Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/0TEWwcSP5LUcILEmMAyftYelxGc.roa
File: 0TEWwcSP5LUcILEmMAyftYelxGc.roa (raw, json)
Hash identifier: F0M3466nDgPuZx9JMMfb3jSw9/pIyhCXSr7YX7xuDPY=
Subject key identifier: D1:31:16:C1:C4:8F:E4:B5:1C:20:B1:26:30:0C:9F:B5:87:A5:C4:67
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 0186E5F6441DA369DB2B436C6F941491E85E
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/0TEWwcSP5LUcILEmMAyftYelxGc.roa
Signing time: Wed 15 Mar 2023 15:49:27 +0000
ROA not before: Wed 15 Mar 2023 15:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48176
IP address blocks: 81.177.228.0/22 maxlen: 22
81.177.240.0/21 maxlen: 21
81.177.248.0/22 maxlen: 22
81.177.252.0/23 maxlen: 23
81.177.184.0/24 maxlen: 24
81.177.188.0/22 maxlen: 22
81.177.198.0/23 maxlen: 23
81.177.195.0/24 maxlen: 24
81.177.200.0/22 maxlen: 22
81.177.200.0/21 maxlen: 21
81.177.226.0/23 maxlen: 23
81.177.224.0/20 maxlen: 20
81.177.224.0/23 maxlen: 23
185.8.20.0/22 maxlen: 22
178.237.176.0/20 maxlen: 20
178.237.176.0/21 maxlen: 21
178.237.176.0/22 maxlen: 22
178.237.184.0/21 maxlen: 21
178.237.180.0/22 maxlen: 22
178.237.190.0/23 maxlen: 23
178.237.188.0/23 maxlen: 23
81.177.56.0/21 maxlen: 21
91.207.136.0/23 maxlen: 23
62.122.240.0/21 maxlen: 21
37.18.152.0/21 maxlen: 21
37.18.156.0/22 maxlen: 22
213.222.240.0/21 maxlen: 21
213.222.240.0/20 maxlen: 20
213.59.150.0/24 maxlen: 24
213.59.148.0/23 maxlen: 23
213.59.146.0/24 maxlen: 24
213.59.154.0/24 maxlen: 24
213.222.248.0/21 maxlen: 21
213.59.186.0/23 maxlen: 23
213.59.186.0/24 maxlen: 24
149.255.24.0/21 maxlen: 21
213.59.190.0/23 maxlen: 23
213.59.188.0/22 maxlen: 22
213.222.224.0/22 maxlen: 22
213.222.224.0/21 maxlen: 21
213.222.232.0/22 maxlen: 22
213.222.232.0/21 maxlen: 21
213.222.236.0/22 maxlen: 22
213.59.144.0/22 maxlen: 22
2a03:aa00::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:f6:44:1d:a3:69:db:2b:43:6c:6f:94:14:91:e8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Mar 15 15:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d13116c1c48fe4b51c20b126300c9fb587a5c467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:b4:24:fb:cd:58:e0:84:10:b7:d6:ec:ba:
a9:61:4b:d2:86:c8:e6:70:4f:9e:0a:d0:df:a5:64:
39:80:0e:34:80:a6:f8:52:9f:41:40:56:a6:90:73:
8b:a5:08:f2:5c:2d:3c:a7:74:ca:8c:c0:a9:e5:15:
07:fa:a7:cd:c5:08:75:ee:ac:2c:e7:67:df:ff:be:
4e:f7:9a:fd:cc:47:de:d5:c5:a1:6f:77:76:25:4b:
73:45:08:ee:a2:7e:ca:fa:6e:7c:e6:00:89:d6:56:
a2:32:4e:77:c9:16:a6:36:94:31:e3:b0:ba:6b:0f:
54:26:e7:32:38:76:d9:f0:10:47:79:52:d7:c7:cc:
72:0b:27:b9:57:b1:34:3e:cd:5e:4d:1d:28:bf:54:
84:21:3c:1c:5f:b0:19:d3:05:09:46:92:c3:7e:fa:
4e:38:93:54:14:2d:03:3a:67:75:f0:94:84:b9:2d:
c4:65:02:2b:3c:da:49:b9:28:d2:65:a0:2c:9a:16:
bd:77:75:ac:7b:ca:ac:ab:b6:f4:8d:53:a0:10:91:
25:91:70:8d:9b:c1:50:c3:a1:15:15:b3:47:fd:53:
27:53:a3:63:af:7e:a4:70:89:0a:d2:b5:1b:27:96:
0c:75:1e:ac:75:ca:af:45:25:03:78:66:70:8a:3b:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:16:C1:C4:8F:E4:B5:1C:20:B1:26:30:0C:9F:B5:87:A5:C4:67
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/0TEWwcSP5LUcILEmMAyftYelxGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.152.0/21
62.122.240.0/21
81.177.56.0/21
81.177.184.0/24
81.177.188.0/22
81.177.195.0/24
81.177.198.0-81.177.207.255
81.177.224.0-81.177.253.255
91.207.136.0/23
149.255.24.0/21
178.237.176.0/20
185.8.20.0/22
213.59.144.0-213.59.150.255
213.59.154.0/24
213.59.186.0-213.59.191.255
213.222.224.0/19
IPv6:
2a03:aa00::/36
Signature Algorithm: sha256WithRSAEncryption
4d:c7:87:26:e6:79:f9:71:b5:f5:62:0f:8f:db:9b:d6:ac:cf:
02:d3:85:be:db:84:d0:31:f4:e8:71:84:a9:00:2b:e2:31:c5:
e4:5a:d7:c5:ad:0c:6a:36:e2:08:df:4d:7d:40:e5:1c:32:a0:
1d:55:c2:a8:5b:ee:d0:30:41:e2:34:11:b1:d3:b5:fe:4e:60:
80:ab:47:65:06:62:f2:8e:50:5a:b1:ec:8b:81:a9:90:89:fe:
e1:d4:47:51:04:65:45:17:49:d5:c4:27:2a:39:a9:b1:d2:2c:
74:f6:75:04:37:61:12:7d:0e:f9:f6:c1:c5:67:bc:41:93:ca:
20:6b:ca:82:7b:41:20:58:0a:fe:f5:3b:22:82:dd:66:f9:d8:
3f:88:79:f6:cf:71:5d:63:9e:4c:7e:35:a9:ac:f3:aa:b3:6d:
13:31:f6:67:c1:65:9b:41:70:bf:79:d6:4d:28:5d:28:c1:b6:
86:43:f9:b3:d3:5a:39:91:e3:50:2c:03:cb:54:e8:91:62:37:
0d:1f:12:93:c7:32:cd:3f:fe:f2:31:3a:cf:66:96:9c:2c:36:
15:f6:f5:3f:90:8f:c0:71:74:bc:b2:e4:11:90:2c:50:45:70:
26:7a:42:67:af:81:1e:c2:6b:76:79:58:aa:75:b8:62:a7:3b:
91:b8:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:40 2025 by rpki-client