Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/gQa2nTW7nGspPjlHFiFku-06ONU.roa
File: gQa2nTW7nGspPjlHFiFku-06ONU.roa (raw, json)
Hash identifier: rMk2Gznsp8C9VLq+qqm+zHs6B93A9HCtJMxU8RAPyiM=
Subject key identifier: 81:06:B6:9D:35:BB:9C:6B:29:3E:39:47:16:21:64:BB:ED:3A:38:D5
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881A3D5DD248B57A06E5A31B7BC328746E
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/gQa2nTW7nGspPjlHFiFku-06ONU.roa
Signing time: Sun 14 May 2023 12:30:09 +0000
ROA not before: Sun 14 May 2023 12:30:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:3d:5d:d2:48:b5:7a:06:e5:a3:1b:7b:c3:28:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 14 12:30:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8106b69d35bb9c6b293e3947162164bbed3a38d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:81:5f:fa:37:46:26:ad:cc:de:4a:36:28:31:
80:ff:ef:f2:2f:82:f1:da:78:b6:88:f5:dd:65:87:
1e:cb:b4:7d:7b:18:9b:1a:c0:c0:51:b8:ba:73:99:
3f:1b:2d:97:46:10:0c:08:7f:7e:ac:3e:e1:7a:a6:
6e:a5:c0:f9:a7:27:8a:35:65:de:bc:95:b6:76:82:
6b:47:46:9a:e3:9f:0d:4f:6f:20:bf:6b:07:c7:2e:
9f:5a:87:37:2f:28:16:62:fc:90:4e:6a:b0:62:75:
c4:7c:0c:0e:42:f0:48:69:46:47:a4:f9:9d:d4:eb:
e6:3b:5f:5e:70:d9:ad:1f:51:dc:25:bf:25:0f:cf:
b8:16:51:c7:0c:63:1c:6f:53:5f:e8:77:9d:d2:00:
7b:d3:bb:37:57:7c:de:a5:3d:85:67:8f:af:2d:0b:
89:cb:a9:c0:cc:63:7d:78:dc:2b:e2:36:5c:f7:e8:
18:4e:92:01:17:f1:3b:6f:69:a3:b3:84:78:72:48:
2c:50:5c:81:e2:80:d6:41:8e:0a:4d:3f:a4:37:85:
17:bd:e1:9c:99:52:ec:4c:ad:04:27:47:78:cb:e4:
2a:98:e9:3f:d5:31:c2:97:53:42:68:9e:55:c3:4f:
8b:72:28:b8:54:72:4e:2d:a0:ce:e5:45:34:bd:a6:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:B6:9D:35:BB:9C:6B:29:3E:39:47:16:21:64:BB:ED:3A:38:D5
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/gQa2nTW7nGspPjlHFiFku-06ONU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
73:48:d2:fc:70:70:df:01:de:25:d9:b6:d2:08:5e:2b:d0:e6:
01:d9:7d:97:32:22:83:f7:13:14:47:ea:08:f0:21:df:f6:3f:
83:15:40:dd:be:a0:a6:0f:4d:1d:3e:5b:dc:42:81:ba:c4:2d:
52:f5:1d:1f:b9:72:c0:c1:15:1f:92:58:60:53:87:e0:50:ca:
cf:47:4e:f3:48:ca:ba:29:4b:5f:02:48:69:e7:96:3a:d4:5e:
af:a9:f4:4e:1c:db:ba:f9:20:d0:18:4f:8d:37:b1:a3:47:a1:
2a:fd:1c:b1:c0:26:65:4e:e9:71:47:a7:2d:90:57:22:31:ce:
1a:c2:1f:e5:c7:07:75:16:0c:ef:20:27:e4:5b:fe:db:ec:8b:
f1:44:66:e8:02:be:c1:81:cf:f3:c1:5c:d5:00:31:29:d7:52:
b4:9d:89:24:b2:ed:43:40:07:d1:f7:41:b2:1b:5c:58:60:5f:
82:b1:01:72:48:63:95:cb:82:c1:59:99:26:94:f4:0e:3f:a6:
f1:04:80:10:4e:c8:0b:7e:55:27:0e:72:b1:cf:9a:ea:11:69:
53:c6:ba:86:64:d3:54:ec:7c:7e:01:ea:d7:be:c4:78:88:66:
70:b2:3f:b7:a6:41:c1:1a:db:06:a1:b4:e9:f2:b7:19:17:9c:
d0:f3:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:22 2025 by rpki-client