Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/JqVAnMvyvZiFets1BN0vGjG48Dk.roa
File: JqVAnMvyvZiFets1BN0vGjG48Dk.roa (raw, json)
Hash identifier: Z1JvTsCBIGfkW+Zs9BS8o0CU0lvIGJmJVdGlCZpCidA=
Subject key identifier: 26:A5:40:9C:CB:F2:BD:98:85:7A:DB:35:04:DD:2F:1A:31:B8:F0:39
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 0AA8F8A7
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/JqVAnMvyvZiFets1BN0vGjG48Dk.roa
Signing time: Sat 01 Jan 2022 02:57:53 +0000
ROA not before: Sat 01 Jan 2022 02:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5610
IP address blocks: 80.188.0.0/17 maxlen: 17
80.188.0.0/16 maxlen: 16
83.208.64.0/18 maxlen: 18
88.83.160.0/19 maxlen: 19
194.228.128.0/17 maxlen: 17
88.83.175.0/24 maxlen: 24
80.188.40.0/24 maxlen: 24
90.178.0.0/15 maxlen: 15
83.208.0.0/18 maxlen: 18
194.228.59.0/24 maxlen: 24
83.208.0.0/16 maxlen: 16
194.228.68.0/24 maxlen: 24
109.80.0.0/15 maxlen: 15
194.228.76.0/24 maxlen: 24
217.194.160.0/20 maxlen: 20
194.228.79.0/24 maxlen: 24
85.70.0.0/17 maxlen: 17
85.70.0.0/16 maxlen: 16
85.70.0.0/15 maxlen: 15
37.188.128.0/17 maxlen: 17
80.188.128.0/17 maxlen: 17
37.188.128.0/21 maxlen: 21
37.188.136.0/21 maxlen: 21
217.117.208.0/20 maxlen: 20
37.188.144.0/21 maxlen: 21
37.188.144.0/20 maxlen: 20
37.188.152.0/21 maxlen: 21
83.208.128.0/19 maxlen: 19
81.90.160.0/20 maxlen: 20
81.90.170.0/24 maxlen: 24
81.90.168.0/24 maxlen: 24
81.90.173.0/24 maxlen: 24
85.70.128.0/17 maxlen: 17
85.160.0.0/15 maxlen: 15
83.69.32.0/19 maxlen: 19
90.177.0.0/16 maxlen: 16
194.228.0.0/17 maxlen: 17
194.228.11.0/24 maxlen: 24
194.228.0.0/16 maxlen: 16
88.100.0.0/15 maxlen: 15
194.228.13.0/24 maxlen: 24
194.228.20.0/24 maxlen: 24
88.100.0.0/14 maxlen: 14
160.218.0.0/16 maxlen: 16
194.228.32.0/24 maxlen: 24
160.218.13.0/24 maxlen: 24
90.176.64.0/18 maxlen: 18
92.243.192.0/19 maxlen: 19
109.81.213.0/24 maxlen: 24
109.81.211.0/24 maxlen: 24
109.81.212.0/24 maxlen: 24
109.81.209.0/24 maxlen: 24
90.176.32.0/19 maxlen: 19
109.81.210.0/24 maxlen: 24
88.102.0.0/16 maxlen: 16
109.81.208.0/24 maxlen: 24
88.102.0.0/15 maxlen: 15
109.81.214.0/24 maxlen: 24
85.193.0.0/18 maxlen: 18
109.81.215.0/24 maxlen: 24
90.180.0.0/14 maxlen: 14
185.61.228.0/22 maxlen: 22
90.176.128.0/17 maxlen: 17
90.183.78.0/24 maxlen: 24
90.183.76.0/24 maxlen: 24
90.183.77.0/24 maxlen: 24
90.183.72.0/24 maxlen: 24
80.188.222.0/24 maxlen: 24
37.188.224.0/21 maxlen: 21
37.188.232.0/21 maxlen: 21
85.71.0.0/16 maxlen: 16
37.188.240.0/21 maxlen: 21
37.188.240.0/20 maxlen: 20
37.188.248.0/21 maxlen: 21
37.188.160.0/21 maxlen: 21
37.188.160.0/20 maxlen: 20
37.188.168.0/21 maxlen: 21
37.188.176.0/20 maxlen: 20
37.188.176.0/21 maxlen: 21
37.188.184.0/21 maxlen: 21
37.188.192.0/23 maxlen: 23
37.188.194.0/23 maxlen: 23
90.182.6.0/24 maxlen: 24
90.182.108.0/24 maxlen: 24
2001:41d8::/32 maxlen: 32
2a00:1028::/32 maxlen: 32
2a00:1028::/29 maxlen: 29
2a00:1028:d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178845863 (0xaa8f8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jan 1 02:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26a5409ccbf2bd98857adb3504dd2f1a31b8f039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:1b:e9:3b:5b:fd:a3:56:20:47:13:a7:5f:
15:a2:21:c3:2f:8b:e6:94:cc:50:4d:bc:90:4e:88:
0b:2a:8f:55:17:4f:b6:33:79:6c:29:08:1a:50:30:
cf:5a:be:51:ee:a1:a8:f0:73:c0:91:c2:5e:7a:06:
2e:4c:d1:10:86:93:06:09:0a:eb:d2:76:3e:d2:86:
16:24:6b:c5:a4:63:c9:70:bb:72:1e:b8:99:73:7e:
e6:19:87:d9:81:ef:13:2e:65:0c:cc:bf:34:00:16:
7d:7c:90:25:c8:17:07:28:9f:20:26:14:d9:dd:17:
c7:b1:90:a4:82:63:b9:3d:6d:a9:35:6e:bd:b5:17:
4d:df:50:d1:06:c4:37:02:72:a2:aa:be:a2:ec:f8:
a4:89:ba:25:c3:8b:9a:be:4c:c6:a7:c5:e1:29:87:
e5:e3:68:3c:16:5c:1c:17:ea:47:1d:c0:5f:76:22:
b1:9b:c1:d5:21:9c:ad:88:74:c7:ca:d6:a4:30:56:
02:84:9f:0a:77:ce:d0:b8:43:33:7d:82:d2:b4:d9:
ef:26:4a:44:96:a7:e6:67:ca:12:74:2f:dc:96:2d:
38:c6:0d:3f:10:da:9e:50:ab:38:7a:95:7d:55:18:
79:ec:36:97:31:22:53:6c:5a:25:55:ba:08:83:56:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:40:9C:CB:F2:BD:98:85:7A:DB:35:04:DD:2F:1A:31:B8:F0:39
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/JqVAnMvyvZiFets1BN0vGjG48Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.188.128.0/17
80.188.0.0/16
81.90.160.0/20
83.69.32.0/19
83.208.0.0/16
85.70.0.0/15
85.160.0.0/15
85.193.0.0/18
88.83.160.0/19
88.100.0.0/14
90.176.32.0-90.183.255.255
92.243.192.0/19
109.80.0.0/15
160.218.0.0/16
185.61.228.0/22
194.228.0.0/16
217.117.208.0/20
217.194.160.0/20
IPv6:
2001:41d8::/32
2a00:1028::/29
Signature Algorithm: sha256WithRSAEncryption
00:50:81:53:7b:da:09:e3:f1:49:70:a6:39:f6:56:91:39:6f:
0a:4d:90:de:5b:17:32:2c:8e:4d:f3:97:11:fa:bd:f8:e7:86:
fa:4b:a5:a8:b4:36:61:a7:7a:2f:ce:a7:fe:1f:87:86:b7:9b:
ad:e3:7b:6f:b6:29:15:f3:73:99:96:43:58:7c:9c:c9:6c:ee:
b6:45:be:39:86:91:2a:70:18:9e:9b:d4:33:0f:a0:61:4f:4d:
17:1b:1e:98:ea:46:06:5d:a0:4f:cd:1a:cb:c2:1a:1b:49:c2:
99:57:7c:7d:b4:5a:63:fb:6d:96:57:13:4c:b4:72:79:db:ee:
e5:75:ac:ca:ba:ad:fd:29:ac:09:41:ae:e6:b4:a3:e5:5a:1f:
78:bc:99:be:5c:5a:74:2b:06:3c:fe:7e:4e:c7:ac:b4:8d:3b:
19:1f:3e:35:8b:be:4e:0d:04:db:ec:d8:8d:5f:ca:ec:0c:ac:
6f:2b:9b:9c:05:87:2c:86:a3:8a:47:50:7e:78:ba:dc:a5:01:
12:53:e7:c6:ba:7b:63:cf:ed:c3:4f:be:18:34:2f:29:d4:35:
25:f8:43:eb:67:ce:45:b5:44:1c:3a:82:76:38:84:f5:77:6b:
98:07:94:0c:5b:dc:af:8a:35:7a:67:b7:9d:b1:ce:bf:e8:1f:
40:6a:63:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:46 2025 by rpki-client