Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/1GV40i9d5niG3n3yvd8vb3eMNUE.roa
File: 1GV40i9d5niG3n3yvd8vb3eMNUE.roa (raw, json)
Hash identifier: vY2l4G08UZ43IS0dXW50FdCyvVojb1x8O5gQipMU2/Y=
Subject key identifier: D4:65:78:D2:2F:5D:E6:78:86:DE:7D:F2:BD:DF:2F:6F:77:8C:35:41
Certificate issuer: /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial: 01856D2F427263AD080491D4CA0343C603B0
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/1GV40i9d5niG3n3yvd8vb3eMNUE.roa
Signing time: Sun 01 Jan 2023 11:54:51 +0000
ROA not before: Sun 01 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206163
IP address blocks: 185.194.172.0/24 maxlen: 24
185.194.173.0/24 maxlen: 24
185.194.174.0/24 maxlen: 24
185.194.175.0/24 maxlen: 24
194.156.236.0/24 maxlen: 24
194.156.237.0/24 maxlen: 24
194.156.238.0/24 maxlen: 24
194.156.239.0/24 maxlen: 24
2a07:f280::/29 maxlen: 29
2a0a:86c0:55::/48 maxlen: 48
2a0a:86c0:30::/48 maxlen: 48
2a0a:86c0:66::/48 maxlen: 48
2a0a:86c0:69::/48 maxlen: 48
2a0a:86c0:44::/48 maxlen: 48
2a0a:86c0:88::/48 maxlen: 48
2a0a:86c0:8::/48 maxlen: 48
2a0a:86c0:63::/48 maxlen: 48
2a0a:86c0:41::/48 maxlen: 48
2a0a:86c0:77::/48 maxlen: 48
2a0a:86c0:52::/48 maxlen: 48
2a0a:86c0:85::/48 maxlen: 48
2a0a:86c0:5::/48 maxlen: 48
2a0a:86c0:60::/48 maxlen: 48
2a0a:86c0:96::/48 maxlen: 48
2a0a:86c0:16::/48 maxlen: 48
2a0a:86c0:99::/48 maxlen: 48
2a0a:86c0:19::/48 maxlen: 48
2a0a:86c0:74::/48 maxlen: 48
2a0a:86c0:38::/48 maxlen: 48
2a0a:86c0:93::/48 maxlen: 48
2a0a:86c0:13::/48 maxlen: 48
2a0a:86c0:71::/48 maxlen: 48
2a0a:86c0:27::/48 maxlen: 48
2a0a:86c0:82::/48 maxlen: 48
2a0a:86c0:2::/48 maxlen: 48
2a0a:86c0:35::/48 maxlen: 48
2a0a:86c0:90::/48 maxlen: 48
2a0a:86c0:10::/48 maxlen: 48
2a0a:86c0:46::/48 maxlen: 48
2a0a:86c0:49::/48 maxlen: 48
2a0a:86c0:24::/48 maxlen: 48
2a0a:86c0:68::/48 maxlen: 48
2a0a:86c0:43::/48 maxlen: 48
2a0a:86c0:21::/48 maxlen: 48
2a0a:86c0:57::/48 maxlen: 48
2a0a:86c0:32::/48 maxlen: 48
2a0a:86c0:65::/48 maxlen: 48
2a0a:86c0:40::/48 maxlen: 48
2a0a:86c0:76::/48 maxlen: 48
2a0a:86c0:79::/48 maxlen: 48
2a0a:86c0:54::/48 maxlen: 48
2a0a:86c0:98::/48 maxlen: 48
2a0a:86c0:18::/48 maxlen: 48
2a0a:86c0:73::/48 maxlen: 48
2a0a:86c0:51::/48 maxlen: 48
2a0a:86c0:87::/48 maxlen: 48
2a0a:86c0:7::/48 maxlen: 48
2a0a:86c0:62::/48 maxlen: 48
2a0a:86c0:95::/48 maxlen: 48
2a0a:86c0:15::/48 maxlen: 48
2a0a:86c0:70::/48 maxlen: 48
2a0a:86c0:26::/48 maxlen: 48
2a0a:86c0:29::/48 maxlen: 48
2a0a:86c0:84::/48 maxlen: 48
2a0a:86c0:4::/48 maxlen: 48
2a0a:86c0::/29 maxlen: 29
2a0a:86c0:48::/48 maxlen: 48
2a0a:86c0:23::/48 maxlen: 48
2a0a:86c0:81::/48 maxlen: 48
2a0a:86c0:1::/48 maxlen: 48
2a0a:86c0:37::/48 maxlen: 48
2a0a:86c0:92::/48 maxlen: 48
2a0a:86c0:12::/48 maxlen: 48
2a0a:86c0:45::/48 maxlen: 48
2a0a:86c0:20::/48 maxlen: 48
2a0a:86c0:56::/48 maxlen: 48
2a0a:86c0:59::/48 maxlen: 48
2a0a:86c0:34::/48 maxlen: 48
2a0a:86c0:78::/48 maxlen: 48
2a0a:86c0:53::/48 maxlen: 48
2a0a:86c0:31::/48 maxlen: 48
2a0a:86c0:67::/48 maxlen: 48
2a0a:86c0:42::/48 maxlen: 48
2a0a:86c0:75::/48 maxlen: 48
2a0a:86c0:50::/48 maxlen: 48
2a0a:86c0:86::/48 maxlen: 48
2a0a:86c0:6::/48 maxlen: 48
2a0a:86c0:89::/48 maxlen: 48
2a0a:86c0:9::/48 maxlen: 48
2a0a:86c0:64::/48 maxlen: 48
2a0a:86c0:28::/48 maxlen: 48
2a0a:86c0:83::/48 maxlen: 48
2a0a:86c0:3::/48 maxlen: 48
2a0a:86c0:61::/48 maxlen: 48
2a0a:86c0:97::/48 maxlen: 48
2a0a:86c0:17::/48 maxlen: 48
2a0a:86c0:72::/48 maxlen: 48
2a0a:86c0:25::/48 maxlen: 48
2a0a:86c0:100::/48 maxlen: 48
2a0a:86c0:80::/48 maxlen: 48
2a0a:86c0::/48 maxlen: 48
2a0a:86c0:36::/48 maxlen: 48
2a0a:86c0:39::/48 maxlen: 48
2a0a:86c0:94::/48 maxlen: 48
2a0a:86c0:14::/48 maxlen: 48
2a0a:86c0:58::/48 maxlen: 48
2a0a:86c0:33::/48 maxlen: 48
2a0a:86c0:91::/48 maxlen: 48
2a0a:86c0:11::/48 maxlen: 48
2a0a:86c0:47::/48 maxlen: 48
2a0a:86c0:22::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:42:72:63:ad:08:04:91:d4:ca:03:43:c6:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Validity
Not Before: Jan 1 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d46578d22f5de67886de7df2bddf2f6f778c3541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4f:ed:d4:37:d0:78:8f:41:a8:ff:f3:00:bc:
cc:61:0a:e1:a5:6e:1d:65:9c:50:1f:f6:84:58:af:
f9:06:6b:1b:e5:8f:95:d1:b5:7a:7a:51:59:8c:bb:
10:d2:69:9b:f1:e3:3e:18:54:03:18:11:d8:36:83:
5f:98:57:e7:7f:36:d2:0d:15:3f:6b:91:a1:16:67:
ce:1d:69:ca:d4:93:66:3e:8f:20:6a:0c:61:1b:53:
95:8a:53:ea:33:2c:6c:63:e1:18:93:c9:44:49:5a:
db:60:3e:2c:19:c4:94:a9:cd:1b:8a:c4:2a:d2:08:
a6:bf:9b:54:1e:a2:25:6d:4e:f4:04:8c:df:bb:a9:
60:b1:72:99:04:41:6b:b9:ed:82:0a:e9:67:68:bb:
e8:64:4d:63:2c:21:3a:86:d6:3c:70:f3:87:46:49:
f9:fb:21:2d:d9:49:bf:53:78:49:23:77:e9:67:77:
e0:65:e0:ca:49:ea:48:d1:8c:fb:38:e3:41:04:5e:
d5:bf:eb:dc:6e:5c:b8:a0:cc:23:36:12:d0:22:d3:
1c:e7:45:f9:81:a7:5d:f5:6c:46:89:78:5a:84:e2:
3a:2d:c2:1d:00:ef:f3:94:1e:c7:db:a9:d4:f1:fe:
ed:bd:b0:18:73:1b:b0:d0:87:eb:f3:32:93:95:32:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:65:78:D2:2F:5D:E6:78:86:DE:7D:F2:BD:DF:2F:6F:77:8C:35:41
X509v3 Authority Key Identifier:
keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/1GV40i9d5niG3n3yvd8vb3eMNUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.172.0/22
194.156.236.0/22
IPv6:
2a07:f280::/29
2a0a:86c0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:9b:97:94:ad:80:a2:2d:fb:48:34:06:28:c2:df:1f:fd:28:
3e:74:c5:13:03:54:57:ac:0f:b0:52:8d:39:50:43:70:30:53:
f4:66:d9:ee:97:d6:90:eb:78:b8:ab:72:6d:0e:50:bd:b7:94:
1f:ca:a4:ec:cc:05:5f:2a:f2:cd:d5:90:cd:d1:ae:bb:5a:e5:
5a:7a:c2:7a:38:1a:ed:c0:e7:74:99:d4:e3:42:7e:8f:db:54:
f5:c2:86:70:09:36:5d:9a:d4:f0:26:0d:a1:0c:8f:48:2e:48:
6f:db:c1:44:b6:68:af:08:6c:d6:15:44:3a:ee:dd:de:8d:b9:
d3:c0:da:b2:ac:5c:d9:db:f6:d1:20:23:6f:b3:17:5c:19:13:
13:b3:76:77:ef:62:fc:78:2b:9b:58:02:75:d5:8a:27:49:95:
ce:75:ca:4f:24:0d:15:28:f1:ca:31:01:38:a2:a7:fe:99:6f:
17:02:0b:ea:7b:89:ca:78:82:f0:f4:18:48:ef:87:3d:9f:c0:
9c:76:97:b4:ce:ea:e0:98:bf:cd:80:c9:48:f2:e0:e6:e2:b0:
2c:1f:64:25:a7:54:1c:48:d3:b7:60:80:ba:c6:ad:56:bb:31:
f1:77:03:0c:5a:67:38:56:30:e9:01:e9:bb:90:c3:99:a2:5e:
68:d3:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:23:03 2025 by rpki-client