Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/tE-eVXE1VTJkGLCGmxz-UpAx_rU.roa
File: tE-eVXE1VTJkGLCGmxz-UpAx_rU.roa (raw, json)
Hash identifier: J82uuOevJUdbGjBgHJ0/7nFvcENpkBbgdhgfO4ytvog=
Subject key identifier: B4:4F:9E:55:71:35:55:32:64:18:B0:86:9B:1C:FE:52:90:31:FE:B5
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 010DB970
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/tE-eVXE1VTJkGLCGmxz-UpAx_rU.roa
Signing time: Thu 14 Apr 2022 11:29:44 +0000
ROA not before: Thu 14 Apr 2022 11:29:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200107
IP address blocks: 185.85.15.0/24 maxlen: 24
185.85.14.0/24 maxlen: 24
185.85.12.0/24 maxlen: 24
185.54.222.0/24 maxlen: 24
185.54.220.0/24 maxlen: 24
93.159.226.0/24 maxlen: 24
93.159.230.0/23 maxlen: 23
93.159.228.0/23 maxlen: 23
77.74.178.0/23 maxlen: 23
77.74.176.0/24 maxlen: 24
77.74.176.0/23 maxlen: 24
82.202.185.0/24 maxlen: 24
82.202.184.0/23 maxlen: 23
82.202.184.0/24 maxlen: 24
77.74.182.0/24 maxlen: 24
77.74.183.0/24 maxlen: 24
77.74.180.0/24 maxlen: 24
77.74.181.0/24 maxlen: 24
2a03:2480:802f::/48 maxlen: 48
2a03:2480:802a::/48 maxlen: 48
2a03:2480:8025::/48 maxlen: 48
2a03:2480:8020::/48 maxlen: 48
2a03:2480:80::/48 maxlen: 48
2a03:2480:8023::/48 maxlen: 48
2a03:2480:8027::/48 maxlen: 48
2a03:2480:8022::/48 maxlen: 48
2a03:2480:8000::/44 maxlen: 44
2a03:2480:8031::/48 maxlen: 48
2a03:2480:802c::/48 maxlen: 48
2a03:2480:70::/48 maxlen: 48
2a03:2480:8030::/48 maxlen: 48
2a03:2480:8033::/48 maxlen: 48
2a03:2480:802e::/48 maxlen: 48
2a03:2480:8029::/48 maxlen: 48
2a03:2480:69::/48 maxlen: 48
2a03:2480:8024::/48 maxlen: 48
2a03:2480:8032::/48 maxlen: 48
2a03:2480:802d::/48 maxlen: 48
2a03:2480:8010::/44 maxlen: 44
2a03:2480:8028::/48 maxlen: 48
2a03:2480:68::/48 maxlen: 48
2a03:2480:802b::/48 maxlen: 48
2a03:2480:8026::/48 maxlen: 48
2a03:2480:8021::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17676656 (0x10db970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Apr 14 11:29:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b44f9e55713555326418b0869b1cfe529031feb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:4f:18:2a:41:2f:26:03:e4:05:b5:c5:31:
56:e2:f9:21:c0:f6:da:a3:d1:c9:02:31:49:33:bc:
c3:4c:6a:1e:64:b1:c3:74:b9:73:40:4e:ef:63:f6:
5c:0a:a0:f4:40:b0:93:a9:3c:61:b5:7f:f0:d6:fa:
f1:ca:eb:c7:36:a5:ea:a5:55:63:2f:4a:25:fd:71:
53:2c:d8:46:dd:f9:5f:ac:d1:68:9d:ae:ff:f5:5c:
74:e7:c0:24:fb:2b:b3:ce:70:78:ee:84:8a:d7:8c:
58:6d:e2:2b:66:be:bd:7c:0a:0e:a4:c5:2c:a9:57:
1a:85:ae:d7:84:41:73:fc:4d:ab:ba:9d:54:c9:63:
1b:e9:63:a9:35:46:8b:9d:12:f7:43:bc:88:03:95:
5a:7d:8a:41:60:c0:88:db:73:6a:bb:fb:91:fb:52:
06:e9:26:c7:d5:91:2a:77:54:92:86:3f:d9:56:a7:
3c:d3:4b:e5:df:8d:21:61:e5:db:00:f9:99:e6:00:
1b:03:2b:2a:9f:ce:ec:c5:5b:0f:25:4d:4c:15:36:
ba:72:44:3b:c0:a0:4c:2c:ff:30:61:61:83:75:99:
4e:a7:36:93:c7:ab:a0:c6:ee:47:3c:ee:df:87:bb:
00:18:d1:d3:2c:42:3e:a9:62:d3:66:99:7d:82:d2:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4F:9E:55:71:35:55:32:64:18:B0:86:9B:1C:FE:52:90:31:FE:B5
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/tE-eVXE1VTJkGLCGmxz-UpAx_rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.176.0/21
82.202.184.0/23
93.159.226.0/24
93.159.228.0/22
185.54.220.0/24
185.54.222.0/24
185.85.12.0/24
185.85.14.0/23
IPv6:
2a03:2480:68::/47
2a03:2480:70::/48
2a03:2480:80::/48
2a03:2480:8000::-2a03:2480:8033:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:15:7e:9a:3d:8f:03:db:8e:bb:a6:75:ab:ef:e7:4a:81:46:
42:f7:58:60:33:ea:35:1b:06:46:b3:57:e2:31:b3:eb:ba:74:
08:99:76:76:9f:54:1e:2d:bd:b0:f3:e5:6f:b2:27:d4:6e:8c:
b0:59:0b:77:4b:fb:5d:1d:26:d9:d9:15:28:90:b1:f7:51:dd:
7d:04:bd:ca:99:d2:1b:17:1f:5d:ff:c5:31:83:1e:35:f9:44:
a1:6d:a3:c0:a8:bb:83:fa:e2:61:dd:27:61:3e:22:3a:d7:7e:
ab:0d:57:aa:b4:5c:f4:ca:18:5b:eb:ff:aa:43:48:38:d0:ec:
77:45:87:fb:7c:4a:f1:25:70:ba:3f:bd:18:83:4e:10:84:c8:
7a:bf:90:b1:15:a2:28:a1:01:c0:d4:b9:7f:b2:73:68:96:cb:
f0:c0:7e:0b:27:b5:87:9c:29:1d:89:c8:31:46:0b:e9:7c:93:
a8:95:ff:3c:d3:10:32:15:b4:8a:f8:d8:77:f2:d2:99:b9:03:
2e:2a:6c:44:6d:fc:48:ee:59:fb:02:e6:fc:7e:2a:f2:e7:1a:
61:fc:e6:a0:ca:17:b4:30:71:97:6f:0a:63:b5:d8:4b:5a:fb:
98:3b:1d:6f:6a:f8:56:9a:43:7b:4f:82:ee:b5:04:a6:7a:c8:
96:d9:da:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:19:23 2025 by rpki-client