Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8sfiAOwqccoUAxR7l9K_IRAjrpE.roa
File: 8sfiAOwqccoUAxR7l9K_IRAjrpE.roa (raw, json)
Hash identifier: kNBliAvROov3E6AJWZeKMyAs9H1aJVYt8IkIeptw19w=
Subject key identifier: F2:C7:E2:00:EC:2A:71:CA:14:03:14:7B:97:D2:BF:21:10:23:AE:91
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0189F83A785053139057C151AFFAA5F17EA5
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8sfiAOwqccoUAxR7l9K_IRAjrpE.roa
Signing time: Tue 15 Aug 2023 08:05:28 +0000
ROA not before: Tue 15 Aug 2023 08:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.205.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.202.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:3a:78:50:53:13:90:57:c1:51:af:fa:a5:f1:7e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 15 08:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2c7e200ec2a71ca1403147b97d2bf211023ae91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:e9:2a:8a:93:ec:57:e0:e3:01:19:c2:75:
92:73:32:93:6e:9d:aa:9f:80:da:93:d0:c7:97:99:
b1:f0:63:f4:95:c6:3f:49:23:85:62:4f:71:9e:44:
82:27:f6:b3:53:14:25:40:da:ff:56:6e:d8:00:1a:
a4:8b:54:f1:bd:bd:f9:1e:7e:70:39:73:35:5b:5e:
aa:1d:eb:c9:bf:79:fc:fa:75:b4:17:72:52:bd:95:
f6:c7:88:50:6e:1f:7d:99:aa:1a:9c:70:f2:85:67:
b4:2b:6a:58:35:3e:98:84:1f:34:45:5f:69:66:58:
1b:f3:55:88:70:5e:9d:7c:f7:e3:66:06:40:28:dc:
b2:65:fa:85:70:78:12:ab:34:ac:a4:4d:9a:3a:c6:
79:89:89:c7:63:c9:8d:fa:66:bd:5e:81:e2:42:0e:
0b:27:95:69:71:96:2e:e3:e0:72:ff:75:ca:9c:6a:
c3:7b:ff:06:39:6e:64:86:23:a8:2b:90:0e:8d:09:
5a:80:27:d3:a6:db:40:95:6e:68:cc:c9:fe:f2:cf:
46:e7:46:aa:3a:89:97:2d:4b:0e:f2:66:e6:66:ed:
30:5d:ec:66:52:03:ec:73:cc:d2:55:bd:78:e1:6a:
3f:96:02:06:b2:ee:61:24:96:ac:2f:2c:56:5d:80:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:E2:00:EC:2A:71:CA:14:03:14:7B:97:D2:BF:21:10:23:AE:91
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8sfiAOwqccoUAxR7l9K_IRAjrpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:a8:2b:8d:8d:da:e9:4d:76:0d:fa:1b:64:1d:45:9d:d5:fa:
b1:06:bb:89:17:39:b9:78:e4:09:98:57:92:eb:c2:75:b8:f8:
a3:72:f1:09:7c:98:15:4d:4f:d7:c7:0a:50:7e:38:10:50:7e:
e5:11:66:e9:70:e5:39:c1:ba:d1:2b:61:06:9a:72:02:ff:42:
62:fc:9e:83:4a:93:16:a9:4e:34:57:c0:84:69:29:d2:e5:f8:
5a:90:b6:d1:05:b4:44:6f:7b:0f:df:91:57:fd:d1:76:0f:ee:
56:68:00:c4:83:29:a0:56:d6:57:c8:36:2f:a2:3e:f3:8b:54:
4d:8d:71:59:16:f7:7b:d1:d4:93:81:68:29:0c:85:a9:06:b4:
12:d7:11:9b:45:97:09:11:06:aa:b6:56:81:a1:83:c7:71:a7:
91:87:a5:90:ff:71:a8:87:53:7d:bd:a6:89:cd:0f:cb:25:c6:
b0:76:06:a7:7c:e4:43:ff:da:37:6c:59:1d:7c:51:9c:d4:27:
31:72:3e:4c:e5:6f:9c:c5:bc:96:20:9f:ac:c2:0c:4b:7a:d2:
1a:0f:ab:67:9a:8c:ff:e7:33:25:5d:bd:49:de:10:97:ed:b8:
5f:7a:36:23:4a:b7:e9:2a:90:72:9d:90:f6:34:fe:94:b3:24:
96:a4:f1:0e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYn4OnhQUxOQV8FRr/ql8X6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwODE1MDgwNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmM3ZTIwMGVjMmE3MWNhMTQwMzE0N2I5N2QyYmYyMTEwMjNhZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1bpKoqT7Ffg4wEZwnWSczKTbp2q
n4Dak9DHl5mx8GP0lcY/SSOFYk9xnkSCJ/azUxQlQNr/Vm7YABqki1Txvb35Hn5w
OXM1W16qHevJv3n8+nW0F3JSvZX2x4hQbh99maoanHDyhWe0K2pYNT6YhB80RV9p
Zlgb81WIcF6dfPfjZgZAKNyyZfqFcHgSqzSspE2aOsZ5iYnHY8mN+ma9XoHiQg4L
J5VpcZYu4+By/3XKnGrDe/8GOW5khiOoK5AOjQlagCfTpttAlW5ozMn+8s9G50aq
OomXLUsO8mbmZu0wXexmUgPsc8zSVb144Wo/lgIGsu5hJJasLyxWXYAd8QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPLH4gDsKnHKFAMUe5fSvyEQI66RMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvOHNmaUFPd3FjY29VQXhSN2w5S19JUkFqcnBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHVYWAAwQC
uSkAMA0EAgACMAcDBQMqBIfAMA0GCSqGSIb3DQEBCwUAA4IBAQCWqCuNjdrpTXYN
+htkHUWd1fqxBruJFzm5eOQJmFeS68J1uPijcvEJfJgVTU/XxwpQfjgQUH7lEWbp
cOU5wbrRK2EGmnIC/0Ji/J6DSpMWqU40V8CEaSnS5fhakLbRBbREb3sP35FX/dF2
D+5WaADEgymgVtZXyDYvoj7zi1RNjXFZFvd70dSTgWgpDIWpBrQS1xGbRZcJEQaq
tlaBoYPHcaeRh6WQ/3Goh1N9vaaJzQ/LJcawdganfORD/9o3bFkdfFGc1Ccxcj5M
5W+cxbyWIJ+swgxLetIaD6tnmoz/5zMlXb1J3hCX7bhfejYjSrfpKpBynZD2NP6U
sySWpPEO
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:36:54 2025 by rpki-client