Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/9ra_bei0elwixuXSQP-T5aQPObM.roa
File: 9ra_bei0elwixuXSQP-T5aQPObM.roa (raw, json)
Hash identifier: OE+NVy7VjqDgaI3e640nAf9XyuG0/h2UanGeygTv2z8=
Subject key identifier: F6:B6:BF:6D:E8:B4:7A:5C:22:C6:E5:D2:40:FF:93:E5:A4:0F:39:B3
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018C340DB0D4006D3F17EC2D3CABB10589E1
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/9ra_bei0elwixuXSQP-T5aQPObM.roa
Signing time: Mon 04 Dec 2023 08:59:21 +0000
ROA not before: Mon 04 Dec 2023 08:59:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9119
IP address blocks: 85.208.172.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
80.65.174.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
91.132.74.0/23 maxlen: 23
2.58.48.0/22 maxlen: 22
80.65.166.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.160.0/24 maxlen: 24
80.65.160.0/20 maxlen: 20
80.65.164.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.172.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
147.78.219.0/24 maxlen: 24
147.78.218.0/24 maxlen: 24
147.78.216.0/24 maxlen: 24
147.78.216.0/22 maxlen: 22
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
217.199.132.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
213.253.104.0/22 maxlen: 22
217.199.130.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
217.199.138.0/24 maxlen: 24
213.253.111.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.108.0/22 maxlen: 22
217.199.135.0/24 maxlen: 24
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
213.253.116.0/22 maxlen: 22
217.199.143.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
213.253.64.0/19 maxlen: 19
45.15.44.0/22 maxlen: 22
212.103.128.0/19 maxlen: 19
84.41.122.0/23 maxlen: 23
84.41.120.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.112.0/23 maxlen: 23
84.41.111.0/24 maxlen: 24
84.41.110.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.114.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
46.163.48.0/21 maxlen: 21
46.163.58.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
45.8.0.0/22 maxlen: 22
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
212.13.224.0/19 maxlen: 19
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
185.54.131.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.128.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
2a0b:c300::/29 maxlen: 29
2a02:805::/33 maxlen: 33
2a0b:c306::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:801::/32 maxlen: 32
2a02:800::/32 maxlen: 32
2a0f:2180::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a0e:1e80::/29 maxlen: 29
2a09:e140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:0d:b0:d4:00:6d:3f:17:ec:2d:3c:ab:b1:05:89:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Dec 4 08:59:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6b6bf6de8b47a5c22c6e5d240ff93e5a40f39b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:6c:29:97:9f:6d:97:ce:01:91:ab:a5:91:
f9:cc:dc:33:d2:12:af:23:99:bd:be:d2:13:9b:c7:
9d:a5:b8:1c:aa:42:19:8d:ad:88:e6:dc:5c:10:b8:
f7:ed:c4:59:25:89:f6:7d:51:90:9e:87:cb:43:9c:
ae:9a:c9:d9:29:bd:1f:01:f4:cb:31:00:f9:5d:e3:
47:02:21:49:bc:01:36:2a:58:f2:d6:84:f2:b1:91:
ef:dd:73:c3:4f:9a:f8:0d:9a:6a:e5:2f:2e:2b:04:
a8:2c:65:e6:ad:8f:4c:67:a6:ea:d6:76:d4:49:97:
95:d1:5e:59:b1:06:a2:51:b5:21:c7:4d:d5:79:c9:
88:15:e5:a7:b2:53:66:04:81:e1:64:d5:4e:c8:38:
6c:8a:5c:d8:6b:d9:9f:ff:34:c0:bb:70:4d:bb:15:
fa:27:70:f4:ad:34:61:6f:f3:ff:ec:47:2f:7c:61:
75:f3:18:94:bd:2c:56:94:5a:4a:48:20:5c:16:2e:
c5:16:11:a2:09:c6:84:db:04:1e:55:ed:98:69:f5:
c5:8b:d7:1a:2a:3f:33:50:53:78:40:92:35:79:4b:
1f:13:13:70:c9:31:28:bf:37:ec:39:32:6e:10:df:
22:87:b0:8c:33:ff:07:37:1d:de:71:d2:e7:85:c8:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B6:BF:6D:E8:B4:7A:5C:22:C6:E5:D2:40:FF:93:E5:A4:0F:39:B3
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/9ra_bei0elwixuXSQP-T5aQPObM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/24
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::/31
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
2a0f:2180::/29
Signature Algorithm: sha256WithRSAEncryption
19:f4:7f:c3:23:24:b4:53:01:b3:a1:62:62:c4:6e:d9:d5:00:
66:bb:1b:41:47:7c:06:ac:8a:e8:73:91:57:01:13:4a:3a:cc:
d4:60:89:df:0b:67:14:62:db:d6:8f:cc:62:1f:c6:8d:77:61:
4d:7c:e5:25:9c:9d:fc:8a:e0:c9:cf:81:ba:03:13:87:53:22:
8f:bc:5f:6a:b1:7a:7c:f2:77:44:10:18:be:c1:62:50:64:b0:
97:d2:3a:8a:df:22:e1:02:1f:84:73:26:0e:ec:3d:2e:2a:b3:
ac:11:b8:4d:81:d5:4b:f3:db:24:34:6c:05:28:5a:fa:9f:c4:
87:ff:6e:00:d4:a3:0a:7f:4e:c6:3c:9a:ac:82:28:b7:dd:6f:
db:5a:e6:db:d1:05:07:ab:86:e7:f1:bb:8a:51:a4:d3:37:3e:
0f:95:7b:d4:d4:9d:5c:2b:79:b2:85:91:6f:5a:ce:26:64:d8:
9f:db:2c:2f:0f:f6:16:55:c8:19:20:a9:c1:a2:b2:ea:74:99:
c5:f5:bd:ed:35:16:f9:0d:16:b5:f5:cf:a8:7b:0e:c2:18:38:
5e:56:39:e5:16:95:01:c4:45:ca:00:92:c9:53:1a:ad:b8:0a:
8a:03:68:6e:5f:b8:07:26:31:50:cd:b8:56:34:ee:e2:8a:c6:
28:20:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:26 2025 by rpki-client