Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/0o01SjA3s4jzvZ5EsBS87-eXrvg.roa
File: 0o01SjA3s4jzvZ5EsBS87-eXrvg.roa (raw, json)
Hash identifier: O96U0PxK5RJrM+aNZ9zevHV2lGRnyUei/WXIYslKmU8=
Subject key identifier: D2:8D:35:4A:30:37:B3:88:F3:BD:9E:44:B0:14:BC:EF:E7:97:AE:F8
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018785D54E0854B31E56E70335AEA584422F
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/0o01SjA3s4jzvZ5EsBS87-eXrvg.roa
Signing time: Sat 15 Apr 2023 16:52:41 +0000
ROA not before: Sat 15 Apr 2023 16:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 16
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.39.0.0/16 maxlen: 16
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 16
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 16
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 16
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 23
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 21
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 16
2.191.0.0/16 maxlen: 16
217.218.0.0/17 maxlen: 17
217.218.0.0/16 maxlen: 16
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:85:d5:4e:08:54:b3:1e:56:e7:03:35:ae:a5:84:42:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 15 16:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d28d354a3037b388f3bd9e44b014bcefe797aef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:a6:0d:15:93:c1:d5:d6:27:c8:13:1b:72:
76:37:4a:58:fa:b9:8d:9c:51:cd:39:6c:78:1f:f3:
bd:8f:ef:18:4a:04:16:ff:a9:31:42:90:2d:05:0f:
86:95:f0:11:65:80:84:1d:a4:a1:32:8c:0a:86:cf:
a2:5e:e7:8b:40:f1:7e:e0:35:9c:78:d3:41:71:e5:
c7:e0:14:4a:c8:92:7c:10:a4:c2:17:d9:34:d7:1d:
43:c5:05:ff:03:00:2f:28:02:a0:5e:c9:df:f4:c5:
1d:ef:85:5d:81:c4:3c:7b:c2:04:5c:8d:a3:bb:99:
e5:dd:fb:b9:e4:7d:2c:69:79:f6:96:00:a0:ec:05:
b8:9d:e6:fe:21:c1:f1:5b:c5:45:39:8f:af:93:36:
8f:f9:02:74:b1:e8:f7:31:4e:1c:87:87:c5:d7:2e:
b8:f2:71:55:67:c5:ca:bf:5f:8d:df:3d:0a:1c:c7:
4e:51:6d:d1:8a:ad:c7:ab:7f:ee:ae:4d:5f:ea:96:
b0:43:c9:6f:1d:41:59:5c:ba:ac:04:e8:f4:67:79:
f8:bd:f3:00:b2:bf:4f:95:d6:34:24:4b:e0:6b:a3:
0b:82:12:da:3d:65:f7:0f:3c:f9:0c:ef:9f:3e:c6:
34:ff:73:16:87:76:81:cc:a3:2a:18:be:db:7b:34:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8D:35:4A:30:37:B3:88:F3:BD:9E:44:B0:14:BC:EF:E7:97:AE:F8
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/0o01SjA3s4jzvZ5EsBS87-eXrvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
86:cd:71:2e:2d:07:99:92:85:4c:f8:1f:28:a9:3f:a7:58:cf:
69:17:42:1c:3a:84:2a:b3:e9:2e:2d:e1:33:60:bd:a4:57:b2:
81:1f:ab:18:c6:96:7b:0e:3a:03:5e:84:9d:35:69:a3:6b:a6:
40:1f:de:2e:5e:03:8d:07:6f:ce:85:6e:10:18:45:b9:63:1a:
9d:b3:a4:d8:d1:24:61:40:26:a3:71:eb:e3:1e:6e:92:78:51:
36:ba:89:a0:a9:9b:81:03:cc:58:ae:39:3c:3e:c8:c2:22:33:
37:91:2a:ea:d0:27:c8:02:4f:d7:e4:b8:3f:19:de:dd:b0:13:
13:52:fd:56:2b:ed:05:f1:8a:c5:ee:d6:95:ae:10:80:69:dd:
a0:0f:f5:c5:65:83:69:57:15:c9:5b:32:86:a7:47:08:7e:31:
85:f1:29:01:d8:5e:82:14:f4:07:ce:8d:88:06:00:e6:db:a2:
54:ee:70:a1:3d:93:ac:fc:4a:43:df:5b:c4:f0:60:93:2b:bb:
48:4d:f0:2b:0a:09:89:4b:a5:0d:63:71:b3:87:47:4d:ba:77:
d8:10:6c:74:32:db:32:e5:9f:8b:54:1a:98:cf:10:e8:79:8e:
7b:ba:f3:9a:47:95:42:c3:ed:85:40:0b:66:ac:21:28:dd:53:
46:6c:ec:8e
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYeF1U4IVLMeVucDNa6lhEIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMwNDE1MTY1MjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjhkMzU0YTMwMzdiMzg4ZjNiZDllNDRiMDE0YmNlZmU3OTdhZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotemDRWTwdXWJ8gTG3J2N0pY+rmN
nFHNOWx4H/O9j+8YSgQW/6kxQpAtBQ+GlfARZYCEHaShMowKhs+iXueLQPF+4DWc
eNNBceXH4BRKyJJ8EKTCF9k01x1DxQX/AwAvKAKgXsnf9MUd74VdgcQ8e8IEXI2j
u5nl3fu55H0saXn2lgCg7AW4neb+IcHxW8VFOY+vkzaP+QJ0sej3MU4ch4fF1y64
8nFVZ8XKv1+N3z0KHMdOUW3Riq3Hq3/urk1f6pawQ8lvHUFZXLqsBOj0Z3n4vfMA
sr9PldY0JEvga6MLghLaPWX3Dzz5DO+fPsY0/3MWh3aBzKMqGL7bezTRGwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFNKNNUowN7OI872eRLAUvO/nl674MB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvMG8wMVNqQTNzNGp6dlo1RXNCUzg3LWVYcnZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAlBAIAATAfAwMEArADAwFO
JgMDAFC/AwMAVbkDBAXDkiADAwHZ2jAPBAIAAjAJAwcAIAFBiAAAMA0GCSqGSIb3
DQEBCwUAA4IBAQCGzXEuLQeZkoVM+B8oqT+nWM9pF0IcOoQqs+kuLeEzYL2kV7KB
H6sYxpZ7DjoDXoSdNWmja6ZAH94uXgONB2/OhW4QGEW5Yxqds6TY0SRhQCajcevj
Hm6SeFE2uomgqZuBA8xYrjk8PsjCIjM3kSrq0CfIAk/X5Lg/Gd7dsBMTUv1WK+0F
8YrF7taVrhCAad2gD/XFZYNpVxXJWzKGp0cIfjGF8SkB2F6CFPQHzo2IBgDm26JU
7nChPZOs/EpD31vE8GCTK7tITfArCgmJS6UNY3Gzh0dNunfYEGx0Mtsy5Z+LVBqY
zxDoeY57uvOaR5VCw+2FQAtmrCEo3VNGbOyO
-----END CERTIFICATE-----
Generated at Mon May 5 13:35:48 2025 by rpki-client