Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/CsJHxcsAYMh6lPMSnDp6z6uGJps.roa
File: CsJHxcsAYMh6lPMSnDp6z6uGJps.roa (raw, json)
Hash identifier: 0OXgaIfE9qJh1f2TMaSPAqzfrXyhReVUaEkugetxpxM=
Subject key identifier: 0A:C2:47:C5:CB:00:60:C8:7A:94:F3:12:9C:3A:7A:CF:AB:86:26:9B
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0189B6B00D9249008A35001082E157B3DFD4
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/CsJHxcsAYMh6lPMSnDp6z6uGJps.roa
Signing time: Wed 02 Aug 2023 14:38:58 +0000
ROA not before: Wed 02 Aug 2023 14:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 81.161.12.0/22 maxlen: 22
91.228.119.0/24 maxlen: 24
176.107.64.0/20 maxlen: 24
93.120.112.0/21 maxlen: 21
93.120.124.0/22 maxlen: 22
89.46.112.0/23 maxlen: 24
91.235.166.0/24 maxlen: 24
91.235.167.0/24 maxlen: 24
91.229.6.0/24 maxlen: 24
195.80.142.0/23 maxlen: 24
188.213.233.0/24 maxlen: 24
93.120.64.0/21 maxlen: 21
31.133.192.0/24 maxlen: 24
193.221.82.0/23 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
31.133.196.0/23 maxlen: 23
31.133.194.0/24 maxlen: 24
93.120.75.0/24 maxlen: 24
93.120.72.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
93.120.84.0/24 maxlen: 24
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
91.234.222.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.88.0/23 maxlen: 23
93.120.86.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.92.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
93.120.28.0/23 maxlen: 23
93.120.27.0/24 maxlen: 24
93.120.30.0/24 maxlen: 24
93.120.33.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.46.0/24 maxlen: 24
171.25.223.0/24 maxlen: 24
176.112.84.0/22 maxlen: 22
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
91.246.201.0/24 maxlen: 24
89.45.92.0/23 maxlen: 24
178.159.152.0/21 maxlen: 21
178.159.148.0/22 maxlen: 22
91.233.202.0/23 maxlen: 23
91.240.156.0/22 maxlen: 22
77.232.192.0/23 maxlen: 24
77.232.196.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.204.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
86.104.132.0/23 maxlen: 24
176.124.180.0/22 maxlen: 22
176.118.88.0/22 maxlen: 22
77.232.220.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
91.233.2.0/23 maxlen: 23
91.232.254.0/24 maxlen: 24
89.44.100.0/23 maxlen: 24
91.225.35.0/24 maxlen: 24
91.231.226.0/24 maxlen: 24
91.225.34.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.223.0/24 maxlen: 24
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.76.0/24 maxlen: 24
64.43.80.0/21 maxlen: 21
64.43.88.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
176.110.106.0/24 maxlen: 24
77.36.80.0/21 maxlen: 21
176.110.107.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
85.204.196.0/23 maxlen: 24
77.36.89.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
77.36.96.0/20 maxlen: 20
77.36.92.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
37.97.122.0/23 maxlen: 23
185.9.240.0/22 maxlen: 22
185.9.236.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.111.0.0/22 maxlen: 22
91.239.0.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
188.191.248.0/22 maxlen: 22
91.232.16.0/23 maxlen: 23
91.232.20.0/24 maxlen: 24
31.131.12.0/22 maxlen: 22
193.36.192.0/21 maxlen: 21
193.36.201.0/24 maxlen: 24
193.36.202.0/24 maxlen: 24
176.96.56.0/21 maxlen: 21
91.237.194.0/23 maxlen: 23
77.36.8.0/21 maxlen: 21
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
77.36.30.0/24 maxlen: 24
77.36.28.0/23 maxlen: 23
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
89.42.232.0/23 maxlen: 24
77.36.40.0/21 maxlen: 21
77.36.38.0/23 maxlen: 23
77.36.48.0/22 maxlen: 22
91.236.237.0/24 maxlen: 24
176.116.40.0/21 maxlen: 21
91.223.158.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
31.135.4.0/23 maxlen: 23
31.135.1.0/24 maxlen: 24
31.135.3.0/24 maxlen: 24
31.135.4.0/24 maxlen: 24
31.135.5.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
176.121.96.0/21 maxlen: 21
193.0.190.0/24 maxlen: 24
91.236.77.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.159.0/24 maxlen: 24
91.229.158.0/24 maxlen: 24
89.34.74.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:b0:0d:92:49:00:8a:35:00:10:82:e1:57:b3:df:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Aug 2 14:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ac247c5cb0060c87a94f3129c3a7acfab86269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e8:0a:95:6d:e3:46:8a:85:9e:6c:d6:d5:2f:
91:de:1a:2f:c9:6c:ca:29:91:a1:4c:41:fd:65:ed:
f2:52:f6:f0:93:54:6b:7a:ea:b8:df:13:f6:16:ae:
25:6f:fb:4e:e4:56:15:9a:01:00:9e:f0:79:44:19:
b9:0f:77:65:02:17:e4:58:01:20:b1:23:d7:e6:16:
31:2f:1b:42:7d:52:ef:80:a6:62:f4:48:70:cc:a8:
4a:f3:04:ba:c3:9a:78:20:84:2d:a9:03:4c:d3:28:
52:91:6c:8e:7f:a4:d7:e5:7e:86:c1:8c:75:84:1d:
c2:45:a5:de:13:5a:e9:88:ef:b0:11:61:91:10:29:
e6:5a:69:e2:3b:a8:07:43:33:69:de:41:b7:56:1c:
eb:4c:ad:be:9a:98:6d:4c:91:78:cd:a2:24:1b:34:
e7:6c:94:a6:9a:3e:fb:f4:76:0b:19:55:fc:09:3e:
2a:d8:98:aa:df:e9:2a:3f:af:dd:ee:d4:89:5b:a1:
3d:5a:ce:95:f7:ad:48:11:74:2c:3a:8f:e7:a3:70:
b9:46:ec:44:d6:e4:bb:e8:3a:5c:53:e5:9e:0c:1e:
30:7c:96:ff:98:15:b5:15:d7:81:7b:6b:4b:89:41:
1e:f9:53:14:0e:df:b0:39:47:43:1f:aa:83:4c:71:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C2:47:C5:CB:00:60:C8:7A:94:F3:12:9C:3A:7A:CF:AB:86:26:9B
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/CsJHxcsAYMh6lPMSnDp6z6uGJps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.192.0/21
31.135.1.0/24
31.135.3.0-31.135.5.255
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.76.0/24
64.43.80.0-64.43.91.255
77.36.8.0/21
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.80.0/21
77.36.89.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.223.158.0/24
91.225.34.0/23
91.228.119.0/24
91.229.6.0/24
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.232.20.0/24
91.232.254.0/24
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.235.166.0/23
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.237.194.0/23
91.239.0.0/22
91.239.178.0/24
91.240.156.0/22
91.245.176.0/21
91.246.188.0/22
91.246.196.0/22
91.246.201.0/24
93.120.27.0-93.120.30.255
93.120.33.0/24
93.120.46.0/24
93.120.48.0-93.120.73.255
93.120.75.0-93.120.90.255
93.120.92.0/22
93.120.112.0/21
93.120.124.0/22
171.25.223.0/24
176.96.56.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/23
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.148.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/22
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
193.36.201.0-193.36.202.255
193.221.82.0/23
195.80.142.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:4f:c6:1e:d4:b4:bf:16:02:06:23:4f:3c:1b:e0:90:d6:22:
51:2e:54:a2:71:01:03:5e:c6:11:27:33:60:77:24:ed:b6:40:
1f:8c:ec:a3:58:56:14:10:d5:31:4b:57:c0:2c:e2:e7:e3:0d:
37:99:89:82:ac:f1:ef:4f:02:c3:77:2d:05:56:28:20:bd:16:
da:7c:a1:cd:bd:b7:25:e6:a9:f1:43:4b:c8:08:e2:8f:85:cc:
19:6c:50:2b:91:7f:3b:e9:2c:da:58:e7:e7:b0:60:6a:b5:4d:
fa:5a:5b:fb:9c:6a:f6:82:fe:11:18:68:25:37:dd:ef:21:8f:
c4:1a:e3:75:5b:02:b7:c1:3e:4f:8d:28:f7:d0:e4:aa:ae:0d:
91:e7:e8:6f:a2:b5:a1:5b:af:29:7e:7f:5e:b2:21:b7:03:19:
11:5d:3f:ef:c6:85:91:4d:e4:08:9a:de:93:93:a9:0a:1d:fa:
8c:cb:79:f9:3f:d9:ab:91:72:69:3e:91:6a:2c:5c:ab:9d:f5:
f5:bb:0f:6d:c0:7c:9c:4f:5f:d1:36:0c:8e:73:9f:1a:f8:71:
67:bf:ff:ac:26:9d:0b:c3:80:21:c5:62:6f:6d:d2:52:13:cc:
26:5a:98:40:c6:0f:7f:0e:6c:33:d9:76:ec:a1:a9:eb:07:d6:
b2:7a:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:24:38 2025 by rpki-client