Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/HUolHfOVNTOCdxzrMcaZrJFZdx8.roa
File: HUolHfOVNTOCdxzrMcaZrJFZdx8.roa (raw, json)
Hash identifier: uUYN3l7sptN4cpIbuZ7bGIyMsttR4rVy45INMzBHXvQ=
Subject key identifier: 1D:4A:25:1D:F3:95:35:33:82:77:1C:EB:31:C6:99:AC:91:59:77:1F
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 01856DB888C486E956020BC43AA67302078D
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/HUolHfOVNTOCdxzrMcaZrJFZdx8.roa
Signing time: Sun 01 Jan 2023 14:24:48 +0000
ROA not before: Sun 01 Jan 2023 14:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9146
IP address blocks: 195.222.32.0/19 maxlen: 21
195.222.32.0/20 maxlen: 20
195.222.32.0/21 maxlen: 21
195.222.40.0/21 maxlen: 21
109.175.0.0/17 maxlen: 21
109.175.4.0/23 maxlen: 23
109.175.8.0/24 maxlen: 24
195.222.49.0/24 maxlen: 24
195.222.48.0/20 maxlen: 20
109.175.6.0/23 maxlen: 23
195.222.48.0/21 maxlen: 21
109.175.12.0/23 maxlen: 23
195.222.56.0/21 maxlen: 21
109.175.16.0/22 maxlen: 22
109.175.24.0/24 maxlen: 24
109.175.22.0/23 maxlen: 23
109.175.20.0/23 maxlen: 23
109.175.26.0/24 maxlen: 24
109.175.28.0/23 maxlen: 23
109.175.30.0/24 maxlen: 24
85.92.226.0/24 maxlen: 24
85.92.224.0/19 maxlen: 21
85.92.227.0/24 maxlen: 24
85.92.230.0/24 maxlen: 24
85.92.228.0/23 maxlen: 23
185.12.76.0/24 maxlen: 24
185.12.78.0/23 maxlen: 23
80.65.64.0/19 maxlen: 21
80.65.64.0/21 maxlen: 21
80.65.64.0/22 maxlen: 22
89.146.128.0/18 maxlen: 21
80.65.68.0/22 maxlen: 22
80.65.72.0/22 maxlen: 22
80.65.72.0/21 maxlen: 21
80.65.76.0/22 maxlen: 22
80.65.80.0/21 maxlen: 21
80.65.80.0/22 maxlen: 22
80.65.84.0/22 maxlen: 22
80.65.88.0/21 maxlen: 21
80.65.88.0/22 maxlen: 22
80.65.92.0/22 maxlen: 22
92.36.128.0/17 maxlen: 21
92.36.232.0/22 maxlen: 22
92.36.236.0/22 maxlen: 22
92.36.192.0/21 maxlen: 21
109.163.147.0/24 maxlen: 24
109.163.148.0/22 maxlen: 22
109.163.152.0/21 maxlen: 21
109.163.146.0/24 maxlen: 24
109.163.160.0/20 maxlen: 20
109.163.160.0/21 maxlen: 21
109.163.170.0/24 maxlen: 24
109.163.168.0/23 maxlen: 23
109.163.168.0/21 maxlen: 23
109.163.172.0/22 maxlen: 22
109.163.171.0/24 maxlen: 24
109.163.176.0/21 maxlen: 21
109.163.176.0/20 maxlen: 21
109.163.184.0/21 maxlen: 21
109.163.184.0/22 maxlen: 22
109.163.190.0/23 maxlen: 23
109.163.188.0/23 maxlen: 23
31.176.216.0/22 maxlen: 22
31.176.220.0/22 maxlen: 22
109.163.128.0/22 maxlen: 22
109.163.128.0/19 maxlen: 19
109.163.128.0/18 maxlen: 18
109.163.132.0/22 maxlen: 22
109.163.136.0/21 maxlen: 21
109.163.144.0/23 maxlen: 23
37.203.64.0/18 maxlen: 21
31.176.160.0/20 maxlen: 20
31.176.176.0/20 maxlen: 20
37.203.112.0/22 maxlen: 22
31.176.128.0/20 maxlen: 20
31.176.128.0/17 maxlen: 21
37.203.120.0/22 maxlen: 22
37.203.124.0/22 maxlen: 22
31.176.144.0/20 maxlen: 20
109.175.98.0/23 maxlen: 23
109.175.96.0/22 maxlen: 22
109.175.96.0/23 maxlen: 23
109.175.100.0/22 maxlen: 22
109.175.102.0/23 maxlen: 23
109.175.100.0/23 maxlen: 23
109.175.104.0/22 maxlen: 22
109.175.104.0/23 maxlen: 23
109.175.108.0/22 maxlen: 22
109.175.112.0/22 maxlen: 22
109.175.106.0/23 maxlen: 23
109.175.116.0/22 maxlen: 22
109.175.120.0/22 maxlen: 22
109.175.124.0/22 maxlen: 22
109.175.40.0/22 maxlen: 22
109.175.44.0/23 maxlen: 23
109.175.46.0/23 maxlen: 23
2a02:27b0:5300::/40 maxlen: 40
2a02:27b0:4a00::/40 maxlen: 40
2a02:27b0::/32 maxlen: 32
2a02:27b0:4100::/40 maxlen: 40
2a02:27b0:4400::/40 maxlen: 40
2a02:27b0:5500::/40 maxlen: 40
2a02:27b0:4800::/40 maxlen: 40
2a02:27b0:4900::/40 maxlen: 40
2a02:27b0:4d00::/40 maxlen: 40
2a02:27b0:4c00::/40 maxlen: 40
2a02:27b0:4200::/40 maxlen: 40
2a02:27b0:4500::/40 maxlen: 40
2a02:27b0:4300::/40 maxlen: 40
2a02:27b0:4b00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:88:c4:86:e9:56:02:0b:c4:3a:a6:73:02:07:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Jan 1 14:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d4a251df395353382771ceb31c699ac9159771f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:e8:10:93:12:88:bf:cd:24:83:1e:f9:01:
ab:45:fa:23:0c:97:59:7e:30:5a:ec:f5:83:b4:14:
58:a2:1b:6e:63:df:cd:90:47:9f:75:28:1c:4b:5b:
22:8a:2f:6b:c6:ac:d7:57:13:20:14:b8:bb:af:52:
39:6c:b5:d5:77:1c:ae:24:71:43:3d:f5:e9:cd:a0:
b6:f7:f7:70:0b:78:9b:76:e2:6f:f1:02:65:8a:cb:
29:95:b5:a2:6a:16:b3:c1:00:4a:58:86:8f:04:38:
f9:78:07:92:e7:31:c4:ae:ed:85:f6:e6:19:53:63:
1d:db:9b:c9:1d:53:21:57:86:4e:54:f1:dd:a2:fa:
e3:f9:62:11:10:f6:e4:55:76:89:bf:b2:6d:de:4f:
29:e8:c2:c5:61:0a:74:33:13:c3:ab:33:59:ea:06:
06:60:fd:f0:c4:9c:d3:7f:57:99:84:aa:3b:2e:c5:
07:d6:68:be:7e:fc:3a:cb:3c:d7:75:ee:06:58:9a:
80:20:8f:a9:20:d8:4e:7d:bd:4b:bb:f3:2a:51:30:
e1:c3:b5:ea:2a:62:b4:b0:d1:2d:99:fa:a4:4f:85:
f2:aa:f5:f6:c5:08:47:0f:db:c3:f7:ae:6f:e8:2f:
d2:f4:13:42:5f:2b:7a:00:7d:dd:53:d1:78:47:a0:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4A:25:1D:F3:95:35:33:82:77:1C:EB:31:C6:99:AC:91:59:77:1F
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/HUolHfOVNTOCdxzrMcaZrJFZdx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.176.128.0/17
37.203.64.0/18
80.65.64.0/19
85.92.224.0/19
89.146.128.0/18
92.36.128.0/17
109.163.128.0/18
109.175.0.0/17
185.12.76.0/24
185.12.78.0/23
195.222.32.0/19
IPv6:
2a02:27b0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:57:94:66:ec:ab:ae:06:2f:48:f0:5e:06:c0:7e:b8:6e:70:
ed:ed:15:60:9a:c6:0a:12:0f:62:b8:1d:1c:6a:fd:c8:9f:01:
4d:63:b2:9c:86:66:b7:4a:b7:32:45:b1:ac:5b:45:77:c1:ce:
f4:f2:70:4d:29:c8:dc:d1:96:98:c8:63:d9:b5:29:7c:1f:1d:
42:ba:08:16:71:58:e2:7c:d2:cb:f9:18:73:dd:38:3b:a8:44:
7e:f5:f4:6b:af:57:e3:cd:7b:22:c6:9c:5a:d5:4e:ae:1a:c8:
a0:b4:46:02:34:ed:1c:44:22:18:1c:83:50:85:53:bf:a1:9b:
23:b4:3f:c7:3a:0a:32:1b:4b:e1:23:1f:88:c2:d0:0f:84:49:
6f:b6:07:c4:df:2a:aa:b9:fc:71:7d:24:d7:46:1e:04:03:65:
90:2c:4a:f2:86:13:13:41:58:61:e0:51:59:c1:6c:01:50:2b:
59:61:2f:dc:f4:4b:83:70:7f:08:a4:18:4b:55:06:ef:1d:b4:
df:f2:4f:75:c0:29:89:52:85:54:ac:79:c1:b3:a3:ec:a9:2d:
e2:a8:a6:5f:4c:45:2e:a4:68:2f:cd:84:6a:53:ec:41:75:bd:
97:16:46:75:e3:54:7b:d2:c0:52:28:c6:5c:1d:5d:67:68:0e:
63:71:13:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:41 2025 by rpki-client