Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/0fuzkwQ0AWhQ2Pr4AEVNiQ_4AZs.roa
File: 0fuzkwQ0AWhQ2Pr4AEVNiQ_4AZs.roa (raw, json)
Hash identifier: VrYYkHy6grMRMbNvVDS/DtnE6wSs9Qxh584JbAZ7qXY=
Subject key identifier: D1:FB:B3:93:04:34:01:68:50:D8:FA:F8:00:45:4D:89:0F:F8:01:9B
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 0185707074F7E11A6C11A83CD03C2D4996AB
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/0fuzkwQ0AWhQ2Pr4AEVNiQ_4AZs.roa
Signing time: Mon 02 Jan 2023 03:04:56 +0000
ROA not before: Mon 02 Jan 2023 03:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8685
IP address blocks: 212.2.192.0/21 maxlen: 21
212.2.192.0/19 maxlen: 24
212.2.192.0/24 maxlen: 24
212.2.194.0/24 maxlen: 24
212.2.193.0/24 maxlen: 24
212.2.199.0/24 maxlen: 24
212.2.198.0/24 maxlen: 24
212.2.197.0/24 maxlen: 24
212.2.196.0/24 maxlen: 24
212.2.195.0/24 maxlen: 24
212.2.206.0/24 maxlen: 24
212.2.204.0/22 maxlen: 22
212.2.204.0/23 maxlen: 23
212.2.205.0/24 maxlen: 24
212.2.204.0/24 maxlen: 24
212.2.213.0/24 maxlen: 24
212.2.212.0/24 maxlen: 24
212.2.211.0/24 maxlen: 24
212.2.212.0/23 maxlen: 23
212.2.210.0/24 maxlen: 24
212.2.209.0/24 maxlen: 24
212.2.208.0/24 maxlen: 24
212.2.216.0/21 maxlen: 21
212.2.217.0/24 maxlen: 24
212.2.216.0/24 maxlen: 24
212.2.215.0/24 maxlen: 24
212.2.222.0/24 maxlen: 24
82.151.131.0/24 maxlen: 24
82.151.128.0/19 maxlen: 24
82.151.128.0/20 maxlen: 20
82.151.132.0/24 maxlen: 24
82.151.138.0/24 maxlen: 24
82.151.134.0/24 maxlen: 24
82.151.133.0/24 maxlen: 24
82.151.144.0/20 maxlen: 20
82.151.144.0/24 maxlen: 24
82.151.143.0/24 maxlen: 24
82.151.142.0/24 maxlen: 24
82.151.140.0/24 maxlen: 24
185.58.244.0/22 maxlen: 24
94.102.64.0/20 maxlen: 24
94.102.64.0/21 maxlen: 21
94.102.70.0/23 maxlen: 24
94.102.72.0/21 maxlen: 24
94.102.76.0/24 maxlen: 24
212.58.31.0/24 maxlen: 24
212.58.28.0/24 maxlen: 24
81.21.174.0/24 maxlen: 24
81.21.166.0/24 maxlen: 24
81.21.161.0/24 maxlen: 24
81.21.160.0/20 maxlen: 24
81.21.160.0/21 maxlen: 21
81.21.170.0/24 maxlen: 24
81.21.169.0/24 maxlen: 24
81.21.168.0/21 maxlen: 24
81.21.167.0/24 maxlen: 24
82.151.154.0/23 maxlen: 24
212.58.0.0/19 maxlen: 24
212.58.0.0/24 maxlen: 24
212.58.0.0/21 maxlen: 21
212.58.8.0/21 maxlen: 24
212.58.16.0/24 maxlen: 24
212.58.16.0/21 maxlen: 24
212.58.13.0/24 maxlen: 24
212.58.24.0/21 maxlen: 24
212.58.18.0/24 maxlen: 24
213.155.96.0/21 maxlen: 21
213.155.96.0/19 maxlen: 24
213.155.104.0/21 maxlen: 24
213.155.103.0/24 maxlen: 24
213.155.99.0/24 maxlen: 24
213.155.112.0/21 maxlen: 24
213.155.124.0/22 maxlen: 24
213.155.122.0/23 maxlen: 24
213.155.121.0/24 maxlen: 24
213.155.120.0/23 maxlen: 24
2a02:480::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:74:f7:e1:1a:6c:11:a8:3c:d0:3c:2d:49:96:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Jan 2 03:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1fbb3930434016850d8faf800454d890ff8019b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:a7:a4:37:3f:6f:98:83:23:85:8e:63:a8:
50:6a:68:0e:44:d1:2d:8f:2a:e0:92:e7:c7:d8:2a:
66:76:03:a0:6c:61:45:40:5d:45:42:8e:84:59:38:
4d:da:a6:0e:3c:ef:bd:09:b6:c2:ed:9a:0d:ed:5e:
68:7a:56:00:af:81:51:05:a3:fb:71:1b:cc:11:bc:
44:9f:c2:a2:9b:51:a1:6a:fc:da:a3:7d:1a:5a:8f:
2a:f3:e5:9b:40:e5:f7:bb:b3:0e:4a:36:34:26:65:
8d:d5:ef:d3:31:81:66:d4:67:27:ef:12:13:aa:00:
9f:14:da:5c:48:6e:77:2a:5a:ee:18:cc:c2:7d:74:
57:58:87:b7:eb:97:76:d3:72:6b:a4:f2:4d:a5:f0:
c6:cc:2c:ea:31:e0:b6:f7:40:c1:39:87:d2:3a:11:
fc:da:12:2b:c6:6e:7b:56:6e:75:5e:d8:a3:8c:8c:
87:49:39:ba:17:b7:8d:4a:4c:bc:f4:2d:cd:2d:64:
fb:98:de:de:71:ec:68:c0:63:84:f6:c6:c4:ca:7c:
dd:e9:46:32:71:5e:9a:5e:13:8d:0b:20:df:f2:5b:
ed:27:b2:47:52:a1:21:69:76:7e:c3:ea:bc:31:d3:
76:0b:6a:6c:a8:21:2f:cf:82:b1:b4:bd:a5:05:ac:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FB:B3:93:04:34:01:68:50:D8:FA:F8:00:45:4D:89:0F:F8:01:9B
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/0fuzkwQ0AWhQ2Pr4AEVNiQ_4AZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.160.0/20
82.151.128.0/19
94.102.64.0/20
185.58.244.0/22
212.2.192.0/19
212.58.0.0/19
213.155.96.0/19
IPv6:
2a02:480::/32
Signature Algorithm: sha256WithRSAEncryption
2f:1e:32:c8:1c:e0:4a:27:03:d8:5e:cd:dc:ae:2f:f6:5c:bf:
a1:9a:f4:8b:7c:b4:c3:80:29:d4:45:0e:8e:da:80:ba:02:4c:
43:97:7c:c8:5e:9d:48:85:5d:97:bd:4a:4c:18:e0:ad:1d:0e:
70:de:1c:0f:1b:26:ad:45:64:e3:a5:fe:99:e4:f4:fd:39:26:
18:b9:77:0f:cf:4d:b2:02:bb:c3:28:6e:9e:91:5f:ad:e8:36:
d1:bc:a3:8c:af:46:b2:dc:56:1b:9b:2d:20:d1:3e:9c:91:44:
8a:9b:ae:52:e3:34:51:69:20:77:31:a6:fe:cf:27:83:de:66:
db:ad:04:35:8b:8d:eb:b1:c9:39:da:7e:27:e3:0d:7e:43:29:
e1:59:45:f1:67:e9:71:e1:2d:ee:4e:19:75:db:00:c7:63:8c:
05:8a:1e:3d:24:68:3b:c4:ea:a9:98:47:34:86:b1:9b:44:9e:
ff:92:8c:f7:07:b6:89:a4:c0:17:ad:e6:a1:01:6a:a9:fe:f3:
6a:c2:aa:f7:8b:24:29:a8:ee:b9:04:26:3d:9b:8f:87:71:84:
fe:41:cf:19:5e:75:fe:43:78:54:23:3e:ec:71:65:56:e6:57:
60:9e:fa:ae:a6:0d:53:3d:b2:7c:c9:b2:7f:a9:5d:00:69:92:
e8:9f:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:05:04 2025 by rpki-client