Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/ml8PZlCTEoxKnDz8tivkzfuNTbA.roa
File: ml8PZlCTEoxKnDz8tivkzfuNTbA.roa (raw, json)
Hash identifier: gmXFDwIoOmn7HvTEus13YBIK18hSl8a6SfJR9LkaM/M=
Subject key identifier: 9A:5F:0F:66:50:93:12:8C:4A:9C:3C:FC:B6:2B:E4:CD:FB:8D:4D:B0
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 018B480F04CC74C80D7BFE740AE7E0301181
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/ml8PZlCTEoxKnDz8tivkzfuNTbA.roa
Signing time: Thu 19 Oct 2023 13:10:25 +0000
ROA not before: Thu 19 Oct 2023 13:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39835
IP address blocks: 81.20.112.0/20 maxlen: 24
5.34.224.0/21 maxlen: 24
5.34.226.0/24 maxlen: 24
188.74.32.0/22 maxlen: 24
188.74.32.0/20 maxlen: 24
188.74.36.0/24 maxlen: 24
188.74.37.0/24 maxlen: 24
188.74.38.0/24 maxlen: 24
188.74.44.0/22 maxlen: 24
185.75.150.0/24 maxlen: 24
185.75.148.0/24 maxlen: 24
185.75.149.0/24 maxlen: 24
2a03:4b20::/29 maxlen: 40
2a03:6880::/32 maxlen: 32
2a03:4b20:f000::/36 maxlen: 36
2a03:4b20::/32 maxlen: 32
2a03:4b21::/32 maxlen: 32
2a03:4b22::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:0f:04:cc:74:c8:0d:7b:fe:74:0a:e7:e0:30:11:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Oct 19 13:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a5f0f665093128c4a9c3cfcb62be4cdfb8d4db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:55:80:b9:42:2c:e9:f5:e5:39:2c:c0:86:
c5:ba:94:b3:75:85:0a:10:ae:3b:39:31:b8:81:a1:
4d:e9:3b:5e:bb:c6:a5:8c:31:19:57:7c:d1:a5:06:
0f:64:2a:30:af:11:59:9a:77:83:e1:aa:8b:09:a7:
1f:ff:03:2a:96:af:c8:57:b8:7a:f7:b7:41:f7:ec:
57:cc:6d:62:00:75:ca:89:9d:82:d4:23:7d:60:8d:
73:b9:08:b2:70:3e:c6:05:07:be:8e:4a:c4:96:7a:
dc:6a:43:38:bf:48:4e:3d:04:b7:ed:b9:d5:45:d1:
19:58:b3:e4:00:df:f8:25:81:64:43:b6:f2:56:8e:
c0:38:31:6b:26:b4:f1:a0:b8:86:67:9b:26:f5:28:
fe:fe:3c:ed:0d:d2:02:4d:69:42:c8:99:51:8d:33:
ad:50:c9:ab:42:a5:8d:2f:b6:bf:89:f2:70:c8:b6:
41:b0:f0:93:d5:1b:56:4a:33:53:2d:78:c7:5c:dd:
be:42:5c:5f:d6:c3:ad:f9:b8:0f:26:5a:a9:05:d8:
b1:f0:80:e7:bd:77:16:14:23:be:cc:5c:75:d7:70:
56:c6:13:1b:d7:84:4e:cf:11:bf:d2:54:00:76:0d:
8a:6e:66:d1:bc:7f:96:43:90:1d:44:4f:c9:4b:1c:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:0F:66:50:93:12:8C:4A:9C:3C:FC:B6:2B:E4:CD:FB:8D:4D:B0
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/ml8PZlCTEoxKnDz8tivkzfuNTbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.224.0/21
81.20.112.0/20
185.75.148.0-185.75.150.255
188.74.32.0/20
IPv6:
2a03:4b20::/29
2a03:6880::/32
Signature Algorithm: sha256WithRSAEncryption
8a:de:ea:ac:9d:b8:42:79:5d:cd:ca:71:ea:3b:95:65:66:a2:
eb:04:e0:82:da:78:27:26:bb:0a:4e:3d:f9:16:ab:93:3e:ad:
30:e5:6b:3d:d7:5b:00:0f:bd:8b:59:b8:9b:92:5f:76:38:e2:
da:a6:61:20:69:69:a3:e2:b2:49:15:b1:3c:14:60:56:91:de:
bc:37:93:c9:cd:40:3c:fa:68:c0:c1:b1:f6:ba:47:a0:99:a0:
4e:1c:00:d9:0e:5e:af:2a:65:f6:c2:18:75:73:0d:03:00:93:
18:12:a5:c4:d4:4c:fe:e1:ab:95:52:a0:d5:07:d9:c0:ec:51:
69:fd:57:f9:ed:e7:45:29:9f:59:c4:4b:fa:02:ea:d4:68:00:
d4:2b:d5:19:cf:b3:d7:88:44:89:07:71:72:9a:9a:76:0b:44:
31:62:f0:24:5a:97:a3:8b:52:5d:86:8d:f1:81:25:d0:d0:a2:
dc:d0:5c:d6:bb:d1:ec:0c:75:46:8e:18:02:fc:fe:31:18:2c:
3f:6e:67:ff:0d:6b:93:65:5e:50:23:53:61:d6:c2:06:8c:ce:
da:f0:c3:72:a6:20:d9:26:a7:eb:d5:55:29:c9:5f:40:98:9d:
9d:e5:c4:e3:6b:24:80:9c:47:49:86:74:f9:db:68:b9:2e:9c:
6d:d5:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:27:58 2025 by rpki-client