Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/1g76WO65BM6JA20ion_0hXsm5Lg.roa
File: 1g76WO65BM6JA20ion_0hXsm5Lg.roa (raw, json)
Hash identifier: FYXtxPIO7blDWrBpb4+yjkulAHjpMBCuHGV6HKojbcE=
Subject key identifier: D6:0E:FA:58:EE:B9:04:CE:89:03:6D:22:A2:7F:F4:85:7B:26:E4:B8
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 1A818535
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/1g76WO65BM6JA20ion_0hXsm5Lg.roa
Signing time: Wed 12 Jan 2022 14:08:06 +0000
ROA not before: Wed 12 Jan 2022 14:08:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48544
IP address blocks: 83.174.144.0/22 maxlen: 24
194.145.248.0/22 maxlen: 23
78.159.144.0/22 maxlen: 24
91.231.172.0/23 maxlen: 24
185.29.145.0/24 maxlen: 24
185.29.144.0/24 maxlen: 24
185.29.146.0/24 maxlen: 24
87.252.106.0/23 maxlen: 24
188.116.11.0/24 maxlen: 24
188.116.10.0/24 maxlen: 24
188.116.8.0/23 maxlen: 23
188.116.32.0/23 maxlen: 24
185.164.185.0/24 maxlen: 24
185.164.186.0/23 maxlen: 24
46.102.112.0/24 maxlen: 24
46.102.114.0/24 maxlen: 24
46.102.113.0/24 maxlen: 24
46.102.115.0/24 maxlen: 24
89.36.206.0/24 maxlen: 24
89.36.205.0/24 maxlen: 24
89.36.204.0/24 maxlen: 24
89.36.207.0/24 maxlen: 24
185.39.24.0/23 maxlen: 24
185.39.27.0/24 maxlen: 24
185.39.26.0/24 maxlen: 24
188.116.56.0/23 maxlen: 24
188.116.60.0/23 maxlen: 23
188.116.63.0/24 maxlen: 24
188.116.62.0/24 maxlen: 24
185.84.84.0/22 maxlen: 24
45.10.72.0/22 maxlen: 22
217.20.250.0/23 maxlen: 24
217.20.248.0/23 maxlen: 24
212.69.137.0/24 maxlen: 24
212.69.136.0/24 maxlen: 24
212.69.139.0/24 maxlen: 24
212.69.138.0/24 maxlen: 24
212.69.143.0/24 maxlen: 24
212.69.142.0/24 maxlen: 24
212.69.141.0/24 maxlen: 24
212.69.140.0/24 maxlen: 24
89.32.159.0/24 maxlen: 24
89.32.158.0/24 maxlen: 24
89.32.157.0/24 maxlen: 24
89.32.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444695861 (0x1a818535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Jan 12 14:08:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d60efa58eeb904ce89036d22a27ff4857b26e4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:d2:36:7c:67:cb:f6:0c:38:25:67:01:35:
cd:a2:4e:5d:fe:d2:b0:7e:15:0b:0f:bf:e0:85:5e:
08:9b:62:4e:a2:e7:3a:c4:59:12:c2:12:55:98:95:
da:f4:b3:df:4c:bc:11:9a:44:06:74:15:a5:ec:bd:
78:b7:7e:da:99:f0:96:f8:93:3c:6f:57:57:e2:ac:
cb:7e:6f:53:ae:10:ab:bd:03:74:39:df:08:a2:0d:
f3:03:e7:ca:a3:a8:0c:15:0f:47:62:f8:d4:cc:6b:
6c:6c:5c:ee:2c:da:7c:c3:7f:59:47:09:8e:30:df:
1d:cd:30:c4:30:ac:c2:d5:14:8c:23:e4:d4:2a:ec:
df:d8:6d:1f:3f:96:4c:9f:77:34:db:84:e3:bd:63:
a2:01:71:a1:3d:eb:31:c3:ad:dd:98:77:e5:c5:00:
6e:66:db:4a:d7:fe:00:c2:c4:0c:fa:d1:45:b7:21:
32:78:82:d2:3e:f7:38:67:09:64:96:b2:de:84:2a:
ab:e6:61:b7:bd:20:d3:e2:c9:8a:95:10:c8:57:cc:
ea:36:20:02:9b:1c:82:db:db:69:d0:a0:4f:95:0b:
05:8d:84:e6:88:f0:e6:59:6c:1f:f7:4a:0b:b9:2d:
f6:16:e1:04:b1:3a:dc:f5:55:af:89:b4:39:67:35:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0E:FA:58:EE:B9:04:CE:89:03:6D:22:A2:7F:F4:85:7B:26:E4:B8
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/1g76WO65BM6JA20ion_0hXsm5Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.72.0/22
46.102.112.0/22
78.159.144.0/22
83.174.144.0/22
87.252.106.0/23
89.32.156.0/22
89.36.204.0/22
91.231.172.0/23
185.29.144.0-185.29.146.255
185.39.24.0/22
185.84.84.0/22
185.164.185.0-185.164.187.255
188.116.8.0/22
188.116.32.0/23
188.116.56.0/23
188.116.60.0/22
194.145.248.0/22
212.69.136.0/21
217.20.248.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:4e:fc:c5:cf:3a:fa:5d:a2:b5:5c:d7:92:90:46:93:87:33:
1f:1b:a3:bf:d4:5b:35:9d:84:f7:0e:a1:09:f0:0e:26:90:6d:
26:1c:49:17:c9:cb:1f:ae:9a:f8:da:e9:d6:e9:99:a6:ce:70:
92:76:d7:2f:35:ee:84:4a:34:d8:7c:4e:29:ec:aa:c4:9b:90:
b2:af:eb:59:06:f1:38:9c:d4:8a:ca:c2:d1:99:03:1e:00:7a:
57:a2:41:b2:f3:11:ae:95:22:83:bc:c0:e9:9c:70:56:81:9d:
a5:4e:07:07:cb:a7:ce:ba:c3:24:ba:1f:cb:32:67:a1:a8:08:
85:40:dc:8d:06:7c:4a:6f:f1:4e:7b:85:b2:45:71:37:9b:51:
21:18:a4:93:97:7e:c4:c2:f6:e9:bb:01:f2:42:97:02:5b:7e:
83:21:d7:f9:24:1f:2e:ee:ee:75:50:b5:ea:fc:03:5e:91:c0:
77:07:b3:3c:d8:90:75:fd:ab:46:d2:6d:fc:6f:7a:72:6c:ef:
6d:f9:cd:2f:c1:6d:b7:30:9b:eb:01:b4:4c:a1:91:48:61:1a:
ef:11:10:32:86:84:c8:b4:89:33:a1:14:b6:34:d8:11:5b:bb:
40:34:cc:eb:11:45:25:9f:39:eb:ac:24:1e:be:f3:9a:b5:11:
bd:1d:97:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:58 2025 by rpki-client