Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Yjn-2ah2zzo8JmgtkhCF3KZi8aU.roa
File: Yjn-2ah2zzo8JmgtkhCF3KZi8aU.roa (raw, json)
Hash identifier: bdOCD3RTpGeliZEyRjvAqWXy17j5ViNl296NUE92AeI=
Subject key identifier: 62:39:FE:D9:A8:76:CF:3A:3C:26:68:2D:92:10:85:DC:A6:62:F1:A5
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018A597AF37041C3F679BB16F228551DF288
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Yjn-2ah2zzo8JmgtkhCF3KZi8aU.roa
Signing time: Sun 03 Sep 2023 05:19:04 +0000
ROA not before: Sun 03 Sep 2023 05:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.146.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
37.49.145.0/24 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
37.49.148.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
37.49.150.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:59:7a:f3:70:41:c3:f6:79:bb:16:f2:28:55:1d:f2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 3 05:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6239fed9a876cf3a3c26682d921085dca662f1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:41:fb:d3:b2:15:94:21:15:d9:5a:b7:cc:
3a:07:2c:71:f3:b1:41:ef:00:ab:5e:49:38:84:0f:
15:64:a2:60:b7:36:94:0c:5e:40:8d:6e:9d:94:e7:
18:22:af:44:3c:3a:cf:ed:92:41:3f:72:9e:52:96:
44:b2:7b:a4:ae:4d:fc:06:ef:08:78:f3:21:a6:62:
5f:94:89:88:ca:6e:13:4c:42:33:59:71:f7:87:d8:
28:7e:8a:24:02:87:ef:9f:15:46:9d:ee:a8:d8:12:
b4:19:ec:18:08:e4:6b:26:bc:99:03:9a:df:a6:06:
1c:4f:05:a4:64:63:d4:1d:20:33:52:5e:a4:f1:78:
84:c6:c0:73:99:4c:d0:86:e6:92:5f:3c:53:ea:2c:
09:79:25:f4:28:a5:fa:99:1d:f7:3e:86:1a:ba:9f:
e1:b5:bb:0d:28:3b:89:4d:99:e4:18:25:fc:60:f2:
8f:70:d0:3e:a8:7d:1b:be:5c:93:53:43:42:c0:02:
29:5c:ad:27:cc:b3:9e:60:ad:b8:de:ca:74:a3:e4:
58:ef:f5:34:f4:2a:91:b8:88:ef:65:f6:b1:28:3d:
94:91:74:bf:08:ea:14:0a:ad:5d:06:c3:ea:1b:b8:
83:b4:0f:2c:90:c6:48:e3:99:7a:1b:92:2d:b7:4a:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:39:FE:D9:A8:76:CF:3A:3C:26:68:2D:92:10:85:DC:A6:62:F1:A5
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Yjn-2ah2zzo8JmgtkhCF3KZi8aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.164.0-109.203.166.255
176.46.128.0/24
176.46.130.0-176.46.137.255
176.46.140.0/23
176.46.143.0-176.46.157.255
Signature Algorithm: sha256WithRSAEncryption
09:54:6b:8e:2d:94:6a:7d:3f:ae:4a:9d:9a:d4:9f:c4:14:62:
8d:24:8a:44:f0:bd:1c:8c:80:07:26:5a:f6:fa:d8:0f:f7:8f:
60:4d:6d:35:8f:6f:15:9d:86:2a:ae:d4:42:9a:42:2f:1a:21:
f8:02:5f:9c:9b:aa:44:1a:cc:60:78:63:02:2c:85:e3:4d:d3:
be:29:82:98:0f:b0:2c:05:e9:45:53:85:b6:0d:ca:91:49:68:
39:3f:cf:22:8b:10:5e:cd:81:8e:fc:da:d0:32:7c:ac:40:ed:
10:18:48:29:83:89:ea:f6:64:ca:da:1e:f8:c0:ae:2d:4a:5d:
8e:82:08:13:5a:6a:5e:6e:e0:88:25:db:e1:9a:97:62:4d:1e:
aa:46:ff:dd:f1:6e:09:7f:6f:4f:e5:a2:00:14:2a:d6:09:12:
fe:92:78:83:92:0a:9a:76:a9:1d:38:4a:08:25:2d:4b:ba:a9:
81:1b:8a:76:44:36:d1:84:e1:05:64:67:5d:15:72:a6:86:ae:
12:ae:8b:a1:fb:05:26:9d:90:2f:36:19:2b:50:34:0a:5e:b5:
ae:0f:01:f1:f8:a5:66:0e:ae:ca:ec:23:df:8a:f2:f0:a1:df:
b5:d2:e4:92:6a:0e:2f:28:ba:ce:9d:41:12:ee:a2:e5:08:11:
ad:20:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:49 2025 by rpki-client