Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/cxaotprw7K4DF6HKl5eXEfsJTBQ.roa
File: cxaotprw7K4DF6HKl5eXEfsJTBQ.roa (raw, json)
Hash identifier: jRFzFlK9SzsrwqJ/8TNIMhrOJMds44jzBRmj6nTEJ/0=
Subject key identifier: 73:16:A8:B6:9A:F0:EC:AE:03:17:A1:CA:97:97:97:11:FB:09:4C:14
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0185701EDAF17CD216F4DF7ABA3708CD31F7
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/cxaotprw7K4DF6HKl5eXEfsJTBQ.roa
Signing time: Mon 02 Jan 2023 01:35:48 +0000
ROA not before: Mon 02 Jan 2023 01:35:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.29.122.0/24 maxlen: 24
185.29.123.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
2a04:4280::/29 maxlen: 48
2a04:4280:10::/48 maxlen: 48
2a04:4280:200::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:da:f1:7c:d2:16:f4:df:7a:ba:37:08:cd:31:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 2 01:35:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7316a8b69af0ecae0317a1ca97979711fb094c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0a:51:44:a9:53:48:29:ad:66:61:9d:6d:e3:
b0:a6:5a:91:f4:3f:70:40:32:ff:67:33:96:cf:a2:
22:b0:29:1f:83:74:19:ca:a2:ef:59:f6:67:00:66:
82:27:a6:fa:94:e9:73:94:47:93:2c:71:ac:5c:a3:
90:ff:40:f1:42:4a:3f:64:e2:43:f7:a0:7a:39:3e:
7b:c3:96:93:b8:f8:a7:ee:15:80:11:2c:0a:63:18:
9d:e9:c6:74:80:05:d6:21:7d:e9:18:c3:b7:92:fd:
59:40:a5:63:93:06:3e:39:14:40:38:d8:51:31:57:
03:9d:42:93:08:9c:72:24:0f:fa:1f:d3:63:4b:20:
f4:24:d6:e4:f6:ca:e8:7b:4c:8c:4e:75:c1:7f:44:
55:93:ea:e0:71:48:b3:70:8b:87:d1:36:b5:e6:73:
ae:6f:b0:30:3a:1e:8a:2b:d5:77:a9:ae:c4:22:ef:
df:ee:d9:26:d8:b5:d0:08:57:c2:68:50:08:ab:8e:
88:69:5e:fb:22:2d:e3:30:90:93:36:3d:a9:dd:2c:
be:6b:6a:8a:b2:b9:bb:90:2c:ff:2e:70:00:2b:b7:
ca:83:55:df:21:9c:60:01:3f:2d:b6:31:6a:8c:47:
4a:e5:b0:8f:1f:08:86:d0:14:ee:9f:c3:1c:84:21:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:16:A8:B6:9A:F0:EC:AE:03:17:A1:CA:97:97:97:11:FB:09:4C:14
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/cxaotprw7K4DF6HKl5eXEfsJTBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.152.0/22
31.210.157.0-31.210.159.255
37.247.96.0-37.247.100.255
37.247.102.0-37.247.111.255
46.20.0.0-46.20.9.255
46.20.11.0/24
46.20.14.0/23
89.107.224.0/21
95.130.168.0-95.130.173.255
95.130.175.0/24
109.235.248.0/21
185.29.120.0/22
IPv6:
2a04:4280::/29
Signature Algorithm: sha256WithRSAEncryption
37:fa:82:ef:a6:d3:04:19:1c:ff:30:09:ee:4a:b8:dd:e4:0d:
05:61:d0:44:66:ad:4a:77:dd:9c:7c:f7:76:1a:b1:95:7a:93:
09:92:0a:26:c4:3c:1b:82:d7:b4:41:2b:9c:20:2f:5e:58:48:
ce:ab:cb:03:87:3b:6a:f0:1d:85:f8:0f:9f:30:37:a3:38:a1:
ed:62:01:72:30:58:46:7c:9c:86:ad:3c:8b:d0:85:e7:26:e9:
f2:b2:5f:59:be:7a:c0:61:f3:30:30:a3:c4:a4:26:82:0c:1a:
74:b7:7f:3c:09:85:1f:ec:5e:d2:9c:24:42:c2:73:bc:12:33:
09:fa:2e:9a:92:48:da:6b:49:6c:96:3b:58:3c:00:80:59:ea:
01:b2:93:73:28:69:ae:ad:78:b9:71:5e:b8:ea:59:b7:b1:c3:
f2:1b:0a:82:25:47:b9:cc:8c:a9:ad:3b:99:b0:da:3b:cc:a5:
41:6d:7c:6a:a5:17:6b:c1:c0:6e:d3:a5:60:77:01:df:62:cf:
59:0d:12:d1:0a:6a:ab:d0:a4:fd:cf:1f:a5:3c:4e:a9:05:1d:
03:f8:76:40:38:0c:1f:78:c7:88:37:bb:c3:9c:9f:bb:14:e1:
44:16:e8:5b:6d:48:d3:2a:26:25:08:ec:1b:15:11:11:2d:f3:
ee:c8:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:25:15 2025 by rpki-client