Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pOJ9k8Enn52fiV5ZI7psvlYo0g8.roa
File: pOJ9k8Enn52fiV5ZI7psvlYo0g8.roa (raw, json)
Hash identifier: vv5iHczMyHIerO1QF7Z6SM1JSw3r7Vslz9zmR8p4Fvs=
Subject key identifier: A4:E2:7D:93:C1:27:9F:9D:9F:89:5E:59:23:BA:6C:BE:56:28:D2:0F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01894B4F4095998D014538BC2F9B785B95FB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pOJ9k8Enn52fiV5ZI7psvlYo0g8.roa
Signing time: Wed 12 Jul 2023 18:13:52 +0000
ROA not before: Wed 12 Jul 2023 18:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.21.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:4f:40:95:99:8d:01:45:38:bc:2f:9b:78:5b:95:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 12 18:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4e27d93c1279f9d9f895e5923ba6cbe5628d20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:24:71:e0:67:5a:fa:a3:e6:15:20:99:15:
21:9d:50:0c:e8:c8:8e:0b:ea:70:91:e7:7f:71:15:
55:b8:e5:59:6b:a6:ee:b8:87:10:24:ce:e9:9e:76:
f1:7c:1a:67:6b:89:1b:a4:bd:b6:9c:ca:70:f3:98:
54:89:92:38:9e:c0:e0:81:e5:89:a7:c5:e1:33:18:
4b:7c:bd:21:a7:02:f4:59:85:30:b2:e8:eb:b5:8a:
c3:17:83:f4:70:7a:78:4d:fc:8f:fc:ef:2b:30:df:
9e:be:a5:a5:d4:84:64:5e:96:53:ba:ca:92:4a:02:
f7:88:33:96:64:93:b9:f4:3e:f2:50:ff:95:1a:17:
2c:74:2c:33:31:cc:b8:07:e6:6d:de:7e:d0:b2:0b:
57:d0:ec:53:34:12:2d:cb:db:47:d8:f9:13:45:64:
bd:db:3d:63:a8:19:03:3c:70:f5:82:b2:c9:c0:17:
08:cc:ab:3f:09:14:1b:b8:e2:bd:70:1a:30:18:9d:
6f:78:64:46:9e:b6:b1:02:ab:42:d4:74:5f:9f:84:
2f:e4:03:13:63:15:c3:b2:56:99:b0:f2:04:dc:68:
fd:26:f9:a0:4f:5c:b9:37:36:e2:4f:a4:9c:d2:c7:
39:27:27:f9:b8:6d:25:5d:59:70:ff:2c:4a:ff:de:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:7D:93:C1:27:9F:9D:9F:89:5E:59:23:BA:6C:BE:56:28:D2:0F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pOJ9k8Enn52fiV5ZI7psvlYo0g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.61.0/24
84.32.79.0/24
84.32.83.0/24
84.32.94.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.158.0/23
84.32.174.0/23
84.32.178.0/23
84.32.213.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.247.255
84.32.249.0-84.32.254.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0/24
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.61.0-88.216.65.255
88.216.92.0/23
88.216.100.0/23
88.216.104.0/23
88.216.107.0/24
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
00:0b:29:64:55:eb:85:9a:7e:3d:4c:85:19:9d:7d:88:82:d1:
8b:47:86:03:57:ee:bf:ac:3d:9e:40:cc:0f:76:b2:4b:8b:67:
f6:17:6c:1c:d4:12:4d:8c:c0:c4:cf:a4:fe:a5:58:dc:b0:b9:
86:4a:15:70:7e:b1:a6:bc:a7:a4:b9:75:53:23:e5:ac:fa:8c:
8a:7c:ef:3e:8d:d1:63:4d:fa:f1:72:71:e8:08:fb:7e:b4:7f:
b3:c2:d4:5d:53:4d:61:48:53:55:be:73:aa:fd:e1:8d:6c:62:
49:48:32:39:ac:69:02:f2:12:ab:68:3b:d3:25:1c:eb:20:7a:
e7:59:c1:f1:10:48:3a:f2:d7:0c:6a:09:3d:4d:ae:87:67:4b:
5a:d9:b1:14:f1:7a:48:1e:13:db:89:65:c5:10:35:00:8f:fd:
99:ce:f2:fc:79:60:1e:56:b7:28:c3:d5:25:ec:0a:28:ae:b6:
d3:81:3d:a2:f1:19:93:31:40:b9:f5:3c:2a:3e:68:a9:b0:ae:
7f:05:3e:55:66:de:48:42:d5:4a:3f:02:ef:1b:ad:9b:ec:2d:
dc:a3:21:87:7e:d7:b3:e4:36:bc:fd:59:4d:04:65:c0:a2:c7:
9e:81:43:d1:bf:41:78:f3:12:52:36:96:aa:ce:3a:36:55:fc:
0a:60:a6:ce
-----BEGIN CERTIFICATE-----
MIIGnzCCBYegAwIBAgISAYlLT0CVmY0BRTi8L5t4W5X7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNzEyMTgxMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGUyN2Q5M2MxMjc5ZjlkOWY4OTVlNTkyM2JhNmNiZTU2MjhkMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox4kceBnWvqj5hUgmRUhnVAM6MiO
C+pwked/cRVVuOVZa6buuIcQJM7pnnbxfBpna4kbpL22nMpw85hUiZI4nsDggeWJ
p8XhMxhLfL0hpwL0WYUwsujrtYrDF4P0cHp4TfyP/O8rMN+evqWl1IRkXpZTusqS
SgL3iDOWZJO59D7yUP+VGhcsdCwzMcy4B+Zt3n7QsgtX0OxTNBIty9tH2PkTRWS9
2z1jqBkDPHD1grLJwBcIzKs/CRQbuOK9cBowGJ1veGRGnraxAqtC1HRfn4Qv5AMT
YxXDslaZsPIE3Gj9JvmgT1y5NzbiT6Sc0sc5Jyf5uG0lXVlw/yxK/944eQIDAQAB
o4IDqzCCA6cwHQYDVR0OBBYEFKTifZPBJ5+dn4leWSO6bL5WKNIPMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvcE9KOWs4RW5uNTJmaVY1Wkk3cHN2bFlvMGc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBvwYIKwYBBQUHAQcBAf8EggGuMIIBqjCCAaYEAgABMIIB
ngMEAVQgCAMEAFQgDjAMAwQCVCAUAwQBVCAcAwQAVCAfMAwDBABUIC0DBABUIC4D
BAFUIDIDBABUIDoDBABUID0DBABUIE8DBABUIFMDBABUIF4wDAMEAlQgbAMEAFQg
bgMEAlQglAMEAFQgmQMEAFQgmwMEAVQgngMEAVQgrgMEAVQgsjAMAwQAVCDVAwQD
VCDQAwQAVCDbAwQAVCDdMAwDBAVUIOADBABUIOIDBABUIOQwDAMEAFQg5wMEAFQg
6AMEAVQg6jAMAwQAVCDvAwQDVCDwMAwDBABUIPkDBABUIP4DBAJY2AADBABY2BAD
BAFY2BYDBABY2CADBABY2CMDBABY2CgDBABY2CoDBAFY2CwDBABY2DowDAMEAFjY
PQMEAVjYQAMEAVjYXAMEAVjYZAMEAVjYaAMEAFjYazAMAwQAWNhtAwQEWNhgAwQA
WNiAMAwDBAFY2IIDBABY2IQDBAFY2IYDBABY2LQDBABY2LcDBAFY2LwDBABY2MUD
BAJY2NQDBABY2NwDBABY2N4wDAMEAljY7AMEA1jY8DANBgkqhkiG9w0BAQsFAAOC
AQEAAAspZFXrhZp+PUyFGZ19iILRi0eGA1fuv6w9nkDMD3ayS4tn9hdsHNQSTYzA
xM+k/qVY3LC5hkoVcH6xprynpLl1UyPlrPqMinzvPo3RY0368XJx6Aj7frR/s8LU
XVNNYUhTVb5zqv3hjWxiSUgyOaxpAvISq2g70yUc6yB651nB8RBIOvLXDGoJPU2u
h2dLWtmxFPF6SB4T24llxRA1AI/9mc7y/HlgHla3KMPVJewKKK6204E9ovEZkzFA
ufU8Kj5oqbCufwU+VWbeSELVSj8C7xutm+wt3KMhh37Xs+Q2vP1ZTQRlwKLHnoFD
0b9BePMSUjaWqs46NlX8CmCmzg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:06:32 2025 by rpki-client