Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/HdNciR_V4eHlaeWzN6PQB1r4dCU.roa
File: HdNciR_V4eHlaeWzN6PQB1r4dCU.roa (raw, json)
Hash identifier: V9SvYZeTxm30Uzms4UF5TEDzQgJfxYdlRnxp5aQvHgg=
Subject key identifier: 1D:D3:5C:89:1F:D5:E1:E1:E5:69:E5:B3:37:A3:D0:07:5A:F8:74:25
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01856E6F9E54D5201C02BE6E46A4804C8F60
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/HdNciR_V4eHlaeWzN6PQB1r4dCU.roa
Signing time: Sun 01 Jan 2023 17:44:46 +0000
ROA not before: Sun 01 Jan 2023 17:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/24 maxlen: 24
185.103.84.0/22 maxlen: 22
185.103.85.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.182.220.0/24 maxlen: 24
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
2a00:5ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:9e:54:d5:20:1c:02:be:6e:46:a4:80:4c:8f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 1 17:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dd35c891fd5e1e1e569e5b337a3d0075af87425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:b8:86:72:49:7d:d5:32:e0:8d:26:f0:5d:
c2:1a:08:1c:3c:d0:fd:20:55:63:1f:24:ec:8b:40:
21:94:56:89:2e:98:ee:9a:20:83:ea:71:67:e3:f6:
e1:c3:ac:71:c1:37:a8:8d:0a:66:bd:de:60:73:fd:
94:95:2b:8b:74:2d:cd:89:6b:85:2a:61:c8:cf:51:
a1:65:b0:13:34:49:26:09:53:54:5c:27:fc:b2:77:
2a:95:01:f1:64:0f:a7:bd:fc:49:b9:a0:15:67:fc:
28:59:fc:62:3f:0a:3e:70:51:76:f0:84:a5:72:47:
72:aa:81:03:1e:83:ed:46:70:77:a6:d9:17:42:80:
17:7d:0e:a7:2c:4d:b7:42:40:36:33:d8:4f:f2:71:
09:fe:a5:ab:a7:52:6c:a5:d7:92:65:e0:e7:43:28:
5e:66:a8:50:26:30:e4:d7:c5:56:71:39:46:93:88:
cb:57:36:fb:e7:e7:06:ec:92:e9:71:3d:7c:38:89:
c8:8e:d1:f4:2b:6e:3a:23:02:2c:d1:4f:b2:24:b0:
ce:c1:1e:95:0b:75:1d:ab:bb:f6:43:08:15:24:99:
78:05:70:49:c6:e9:f9:e0:7f:1f:5c:70:e6:5d:b1:
f6:2f:9c:d2:cb:30:bc:99:50:bf:0a:10:40:d4:fe:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D3:5C:89:1F:D5:E1:E1:E5:69:E5:B3:37:A3:D0:07:5A:F8:74:25
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/HdNciR_V4eHlaeWzN6PQB1r4dCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:be:38:c0:00:bd:aa:4f:dc:e7:d9:31:7c:3a:50:ea:36:5b:
83:fe:c9:0c:11:c9:a3:ff:32:ca:aa:bd:32:b5:59:b3:37:55:
f6:60:45:75:f6:91:42:df:0c:6e:3a:a2:e5:43:e4:dc:c8:47:
c7:ad:fa:e1:da:d1:7c:9a:8e:ed:3e:0a:af:52:34:d4:3a:e4:
e3:5d:16:e1:11:52:7a:67:4b:1b:4f:fc:28:2a:5f:1e:3c:0c:
ef:16:67:49:16:e0:c7:b8:2f:78:f3:a5:8a:61:4d:c9:99:3f:
01:b4:d6:3b:1c:4b:bf:e3:2a:aa:37:fd:39:0d:3c:f8:f9:7a:
ec:24:b0:45:91:74:e1:4c:0a:1e:9d:c0:26:74:4c:cd:b2:0e:
f5:96:07:af:48:c5:de:18:0d:f1:a7:e7:3c:54:26:21:d5:18:
85:1f:73:22:c8:4d:1b:a1:5a:0f:91:26:6e:3c:07:86:a6:ca:
d5:c7:cf:c5:a6:7d:de:17:5e:19:f4:74:1e:c8:17:aa:da:12:
73:f2:39:e7:ca:92:ab:14:17:34:ef:3c:40:a2:51:14:69:d4:
25:d8:7a:cd:8b:6a:61:4d:5a:0b:81:54:b2:5a:1d:bd:ab:61:
b5:31:94:ee:44:71:f3:fc:a3:9e:42:6f:65:83:16:dc:90:da:
c0:1d:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:12 2025 by rpki-client