Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/E0pofvBF-qVbVGnPiMfAZReNMfg.roa
File: E0pofvBF-qVbVGnPiMfAZReNMfg.roa (raw, json)
Hash identifier: e56jjWsFWxWk4/BLXbTdEVFVq77AyhgdD7zNnV4mBk8=
Subject key identifier: 13:4A:68:7E:F0:45:FA:A5:5B:54:69:CF:88:C7:C0:65:17:8D:31:F8
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 01872B569D650789C35190F208B470BCA72E
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/E0pofvBF-qVbVGnPiMfAZReNMfg.roa
Signing time: Wed 29 Mar 2023 03:08:29 +0000
ROA not before: Wed 29 Mar 2023 03:08:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39824
IP address blocks: 79.134.37.0/24 maxlen: 24
79.134.36.0/24 maxlen: 24
79.134.32.0/22 maxlen: 24
79.134.38.0/23 maxlen: 24
79.134.44.0/22 maxlen: 24
79.134.42.0/23 maxlen: 24
79.134.41.0/24 maxlen: 24
79.134.40.0/24 maxlen: 24
46.36.132.0/22 maxlen: 24
46.36.130.0/23 maxlen: 24
46.36.128.0/23 maxlen: 24
46.36.136.0/22 maxlen: 24
46.36.144.0/23 maxlen: 24
46.36.140.0/22 maxlen: 24
46.36.146.0/23 maxlen: 24
46.36.152.0/22 maxlen: 24
46.36.148.0/22 maxlen: 24
46.36.159.0/24 maxlen: 24
46.36.158.0/24 maxlen: 24
46.36.156.0/23 maxlen: 24
185.103.170.0/23 maxlen: 24
185.103.168.0/23 maxlen: 24
185.103.184.0/23 maxlen: 24
185.103.186.0/23 maxlen: 24
62.84.36.0/22 maxlen: 24
62.84.32.0/22 maxlen: 24
62.84.42.0/23 maxlen: 24
62.84.40.0/23 maxlen: 24
62.84.44.0/23 maxlen: 24
62.84.48.0/20 maxlen: 24
62.84.46.0/23 maxlen: 24
109.239.32.0/21 maxlen: 24
185.106.158.0/23 maxlen: 24
185.106.156.0/23 maxlen: 24
81.88.144.0/21 maxlen: 24
81.88.152.0/22 maxlen: 24
81.88.156.0/22 maxlen: 24
212.45.82.0/23 maxlen: 24
212.45.80.0/23 maxlen: 24
212.45.85.0/24 maxlen: 24
212.45.84.0/24 maxlen: 24
212.45.88.0/22 maxlen: 24
212.45.86.0/23 maxlen: 24
212.45.94.0/23 maxlen: 24
212.45.92.0/23 maxlen: 24
185.102.119.0/24 maxlen: 24
80.249.138.0/23 maxlen: 24
80.249.142.0/23 maxlen: 24
80.249.140.0/23 maxlen: 24
213.232.196.0/23 maxlen: 24
213.232.201.0/24 maxlen: 24
109.239.40.0/22 maxlen: 24
109.239.44.0/22 maxlen: 24
185.98.88.0/22 maxlen: 24
213.232.218.0/23 maxlen: 24
213.232.220.0/22 maxlen: 24
213.232.224.0/24 maxlen: 24
213.232.230.0/23 maxlen: 24
213.232.242.0/23 maxlen: 24
213.232.246.0/23 maxlen: 24
213.232.244.0/24 maxlen: 24
185.98.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2b:56:9d:65:07:89:c3:51:90:f2:08:b4:70:bc:a7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Mar 29 03:08:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=134a687ef045faa55b5469cf88c7c065178d31f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:a0:64:35:0c:84:4e:04:d2:03:09:55:3e:
05:6b:1f:4f:33:95:18:f2:32:c8:4c:b2:31:6d:ee:
53:97:ce:94:69:11:d1:f0:5e:33:a8:8b:fc:b8:59:
82:f8:67:7c:24:1b:10:ed:06:4b:1f:42:68:cb:90:
55:b0:ea:70:80:d6:14:31:fe:29:99:a0:76:1a:50:
7b:f9:b5:6d:2c:b6:12:87:b6:8c:84:9f:9d:69:7a:
5e:03:be:37:19:38:45:9a:5b:5a:96:78:53:8e:7c:
ff:e0:f7:5d:99:86:b8:dd:fe:60:c3:c1:f9:c1:86:
ba:72:fc:64:43:0e:a2:f9:a9:90:be:40:4e:63:ad:
9c:8d:b7:63:c0:bb:bc:c8:05:0c:14:2f:e4:c8:74:
cd:ff:e2:10:ef:06:9f:7e:a9:f2:36:7c:e6:6f:76:
6d:06:dc:69:0f:72:32:7c:57:e7:79:93:27:e4:6b:
0a:bb:d5:67:f5:34:9c:9c:8a:be:23:11:03:ad:f1:
6c:e4:1b:84:5d:c6:b5:96:79:c5:58:6a:38:0d:6e:
34:f8:6b:d0:4c:90:15:ac:5d:dc:e3:5f:ce:f9:24:
d0:8f:ed:03:3c:4c:46:12:0d:e4:e5:3b:bf:d3:c5:
aa:4a:d0:f3:15:3b:78:c6:64:bb:c4:01:8f:49:ca:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:68:7E:F0:45:FA:A5:5B:54:69:CF:88:C7:C0:65:17:8D:31:F8
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/E0pofvBF-qVbVGnPiMfAZReNMfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.128.0/19
62.84.32.0/19
79.134.32.0/20
80.249.138.0-80.249.143.255
81.88.144.0/20
109.239.32.0/20
185.98.76.0/22
185.98.88.0/22
185.102.119.0/24
185.103.168.0/22
185.103.184.0/22
185.106.156.0/22
212.45.80.0/20
213.232.196.0/23
213.232.201.0/24
213.232.218.0-213.232.224.255
213.232.230.0/23
213.232.242.0-213.232.244.255
213.232.246.0/23
Signature Algorithm: sha256WithRSAEncryption
60:0e:31:73:a9:99:d9:f7:c3:6f:96:f0:8f:67:b0:a4:02:15:
6f:2d:ca:45:56:2d:67:29:6f:08:30:ac:e8:79:86:75:75:1a:
58:91:76:58:fb:97:55:84:21:91:17:e0:32:61:82:bd:7e:49:
5d:b6:74:d1:3e:ec:20:e2:dc:3e:27:53:06:6f:8f:53:55:e2:
96:9c:4f:83:7a:a1:f0:a1:f9:38:4e:92:1c:03:ae:6a:54:1c:
20:bf:7b:90:28:5e:9a:65:6d:c9:63:b9:fc:e2:e1:8d:8f:f1:
de:51:31:c3:49:4c:e7:53:16:c4:77:4d:79:75:54:bb:f1:c6:
60:af:0e:95:74:a6:11:fb:58:0f:fd:7a:06:9e:70:d4:ac:e8:
46:7a:0a:31:82:21:4d:fd:16:b0:e9:0a:1c:47:2b:f8:41:ad:
80:c5:91:e6:a4:3c:80:ba:83:cf:1b:25:24:23:7d:d2:53:59:
4f:09:de:32:da:99:2f:0a:91:a2:6a:3c:99:3b:7c:f3:e1:62:
0e:36:4c:d2:fc:13:0c:28:c6:52:d6:5a:8f:de:e5:c0:9e:ec:
ba:99:ec:4e:91:ef:57:a4:b2:86:9c:a6:be:97:19:14:e8:a4:
dc:bd:bd:a6:82:09:8f:09:ab:03:e4:35:94:47:3d:5a:b7:38:
a4:dd:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:20:55 2025 by rpki-client