Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/rQe30_XKgFbacO-ibcP7dD8eYsU.roa
File: rQe30_XKgFbacO-ibcP7dD8eYsU.roa (raw, json)
Hash identifier: eZWLQNJg5XR4DMy+HEJF0wGGqtmtJG0hVPQ91JLZ7dA=
Subject key identifier: AD:07:B7:D3:F5:CA:80:56:DA:70:EF:A2:6D:C3:FB:74:3F:1E:62:C5
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: DAA4BD
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/rQe30_XKgFbacO-ibcP7dD8eYsU.roa
Signing time: Sat 01 Jan 2022 13:06:38 +0000
ROA not before: Sat 01 Jan 2022 13:06:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5385
IP address blocks: 194.208.56.0/24 maxlen: 24
194.208.52.0/24 maxlen: 24
194.208.63.0/24 maxlen: 24
194.208.61.0/24 maxlen: 24
194.208.60.0/24 maxlen: 24
194.208.68.0/24 maxlen: 24
194.208.76.0/24 maxlen: 24
194.208.77.0/24 maxlen: 24
194.208.74.0/24 maxlen: 24
194.208.72.0/24 maxlen: 24
194.208.78.0/24 maxlen: 24
194.208.83.0/24 maxlen: 24
194.208.82.0/24 maxlen: 24
194.208.80.0/24 maxlen: 24
194.208.81.0/24 maxlen: 24
194.208.79.0/24 maxlen: 24
194.208.89.0/24 maxlen: 24
194.208.96.0/23 maxlen: 23
194.208.92.0/24 maxlen: 24
194.208.93.0/24 maxlen: 24
194.208.104.0/24 maxlen: 24
194.208.105.0/24 maxlen: 24
194.208.102.0/24 maxlen: 24
194.208.1.0/24 maxlen: 24
194.208.0.0/17 maxlen: 17
194.208.7.0/24 maxlen: 24
194.208.10.0/24 maxlen: 24
194.208.11.0/24 maxlen: 24
194.208.15.0/24 maxlen: 24
194.208.12.0/24 maxlen: 24
194.208.13.0/24 maxlen: 24
194.208.18.0/24 maxlen: 24
194.208.23.0/24 maxlen: 24
194.208.25.0/24 maxlen: 24
194.208.43.0/24 maxlen: 24
194.208.42.0/24 maxlen: 24
194.208.40.0/24 maxlen: 24
194.208.41.0/24 maxlen: 24
194.208.49.0/24 maxlen: 24
194.208.45.0/24 maxlen: 24
194.208.46.0/24 maxlen: 24
194.208.51.0/24 maxlen: 24
194.208.160.0/20 maxlen: 20
194.208.186.0/24 maxlen: 24
194.208.184.0/21 maxlen: 21
194.208.187.0/24 maxlen: 24
194.208.192.0/18 maxlen: 18
194.208.107.0/24 maxlen: 24
194.208.127.0/24 maxlen: 24
194.183.148.0/24 maxlen: 24
194.183.146.0/24 maxlen: 24
194.183.147.0/24 maxlen: 24
194.183.152.0/24 maxlen: 24
194.183.151.0/24 maxlen: 24
194.183.153.0/24 maxlen: 24
80.75.224.0/20 maxlen: 20
194.183.128.0/19 maxlen: 19
194.183.131.0/24 maxlen: 24
194.183.132.0/24 maxlen: 24
194.183.129.0/24 maxlen: 24
194.183.130.0/24 maxlen: 24
194.183.128.0/24 maxlen: 24
194.183.136.0/24 maxlen: 24
194.183.140.0/24 maxlen: 24
194.183.143.0/24 maxlen: 24
194.208.243.0/24 maxlen: 24
194.208.245.0/24 maxlen: 24
2001:af8::/32 maxlen: 32
2001:af8:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14329021 (0xdaa4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Jan 1 13:06:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad07b7d3f5ca8056da70efa26dc3fb743f1e62c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:b0:94:f5:9e:32:34:7a:97:f1:ed:52:08:
d3:a2:ea:ce:36:b5:1a:3f:3b:c0:c5:9a:4c:08:b6:
da:34:fe:f4:62:a2:7a:bf:c2:16:d3:28:db:64:13:
ae:d2:52:3c:01:b2:1d:26:48:46:dd:c4:09:47:cc:
2b:91:ba:07:d0:cb:9f:ad:12:b3:c6:98:0d:db:04:
b7:e4:19:37:d2:b4:6b:ca:09:f3:5a:ec:ae:85:7d:
63:de:01:b9:b3:cc:7d:6d:6c:1f:2a:7a:43:e8:63:
c7:07:8d:bd:bf:09:49:a0:fc:01:cc:f9:e6:c0:e9:
76:fc:b6:70:b3:24:a1:bd:17:ae:f4:34:1e:82:1b:
0c:4e:19:74:91:ce:6c:c3:94:0e:2c:8e:e3:c3:f9:
64:61:5e:17:c1:04:b6:92:b2:1a:ed:a3:b2:d8:30:
44:b1:df:10:56:98:d6:d6:0c:a7:e9:74:87:30:83:
1e:81:26:8f:63:13:d7:57:a1:57:43:40:76:e4:b8:
86:80:d6:a5:38:57:30:28:d0:19:9c:68:9f:d1:b6:
74:0e:11:62:8e:8b:04:bb:4c:17:89:9b:c1:a1:29:
56:14:33:b2:5b:c4:89:b3:01:d5:86:59:4d:50:31:
99:d7:e4:ba:08:8b:74:23:fc:58:9f:35:bf:cb:bf:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:07:B7:D3:F5:CA:80:56:DA:70:EF:A2:6D:C3:FB:74:3F:1E:62:C5
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/rQe30_XKgFbacO-ibcP7dD8eYsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.224.0/20
194.183.128.0/19
194.208.0.0/17
194.208.160.0/20
194.208.184.0-194.208.255.255
IPv6:
2001:af8::/32
Signature Algorithm: sha256WithRSAEncryption
80:eb:8c:e7:cb:04:6a:d5:59:b6:ef:1e:ee:c0:f1:cc:b5:57:
91:80:96:b6:9e:0c:e6:65:c6:8f:a6:6e:70:ef:4e:9c:3d:e3:
6f:85:2f:d3:2c:44:0e:be:ed:02:aa:55:86:3c:68:59:ca:1d:
73:2f:ee:b6:f8:ca:83:f5:45:83:d7:a0:15:e2:4a:3a:ed:24:
b7:db:bd:31:a1:16:7c:07:0d:a2:be:f7:c0:93:7c:86:ae:22:
ce:01:49:3c:a3:90:a8:a7:ad:e0:ef:4a:46:f1:db:23:cb:cb:
b3:ba:dc:3a:ff:38:be:ef:33:a2:39:76:be:53:e6:e3:71:fe:
89:4b:c1:0e:b5:eb:3d:fe:56:c5:8b:4f:43:64:8f:c1:29:19:
60:60:8c:2b:38:cb:2f:13:a6:df:41:20:db:83:1a:ea:89:14:
4d:07:9d:4e:ef:4a:cf:3a:37:4e:f3:b7:09:13:2a:cf:79:d1:
57:f1:32:ed:53:6d:ad:6a:00:7e:8c:5d:a8:b5:9e:e1:19:00:
62:c2:6b:52:d3:2b:ba:5b:d1:61:a9:96:bc:09:6f:01:32:13:
7e:1a:63:77:35:09:48:08:44:88:d8:d5:90:9a:91:07:73:9b:
15:c6:af:07:b7:5a:97:0a:dd:61:3a:55:b8:63:92:59:1e:18:
03:99:15:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:39 2025 by rpki-client