Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/jxCHWiGXh8wH29emMaWjQ0EZ8Mc.roa
File: jxCHWiGXh8wH29emMaWjQ0EZ8Mc.roa (raw, json)
Hash identifier: OU+UWOIiJr7FZPRyXU/l8FrF5SWgV92jo5B8NafiTDA=
Subject key identifier: 8F:10:87:5A:21:97:87:CC:07:DB:D7:A6:31:A5:A3:43:41:19:F0:C7
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018BACA332E1D644FE8F2C081A3388EE5055
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/jxCHWiGXh8wH29emMaWjQ0EZ8Mc.roa
Signing time: Wed 08 Nov 2023 01:54:18 +0000
ROA not before: Wed 08 Nov 2023 01:54:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.144.0/23 maxlen: 23
176.46.140.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.146.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.159.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
109.203.162.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
109.203.167.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
37.49.150.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ac:a3:32:e1:d6:44:fe:8f:2c:08:1a:33:88:ee:50:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 8 01:54:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f10875a219787cc07dbd7a631a5a3434119f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:3b:75:07:62:cf:90:ff:fc:1a:48:ee:36:
e7:ad:1d:63:1a:ee:42:31:1a:d4:f1:db:4b:4e:d2:
ac:fe:8a:d5:5c:fb:db:40:fe:72:9c:2e:45:6d:9f:
12:62:95:37:e9:42:8b:b3:78:b3:7e:ec:ac:e8:4f:
2b:20:33:01:e4:60:20:29:da:5e:f2:5c:de:24:3b:
67:72:a2:d2:c9:20:53:2d:1d:cf:1b:1f:b0:f5:19:
72:b9:05:ef:12:8d:5e:ae:fc:d6:36:88:9d:4c:ba:
8b:92:45:99:71:51:9d:db:3e:a7:99:c3:0f:45:08:
5b:ba:b8:16:e6:06:53:f2:31:b3:d9:df:15:6d:55:
04:7a:23:82:5b:a4:e6:22:8a:98:6b:70:18:9f:eb:
66:9a:b1:c6:b2:4c:ad:09:7d:1b:ab:95:83:06:22:
c3:3a:be:e0:73:07:f7:43:c5:a0:6c:77:d6:cc:0a:
d0:16:61:d9:1f:b9:62:3b:22:bd:8e:f9:5f:9e:06:
53:11:60:9a:7c:11:2f:d6:d3:a5:ea:a6:ed:9e:f0:
be:4c:66:22:79:77:b4:1b:ee:3a:2a:38:d8:4c:ae:
a4:af:e8:bd:b0:ab:88:35:79:5d:77:cb:9f:40:fa:
a9:13:c6:83:19:5e:80:1c:82:87:c8:db:4c:3a:b3:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:10:87:5A:21:97:87:CC:07:DB:D7:A6:31:A5:A3:43:41:19:F0:C7
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/jxCHWiGXh8wH29emMaWjQ0EZ8Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/24
37.49.146.0/24
37.49.148.0/22
94.74.137.0/24
94.74.147.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.162.0-109.203.167.255
176.46.132.0/24
176.46.140.0/24
176.46.143.0-176.46.147.255
176.46.149.0/24
176.46.151.0-176.46.152.255
176.46.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1b:a7:40:86:42:20:31:72:90:5e:39:3b:7c:8f:bf:dd:26:
c1:29:5a:73:74:69:28:16:d0:aa:d6:ce:12:22:90:40:87:3d:
57:19:cd:66:7b:76:62:b4:49:d3:8b:ae:24:4d:7f:80:b6:45:
a9:bc:be:aa:99:17:84:2c:65:4f:05:f1:62:af:8f:02:41:56:
87:b3:d9:c3:e6:b6:10:80:56:f6:60:8a:84:9c:00:e3:47:c8:
7b:54:23:37:85:77:5c:ee:cb:c8:52:37:38:b5:d8:dd:c2:a5:
83:ec:e5:9d:b0:eb:b2:af:95:93:7d:b8:0d:f6:ac:88:88:b2:
74:0c:0a:45:f4:ee:1c:b6:e6:a6:8d:94:19:b9:77:b1:f7:c0:
57:de:11:7d:62:60:5b:df:35:a9:df:28:03:97:d7:0b:cb:07:
70:d9:33:ae:27:64:1e:c1:e4:ff:e8:d0:42:b1:65:83:01:f1:
91:df:9b:5f:68:c7:e9:50:56:fa:11:ea:ea:a6:11:47:4c:28:
ee:35:77:42:b1:95:84:ed:f4:91:e1:ca:69:74:23:76:78:5a:
4b:6d:2c:3d:d5:f3:b3:04:bb:b8:af:13:65:f7:f8:64:5c:a7:
92:a3:14:56:c7:1e:3b:0d:9c:27:4e:6d:f5:90:42:1c:04:a1:
f4:79:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:44 2025 by rpki-client