Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/9Y-MOCH0Dee_RjMXev0KbNwZv_4.roa
File: 9Y-MOCH0Dee_RjMXev0KbNwZv_4.roa (raw, json)
Hash identifier: dACql2grA7eoiOTuEOylZ937OWae8uhgZM7j5fSQh40=
Subject key identifier: F5:8F:8C:38:21:F4:0D:E7:BF:46:33:17:7A:FD:0A:6C:DC:19:BF:FE
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018C3F42F584C01140A7CC1FC48C60DF0C14
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/9Y-MOCH0Dee_RjMXev0KbNwZv_4.roa
Signing time: Wed 06 Dec 2023 13:13:22 +0000
ROA not before: Wed 06 Dec 2023 13:13:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.138.0/24 maxlen: 24
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/23 maxlen: 23
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
92.114.21.0/24 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.20.0/23 maxlen: 23
92.114.20.0/24 maxlen: 24
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
5.201.174.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/24 maxlen: 24
185.103.84.0/22 maxlen: 22
185.103.85.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.182.220.0/24 maxlen: 24
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
2a00:5ca0::/32 maxlen: 32
2a00:5ca4::/31 maxlen: 31
2a00:5ca0::/31 maxlen: 31
2a00:5ca2::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:42:f5:84:c0:11:40:a7:cc:1f:c4:8c:60:df:0c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Dec 6 13:13:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f58f8c3821f40de7bf4633177afd0a6cdc19bffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:f3:2e:4c:85:fc:bb:85:af:98:a6:01:1e:
fe:ee:be:ae:46:f2:87:74:ec:a2:03:03:b6:8e:75:
1e:79:29:3c:9e:cb:89:52:f1:e2:b5:4a:67:7e:e8:
6c:99:fc:e5:9f:36:b3:99:57:c7:3b:95:40:39:94:
28:ec:4b:d7:23:fa:be:1a:be:5d:b8:74:78:73:3d:
b0:22:95:c4:19:75:3c:5c:7f:ea:94:c9:c7:80:c4:
ce:8e:5d:5f:7e:f9:37:da:12:44:7d:df:eb:89:4c:
4a:a6:8e:0b:b8:60:da:55:0d:43:3a:2b:b8:fc:b0:
fb:5e:39:42:9a:83:8b:4f:7a:2b:34:df:29:f9:cf:
25:b7:69:24:cb:61:60:e9:71:56:d1:67:46:c1:6d:
35:1a:9e:bb:37:d9:85:95:25:97:4e:5f:bf:36:29:
c9:85:c7:a7:74:3d:55:7c:98:86:50:bd:b1:c4:61:
ab:ec:11:27:75:51:96:cf:28:f4:cf:80:47:8b:14:
b3:4d:ee:55:ae:3d:23:6e:1f:2e:c4:9f:9a:92:1e:
33:5b:5c:06:2d:13:03:7a:a9:b8:0e:8c:28:86:a4:
a2:3b:90:12:83:eb:38:56:fc:09:6f:36:f9:9b:b5:
3b:f2:aa:9f:42:c1:69:90:e3:2a:01:01:12:d3:4b:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8F:8C:38:21:F4:0D:E7:BF:46:33:17:7A:FD:0A:6C:DC:19:BF:FE
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/9Y-MOCH0Dee_RjMXev0KbNwZv_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::-2a00:5ca5:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
82:00:ad:5a:75:c4:65:ad:9e:e3:a2:9c:5e:42:84:04:41:1e:
e8:46:65:c5:e9:3d:cc:5d:5e:23:74:c0:ea:d3:31:9a:ae:2d:
66:c7:e8:c5:e1:02:5e:60:d5:73:14:52:25:fa:fd:79:10:f0:
f0:a8:cf:3d:1d:83:9c:02:72:02:bb:15:69:58:6e:65:9f:05:
40:9a:88:ce:b7:47:a7:d1:4e:f9:e8:e5:09:17:23:8c:6f:83:
9f:2a:76:17:3e:df:a8:5c:db:33:93:85:c7:bf:eb:78:8d:be:
c6:78:fb:a4:2c:b8:db:90:2b:5a:7c:db:22:be:04:9b:b9:81:
8f:5b:04:bf:4f:c4:2c:4d:3b:a7:d7:55:36:1e:74:07:6b:fa:
a3:6a:04:83:c1:b4:ee:a9:a4:18:96:9f:74:94:a9:84:27:c4:
a2:5d:07:03:08:7d:f8:2a:68:12:c5:09:5d:53:f8:ef:cc:08:
f0:b3:8b:6c:06:a9:b4:80:3e:44:52:50:52:0b:4b:e8:43:06:
0a:33:a4:b5:b6:90:68:a5:46:cf:1f:19:e6:93:50:6e:0f:01:
44:df:12:50:f8:32:1c:39:00:8f:14:7f:d5:d4:4d:b3:e7:f2:
fb:cd:e6:82:23:85:c0:c9:cb:3c:f4:58:2b:1a:2b:d5:1a:2c:
09:ad:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:28 2025 by rpki-client