Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/3X0HT2CjHlBSXNHK_AYZUjInF5w.roa
File: 3X0HT2CjHlBSXNHK_AYZUjInF5w.roa (raw, json)
Hash identifier: ej2aHqIVGnGIrHzl4zvIoX/gaxPr298BgkJYqsfguic=
Subject key identifier: DD:7D:07:4F:60:A3:1E:50:52:5C:D1:CA:FC:06:19:52:32:27:17:9C
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 0184C8CF9F859A962411CA8B870AB0EEE445
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/3X0HT2CjHlBSXNHK_AYZUjInF5w.roa
Signing time: Wed 30 Nov 2022 13:52:40 +0000
ROA not before: Wed 30 Nov 2022 13:52:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9146
IP address blocks: 195.222.32.0/19 maxlen: 21
195.222.32.0/21 maxlen: 21
195.222.32.0/20 maxlen: 20
195.222.40.0/21 maxlen: 21
109.175.0.0/17 maxlen: 21
109.175.4.0/23 maxlen: 23
109.175.8.0/24 maxlen: 24
195.222.49.0/24 maxlen: 24
195.222.48.0/20 maxlen: 20
109.175.6.0/23 maxlen: 23
195.222.48.0/21 maxlen: 21
109.175.12.0/23 maxlen: 23
109.175.16.0/22 maxlen: 22
195.222.56.0/21 maxlen: 21
109.175.24.0/24 maxlen: 24
109.175.22.0/23 maxlen: 23
109.175.20.0/23 maxlen: 23
109.175.26.0/24 maxlen: 24
109.175.28.0/23 maxlen: 23
109.175.30.0/24 maxlen: 24
85.92.226.0/24 maxlen: 24
85.92.224.0/19 maxlen: 21
85.92.227.0/24 maxlen: 24
85.92.230.0/24 maxlen: 24
85.92.228.0/23 maxlen: 23
185.12.76.0/24 maxlen: 24
185.12.78.0/23 maxlen: 23
80.65.64.0/19 maxlen: 21
80.65.64.0/22 maxlen: 22
80.65.64.0/21 maxlen: 21
89.146.128.0/18 maxlen: 21
80.65.68.0/22 maxlen: 22
80.65.72.0/22 maxlen: 22
80.65.72.0/21 maxlen: 21
80.65.76.0/22 maxlen: 22
80.65.80.0/21 maxlen: 21
80.65.80.0/22 maxlen: 22
80.65.84.0/22 maxlen: 22
80.65.88.0/22 maxlen: 22
80.65.88.0/21 maxlen: 21
80.65.92.0/22 maxlen: 22
92.36.128.0/17 maxlen: 21
92.36.232.0/22 maxlen: 22
92.36.236.0/22 maxlen: 22
92.36.192.0/21 maxlen: 21
109.163.147.0/24 maxlen: 24
109.163.148.0/22 maxlen: 22
109.163.152.0/21 maxlen: 21
109.163.146.0/24 maxlen: 24
109.163.160.0/20 maxlen: 20
109.163.160.0/21 maxlen: 21
109.163.170.0/24 maxlen: 24
109.163.168.0/23 maxlen: 23
109.163.168.0/21 maxlen: 23
109.163.172.0/22 maxlen: 22
109.163.171.0/24 maxlen: 24
109.163.176.0/21 maxlen: 21
109.163.176.0/20 maxlen: 21
109.163.184.0/22 maxlen: 22
109.163.184.0/21 maxlen: 21
109.163.190.0/23 maxlen: 23
109.163.188.0/23 maxlen: 23
31.176.216.0/22 maxlen: 22
31.176.220.0/22 maxlen: 22
109.163.128.0/22 maxlen: 22
109.163.128.0/19 maxlen: 19
109.163.128.0/18 maxlen: 18
109.163.132.0/22 maxlen: 22
109.163.136.0/21 maxlen: 21
109.163.144.0/23 maxlen: 23
37.203.64.0/18 maxlen: 21
31.176.160.0/20 maxlen: 20
31.176.176.0/20 maxlen: 20
37.203.112.0/22 maxlen: 22
31.176.128.0/20 maxlen: 20
31.176.128.0/17 maxlen: 21
37.203.120.0/22 maxlen: 22
37.203.124.0/22 maxlen: 22
31.176.144.0/20 maxlen: 20
109.175.98.0/23 maxlen: 23
109.175.96.0/22 maxlen: 22
109.175.96.0/23 maxlen: 23
109.175.100.0/22 maxlen: 22
109.175.102.0/23 maxlen: 23
109.175.100.0/23 maxlen: 23
109.175.104.0/22 maxlen: 22
109.175.104.0/23 maxlen: 23
109.175.108.0/22 maxlen: 22
109.175.112.0/22 maxlen: 22
109.175.106.0/23 maxlen: 23
109.175.116.0/22 maxlen: 22
109.175.120.0/22 maxlen: 22
109.175.124.0/22 maxlen: 22
109.175.40.0/22 maxlen: 22
109.175.44.0/23 maxlen: 23
109.175.46.0/23 maxlen: 23
2a02:27b0:4a00::/40 maxlen: 40
2a02:27b0::/32 maxlen: 32
2a02:27b0:4b00::/40 maxlen: 40
2a02:27b0:4c00::/40 maxlen: 40
2a02:27b0:4300::/40 maxlen: 40
2a02:27b0:5300::/40 maxlen: 40
2a02:27b0:4100::/40 maxlen: 40
2a02:27b0:4d00::/40 maxlen: 40
2a02:27b0:4400::/40 maxlen: 40
2a02:27b0:5500::/40 maxlen: 40
2a02:27b0:4200::/40 maxlen: 40
2a02:27b0:4500::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:cf:9f:85:9a:96:24:11:ca:8b:87:0a:b0:ee:e4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Nov 30 13:52:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd7d074f60a31e50525cd1cafc0619523227179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:7a:80:ed:14:c5:f0:eb:fe:51:ab:b2:30:
bd:c6:d0:af:56:28:b4:e8:86:a7:3c:58:47:de:f8:
6f:8d:ed:d7:63:b9:af:d7:de:ab:9e:7a:1f:15:6b:
84:33:6e:0b:c9:f4:0b:8a:f0:38:ea:de:da:a2:3e:
0b:3a:67:43:2a:fe:c7:7e:42:f6:13:85:32:34:96:
2d:ff:59:ca:d2:ad:5b:21:15:25:49:17:ef:b4:73:
da:93:a0:d7:fd:80:f7:ad:50:6d:73:f9:b3:bb:dc:
7f:ee:5f:34:55:f7:49:52:c6:0b:e9:9c:ef:6f:6b:
ab:32:4d:11:2f:b3:a7:b5:8e:d6:26:41:00:d0:5d:
66:f6:6c:53:a7:b6:74:58:80:11:b9:c9:5c:4c:ea:
00:fb:02:34:7c:5f:e5:39:24:cd:c2:b2:94:99:98:
83:e8:50:18:67:61:95:ab:0c:ff:98:4d:c0:2f:bc:
fd:39:f4:a9:37:33:1d:76:a7:b6:84:d0:33:86:3d:
b6:34:e4:6b:2c:03:4b:e0:9e:aa:44:ba:bb:ef:65:
9c:56:b8:66:c3:3b:b8:b6:ce:e2:94:a6:58:2d:e8:
c5:c8:04:bc:c5:ef:3c:5b:65:6e:2f:2b:be:32:25:
a5:c6:41:95:97:40:f8:11:fa:fc:44:96:8b:bb:e8:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7D:07:4F:60:A3:1E:50:52:5C:D1:CA:FC:06:19:52:32:27:17:9C
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/3X0HT2CjHlBSXNHK_AYZUjInF5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.176.128.0/17
37.203.64.0/18
80.65.64.0/19
85.92.224.0/19
89.146.128.0/18
92.36.128.0/17
109.163.128.0/18
109.175.0.0/17
185.12.76.0/24
185.12.78.0/23
195.222.32.0/19
IPv6:
2a02:27b0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:ab:b6:61:ed:ea:b6:d8:40:8c:6e:0b:75:7b:a4:ae:fa:bc:
92:d2:d7:91:c1:4c:b8:e1:4d:55:81:dc:2b:f8:97:3d:14:3c:
ee:1c:78:e8:bf:7d:3e:b8:68:f6:b2:72:4b:5e:a5:2f:59:44:
44:fd:68:f1:2e:de:44:d1:61:85:8f:47:bd:7d:ac:e3:74:d0:
ea:8c:8e:c7:4b:39:d9:26:fd:b0:25:96:db:c0:8f:71:2c:ba:
30:a7:70:23:ef:69:0a:47:90:da:af:ff:bb:55:83:39:f7:de:
59:ad:07:7d:73:f2:a2:31:12:55:bf:a6:f8:32:21:00:8c:f9:
b2:20:3d:4f:29:9f:67:71:1d:54:9d:88:88:68:a5:61:9c:f9:
c0:5d:75:7b:40:4a:82:6c:eb:6b:37:ed:68:1a:ee:e0:bf:ae:
61:43:49:cf:f1:4f:a6:72:32:d3:56:50:89:7b:a7:4d:00:7b:
2b:23:1d:de:80:e8:06:bd:df:ba:78:91:6f:df:aa:e4:e2:ca:
0a:11:6c:90:bb:1a:98:60:b1:14:98:6a:10:0e:21:62:19:bf:
2a:ec:53:65:82:db:6e:05:fa:84:b4:01:85:c8:f5:18:b2:fc:
ce:80:62:d0:2e:8f:1b:42:78:25:19:37:9e:96:27:72:f4:c7:
f1:f8:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:48 2025 by rpki-client