Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/IVUXRV6ynEWYAhhDNvMu222Jhzs.roa
File: IVUXRV6ynEWYAhhDNvMu222Jhzs.roa (raw, json)
Hash identifier: PSnQDBd4zpS2Qsvks7WygYK7Os/CkJcrofI0rsMWUe8=
Subject key identifier: 21:55:17:45:5E:B2:9C:45:98:02:18:43:36:F3:2E:DB:6D:89:87:3B
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 018806F5C286EECEF5A112DB02C1F2700A7D
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/IVUXRV6ynEWYAhhDNvMu222Jhzs.roa
Signing time: Wed 10 May 2023 18:39:09 +0000
ROA not before: Wed 10 May 2023 18:39:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203346
IP address blocks: 188.208.52.0/22 maxlen: 22
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
188.208.48.0/22 maxlen: 22
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
188.208.109.0/24 maxlen: 24
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
93.114.51.0/24 maxlen: 24
93.114.58.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.54.0/24 maxlen: 24
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
86.106.94.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.106.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.116.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
188.213.252.0/22 maxlen: 22
188.213.248.0/22 maxlen: 22
89.32.43.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
176.126.192.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
188.214.95.0/24 maxlen: 24
188.214.94.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
188.172.176.0/20 maxlen: 20
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
193.254.56.0/21 maxlen: 21
93.119.124.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
86.104.212.0/24 maxlen: 24
86.104.213.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
86.104.224.0/23 maxlen: 23
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
86.104.222.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
188.211.167.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
86.104.0.0/23 maxlen: 23
86.104.2.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.42.10.0/24 maxlen: 24
46.102.178.0/23 maxlen: 23
46.102.177.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
37.156.65.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
188.208.222.0/23 maxlen: 23
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
89.41.28.0/23 maxlen: 23
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
31.14.66.0/23 maxlen: 23
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.89.0/24 maxlen: 24
77.81.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:f5:c2:86:ee:ce:f5:a1:12:db:02:c1:f2:70:0a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: May 10 18:39:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=215517455eb29c459802184336f32edb6d89873b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5d:f3:ac:52:83:c7:56:55:52:37:0a:cb:92:
43:c8:62:e9:41:ae:ce:cc:b3:95:ae:d4:ab:93:64:
e8:ce:66:cb:00:0d:a3:b1:05:09:f7:e9:28:0d:77:
55:d4:65:40:a8:75:42:6f:bf:0f:4e:a1:b1:31:d0:
53:6c:9d:51:cd:8c:dc:e6:0f:29:fd:80:62:e0:6f:
bd:e5:fd:09:84:f6:92:1c:33:2c:7b:08:f1:df:a9:
48:78:c5:16:e4:36:48:1e:80:af:c1:e8:c6:49:ea:
12:c6:8f:09:e7:74:5d:9a:9e:d2:7f:e4:47:4d:82:
5c:2a:5e:70:0b:16:9e:21:1a:66:63:56:76:fd:99:
29:4a:1f:c0:35:1e:19:da:77:de:bd:97:bd:70:69:
1d:b4:34:f0:96:46:4f:ad:81:16:e6:c3:81:74:68:
dd:6f:6f:d8:ef:62:d0:ab:b0:ea:58:a1:1a:ae:78:
7b:ff:19:00:18:6d:c9:0a:df:dd:a1:39:f2:d0:a1:
83:50:b9:af:82:e7:88:64:10:9c:3b:56:e3:93:6c:
93:a0:b4:e3:3e:c8:a7:7a:51:df:da:c4:92:50:54:
0c:2a:c5:4e:09:81:05:5f:70:75:a4:99:04:54:56:
db:09:58:bf:bd:fe:c1:f3:cc:0e:d4:f3:e5:98:89:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:17:45:5E:B2:9C:45:98:02:18:43:36:F3:2E:DB:6D:89:87:3B
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/IVUXRV6ynEWYAhhDNvMu222Jhzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.66.0/23
37.156.64.0/23
37.156.173.0/24
46.102.177.0-46.102.179.255
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0/24
86.104.0.0-86.104.2.255
86.104.212.0/23
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.229.0-86.105.230.255
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0-86.106.118.255
86.106.138.0-86.106.141.255
86.106.174.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0-89.35.90.255
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.69.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.207.0/24
89.40.209.0/24
89.41.28.0/23
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0/23
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.51.0-93.114.54.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/24
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.161.0/24
185.80.112.0/22
188.172.176.0/20
188.208.48.0/21
188.208.109.0/24
188.208.222.0/23
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
188.214.94.0/23
188.241.211.0/24
193.30.254.0/24
193.32.66.0/23
193.254.48.0/20
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
97:3b:53:5b:3b:62:10:b9:c5:a4:16:1d:2e:aa:39:da:18:b3:
38:ec:14:5d:93:92:bf:e6:83:5a:65:c8:6f:0f:30:b0:36:15:
5e:91:42:bf:f8:b9:c7:d2:9b:40:b9:67:3e:85:85:d0:13:f4:
6e:45:d8:ad:eb:58:2c:07:6e:28:18:bd:b8:31:17:a7:55:49:
91:9c:28:f6:a4:d3:78:86:f3:a6:0e:5b:a6:61:15:4b:d5:4b:
28:c7:40:a0:bc:72:e5:43:af:d8:b4:3c:3f:a0:d6:b1:46:f2:
6e:d3:06:bf:71:4e:96:c8:04:45:8b:9d:29:ce:2c:09:db:6d:
8b:54:85:6a:da:df:bc:a5:51:eb:5b:e6:4f:d0:b4:5a:7b:78:
70:7f:3c:92:0d:f8:6c:6f:de:d3:fc:f0:5b:22:2d:2c:11:b5:
14:ff:c3:28:a8:a5:4b:74:aa:b8:f0:86:c7:25:eb:72:b8:46:
a6:c4:69:e9:20:85:0f:54:93:34:80:a8:9a:47:e0:32:20:f3:
a3:f0:6a:f1:1b:22:bf:6d:45:36:1e:a8:ed:2e:ab:b1:59:1e:
82:91:13:83:4c:73:32:1b:b4:d9:e0:fc:2a:80:8b:0a:26:dc:
eb:14:5e:c4:c5:1b:ba:fa:9a:f8:f5:91:d1:74:24:3e:85:eb:
6c:10:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:19:18 2025 by rpki-client