Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/3xaexCM7Fv_e9fuXyFjm2sB8p0k.roa
File: 3xaexCM7Fv_e9fuXyFjm2sB8p0k.roa (raw, json)
Hash identifier: 8j38Z6oM1lLQGcvERDh7nNGdRdhzOLzK22a+P0yVy4U=
Subject key identifier: DF:16:9E:C4:23:3B:16:FF:DE:F5:FB:97:C8:58:E6:DA:C0:7C:A7:49
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 018B6699790292F3767350F0FE9F3650E407
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/3xaexCM7Fv_e9fuXyFjm2sB8p0k.roa
Signing time: Wed 25 Oct 2023 11:30:15 +0000
ROA not before: Wed 25 Oct 2023 11:30:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51684
IP address blocks: 185.16.26.0/24 maxlen: 24
185.16.26.0/23 maxlen: 23
5.181.198.0/24 maxlen: 24
5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
89.46.204.0/23 maxlen: 23
89.46.206.0/24 maxlen: 24
89.46.206.0/23 maxlen: 23
89.46.203.0/24 maxlen: 24
89.46.202.0/24 maxlen: 24
89.46.202.0/23 maxlen: 23
89.46.204.0/24 maxlen: 24
89.46.205.0/24 maxlen: 24
89.46.200.0/24 maxlen: 24
89.46.200.0/23 maxlen: 23
89.46.201.0/24 maxlen: 24
89.46.207.0/24 maxlen: 24
223.25.123.0/24 maxlen: 24
223.25.124.0/24 maxlen: 24
223.25.125.0/24 maxlen: 24
223.25.120.0/24 maxlen: 24
223.25.121.0/24 maxlen: 24
223.25.122.0/24 maxlen: 24
223.25.126.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.254.203.0/24 maxlen: 24
185.254.200.0/24 maxlen: 24
185.254.200.0/23 maxlen: 23
185.254.201.0/24 maxlen: 24
82.199.208.0/23 maxlen: 23
82.199.208.0/24 maxlen: 24
82.199.209.0/24 maxlen: 24
82.199.210.0/24 maxlen: 24
82.199.211.0/24 maxlen: 24
82.199.212.0/24 maxlen: 24
82.199.212.0/23 maxlen: 23
82.199.213.0/24 maxlen: 24
82.199.214.0/23 maxlen: 23
82.199.218.0/23 maxlen: 23
82.199.218.0/24 maxlen: 24
82.199.219.0/24 maxlen: 24
82.199.214.0/24 maxlen: 24
82.199.215.0/24 maxlen: 24
82.199.216.0/24 maxlen: 24
82.199.216.0/23 maxlen: 23
82.199.217.0/24 maxlen: 24
82.199.221.0/24 maxlen: 24
82.199.222.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.223.0/24 maxlen: 24
82.199.220.0/24 maxlen: 24
82.199.220.0/23 maxlen: 23
212.95.128.0/24 maxlen: 24
185.247.37.0/24 maxlen: 24
185.247.38.0/24 maxlen: 24
185.247.36.0/24 maxlen: 24
185.247.36.0/23 maxlen: 23
185.95.204.0/23 maxlen: 23
185.95.204.0/24 maxlen: 24
185.95.205.0/24 maxlen: 24
185.95.206.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.207.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
185.247.38.0/23 maxlen: 23
185.247.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:99:79:02:92:f3:76:73:50:f0:fe:9f:36:50:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Oct 25 11:30:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df169ec4233b16ffdef5fb97c858e6dac07ca749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:aa:35:85:5c:a5:a6:15:39:68:5f:b4:94:
0a:3d:a3:dc:fe:3b:c4:8c:9c:31:4a:2b:42:13:5f:
b2:0a:4d:9f:43:40:a3:64:97:3a:86:c4:bd:bc:d7:
32:1d:08:b5:89:0e:36:fe:74:30:2b:0c:c5:5e:8d:
16:f7:87:67:fd:9a:3f:4a:ce:05:80:e3:94:da:46:
de:e1:99:fa:04:58:7d:22:93:15:c9:3c:8a:0c:34:
b4:0a:da:69:be:20:e5:77:56:76:af:4a:a0:c8:e1:
0d:0b:ac:d5:0e:3b:2e:12:5a:cb:e2:8b:a0:92:e9:
f7:17:67:e4:53:8d:6c:07:0f:a3:15:55:27:e3:c4:
25:64:29:79:3e:e7:a9:21:c0:47:37:3b:f8:f7:f0:
00:6d:a4:db:a2:ac:c9:84:ca:3f:2d:5a:05:b7:a8:
51:22:ea:9e:f4:e0:bb:a9:9a:c9:e6:5c:5d:1a:ab:
29:70:d2:39:66:45:c7:47:81:33:d8:14:6c:59:cb:
69:e6:85:86:88:27:d8:d6:2c:6d:f4:a7:4c:94:4e:
59:a0:9b:ac:4c:69:fa:51:a7:6b:78:09:bc:21:74:
3c:bd:09:1e:3e:65:7d:f2:de:c2:ab:df:4f:1d:77:
49:79:40:d2:a5:9b:7c:0e:a0:dd:51:df:58:55:2a:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:9E:C4:23:3B:16:FF:DE:F5:FB:97:C8:58:E6:DA:C0:7C:A7:49
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/3xaexCM7Fv_e9fuXyFjm2sB8p0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0-5.181.198.255
82.199.208.0/20
89.46.200.0/21
91.213.191.0/24
91.217.185.0/24
185.16.26.0/23
185.95.204.0/22
185.247.36.0/22
185.254.200.0/23
185.254.203.0/24
212.95.128.0/24
223.25.120.0-223.25.126.255
Signature Algorithm: sha256WithRSAEncryption
4a:59:44:08:1b:8d:2f:ed:0e:86:e0:45:27:73:62:db:13:8f:
61:fb:36:b3:2b:8a:fe:c8:d5:61:1f:b3:47:7a:ae:8f:6a:2f:
af:97:12:22:c1:7f:29:6c:f4:d3:01:43:40:7f:6c:c7:1e:9f:
4d:b7:15:6d:44:32:4e:40:27:79:08:55:1e:8d:23:e8:ba:b7:
53:fc:82:a7:74:6a:bc:87:de:31:63:97:da:e7:49:66:d8:db:
01:10:24:e4:78:98:08:b6:0f:6d:00:56:ce:d1:0a:25:87:c8:
f4:ab:54:bf:af:34:d5:9b:d1:52:f3:2d:ee:42:e0:ba:39:80:
00:b0:7f:bb:6b:82:6c:da:23:f5:ab:26:f2:c4:8b:56:a4:0d:
33:dd:66:7c:b6:fb:0b:dc:01:46:0b:f9:71:12:22:7c:71:0d:
8d:05:60:cb:94:cc:e2:96:3b:de:5d:63:1a:9e:9a:7e:35:68:
9b:f0:d6:ec:d7:03:52:00:ac:1d:ca:3c:24:5b:34:5a:21:19:
a2:d5:63:d5:b8:0a:d5:9f:de:3c:49:9a:7c:81:76:5a:3a:01:
25:77:7b:93:d7:09:18:b0:e5:5c:81:d3:eb:2d:bc:6f:74:60:
d8:22:2b:df:70:f2:87:f3:c6:ff:e7:a6:c0:49:c9:7c:d4:9d:
b2:ab:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:15 2025 by rpki-client