Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/zTBLMBKkSOmxPYYZg_8DSWsIgkA.roa
File: zTBLMBKkSOmxPYYZg_8DSWsIgkA.roa (raw, json)
Hash identifier: 7rI8GmKkkx1XpEEiUXpcViofgbRO9wbpFwRDLSkPODI=
Subject key identifier: CD:30:4B:30:12:A4:48:E9:B1:3D:86:19:83:FF:03:49:6B:08:82:40
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 195E1512
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/zTBLMBKkSOmxPYYZg_8DSWsIgkA.roa
Signing time: Sat 01 Jan 2022 02:57:40 +0000
ROA not before: Sat 01 Jan 2022 02:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56329
IP address blocks: 88.202.240.0/20 maxlen: 20
188.95.40.0/21 maxlen: 21
213.18.128.0/18 maxlen: 18
216.213.128.0/18 maxlen: 18
216.213.172.0/24 maxlen: 24
83.151.200.0/21 maxlen: 21
82.163.184.0/21 maxlen: 21
88.202.128.0/19 maxlen: 19
212.237.220.0/22 maxlen: 22
185.82.156.0/22 maxlen: 22
82.163.144.0/20 maxlen: 20
46.227.144.0/21 maxlen: 21
88.202.192.0/20 maxlen: 20
185.111.224.0/22 maxlen: 22
88.202.232.0/22 maxlen: 22
185.147.88.0/22 maxlen: 22
88.212.164.0/22 maxlen: 22
88.212.168.0/21 maxlen: 21
88.212.176.0/21 maxlen: 21
88.212.184.0/22 maxlen: 22
78.143.192.0/19 maxlen: 19
82.163.252.0/22 maxlen: 22
2a06:61c0::/29 maxlen: 29
2a02:fb8::/32 maxlen: 32
2a00:d200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425596178 (0x195e1512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Jan 1 02:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd304b3012a448e9b13d861983ff03496b088240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:14:b1:e4:e3:7b:97:b8:25:ef:63:d6:ed:
f7:e6:5a:6e:29:35:eb:d9:4c:b0:ec:e5:e1:e9:bc:
69:12:5b:f9:18:1e:71:bc:9c:d0:bb:6e:ea:2a:eb:
0d:d7:80:5f:fe:4f:b5:fc:38:d4:de:4b:8c:eb:1c:
6c:d8:a6:36:4e:bf:b0:96:f6:b4:39:33:aa:47:64:
f8:bc:dc:ab:61:07:a7:e6:1f:60:b9:af:d2:53:c3:
09:e9:7e:20:06:7a:77:e5:8d:b6:e1:14:2a:d7:50:
cd:92:d1:27:82:89:9f:b0:32:bc:9c:8f:a3:30:04:
13:4c:1a:0b:7a:fa:16:6e:25:c0:76:51:15:0a:8d:
7a:17:2c:b3:20:9b:a3:47:45:a0:32:27:57:aa:83:
e7:f1:b4:4d:67:29:d7:c8:26:d0:f0:fa:b0:16:6d:
92:49:48:cc:d4:d9:13:d6:9c:32:7d:97:6e:01:67:
5f:46:1c:cf:44:d8:10:cf:bb:14:de:01:5c:ba:eb:
89:2f:91:8e:2e:c4:94:12:8f:87:17:42:6f:66:0e:
f1:72:0b:fe:94:8e:50:b0:de:ad:48:bf:0f:f0:f4:
bc:c7:40:09:8d:fe:f3:cb:25:5e:b4:45:d1:7e:83:
56:e9:5b:d3:6b:82:3e:7c:1d:0d:28:8a:3d:ed:57:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:4B:30:12:A4:48:E9:B1:3D:86:19:83:FF:03:49:6B:08:82:40
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/zTBLMBKkSOmxPYYZg_8DSWsIgkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.144.0/21
78.143.192.0/19
82.163.144.0/20
82.163.184.0/21
82.163.252.0/22
83.151.200.0/21
88.202.128.0/19
88.202.192.0/20
88.202.232.0/22
88.202.240.0/20
88.212.164.0-88.212.187.255
185.82.156.0/22
185.111.224.0/22
185.147.88.0/22
188.95.40.0/21
212.237.220.0/22
213.18.128.0/18
216.213.128.0/18
IPv6:
2a00:d200::/29
2a02:fb8::/32
2a06:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:ce:f5:33:f6:f3:d6:9d:9e:c8:02:0e:c1:34:fb:bb:aa:bd:
13:f1:d4:a0:c9:33:20:64:42:4b:2e:4a:87:d7:73:09:b8:45:
67:ab:e7:2a:8f:c7:38:f5:59:af:2f:df:25:7e:57:3f:e0:ff:
f1:34:d0:29:d8:90:40:d8:66:90:c7:53:8e:83:00:04:9c:d8:
e6:83:05:e6:68:df:4b:a2:c5:5b:42:d8:80:93:0f:86:44:e7:
57:a5:22:28:f7:03:bf:a6:ce:36:59:8d:b0:6b:2c:75:e2:13:
d2:66:f8:45:12:34:2d:ed:20:0a:0c:7c:d5:e3:6c:32:f3:45:
06:ac:61:80:10:22:6f:e6:96:3a:7a:ef:8f:f5:0d:06:85:46:
04:8c:4e:39:94:16:94:6a:23:0d:f2:38:25:46:1e:fc:0a:04:
15:24:a2:c6:79:ba:46:9f:2f:15:04:6a:2b:67:da:de:2a:c5:
7c:8f:c9:2a:2c:e6:3d:4b:1d:ab:a6:b6:19:32:b0:07:e9:b2:
b1:c6:27:d8:a3:df:51:8c:bb:d8:82:89:34:aa:10:a2:18:0f:
33:60:99:09:8f:35:54:9d:1d:b9:b8:5a:bf:8a:9a:ae:f0:9f:
39:19:dc:81:fa:6f:6b:10:1c:89:4b:66:45:8d:77:19:55:31:
6f:87:99:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:23 2025 by rpki-client