Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/kCXOgOH2CXfS-RI7fueae4kBqW4.roa
File: kCXOgOH2CXfS-RI7fueae4kBqW4.roa (raw, json)
Hash identifier: HibZzgDI0J/9/Qqn9p86iC28Ksddh06njDbPzGVt3ps=
Subject key identifier: 90:25:CE:80:E1:F6:09:77:D2:F9:12:3B:7E:E7:9A:7B:89:01:A9:6E
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 06098B3A
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/kCXOgOH2CXfS-RI7fueae4kBqW4.roa
Signing time: Mon 18 Apr 2022 14:55:44 +0000
ROA not before: Mon 18 Apr 2022 14:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54825
IP address blocks: 93.187.218.0/23 maxlen: 23
93.187.216.0/23 maxlen: 23
145.40.64.0/23 maxlen: 23
145.40.68.0/24 maxlen: 24
145.40.69.0/24 maxlen: 24
145.40.67.0/24 maxlen: 24
145.40.66.0/24 maxlen: 24
145.40.70.0/23 maxlen: 23
145.40.78.0/24 maxlen: 24
145.40.75.0/24 maxlen: 24
145.40.74.0/23 maxlen: 23
145.40.76.0/23 maxlen: 23
145.40.72.0/24 maxlen: 24
145.40.73.0/24 maxlen: 24
145.40.84.0/23 maxlen: 23
145.40.82.0/23 maxlen: 23
145.40.79.0/24 maxlen: 24
145.40.80.0/23 maxlen: 23
145.40.91.0/24 maxlen: 24
145.40.89.0/24 maxlen: 24
145.40.90.0/24 maxlen: 24
145.40.88.0/24 maxlen: 24
145.40.86.0/23 maxlen: 23
145.40.98.0/23 maxlen: 23
145.40.96.0/23 maxlen: 23
145.40.92.0/22 maxlen: 22
145.40.103.0/24 maxlen: 24
145.40.102.0/23 maxlen: 23
145.40.101.0/24 maxlen: 24
145.40.104.0/22 maxlen: 22
145.40.102.0/24 maxlen: 24
145.40.100.0/24 maxlen: 24
45.11.244.0/23 maxlen: 23
136.144.56.0/23 maxlen: 23
136.144.58.0/23 maxlen: 23
136.144.54.0/23 maxlen: 23
136.144.52.0/23 maxlen: 23
136.144.60.0/23 maxlen: 23
136.144.62.0/23 maxlen: 23
136.144.50.0/23 maxlen: 23
136.144.48.0/23 maxlen: 23
139.178.80.0/21 maxlen: 21
139.178.88.0/22 maxlen: 22
139.178.94.0/23 maxlen: 23
139.178.92.0/23 maxlen: 23
139.178.64.0/22 maxlen: 22
139.178.68.0/22 maxlen: 22
139.178.76.0/23 maxlen: 23
139.178.76.0/22 maxlen: 22
139.178.78.0/23 maxlen: 23
139.178.74.0/23 maxlen: 23
139.178.72.0/23 maxlen: 23
139.178.72.0/22 maxlen: 22
147.75.206.0/24 maxlen: 24
147.28.162.0/23 maxlen: 23
147.75.204.0/23 maxlen: 23
147.28.160.0/23 maxlen: 23
147.75.200.0/22 maxlen: 22
147.75.207.0/24 maxlen: 24
147.75.43.0/24 maxlen: 24
147.75.44.0/24 maxlen: 24
147.75.40.0/23 maxlen: 23
147.75.42.0/24 maxlen: 24
147.75.51.0/24 maxlen: 24
147.75.50.0/23 maxlen: 23
147.75.50.0/24 maxlen: 24
147.75.48.0/24 maxlen: 24
147.75.49.0/24 maxlen: 24
147.75.46.0/24 maxlen: 24
147.75.47.0/24 maxlen: 24
147.75.45.0/24 maxlen: 24
147.75.58.0/24 maxlen: 24
147.75.57.0/24 maxlen: 24
147.75.55.0/24 maxlen: 24
147.75.56.0/24 maxlen: 24
147.75.53.0/24 maxlen: 24
147.75.54.0/24 maxlen: 24
147.75.52.0/24 maxlen: 24
147.75.64.0/22 maxlen: 22
147.75.62.0/24 maxlen: 24
147.75.63.0/24 maxlen: 24
147.75.60.0/24 maxlen: 24
147.75.61.0/24 maxlen: 24
147.75.59.0/24 maxlen: 24
147.75.68.0/22 maxlen: 22
147.75.78.0/24 maxlen: 24
147.75.76.0/24 maxlen: 24
147.75.77.0/24 maxlen: 24
147.75.74.0/24 maxlen: 24
147.75.75.0/24 maxlen: 24
147.75.72.0/24 maxlen: 24
147.75.73.0/24 maxlen: 24
147.75.72.0/21 maxlen: 21
86.109.4.0/24 maxlen: 24
86.109.4.0/23 maxlen: 23
147.75.84.0/23 maxlen: 23
86.109.2.0/24 maxlen: 24
86.109.3.0/24 maxlen: 24
86.109.0.0/24 maxlen: 24
86.109.2.0/23 maxlen: 23
86.109.1.0/24 maxlen: 24
147.75.79.0/24 maxlen: 24
147.75.80.0/22 maxlen: 22
86.109.9.0/24 maxlen: 24
147.75.88.0/22 maxlen: 22
86.109.10.0/23 maxlen: 23
86.109.7.0/24 maxlen: 24
86.109.8.0/24 maxlen: 24
86.109.5.0/24 maxlen: 24
86.109.6.0/24 maxlen: 24
147.75.86.0/23 maxlen: 23
147.75.36.0/22 maxlen: 22
147.75.34.0/24 maxlen: 24
147.75.35.0/24 maxlen: 24
147.75.32.0/23 maxlen: 23
147.28.132.0/22 maxlen: 22
147.28.131.0/24 maxlen: 24
147.28.128.0/23 maxlen: 23
147.28.136.0/23 maxlen: 23
145.40.79.0/26 maxlen: 26
147.28.138.0/23 maxlen: 23
147.28.142.0/23 maxlen: 23
147.28.141.0/24 maxlen: 24
147.28.144.0/23 maxlen: 23
147.75.192.0/21 maxlen: 21
147.75.192.0/24 maxlen: 24
147.28.152.0/24 maxlen: 24
147.28.148.0/23 maxlen: 23
147.28.150.0/23 maxlen: 23
147.28.146.0/23 maxlen: 23
147.75.199.0/24 maxlen: 24
147.75.197.0/24 maxlen: 24
147.28.156.0/23 maxlen: 23
147.75.198.0/24 maxlen: 24
147.28.158.0/23 maxlen: 23
147.75.196.0/24 maxlen: 24
147.28.154.0/23 maxlen: 23
147.75.193.0/24 maxlen: 24
147.75.194.0/23 maxlen: 23
147.75.98.0/24 maxlen: 24
147.75.96.0/22 maxlen: 22
147.75.97.0/24 maxlen: 24
86.109.14.0/23 maxlen: 23
147.75.96.0/24 maxlen: 24
86.109.12.0/24 maxlen: 24
147.75.92.0/22 maxlen: 22
86.109.13.0/24 maxlen: 24
147.75.104.0/22 maxlen: 22
147.75.100.0/22 maxlen: 22
147.75.99.0/24 maxlen: 24
147.75.110.0/23 maxlen: 23
147.75.108.0/23 maxlen: 23
145.40.112.0/22 maxlen: 22
145.40.108.0/22 maxlen: 22
145.40.116.0/22 maxlen: 22
145.40.124.0/22 maxlen: 22
145.40.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101288762 (0x6098b3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Apr 18 14:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9025ce80e1f60977d2f9123b7ee79a7b8901a96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:46:6e:e0:bc:7a:34:57:41:80:1f:76:42:
e3:c7:38:8c:8d:5b:b6:26:45:f7:35:38:a4:d4:6b:
22:23:18:eb:b0:58:92:26:c7:03:d2:73:ac:e3:6c:
1a:3c:c4:bf:33:e9:ca:22:da:3d:f6:68:de:56:bb:
86:cf:71:f6:93:ee:78:7e:85:7a:0d:13:bb:ec:35:
0d:a4:4a:c1:20:87:0d:e6:25:fa:91:81:0f:f1:ea:
e0:92:b2:a0:27:b3:5a:38:fe:dd:71:95:7d:44:9c:
8f:40:c2:84:92:22:6f:f4:ae:50:17:32:d6:8b:bd:
fd:6d:e2:f9:3a:e0:90:ce:a0:b8:e3:7f:37:e7:dd:
9e:2f:a5:85:fb:70:c8:88:a3:dc:6d:4c:2f:09:85:
2d:d7:b0:1a:22:87:da:58:ef:49:8d:e9:da:b1:71:
d1:54:75:4a:c2:af:6b:ca:ee:e3:0a:eb:f0:6f:b6:
b6:bc:53:6c:f0:1f:a4:bd:22:e7:a0:73:6f:bc:36:
57:6e:f4:a0:58:d5:a8:e6:41:0b:22:51:91:ad:8e:
3c:65:37:e4:62:b3:52:b2:ad:22:35:37:e6:b1:5f:
c7:22:cf:0f:dc:16:ab:7e:74:63:c2:73:c7:27:0e:
84:2f:81:1c:d2:a3:98:c3:b5:f0:cd:a1:37:76:b5:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:CE:80:E1:F6:09:77:D2:F9:12:3B:7E:E7:9A:7B:89:01:A9:6E
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/kCXOgOH2CXfS-RI7fueae4kBqW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.244.0/23
86.109.0.0/20
93.187.216.0/22
136.144.48.0/20
139.178.64.0/19
145.40.64.0/18
147.28.128.0/23
147.28.131.0-147.28.139.255
147.28.141.0-147.28.152.255
147.28.154.0-147.28.163.255
147.75.32.0-147.75.111.255
147.75.192.0/20
Signature Algorithm: sha256WithRSAEncryption
06:7f:7d:8e:9d:78:16:0c:53:3b:2a:c0:de:28:87:40:59:5a:
2b:c6:f8:d8:36:cd:33:e6:2a:5a:db:c8:e1:7f:4a:cd:ee:cf:
a5:3e:8d:f7:45:9e:1f:25:cc:ac:09:82:e4:ab:bd:60:c0:4d:
cb:26:1c:b6:94:51:86:d4:75:ae:86:28:55:88:ad:8b:29:dd:
16:9a:44:70:2b:b6:1f:5c:55:ec:e5:f8:ae:81:68:b7:57:f1:
67:1e:a8:67:10:c7:13:0c:b0:29:67:9e:c9:cf:06:26:6c:3c:
d3:73:d8:3e:54:93:cc:64:91:11:a1:89:27:75:9a:26:33:c8:
7d:f0:06:f7:d6:ef:00:79:21:73:0e:cd:6a:19:51:9c:42:7f:
df:2b:e3:d6:17:8e:db:cf:6f:f8:f7:b6:09:1b:e3:0d:f8:3e:
57:11:a8:65:b8:a4:45:4a:f4:a7:8f:12:88:7e:01:ff:61:30:
6d:7d:b2:d9:ba:fe:3a:7b:49:a6:90:80:97:f5:10:19:9f:86:
ed:3c:56:8f:40:a9:82:bb:53:b8:e6:58:79:8b:d0:97:dd:ce:
dc:2a:02:3f:7c:01:cd:2d:28:b8:cf:34:a7:c3:ab:dc:35:0a:
01:ab:1a:ee:55:d7:34:08:55:f7:90:fa:3b:4e:9a:4a:e6:be:
e1:55:c4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:29 2025 by rpki-client