Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/XHGg9yZxc5yfRj0muCOa0DGL_fo.roa
File: XHGg9yZxc5yfRj0muCOa0DGL_fo.roa (raw, json)
Hash identifier: H6Sk0IffFY8X229i12C2uHQ7w4K48DfHg/hZrwZFQEA=
Subject key identifier: 5C:71:A0:F7:26:71:73:9C:9F:46:3D:26:B8:23:9A:D0:31:8B:FD:FA
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 03B98F15
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/XHGg9yZxc5yfRj0muCOa0DGL_fo.roa
Signing time: Sat 01 Jan 2022 14:05:03 +0000
ROA not before: Sat 01 Jan 2022 14:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39737
IP address blocks: 77.93.176.0/20 maxlen: 20
89.46.160.0/22 maxlen: 22
77.93.160.0/23 maxlen: 23
77.93.162.0/24 maxlen: 24
77.93.164.0/22 maxlen: 22
77.93.168.0/22 maxlen: 22
86.107.183.0/24 maxlen: 24
89.43.193.0/24 maxlen: 24
94.177.32.0/21 maxlen: 21
188.247.226.0/23 maxlen: 23
94.177.40.0/21 maxlen: 21
188.247.238.0/24 maxlen: 24
188.247.239.0/24 maxlen: 24
188.247.240.0/21 maxlen: 21
188.247.248.0/21 maxlen: 21
188.247.252.0/22 maxlen: 22
193.58.243.0/24 maxlen: 24
92.55.152.0/24 maxlen: 24
92.55.153.0/24 maxlen: 24
92.55.154.0/24 maxlen: 24
194.102.221.0/24 maxlen: 24
89.44.232.0/22 maxlen: 22
89.18.1.0/24 maxlen: 24
89.18.0.0/21 maxlen: 21
89.18.2.0/24 maxlen: 24
89.18.0.0/20 maxlen: 20
89.18.0.0/24 maxlen: 24
89.18.4.0/24 maxlen: 24
89.18.3.0/24 maxlen: 24
89.18.5.0/24 maxlen: 24
89.18.8.0/24 maxlen: 24
89.18.9.0/24 maxlen: 24
89.18.6.0/24 maxlen: 24
89.18.7.0/24 maxlen: 24
89.18.11.0/24 maxlen: 24
89.18.10.0/24 maxlen: 24
89.18.12.0/24 maxlen: 24
89.18.15.0/24 maxlen: 24
89.18.13.0/24 maxlen: 24
89.18.14.0/24 maxlen: 24
89.38.140.0/22 maxlen: 22
188.247.129.0/24 maxlen: 24
89.35.74.0/23 maxlen: 23
188.247.132.0/23 maxlen: 23
92.55.131.0/24 maxlen: 24
92.55.132.0/24 maxlen: 24
92.55.134.0/24 maxlen: 24
92.55.135.0/24 maxlen: 24
92.55.144.0/21 maxlen: 21
86.105.181.0/24 maxlen: 24
195.20.145.0/24 maxlen: 24
89.47.224.0/21 maxlen: 21
89.37.120.0/21 maxlen: 21
87.243.0.0/21 maxlen: 21
89.34.72.0/23 maxlen: 23
2a00:1480:1::/48 maxlen: 48
2a00:1480:5::/48 maxlen: 48
2a00:1480::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62492437 (0x3b98f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 14:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c71a0f72671739c9f463d26b8239ad0318bfdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:83:8b:d3:c2:87:c5:86:56:91:d3:5c:cc:
29:89:a7:bb:45:27:a2:67:d8:6c:d2:26:d1:5c:fa:
bc:5c:0e:fb:6c:6b:3d:fc:1b:e3:5f:29:ec:0f:71:
ed:9c:fb:0c:0e:b3:f8:23:4b:ed:13:c0:d9:cb:e9:
62:1a:4e:93:19:34:25:c3:6d:6b:16:7e:06:30:a7:
5d:23:aa:da:74:95:f9:9d:7d:c3:4a:ff:3d:63:a5:
bd:ef:4c:c7:0d:92:87:1b:15:1d:28:8e:6f:cf:7e:
44:8d:59:a6:a0:9d:3a:c9:f1:ac:d9:bc:18:c7:36:
d9:ad:99:3a:9f:92:f8:05:4e:b5:8d:a2:1c:c5:c2:
a8:97:5b:bb:51:26:9a:18:db:60:30:04:7f:b8:c9:
c1:3b:4f:83:3d:01:cb:4f:37:4c:ef:c4:41:85:71:
37:42:c3:88:df:c8:fe:09:ed:e8:64:2b:28:08:d5:
6e:bd:ff:27:20:35:a5:a0:43:79:70:83:8a:85:35:
ba:6b:9d:d0:f2:09:90:ce:de:b0:2a:2d:d5:d1:e6:
40:38:b7:8e:a4:2c:46:fa:96:be:de:ee:37:36:84:
7d:57:bb:84:d2:37:1b:b0:e7:a7:d6:2e:84:a2:44:
f5:7a:e1:22:d5:1b:e7:3f:1e:b2:8b:00:69:ad:0e:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:71:A0:F7:26:71:73:9C:9F:46:3D:26:B8:23:9A:D0:31:8B:FD:FA
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/XHGg9yZxc5yfRj0muCOa0DGL_fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.160.0-77.93.162.255
77.93.164.0-77.93.171.255
77.93.176.0/20
86.105.181.0/24
86.107.183.0/24
87.243.0.0/21
89.18.0.0/20
89.34.72.0/23
89.35.74.0/23
89.37.120.0/21
89.38.140.0/22
89.43.193.0/24
89.44.232.0/22
89.46.160.0/22
89.47.224.0/21
92.55.131.0-92.55.132.255
92.55.134.0/23
92.55.144.0-92.55.154.255
94.177.32.0/20
188.247.129.0/24
188.247.132.0/23
188.247.226.0/23
188.247.238.0-188.247.255.255
193.58.243.0/24
194.102.221.0/24
195.20.145.0/24
IPv6:
2a00:1480::/47
2a00:1480:5::/48
Signature Algorithm: sha256WithRSAEncryption
f4:08:d8:de:1f:7b:fd:e5:85:13:80:38:4b:dc:1e:bb:31:84:
aa:40:51:56:8c:93:e3:4d:6c:ed:d7:3f:39:d0:4a:bc:e4:c9:
d9:ba:2c:df:ab:9f:46:18:81:8b:da:62:17:34:5b:24:fc:2d:
1c:8b:06:80:b0:cb:4d:c0:6c:9a:1f:64:92:a5:8f:06:31:f4:
ca:e7:d4:31:c5:d0:c9:9c:94:b9:c2:12:82:98:8f:ac:c1:97:
34:bf:73:a4:b9:3d:57:69:b0:16:9f:9d:bc:04:01:d9:00:09:
a8:9c:e1:52:5f:58:80:98:1d:62:bf:80:24:0f:2e:c9:05:48:
e9:65:de:a4:99:8a:94:d0:e4:3a:2e:dd:59:10:4b:79:dd:58:
10:d8:c7:21:2a:42:b3:40:ec:0f:37:17:3c:38:26:1b:f9:bf:
91:31:69:02:9b:6c:f5:bc:2b:bf:4e:b9:66:91:6c:b9:17:1f:
6f:f2:99:04:7a:c6:f6:a8:a1:ad:60:97:42:0a:53:06:c9:53:
33:fa:02:a8:54:d5:9c:fc:90:15:be:76:66:3d:28:b4:0a:af:
bb:c5:5b:33:01:5f:83:e2:40:24:3e:a5:df:8d:62:fc:45:d7:
0a:ae:22:9e:b7:ed:0b:0e:24:9f:29:94:dc:6a:07:97:0d:dc:
7c:5f:be:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:56 2025 by rpki-client