Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Z6XpjjQ2qu9o9Ifzp2Uje658xn4.roa
File: Z6XpjjQ2qu9o9Ifzp2Uje658xn4.roa (raw, json)
Hash identifier: J5toETCa2wUANBfi0MM+I1RJQNfJwk9/KI/cq7Lu6kM=
Subject key identifier: 67:A5:E9:8E:34:36:AA:EF:68:F4:87:F3:A7:65:23:7B:AE:7C:C6:7E
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 0559EAA1
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Z6XpjjQ2qu9o9Ifzp2Uje658xn4.roa
Signing time: Mon 16 May 2022 05:58:41 +0000
ROA not before: Mon 16 May 2022 05:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
92.114.16.0/20 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
2a00:5ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89778849 (0x559eaa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: May 16 05:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67a5e98e3436aaef68f487f3a765237bae7cc67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:f7:56:aa:7f:e5:d9:10:4d:1c:ee:9f:a2:
56:7d:8a:e6:7b:1d:83:44:3b:6d:c0:a4:10:5f:7b:
e7:05:55:97:15:de:c4:2d:bc:80:c5:dc:24:83:de:
3a:28:20:da:57:ad:79:d4:94:48:ef:66:cd:99:38:
16:46:a0:54:b1:d3:dd:65:33:f8:c5:aa:7c:a2:fc:
a0:42:cf:c6:47:e1:24:98:7c:11:8e:69:f4:1e:27:
2d:59:17:78:31:df:5f:64:19:b5:88:5f:f0:c4:71:
bb:3e:ca:8c:8c:cb:fe:cf:b1:44:72:b9:f9:be:f9:
ac:5d:f4:0b:a4:d1:d9:97:d5:01:43:8f:07:d1:92:
f1:62:b4:79:f0:1a:ed:53:6d:49:9e:ee:b7:8c:43:
37:98:27:ed:5c:82:da:8b:64:63:1d:47:e5:46:9f:
37:cb:0a:a7:0b:30:3d:f0:13:3f:c9:ff:9d:97:cf:
5c:ca:a0:c6:00:80:56:b2:99:46:37:c6:ca:15:d6:
bf:3e:54:73:e1:02:0a:1a:d6:72:36:14:85:13:00:
cc:10:ac:ae:7b:ee:28:cb:59:a3:c9:1f:ee:97:ac:
34:87:d6:23:80:5a:b2:e6:61:20:c7:b5:36:92:cc:
ac:02:ab:7d:d5:5a:0c:44:94:31:66:71:d8:16:dd:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A5:E9:8E:34:36:AA:EF:68:F4:87:F3:A7:65:23:7B:AE:7C:C6:7E
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Z6XpjjQ2qu9o9Ifzp2Uje658xn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/32
Signature Algorithm: sha256WithRSAEncryption
68:66:58:4f:93:dc:0f:1e:28:a1:1a:af:7d:79:b6:9c:76:ed:
10:6e:8e:6d:82:12:31:cb:9a:93:70:e6:34:3f:9c:34:4d:15:
59:2e:9a:9c:cf:38:b0:ca:ca:fc:29:b1:d2:15:f2:9a:90:03:
c2:61:01:47:ee:c8:60:c8:04:bd:38:7f:c5:5c:3c:e3:e3:a6:
cb:aa:ba:81:5a:1f:7a:85:e2:5f:e0:a9:87:d5:be:eb:da:f8:
83:f0:7e:6f:9b:59:bc:96:48:45:7f:8b:ae:ff:7e:01:5e:54:
77:3d:44:da:df:52:cb:d0:a3:96:38:e0:70:58:a3:0f:05:03:
ad:db:3f:ab:db:a5:e8:17:75:e8:4c:49:de:21:3c:68:02:3b:
71:54:ce:fc:1f:5b:29:63:68:44:98:65:4a:21:c5:7f:cb:60:
b1:c0:58:cb:b9:ad:d1:c7:de:f0:ec:d1:bd:28:8d:6b:bf:7b:
a1:98:8e:a3:f7:30:b6:ea:68:53:6b:55:33:88:ec:03:45:9d:
5b:31:e4:9e:bb:e3:aa:24:13:d6:d3:8c:52:1a:6c:aa:2a:b5:
a3:c7:32:4d:77:c5:01:30:c2:b3:eb:7e:42:88:30:69:6e:9a:
de:b4:7a:7d:2a:da:a0:35:e3:92:0d:0a:bd:fc:a3:20:f7:09:
a5:d6:c0:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 23 15:41:32 2025 by rpki-client