68y1TMlVgLgGaqPyNxV7iOFz6sO2yKmt4K3MPr
ECe3czPXIxwJecsNCaELauMf1xt1/dpWuM56w7XSWqk7NPNK0aK+eBbw3ezHVZSx
Qj7nZz3jkEYIpow+BpE2hRuKTWpqN14sg5qISPxO6gpZncIsR0v+uUbfvhULhJRT
+PneaSoYAUzhTNTqtRpMNfDlYhXpy757VWIpPgUVNbQs738cZmOifJ9saB+ukBhy
PoVkw02qWfmt/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 5 03:26:51 2025 by rpki-client