Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/eT3_HrL7i_tLGx0FbjrVVUZTz3A.roa
File: eT3_HrL7i_tLGx0FbjrVVUZTz3A.roa (raw, json)
Hash identifier: 1gBssDl6yI2uawkHqzhkLHUeWnkvxLI0Ks/OzFsjHyU=
Subject key identifier: 79:3D:FF:1E:B2:FB:8B:FB:4B:1B:1D:05:6E:3A:D5:55:46:53:CF:70
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018AA89E30F9864BCC47EA9770EA54C98488
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/eT3_HrL7i_tLGx0FbjrVVUZTz3A.roa
Signing time: Mon 18 Sep 2023 14:07:34 +0000
ROA not before: Mon 18 Sep 2023 14:07:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9119
IP address blocks: 85.208.172.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
80.65.174.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
91.132.74.0/23 maxlen: 23
2.58.48.0/22 maxlen: 22
80.65.166.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.160.0/24 maxlen: 24
80.65.160.0/20 maxlen: 20
80.65.164.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.172.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
147.78.219.0/24 maxlen: 24
147.78.218.0/24 maxlen: 24
147.78.216.0/24 maxlen: 24
147.78.216.0/22 maxlen: 22
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
217.199.132.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
213.253.104.0/22 maxlen: 22
217.199.130.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
213.253.111.0/24 maxlen: 24
217.199.138.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.108.0/22 maxlen: 22
217.199.135.0/24 maxlen: 24
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
213.253.116.0/22 maxlen: 22
217.199.143.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
213.253.64.0/19 maxlen: 19
45.15.44.0/22 maxlen: 22
212.103.128.0/19 maxlen: 19
84.41.122.0/23 maxlen: 23
84.41.120.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.112.0/23 maxlen: 23
84.41.111.0/24 maxlen: 24
84.41.110.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.114.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
46.163.48.0/21 maxlen: 21
46.163.58.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
45.8.0.0/22 maxlen: 22
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
212.13.224.0/19 maxlen: 19
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
185.54.131.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.128.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
2a0b:c300::/29 maxlen: 29
2a02:805::/33 maxlen: 33
2a0b:c306::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:800::/32 maxlen: 32
2a0f:2180::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a0e:1e80::/29 maxlen: 29
2a09:e140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:9e:30:f9:86:4b:cc:47:ea:97:70:ea:54:c9:84:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Sep 18 14:07:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=793dff1eb2fb8bfb4b1b1d056e3ad5554653cf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:b7:df:06:09:c5:d1:31:92:fa:77:03:bd:
5e:f3:eb:5c:54:1c:ee:9a:d4:18:65:70:ba:24:b0:
64:94:d4:c3:ff:11:59:65:fe:d7:e9:5a:28:b1:eb:
9e:c1:10:5e:5c:90:bc:21:61:cd:44:59:d4:98:6f:
73:4a:e1:3e:24:87:19:a8:f9:3c:21:18:d7:84:fb:
24:20:3d:97:ca:4d:31:e4:30:0c:93:19:11:a4:5d:
f7:23:1b:1b:4b:2b:dc:fa:33:fb:21:0f:87:47:03:
0f:33:24:f1:58:51:79:2b:1b:67:b1:0f:e5:43:1e:
69:4f:b2:e1:45:da:96:6f:72:6c:f3:d7:16:b0:9f:
d6:d4:57:c3:84:fa:14:11:64:ac:ff:27:78:32:d5:
bd:fe:ea:5a:be:2c:72:bd:bd:ae:00:42:71:46:fd:
05:ad:ca:a6:02:63:dd:eb:52:81:64:1a:c3:9b:ed:
24:5e:7f:57:97:2e:75:35:4c:51:27:9c:c7:03:45:
d9:4b:cb:d9:af:8d:c8:cc:52:4f:ca:77:7b:22:dd:
ca:db:9f:f1:fb:fc:9b:3f:74:fc:f6:b1:37:f8:cd:
e5:14:57:62:00:5a:77:65:45:f7:8d:23:46:c7:cc:
bd:5a:4b:38:e4:e6:60:1a:a9:de:de:41:64:70:f7:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3D:FF:1E:B2:FB:8B:FB:4B:1B:1D:05:6E:3A:D5:55:46:53:CF:70
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/eT3_HrL7i_tLGx0FbjrVVUZTz3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/24
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::-2a02:801:7fff:ffff:ffff:ffff:ffff:ffff
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
2a0f:2180::/29
Signature Algorithm: sha256WithRSAEncryption
37:b6:3a:c7:16:52:2a:3c:71:ee:b4:dc:12:3d:df:3a:c3:c7:
ab:ce:72:31:f3:c1:cf:02:99:0f:1f:92:54:67:17:ae:85:3f:
35:17:2d:97:b2:14:f4:3e:8e:e2:c5:b2:00:84:c2:0d:28:75:
26:32:15:0f:47:42:5e:d3:f6:e3:7d:c0:eb:ea:40:c2:9a:be:
1f:4d:41:05:93:ea:1c:d2:b1:a1:e2:5f:1d:73:86:9e:1b:d5:
c6:ad:b2:da:74:14:6d:d6:ad:7f:20:61:38:cb:33:78:6a:e2:
3a:eb:2e:f2:4e:83:2d:72:58:25:11:ed:b4:f9:ec:2d:b1:5d:
36:97:69:15:f4:c8:06:e0:50:f2:ed:c4:9d:d9:44:8b:f0:29:
63:47:dd:11:16:a7:42:6c:fa:d1:d3:da:0e:f5:8e:59:47:40:
e3:35:d3:56:30:67:cf:c8:b7:2d:41:ed:d9:5c:c8:b2:db:07:
62:1f:cf:ef:29:9e:9d:5a:25:c5:dd:ad:a3:a6:97:c2:6f:cc:
43:0a:bb:21:79:37:f1:4f:9d:9a:89:14:31:d0:bb:64:30:3e:
bc:8b:43:29:b5:7d:16:c3:de:27:20:8e:21:94:7e:73:9b:ec:
7c:55:2e:23:81:80:a9:02:e5:78:f5:7d:1a:ee:c1:38:31:0c:
d3:12:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:27 2025 by rpki-client