Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/EWOIox3s3J7u6_YR8Yfl1lOoo6Q.roa
File: EWOIox3s3J7u6_YR8Yfl1lOoo6Q.roa (raw, json)
Hash identifier: ci8eEcmbGw9i+Q1vGkzMnZQN27hC1Pud4v7M0CofVGI=
Subject key identifier: 11:63:88:A3:1D:EC:DC:9E:EE:EB:F6:11:F1:87:E5:D6:53:A8:A3:A4
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 018A3C6C857692F8F572633C6EC140CB7CA1
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/EWOIox3s3J7u6_YR8Yfl1lOoo6Q.roa
Signing time: Mon 28 Aug 2023 13:54:19 +0000
ROA not before: Mon 28 Aug 2023 13:54:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48716
IP address blocks: 185.146.0.0/22 maxlen: 24
185.102.72.0/22 maxlen: 24
91.147.95.0/24 maxlen: 24
91.147.94.0/24 maxlen: 24
91.147.92.0/24 maxlen: 24
91.147.92.0/22 maxlen: 22
91.147.93.0/24 maxlen: 24
195.93.152.0/23 maxlen: 24
195.49.211.0/24 maxlen: 24
195.49.212.0/24 maxlen: 24
195.49.209.0/24 maxlen: 24
195.49.210.0/24 maxlen: 24
195.49.208.0/21 maxlen: 21
195.49.213.0/24 maxlen: 24
109.233.108.0/22 maxlen: 32
195.49.214.0/24 maxlen: 24
195.49.215.0/24 maxlen: 24
77.240.38.0/23 maxlen: 24
94.247.128.0/21 maxlen: 24
91.215.137.0/24 maxlen: 32
91.215.136.0/22 maxlen: 24
91.215.136.0/24 maxlen: 24
91.215.139.0/24 maxlen: 32
185.4.180.0/22 maxlen: 24
195.210.46.0/23 maxlen: 24
91.201.214.0/23 maxlen: 24
185.22.64.0/22 maxlen: 24
78.40.108.0/23 maxlen: 24
89.219.32.0/22 maxlen: 24
194.110.54.0/23 maxlen: 24
77.243.80.0/23 maxlen: 24
194.39.64.0/22 maxlen: 24
194.39.64.0/23 maxlen: 24
185.35.222.0/23 maxlen: 24
194.39.67.0/24 maxlen: 24
194.39.66.0/24 maxlen: 24
2a00:5da0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:6c:85:76:92:f8:f5:72:63:3c:6e:c1:40:cb:7c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Aug 28 13:54:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=116388a31decdc9eeeebf611f187e5d653a8a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:d7:f5:db:4e:e5:26:0d:b5:58:2a:ed:4c:
5e:4e:fd:54:f1:4e:fa:cc:96:a1:08:84:86:d7:d8:
38:45:07:2c:e0:99:97:f2:8f:07:de:a1:c5:98:83:
ad:7f:a1:28:83:1e:b3:42:c9:27:25:49:89:ad:c3:
9c:d2:7b:11:94:39:9b:20:8b:2d:80:a5:4b:d6:3d:
83:c3:e7:aa:f1:cb:9f:05:b1:48:5c:c9:90:29:1a:
0a:a9:30:79:5d:e8:1d:31:16:54:9e:f1:50:00:87:
22:e5:50:5f:60:8c:0c:9b:03:ee:0c:0c:91:e2:f1:
1f:31:c0:4f:93:9b:a8:b9:a0:33:5e:23:a1:2d:66:
88:b6:08:d1:fb:7d:ed:25:61:25:dd:e1:b1:f9:cb:
ea:c8:1b:f1:48:e8:03:c3:4d:de:a0:eb:20:5f:c6:
67:20:ba:2c:5f:67:5c:8b:7d:34:85:61:3b:24:34:
4c:62:42:8c:00:83:a3:92:20:39:f1:43:34:91:d1:
45:c3:81:82:8e:b2:91:43:77:06:31:7b:fb:31:45:
0e:e2:48:4e:d0:22:b7:82:58:5d:7c:bf:a8:c5:0b:
de:eb:c2:10:72:5e:98:a2:f2:a0:66:dc:fd:d9:7c:
04:3a:d2:e8:eb:85:39:ea:eb:6b:0c:c8:5b:b6:d9:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:63:88:A3:1D:EC:DC:9E:EE:EB:F6:11:F1:87:E5:D6:53:A8:A3:A4
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/EWOIox3s3J7u6_YR8Yfl1lOoo6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.38.0/23
77.243.80.0/23
78.40.108.0/23
89.219.32.0/22
91.147.92.0/22
91.201.214.0/23
91.215.136.0/22
94.247.128.0/21
109.233.108.0/22
185.4.180.0/22
185.22.64.0/22
185.35.222.0/23
185.102.72.0/22
185.146.0.0/22
194.39.64.0/22
194.110.54.0/23
195.49.208.0/21
195.93.152.0/23
195.210.46.0/23
IPv6:
2a00:5da0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:60:1e:9c:b7:58:5b:32:93:53:6b:2a:91:3b:19:7d:a2:3a:
bf:b3:a4:96:c0:82:28:a9:28:96:6e:37:bc:6e:60:1a:41:1f:
f5:48:46:1e:ff:5c:88:c6:da:31:e8:95:e3:4c:29:8b:6f:ac:
f7:06:41:e4:25:9a:d4:c6:e6:e1:16:93:ec:21:2c:92:5a:3e:
22:80:45:c2:c0:8c:5e:8f:0c:27:dc:d9:51:76:a1:82:65:37:
4c:70:fd:1f:c3:a3:ce:38:b3:95:14:cf:ee:9d:24:8f:f6:81:
bf:bd:d6:b4:bc:a1:46:4f:87:e3:56:35:19:46:56:dc:92:60:
5a:93:dc:d4:66:56:dd:6d:05:fa:40:cb:99:ed:eb:1c:c6:15:
c8:08:5b:0c:5d:ca:5d:43:98:d1:20:d4:6c:d7:c3:81:dd:99:
3b:f8:9e:5e:39:97:40:2f:4b:96:f4:17:17:e2:83:96:bf:b6:
ef:95:bb:81:e3:87:14:49:6f:6e:38:a4:6c:5c:a2:46:9b:f6:
6a:3d:91:89:f4:ad:59:54:45:08:16:d3:82:84:f8:ce:a2:e8:
90:e4:c9:a6:b7:91:91:34:6c:9d:1b:60:d3:29:7a:6a:c2:73:
a9:e4:90:66:21:3b:d8:16:a4:7e:8c:8c:95:c6:53:44:04:39:
18:4c:40:30
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAYo8bIV2kvj1cmM8bsFAy3yhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm
NTExOWEwHhcNMjMwODI4MTM1NDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTYzODhhMzFkZWNkYzllZWVlYmY2MTFmMTg3ZTVkNjUzYThhM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaPX9dtO5SYNtVgq7UxeTv1U8U76
zJahCISG19g4RQcs4JmX8o8H3qHFmIOtf6Eogx6zQsknJUmJrcOc0nsRlDmbIIst
gKVL1j2Dw+eq8cufBbFIXMmQKRoKqTB5XegdMRZUnvFQAIci5VBfYIwMmwPuDAyR
4vEfMcBPk5uouaAzXiOhLWaItgjR+33tJWEl3eGx+cvqyBvxSOgDw03eoOsgX8Zn
ILosX2dci300hWE7JDRMYkKMAIOjkiA58UM0kdFFw4GCjrKRQ3cGMXv7MUUO4khO
0CK3glhdfL+oxQve68IQcl6YovKgZtz92XwEOtLo64U56utrDMhbttlH1QIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFBFjiKMd7Nye7uv2EfGH5dZTqKOkMB8GA1UdIwQY
MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt
ZjkxYmI1MTc5MjE3LzEvRVdPSW94M3MzSjd1Nl9ZUjhZZmwxbE9vbzZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3
LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB4BAIAATByAwQBTfAm
AwQBTfNQAwQBTihsAwQCWdsgAwQCW5NcAwQBW8nWAwQCW9eIAwQDXveAAwQCbels
AwQCuQS0AwQCuRZAAwQBuSPeAwQCuWZIAwQCuZIAAwQCwidAAwQBwm42AwQDwzHQ
AwQBw12YAwQBw9IuMA0EAgACMAcDBQAqAF2gMA0GCSqGSIb3DQEBCwUAA4IBAQBb
YB6ct1hbMpNTayqROxl9ojq/s6SWwIIoqSiWbje8bmAaQR/1SEYe/1yIxtox6JXj
TCmLb6z3BkHkJZrUxubhFpPsISySWj4igEXCwIxejwwn3NlRdqGCZTdMcP0fw6PO
OLOVFM/unSSP9oG/vda0vKFGT4fjVjUZRlbckmBak9zUZlbdbQX6QMuZ7escxhXI
CFsMXcpdQ5jRINRs18OB3Zk7+J5eOZdAL0uW9BcX4oOWv7bvlbuB44cUSW9uOKRs
XKJGm/ZqPZGJ9K1ZVEUIFtOChPjOouiQ5Mmmt5GRNGydG2DTKXpqwnOp5JBmITvY
FqR+jIyVxlNEBDkYTEAw
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:31 2025 by rpki-client