Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/T8EjI_ieBDyfFFfGCmG3ClXMZPY.roa
File: T8EjI_ieBDyfFFfGCmG3ClXMZPY.roa (raw, json)
Hash identifier: saFmucECjTrL32g/cIn30io81D4abHWVrk8A3wAxqL0=
Subject key identifier: 4F:C1:23:23:F8:9E:04:3C:9F:14:57:C6:0A:61:B7:0A:55:CC:64:F6
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0186252382BF2E11A8C7699F5257194E1C42
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/T8EjI_ieBDyfFFfGCmG3ClXMZPY.roa
Signing time: Mon 06 Feb 2023 05:12:09 +0000
ROA not before: Mon 06 Feb 2023 05:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.29.122.0/24 maxlen: 24
185.29.123.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.101.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
2a04:4280::/29 maxlen: 48
2a04:4280:10::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
2a04:4280:200::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:23:82:bf:2e:11:a8:c7:69:9f:52:57:19:4e:1c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Feb 6 05:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fc12323f89e043c9f1457c60a61b70a55cc64f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:03:f4:96:b9:f2:1a:c4:8c:00:1e:c8:15:
43:3c:f4:12:a0:a1:f1:d4:be:8f:cc:55:75:6d:6d:
cf:70:fd:a2:c5:d3:cb:8c:c6:d2:ae:56:cd:df:28:
da:df:81:ec:fa:0f:91:db:24:75:1c:1d:ff:bc:cd:
7f:3d:fa:db:82:90:36:ba:22:27:91:38:88:86:47:
43:74:af:c0:8f:b2:4a:7b:fa:54:63:5d:d5:d9:58:
10:bd:3d:40:b6:62:39:df:fe:37:88:0b:08:b9:f6:
14:6f:d7:dc:76:af:21:b6:1b:1a:15:4c:53:b1:05:
de:fa:c3:d1:19:3c:64:03:c9:63:60:78:86:53:03:
64:f1:7a:b3:1f:58:fb:bc:73:0d:c9:4d:81:be:37:
a5:ab:d1:e9:4e:b3:0d:b3:a0:fb:24:4c:bd:f2:41:
76:cf:d7:d0:da:f7:a9:5e:be:60:9c:96:ac:3b:ce:
25:d5:e3:fe:8a:c2:06:61:f0:7c:c8:cb:21:b2:09:
14:a5:f1:69:e1:5e:a9:a7:11:3a:6a:1e:e0:f7:c9:
db:29:02:6f:49:07:97:6b:18:9e:5a:10:e2:bf:f1:
7f:c2:9f:77:48:d6:22:2c:2c:48:e6:04:0b:31:9f:
cf:6c:c4:cd:1c:f2:98:1f:ac:de:6a:f6:87:9a:80:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C1:23:23:F8:9E:04:3C:9F:14:57:C6:0A:61:B7:0A:55:CC:64:F6
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/T8EjI_ieBDyfFFfGCmG3ClXMZPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.152.0/22
31.210.157.0-31.210.159.255
37.247.96.0/20
46.20.0.0-46.20.9.255
46.20.11.0/24
46.20.14.0/23
89.107.224.0/21
95.130.168.0-95.130.173.255
95.130.175.0/24
109.235.248.0/21
185.29.120.0/22
IPv6:
2a04:4280::/29
Signature Algorithm: sha256WithRSAEncryption
2f:fa:7b:36:1c:56:2a:1e:e0:4e:eb:f1:35:7d:6b:49:c4:94:
80:d8:aa:42:5f:ce:80:e2:33:bf:ac:ec:29:19:fc:73:18:19:
88:71:48:86:6a:f8:d9:32:ed:d7:10:cb:47:db:25:74:7e:50:
0c:b8:2b:60:cb:01:9d:4a:0b:d8:a8:16:55:53:2a:0f:5b:f0:
be:6b:d1:c4:b1:9e:45:f2:fe:c7:d4:d1:9f:23:8a:29:4f:2f:
6e:23:8a:78:2d:97:3f:60:08:73:9c:2c:55:c2:28:f6:b1:59:
cb:05:7b:ed:dd:2e:d7:53:90:eb:0d:df:9d:2c:28:01:93:b7:
4c:54:28:a1:c6:e2:b7:34:2a:a9:3c:04:9c:a8:d8:b2:a5:78:
f3:b3:49:ce:f3:2f:6e:9e:72:68:52:a2:26:e7:e9:32:3d:aa:
34:46:a4:3f:13:73:83:76:88:94:13:fe:4d:c0:4f:4b:d5:1b:
f5:1e:c7:e9:30:3d:22:f3:0c:59:19:5d:ec:b1:a3:42:fa:21:
27:52:0f:53:fc:f0:b0:ff:68:bc:ee:c0:9f:4d:8a:58:f3:49:
8c:48:5d:ad:82:fa:7b:a7:a3:47:21:26:ba:bb:2b:e3:35:1a:
82:f7:24:72:6a:e6:bc:4f:b7:2f:de:4f:e5:77:cc:00:0d:87:
42:88:b1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:22:09 2025 by rpki-client