Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YClpukiaSGogftaXL2UhRcCDcRQ.roa
File: YClpukiaSGogftaXL2UhRcCDcRQ.roa (raw, json)
Hash identifier: FDpHQVL12jWmP8ICpY8UZxFt1nPf2qN417/tA8OW7FA=
Subject key identifier: 60:29:69:BA:48:9A:48:6A:20:7E:D6:97:2F:65:21:45:C0:83:71:14
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018717F4B937835EB6F65F66481835835C24
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YClpukiaSGogftaXL2UhRcCDcRQ.roa
Signing time: Sat 25 Mar 2023 08:48:46 +0000
ROA not before: Sat 25 Mar 2023 08:48:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 138.188.0.0/16 maxlen: 24
193.134.36.0/22 maxlen: 24
194.6.160.0/19 maxlen: 24
193.222.64.0/19 maxlen: 19
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.151.0/24 maxlen: 24
193.5.20.0/24 maxlen: 24
193.247.166.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.166.0/23 maxlen: 23
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.247.167.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
185.106.64.0/22 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.247.193.0/24 maxlen: 24
185.39.92.0/22 maxlen: 22
193.5.224.0/20 maxlen: 20
193.247.255.0/24 maxlen: 24
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.246.202.0/23 maxlen: 24
195.65.0.0/16 maxlen: 24
193.247.104.0/23 maxlen: 23
193.5.4.0/23 maxlen: 24
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.6.0/23 maxlen: 23
193.247.44.0/22 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
194.11.96.0/20 maxlen: 20
193.247.41.0/24 maxlen: 24
193.247.40.0/24 maxlen: 24
194.11.144.0/21 maxlen: 21
193.247.90.0/24 maxlen: 24
193.247.86.0/24 maxlen: 24
193.246.32.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
217.192.0.0/15 maxlen: 24
185.84.76.0/22 maxlen: 24
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
212.117.96.0/19 maxlen: 19
195.144.32.0/19 maxlen: 24
78.110.128.0/20 maxlen: 20
46.245.144.0/21 maxlen: 21
195.35.121.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
195.176.192.0/19 maxlen: 24
193.135.255.0/24 maxlen: 24
195.176.128.0/19 maxlen: 24
138.190.0.0/16 maxlen: 16
193.134.248.0/23 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
164.128.0.0/16 maxlen: 24
194.209.0.0/16 maxlen: 24
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.47.232.0/24 maxlen: 24
193.223.16.0/20 maxlen: 20
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.223.32.0/19 maxlen: 19
193.135.144.0/23 maxlen: 24
212.243.0.0/16 maxlen: 24
2a02:a90::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2001:918::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:17:f4:b9:37:83:5e:b6:f6:5f:66:48:18:35:83:5c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Mar 25 08:48:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=602969ba489a486a207ed6972f652145c0837114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:d9:64:87:54:f0:53:25:13:a3:13:84:db:
64:b8:07:78:a0:7e:8d:18:38:06:82:be:7b:3e:a8:
d1:01:34:a2:6a:ec:a0:0d:d3:65:78:d0:7a:df:69:
0b:20:35:0e:74:c7:e4:73:fe:3a:75:c2:25:58:89:
6f:18:c6:86:85:8c:bb:fc:4a:5a:be:d9:93:47:51:
3f:44:62:bd:75:2a:5e:7c:1c:c6:89:bc:fc:1c:7b:
13:a9:08:3f:4c:fb:3f:79:6b:13:33:90:ec:69:7f:
3a:82:9c:df:02:75:7d:e7:0b:78:aa:00:2d:ad:70:
d0:94:75:57:71:ec:ff:19:bc:81:37:87:e0:fc:37:
83:a4:31:ac:40:9a:a6:b6:4c:77:e7:30:1a:6e:43:
75:48:1e:9f:79:60:72:15:39:43:99:87:86:0b:17:
a3:20:aa:cf:3a:47:73:1a:5e:f4:62:d3:a0:5d:04:
ca:62:46:bd:60:0c:a4:70:c4:e2:c2:bd:5b:2e:a5:
a9:99:00:88:af:65:86:c0:0d:31:ec:ad:23:34:d4:
46:0e:03:d5:46:b9:44:c3:70:05:fa:08:25:79:ea:
22:1a:72:f2:62:bf:7b:2d:32:cc:57:90:4c:6f:45:
a5:d2:78:ac:41:be:95:85:a5:7c:1e:62:b2:e3:27:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:29:69:BA:48:9A:48:6A:20:7E:D6:97:2F:65:21:45:C0:83:71:14
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YClpukiaSGogftaXL2UhRcCDcRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.175.255
193.247.193.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/23
193.247.247.0/24
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
62:5b:32:c6:02:3d:5e:5a:b5:53:34:df:31:f9:49:7e:bd:5f:
fb:ea:3f:6a:77:96:07:12:3e:49:c3:17:ef:ab:7d:38:f5:88:
80:f3:fc:b6:0e:22:a6:db:0b:7b:b4:d9:c9:83:a6:50:51:c9:
33:23:68:2a:6b:e3:45:59:82:2b:e8:e7:ac:66:89:98:0a:bc:
30:31:d6:48:81:dc:35:85:82:09:85:3a:57:62:aa:29:c3:a2:
95:64:4a:82:fe:28:f9:a0:a3:89:0e:ab:29:93:a4:6d:7c:91:
74:2d:0a:85:72:43:91:cd:3a:b9:ac:8d:46:cb:19:ac:67:80:
98:a5:55:1a:8e:33:c0:2b:e6:2b:55:91:db:6f:20:f8:d7:77:
ed:9c:e3:64:dd:9e:ff:b1:98:b7:44:d3:43:ff:a5:9a:17:77:
65:66:6a:0f:eb:16:24:03:62:ae:7f:7a:8e:e9:f8:9d:26:72:
d7:57:6d:26:67:0d:2f:19:98:4f:88:74:6b:15:60:02:c9:30:
b8:7c:e2:28:c9:ec:2e:e7:d2:58:78:28:95:0a:3e:ec:e0:ad:
54:7e:f7:b4:6e:dc:f9:29:87:3a:72:99:09:4a:f3:27:8e:7a:
d4:fb:7f:98:11:29:e4:0e:c8:cd:4c:1d:c3:f7:67:26:08:20:
b6:52:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:02 2025 by rpki-client