Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/m_nAkcqznNd-tmYQ84zLl11E2Rs.roa
File: m_nAkcqznNd-tmYQ84zLl11E2Rs.roa (raw, json)
Hash identifier: Fy9EQv/XbB4fpsut5UhJuysDewVwxkvFFaoNIC0g1X8=
Subject key identifier: 9B:F9:C0:91:CA:B3:9C:D7:7E:B6:66:10:F3:8C:CB:97:5D:44:D9:1B
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 01856B9C806159ED4586EC39005E9C367937
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/m_nAkcqznNd-tmYQ84zLl11E2Rs.roa
Signing time: Sun 01 Jan 2023 04:34:56 +0000
ROA not before: Sun 01 Jan 2023 04:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34636
IP address blocks: 185.237.11.0/24 maxlen: 24
185.237.9.0/24 maxlen: 24
185.237.10.0/24 maxlen: 24
185.237.8.0/24 maxlen: 24
185.237.8.0/22 maxlen: 22
185.189.122.0/23 maxlen: 23
185.189.122.0/24 maxlen: 24
185.189.123.0/24 maxlen: 24
185.189.120.0/24 maxlen: 24
185.189.120.0/23 maxlen: 23
185.189.120.0/22 maxlen: 22
185.189.121.0/24 maxlen: 24
185.132.80.0/24 maxlen: 24
185.132.80.0/23 maxlen: 23
185.132.80.0/22 maxlen: 22
185.132.82.0/23 maxlen: 23
185.132.83.0/24 maxlen: 24
185.67.102.0/24 maxlen: 24
185.67.103.0/24 maxlen: 24
185.67.100.0/22 maxlen: 22
185.67.100.0/24 maxlen: 24
185.67.101.0/24 maxlen: 24
185.233.14.0/24 maxlen: 24
185.233.15.0/24 maxlen: 24
185.233.12.0/22 maxlen: 22
185.233.12.0/24 maxlen: 24
185.233.13.0/24 maxlen: 24
88.135.41.0/24 maxlen: 24
88.135.42.0/23 maxlen: 23
88.135.42.0/24 maxlen: 24
88.135.40.0/22 maxlen: 22
88.135.40.0/24 maxlen: 24
88.135.40.0/23 maxlen: 23
88.135.43.0/24 maxlen: 24
88.135.44.0/24 maxlen: 24
2a04:f080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:80:61:59:ed:45:86:ec:39:00:5e:9c:36:79:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jan 1 04:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bf9c091cab39cd77eb66610f38ccb975d44d91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:9d:ae:0f:f9:08:5d:32:c0:a4:c3:7a:af:
87:db:d2:13:e2:a9:62:cd:14:56:a1:e5:3c:79:68:
50:08:25:6b:b4:db:7e:13:83:ca:93:52:f0:f1:a9:
13:05:12:56:54:cc:26:61:16:c4:38:c4:2e:14:2a:
f1:ed:8d:c1:13:01:a5:e7:49:cf:37:16:d5:36:7f:
aa:d4:bd:d8:24:ec:80:95:3f:9d:12:db:80:52:da:
45:d7:46:b7:d9:e5:d8:ad:bb:3f:22:ee:6f:80:00:
06:05:b7:e9:94:bc:a3:62:f1:f8:b9:3e:34:b1:d9:
20:52:a8:ad:10:58:26:54:e0:ca:be:11:ce:b5:39:
5a:70:76:97:8f:40:f4:d4:ec:3d:a8:c6:03:8d:6e:
b1:e9:b7:5a:c2:02:31:10:78:ad:32:23:c0:0a:75:
a8:54:0e:15:ee:3a:dc:99:ad:8b:bb:5b:34:6b:6b:
1e:a2:16:33:11:db:5d:d1:ac:bf:6b:00:5d:fe:57:
15:3e:98:72:01:7f:5f:c3:13:50:60:6f:5d:43:08:
7e:0a:cc:81:f0:62:b3:e6:e4:b2:5d:97:83:35:a5:
25:82:78:ac:0e:5b:4c:25:8a:f4:00:ca:5a:c3:5c:
ee:6f:8e:c7:08:eb:a3:79:c7:57:43:3d:25:6a:d8:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:C0:91:CA:B3:9C:D7:7E:B6:66:10:F3:8C:CB:97:5D:44:D9:1B
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/m_nAkcqznNd-tmYQ84zLl11E2Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.40.0-88.135.44.255
185.67.100.0/22
185.132.80.0/22
185.189.120.0/22
185.233.12.0/22
185.237.8.0/22
IPv6:
2a04:f080::/29
Signature Algorithm: sha256WithRSAEncryption
54:d5:83:72:ff:6d:a7:2f:2e:1e:bf:dc:0d:03:1d:93:0a:03:
c5:5e:f7:19:dd:c2:7c:d7:78:35:9d:49:5f:6d:4f:53:52:60:
b7:7c:b8:44:9e:6d:1f:97:71:c9:9b:ff:82:f4:1c:c7:a4:b3:
1e:68:b0:5c:9b:0f:46:bb:94:61:c1:b6:0f:9e:c4:a4:22:e9:
cd:8c:47:cc:59:cc:0f:db:9b:26:15:3c:8f:fa:a0:e6:ae:6a:
a2:5d:66:88:0f:34:e2:c7:87:6b:8e:3e:fd:2a:6c:7c:82:32:
5c:cd:58:b9:80:1c:57:59:a5:7e:4b:60:25:38:c5:82:45:76:
16:cb:9f:d1:ba:a7:11:f0:eb:0a:84:43:8c:a8:7b:f9:f0:48:
93:06:3a:ff:1b:90:54:27:bd:cf:81:a0:a9:6d:92:fa:f7:42:
a9:28:89:49:79:43:5a:14:77:81:47:33:a2:56:2e:d5:eb:93:
de:c2:63:9f:05:a5:fe:74:31:f8:03:68:e0:9d:12:50:dd:74:
b1:83:e4:09:42:ec:27:17:6a:1e:03:54:3a:ea:d5:54:f1:52:
bd:29:06:71:53:aa:24:74:04:7d:ab:08:a6:c3:4c:c5:47:d4:
6e:d5:84:85:c5:e3:f4:61:b3:0d:b9:24:24:a4:58:05:2c:ed:
16:fd:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:37:11 2025 by rpki-client