Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/C9_Ud5PseNkGbYfgOrhwVjhXUEA.roa
File: C9_Ud5PseNkGbYfgOrhwVjhXUEA.roa (raw, json)
Hash identifier: mLPjq7dNqisCOZySsdJtPhGaSakr+rPcx3PVl3uQXC4=
Subject key identifier: 0B:DF:D4:77:93:EC:78:D9:06:6D:87:E0:3A:B8:70:56:38:57:50:40
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0185710C0ECFBE43D0BDBB4E7B882ABEBC11
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/C9_Ud5PseNkGbYfgOrhwVjhXUEA.roa
Signing time: Mon 02 Jan 2023 05:54:53 +0000
ROA not before: Mon 02 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204035
IP address blocks: 37.228.132.0/24 maxlen: 24
37.228.134.0/24 maxlen: 24
185.101.92.0/22 maxlen: 22
37.228.151.0/24 maxlen: 24
37.228.148.0/24 maxlen: 24
185.116.156.0/22 maxlen: 22
185.116.156.0/24 maxlen: 24
185.116.157.0/24 maxlen: 24
185.116.158.0/24 maxlen: 24
193.56.156.0/24 maxlen: 24
185.107.192.0/23 maxlen: 23
185.107.192.0/22 maxlen: 22
185.107.192.0/24 maxlen: 24
185.107.193.0/24 maxlen: 24
185.107.194.0/24 maxlen: 24
194.125.251.0/24 maxlen: 24
194.125.248.0/22 maxlen: 22
194.125.250.0/24 maxlen: 24
193.46.24.0/22 maxlen: 22
185.245.168.0/22 maxlen: 22
2a06:7f80::/29 maxlen: 29
2a06:1c40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:0e:cf:be:43:d0:bd:bb:4e:7b:88:2a:be:bc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jan 2 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bdfd47793ec78d9066d87e03ab8705638575040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:c5:6d:ef:c4:8e:dd:15:83:88:02:0a:62:
02:63:00:2c:cf:25:f0:b6:29:d0:52:61:7d:80:78:
b1:6c:da:3c:0d:ac:ab:1b:67:53:0f:30:c3:0d:e5:
57:12:09:08:1b:3e:11:af:4d:9a:0f:ed:18:42:c1:
ee:9f:dc:1d:01:41:6d:18:5f:59:8a:0e:5a:25:bb:
bd:99:6f:a8:5f:b8:01:77:34:94:85:54:2c:5e:9e:
b7:08:87:da:a9:6c:c8:2f:d7:43:b9:5a:b2:92:01:
c1:c4:9a:ab:52:b3:d7:c7:60:77:4d:23:2d:42:ae:
f9:32:3d:b3:47:f6:3f:e0:b4:15:f5:8b:4a:00:51:
75:79:b7:e4:1d:9d:d3:82:63:3d:05:f8:10:e5:00:
81:68:68:45:12:93:bc:e4:7b:c0:1f:8a:6f:ec:09:
00:40:69:47:c8:2d:3e:fb:61:28:1b:12:3f:a4:81:
c4:3e:fe:68:51:c2:c3:83:91:77:0d:14:b6:b3:d2:
14:71:bb:1a:30:fd:9d:cb:94:72:c2:0b:dc:2d:ef:
66:9c:18:f9:d0:bf:1e:90:37:c1:8d:fe:83:bd:c3:
98:1c:12:48:7f:71:41:53:42:8b:df:99:8d:96:f1:
45:04:60:b2:e5:c6:d8:1e:bc:f1:3b:55:6f:9f:58:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DF:D4:77:93:EC:78:D9:06:6D:87:E0:3A:B8:70:56:38:57:50:40
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/C9_Ud5PseNkGbYfgOrhwVjhXUEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/24
37.228.151.0/24
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.156.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
5d:68:c8:60:81:f7:d4:4c:cd:ac:57:1d:c2:8b:0b:38:80:92:
54:26:1d:b5:b1:61:d3:50:4d:01:2b:6d:53:17:1a:2e:88:2a:
80:9a:22:5b:71:fe:74:79:5f:a1:72:70:3b:32:16:b1:0f:0d:
3d:2c:c5:dd:0c:fb:23:0f:2f:df:7f:b2:4a:b2:6f:5e:c7:2b:
dd:c1:d7:31:48:86:c7:9c:1e:fd:67:a2:13:71:5a:cb:97:84:
b8:fe:5e:c9:6a:54:18:46:3d:67:ad:17:f2:47:59:49:24:f2:
34:e0:c7:48:61:4f:3f:40:49:50:10:ad:d3:99:55:9a:87:bb:
3b:f6:11:98:bd:ae:7f:91:b1:ab:e6:4d:52:25:44:1c:df:b6:
2b:a4:23:f6:37:d6:6d:98:95:5d:9d:26:10:ca:fe:1f:5d:38:
35:05:27:b5:cb:5d:e5:cb:fe:c6:9a:00:98:d6:f1:d3:fb:42:
19:ab:6f:1a:10:cc:5e:bf:9c:9d:c9:b8:d1:f7:cd:12:fb:1d:
19:5d:a9:23:1d:3a:62:41:2e:d7:9f:6f:d4:d1:c3:81:3d:20:
25:74:61:30:d9:24:a6:78:72:b6:82:79:fb:ca:75:96:3b:bf:
c1:7b:e1:2a:54:80:8e:27:d3:26:ad:ed:b9:97:bd:da:c7:3e:
b1:c9:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:28 2025 by rpki-client