Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/eVLeNz-5-OEEv5lEWhMP5_z5U1E.roa
File: eVLeNz-5-OEEv5lEWhMP5_z5U1E.roa (raw, json)
Hash identifier: yKe9ImplnqrZFnTe/Gn4C5C4C97uYjFCufNlx5+BOJY=
Subject key identifier: 79:52:DE:37:3F:B9:F8:E1:04:BF:99:44:5A:13:0F:E7:FC:F9:53:51
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 018C0BD2014D639016AEAD3125C95F273ACD
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/eVLeNz-5-OEEv5lEWhMP5_z5U1E.roa
Signing time: Sun 26 Nov 2023 13:29:21 +0000
ROA not before: Sun 26 Nov 2023 13:29:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48716
IP address blocks: 185.146.0.0/22 maxlen: 24
185.102.72.0/22 maxlen: 24
91.147.95.0/24 maxlen: 24
91.147.94.0/24 maxlen: 24
91.147.92.0/24 maxlen: 24
91.147.92.0/22 maxlen: 22
91.147.93.0/24 maxlen: 24
91.147.104.0/22 maxlen: 24
195.93.152.0/23 maxlen: 24
195.49.211.0/24 maxlen: 24
195.49.212.0/24 maxlen: 24
195.49.212.0/22 maxlen: 22
195.49.209.0/24 maxlen: 24
195.49.210.0/23 maxlen: 23
195.49.210.0/24 maxlen: 24
195.49.213.0/24 maxlen: 24
109.233.108.0/22 maxlen: 32
195.49.214.0/24 maxlen: 24
195.49.215.0/24 maxlen: 24
77.240.38.0/23 maxlen: 24
94.247.128.0/21 maxlen: 24
91.215.137.0/24 maxlen: 32
91.215.136.0/22 maxlen: 24
91.215.136.0/24 maxlen: 24
91.215.139.0/24 maxlen: 32
185.4.180.0/22 maxlen: 24
195.210.46.0/23 maxlen: 24
91.201.214.0/23 maxlen: 24
185.22.64.0/22 maxlen: 24
78.40.108.0/23 maxlen: 24
89.219.32.0/22 maxlen: 24
194.110.54.0/23 maxlen: 24
77.243.80.0/23 maxlen: 24
194.39.64.0/23 maxlen: 24
194.39.64.0/22 maxlen: 24
185.35.222.0/23 maxlen: 24
194.39.67.0/24 maxlen: 24
194.39.66.0/24 maxlen: 24
2a00:5da0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0b:d2:01:4d:63:90:16:ae:ad:31:25:c9:5f:27:3a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Nov 26 13:29:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7952de373fb9f8e104bf99445a130fe7fcf95351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:55:2c:6b:2f:ca:54:5d:ca:9d:af:1e:38:
93:8d:4f:bd:9c:e2:b2:cf:cd:75:3a:42:d1:14:cd:
13:a4:91:cc:ac:a1:97:a4:52:d3:db:5d:e3:e9:22:
43:7e:1e:cd:f7:b6:68:c4:f9:ec:a6:3c:51:38:7f:
d6:17:f5:d5:92:93:13:af:6a:90:98:76:bc:05:d5:
9c:87:65:95:5f:79:2f:09:a0:37:e3:19:db:74:27:
dd:1c:13:04:d7:30:05:a4:9e:10:28:ed:8f:5f:8a:
16:a0:fb:06:e0:d8:75:c9:13:80:eb:0b:54:ea:0f:
72:44:3d:f2:a5:60:61:30:71:32:e0:1a:75:1c:07:
5d:5a:f8:39:e8:a4:b6:7d:b7:92:1e:f1:7e:b6:1b:
03:84:5c:1a:4a:bf:b2:fb:34:e8:53:8a:a2:88:c0:
06:01:40:33:dd:c0:0f:6e:b9:ab:5d:e0:81:4f:41:
44:4b:33:9a:96:4c:e3:98:65:ec:f7:60:91:45:b8:
8e:9d:d7:a6:5e:b8:0a:57:e4:f0:d9:46:5a:79:88:
17:37:28:a6:00:b3:73:0e:9a:f9:e8:c2:6e:34:69:
50:8d:38:de:19:2a:81:0d:36:b8:1a:2e:9a:d5:79:
32:38:c9:a9:bc:69:d7:fe:dd:b2:48:63:1f:f7:bc:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:52:DE:37:3F:B9:F8:E1:04:BF:99:44:5A:13:0F:E7:FC:F9:53:51
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/eVLeNz-5-OEEv5lEWhMP5_z5U1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.38.0/23
77.243.80.0/23
78.40.108.0/23
89.219.32.0/22
91.147.92.0/22
91.147.104.0/22
91.201.214.0/23
91.215.136.0/22
94.247.128.0/21
109.233.108.0/22
185.4.180.0/22
185.22.64.0/22
185.35.222.0/23
185.102.72.0/22
185.146.0.0/22
194.39.64.0/22
194.110.54.0/23
195.49.209.0-195.49.215.255
195.93.152.0/23
195.210.46.0/23
IPv6:
2a00:5da0::/32
Signature Algorithm: sha256WithRSAEncryption
70:17:d7:1c:d5:47:b0:68:68:9f:1d:7b:ec:b2:fa:a9:9e:fa:
98:b7:b3:05:54:ca:95:20:cd:b1:08:24:6a:a3:a8:55:1f:7b:
ab:c5:9b:eb:27:54:06:25:79:74:6e:c7:fd:08:c3:2b:74:8d:
10:12:1a:f7:de:98:92:d9:86:41:06:1b:1f:55:51:08:cf:2f:
8c:32:f1:43:64:cc:b3:a8:63:ad:92:db:de:b0:7b:f7:80:55:
7c:6e:02:ac:06:d5:44:4c:6a:54:57:1e:28:ad:11:2f:f2:35:
c1:eb:e5:10:5e:1a:fb:ae:89:2b:9f:54:19:80:8a:4c:15:30:
2f:27:6a:4f:e3:25:c2:62:d4:ee:66:70:23:b4:23:24:4f:d6:
0b:5e:9e:36:f5:2b:4d:af:cc:56:fa:92:07:86:af:9c:4c:f6:
63:91:91:f7:e0:2d:ad:d8:94:66:4e:92:e1:91:f7:e5:01:db:
fc:0b:af:52:3c:4f:39:9f:ab:8e:4c:ea:ef:2f:5e:6b:58:a3:
1a:ad:54:15:4f:8e:dc:83:c1:a8:72:97:7d:c4:8b:9f:4e:f4:
c1:23:f8:89:d4:4c:7a:75:9c:1f:45:e6:7f:3f:a7:8d:82:f9:
59:07:08:25:2d:e5:a1:d0:49:96:83:1b:3e:e2:12:58:f4:2c:
ee:38:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:29 2025 by rpki-client