Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/0Jj8Do3dQi5VoXZ-6l-GeQ6bBpU.roa
File: 0Jj8Do3dQi5VoXZ-6l-GeQ6bBpU.roa (raw, json)
Hash identifier: 35ImI6G7p0VzXYkiPA4V3P6FzkNnJwn4hg4dFsQeTQ8=
Subject key identifier: D0:98:FC:0E:8D:DD:42:2E:55:A1:76:7E:EA:5F:86:79:0E:9B:06:95
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 1C5F0025
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/0Jj8Do3dQi5VoXZ-6l-GeQ6bBpU.roa
Signing time: Sat 01 Jan 2022 11:57:35 +0000
ROA not before: Sat 01 Jan 2022 11:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48716
IP address blocks: 185.146.0.0/22 maxlen: 24
185.22.64.0/22 maxlen: 24
185.102.72.0/22 maxlen: 24
78.40.108.0/23 maxlen: 24
195.93.152.0/23 maxlen: 24
109.233.108.0/22 maxlen: 32
89.219.32.0/22 maxlen: 24
194.110.54.0/23 maxlen: 24
94.247.128.0/21 maxlen: 24
91.215.137.0/24 maxlen: 32
91.215.136.0/23 maxlen: 24
91.215.136.0/24 maxlen: 24
91.215.139.0/24 maxlen: 32
195.210.46.0/23 maxlen: 24
194.39.64.0/22 maxlen: 24
194.39.64.0/23 maxlen: 24
185.35.222.0/23 maxlen: 24
194.39.67.0/24 maxlen: 24
194.39.66.0/24 maxlen: 24
91.201.214.0/23 maxlen: 24
2a00:5da0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475988005 (0x1c5f0025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jan 1 11:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d098fc0e8ddd422e55a1767eea5f86790e9b0695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:15:01:cd:c5:17:8d:cc:ea:12:4e:ab:b4:
d0:29:dd:1b:19:7c:e4:75:e1:90:49:3e:de:47:01:
e2:df:0a:d5:43:cd:a7:c4:10:e5:0b:38:7e:19:28:
85:68:69:a9:a9:33:2f:d9:d2:63:48:13:ad:4f:80:
8f:1b:13:f6:07:53:98:c6:68:2f:06:07:25:6b:49:
80:78:56:fc:ee:bf:3b:7d:99:ad:03:59:45:ac:13:
b6:45:1c:dd:64:e4:86:d7:b8:e0:2c:87:96:2d:b5:
84:89:3a:ff:48:d5:0b:45:80:e0:25:3c:71:1a:71:
d7:c9:d2:dd:f2:9c:8d:31:30:52:3f:95:3f:be:b2:
a8:30:c3:08:54:7c:5c:fe:06:48:30:54:83:32:f0:
ed:40:ba:c9:33:ae:bf:12:9e:da:a4:fe:94:1a:b0:
ba:a9:24:1a:ac:fa:02:6e:bb:8d:d1:53:24:90:4a:
59:23:24:96:1f:fd:a2:49:67:78:82:c1:2b:82:0a:
97:94:a9:ce:14:0b:43:3c:3e:71:a6:fb:7d:fe:30:
5b:84:9c:14:7a:be:7c:f0:e2:53:84:15:a3:40:bf:
1d:11:b1:11:95:ef:44:70:12:7d:0c:be:f6:fe:d1:
61:e6:17:81:01:8e:ee:21:a9:00:b2:95:73:b0:da:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:98:FC:0E:8D:DD:42:2E:55:A1:76:7E:EA:5F:86:79:0E:9B:06:95
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/0Jj8Do3dQi5VoXZ-6l-GeQ6bBpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.108.0/23
89.219.32.0/22
91.201.214.0/23
91.215.136.0/23
91.215.139.0/24
94.247.128.0/21
109.233.108.0/22
185.22.64.0/22
185.35.222.0/23
185.102.72.0/22
185.146.0.0/22
194.39.64.0/22
194.110.54.0/23
195.93.152.0/23
195.210.46.0/23
IPv6:
2a00:5da0::/32
Signature Algorithm: sha256WithRSAEncryption
57:a6:c0:72:4c:25:db:cd:b5:96:6b:9b:9d:89:5a:ab:fa:9e:
c7:3b:32:5e:e0:67:21:a1:2f:65:f0:28:d4:73:c8:ed:aa:75:
da:c6:86:94:63:16:b8:d9:97:98:b8:56:84:34:78:28:fc:31:
28:b6:77:c4:01:1b:d4:dd:7f:49:7b:d2:c6:2e:ba:57:51:7f:
9a:1b:2f:c5:cb:b5:ac:ce:12:13:cd:9e:0a:1f:80:9e:ed:0d:
63:c6:da:c8:ec:b1:e6:ab:ff:11:ed:aa:62:af:91:94:13:7a:
8d:b7:b9:4f:03:29:69:63:d0:e3:51:9a:9f:f3:f5:6e:70:4e:
f9:52:af:24:a5:5e:0d:b4:05:7d:5a:a9:ab:74:b8:e9:f8:da:
9b:eb:3f:b1:38:fe:b4:39:6f:ed:fd:ff:2a:46:cd:d9:16:1f:
2b:0d:43:e4:0d:cd:1f:09:a2:08:68:30:21:16:87:af:6a:e9:
ae:b5:ec:e1:c0:3e:02:bc:cc:40:bc:43:c0:d4:fd:c4:1c:12:
80:02:e5:ad:61:a2:58:f3:cc:cc:cc:b8:5b:b6:4b:0d:8c:5d:
79:f5:ed:a7:25:6e:46:a6:50:3d:6d:3f:9d:54:0d:53:4d:c4:
2f:51:48:33:e3:a7:67:ed:4e:95:f2:6e:24:ac:05:9f:fd:5c:
71:21:89:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:12 2025 by rpki-client