Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/FvGbe9P6keLsbCyX1ucpoJqwODo.roa
File: FvGbe9P6keLsbCyX1ucpoJqwODo.roa (raw, json)
Hash identifier: PDc2PfxkbWTvFm9tmgPaQfO3+3E3SK3AqhKbH1AuE0s=
Subject key identifier: 16:F1:9B:7B:D3:FA:91:E2:EC:6C:2C:97:D6:E7:29:A0:9A:B0:38:3A
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018670B3CFD1C46BEC6FFAA141E82F1B8100
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/FvGbe9P6keLsbCyX1ucpoJqwODo.roa
Signing time: Mon 20 Feb 2023 21:21:17 +0000
ROA not before: Mon 20 Feb 2023 21:21:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
5.201.174.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/24 maxlen: 24
185.103.84.0/22 maxlen: 22
185.103.85.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.182.220.0/24 maxlen: 24
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
2a00:5ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:b3:cf:d1:c4:6b:ec:6f:fa:a1:41:e8:2f:1b:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Feb 20 21:21:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16f19b7bd3fa91e2ec6c2c97d6e729a09ab0383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:ab:d1:c3:d5:63:33:45:bf:cd:b7:9b:19:
88:15:70:28:ea:48:ab:18:01:54:e3:86:b2:53:6d:
69:31:d6:9c:67:98:01:43:ae:81:9c:cb:8a:d8:c6:
27:73:3b:c9:3d:6f:bc:ab:b6:46:9e:aa:74:57:d3:
51:22:17:30:36:0b:27:ab:1c:fc:c7:e0:01:23:7a:
c7:af:7d:fd:9a:07:0f:e0:4c:32:bf:cf:02:98:9d:
a4:e3:20:68:b9:95:65:03:1c:24:33:d1:83:16:51:
2b:1f:a6:ae:c7:e9:ae:f1:41:bc:8b:61:00:b4:94:
ea:1a:cd:75:65:4e:d7:18:e0:9a:b5:e6:c3:ca:02:
ff:40:e6:21:f1:cd:25:48:d0:18:3b:fd:1e:5f:fe:
69:3f:dc:14:0c:06:9a:2a:48:f6:15:12:54:06:dc:
f6:0e:26:06:8e:fc:74:33:ce:0d:92:54:c3:4c:96:
2f:08:0c:7c:05:f3:07:c5:3c:a3:f2:56:8e:27:1f:
a4:e5:98:d9:90:1a:ef:c0:29:b9:77:08:21:98:b8:
41:91:fb:3e:fd:d1:79:7c:13:cb:c3:87:9f:99:76:
6d:4d:b2:3b:23:6b:eb:85:cf:d2:24:bc:20:98:ff:
53:4d:f7:1b:f3:45:5a:e4:6e:17:9c:8e:c8:b3:9c:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F1:9B:7B:D3:FA:91:E2:EC:6C:2C:97:D6:E7:29:A0:9A:B0:38:3A
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/FvGbe9P6keLsbCyX1ucpoJqwODo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:2d:c4:48:d7:07:40:cb:6f:56:3f:b4:f5:ee:0f:62:79:14:
63:c6:26:0a:ab:18:49:e0:f2:a0:36:91:be:12:86:07:be:d1:
71:70:98:8a:8b:7b:67:2c:07:88:d3:4d:14:3c:50:2e:d7:25:
28:22:af:45:4d:8b:39:5b:22:b0:b8:e3:b9:45:26:6c:40:dc:
03:4e:07:34:4b:fb:76:55:19:b0:5d:cf:d8:18:c2:00:9e:32:
58:8b:00:ff:5c:9c:6c:f4:ef:b0:79:eb:80:33:4d:1a:3e:22:
7f:5b:2a:cb:a6:1f:7c:83:60:3b:9c:0f:f0:83:55:08:af:1f:
97:1c:fa:c9:05:f8:f8:e3:cd:14:b0:3b:3b:1e:de:24:f3:65:
04:d8:6c:22:7c:29:80:cd:f1:3c:71:ec:00:9a:7a:2b:87:88:
a7:4c:9b:32:f1:68:02:cf:9c:45:90:b0:37:76:23:22:2f:c6:
06:13:3b:64:88:a9:90:cb:8d:6d:b0:36:a8:5d:1c:1f:55:76:
ca:61:fa:28:08:a5:b9:2e:6c:b0:69:24:31:53:be:a3:8b:06:
fd:9c:9f:c1:a9:81:76:ce:c0:7f:59:1c:40:8f:e2:56:5d:cb:
9d:f0:48:81:b7:02:61:a5:64:bd:eb:e7:52:f1:0e:f2:97:8d:
f3:dd:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 14:58:00 2025 by rpki-client