Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/xRMD579jn6rJsUQwUxz0mB65F-0.roa
File: xRMD579jn6rJsUQwUxz0mB65F-0.roa (raw, json)
Hash identifier: 0g4sjh4g2sk8+KYvEGlw8K/TYE7Uoh6U4JRmdk73CvE=
Subject key identifier: C5:13:03:E7:BF:63:9F:AA:C9:B1:44:30:53:1C:F4:98:1E:B9:17:ED
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 385D8A6E
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/xRMD579jn6rJsUQwUxz0mB65F-0.roa
Signing time: Thu 07 Apr 2022 06:49:24 +0000
ROA not before: Thu 07 Apr 2022 06:49:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1680
IP address blocks: 212.29.192.0/18 maxlen: 24
176.13.0.0/16 maxlen: 24
212.235.0.0/17 maxlen: 24
89.138.0.0/16 maxlen: 16
207.232.0.0/18 maxlen: 18
212.29.244.0/24 maxlen: 24
82.166.201.128/25 maxlen: 25
212.150.0.0/16 maxlen: 24
176.12.128.0/17 maxlen: 24
194.90.1.0/24 maxlen: 24
194.90.0.0/16 maxlen: 24
62.90.0.0/16 maxlen: 24
46.117.0.0/16 maxlen: 16
212.143.194.0/24 maxlen: 24
46.210.0.0/16 maxlen: 24
93.173.0.0/16 maxlen: 16
199.203.1.0/24 maxlen: 24
89.139.0.0/16 maxlen: 16
199.203.0.0/16 maxlen: 16
82.166.0.0/16 maxlen: 24
199.203.21.0/24 maxlen: 24
85.65.0.0/16 maxlen: 16
46.116.0.0/16 maxlen: 16
212.143.0.0/16 maxlen: 24
199.203.191.0/24 maxlen: 24
80.250.144.0/20 maxlen: 24
95.35.0.0/16 maxlen: 24
82.166.100.0/22 maxlen: 22
82.166.112.0/21 maxlen: 21
93.172.0.0/16 maxlen: 16
62.0.88.0/22 maxlen: 22
62.0.87.0/24 maxlen: 24
62.0.94.0/24 maxlen: 24
62.0.92.0/23 maxlen: 23
109.253.0.0/16 maxlen: 24
85.64.0.0/16 maxlen: 16
62.0.0.0/16 maxlen: 24
217.132.0.0/16 maxlen: 16
85.250.0.0/16 maxlen: 16
109.186.0.0/16 maxlen: 16
62.0.116.0/22 maxlen: 22
62.0.114.0/23 maxlen: 23
62.0.120.0/21 maxlen: 21
62.0.128.0/23 maxlen: 23
2001:4df0::/32 maxlen: 32
2a02:148::/32 maxlen: 32
2a02:149::/32 maxlen: 32
2001:4df2::/32 maxlen: 32
2001:4df3::/32 maxlen: 32
2a02:148::/29 maxlen: 32
2a02:14b::/32 maxlen: 32
2a02:14f::/32 maxlen: 32
2001:4df7::/32 maxlen: 32
2a02:14e::/32 maxlen: 32
2001:4df6::/32 maxlen: 32
2001:4df5::/32 maxlen: 32
2a02:14c::/32 maxlen: 32
2001:4df0::/29 maxlen: 32
2001:4df1::/32 maxlen: 32
2a02:14a::/32 maxlen: 32
2a02:14d::/32 maxlen: 32
2001:4df4::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945654382 (0x385d8a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Apr 7 06:49:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c51303e7bf639faac9b14430531cf4981eb917ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c7:88:4d:c5:a4:af:e9:21:58:31:ce:68:5b:
3c:f1:00:5f:62:a9:6b:9d:0a:dc:cb:64:c2:48:81:
19:3c:92:a2:a7:e0:76:be:c0:dd:9d:4e:20:e5:e8:
7f:71:19:d3:e8:0b:f8:15:7b:76:9f:e8:ae:be:70:
29:9b:54:6b:3b:2c:24:8c:10:55:83:c1:d8:43:dd:
12:9e:f8:0f:74:50:dd:8a:74:0d:87:90:6f:3e:1d:
5b:24:9a:b1:ad:da:e5:7c:39:8f:c6:a5:1f:3d:5d:
f8:5e:bc:18:04:60:f6:8d:06:d2:18:a2:59:b3:8e:
a9:2d:e7:a5:fc:30:71:fa:8c:ae:9f:f9:84:ab:c4:
34:86:21:ea:3d:f8:dd:44:d1:64:69:f1:8c:46:ae:
56:69:6d:22:af:37:d7:12:e7:f3:e5:78:d9:85:1e:
68:c0:02:77:f7:b3:5b:ae:75:98:e7:87:83:52:00:
25:a1:e6:71:0a:65:b6:63:f8:14:93:9e:7c:a1:23:
f7:76:b4:ce:c2:68:b1:3b:c9:59:fb:77:33:74:82:
7a:6f:3c:8d:0c:70:c8:09:b1:f7:96:45:09:a8:01:
89:b9:b6:b9:09:12:64:d3:2b:09:dc:b6:7c:7c:e8:
0a:1e:6b:67:a3:f6:7b:5a:05:35:8c:88:36:1c:54:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:03:E7:BF:63:9F:AA:C9:B1:44:30:53:1C:F4:98:1E:B9:17:ED
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/xRMD579jn6rJsUQwUxz0mB65F-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.116.0.0/15
46.210.0.0/16
62.0.0.0/16
62.90.0.0/16
80.250.144.0/20
82.166.0.0/16
85.64.0.0/15
85.250.0.0/16
89.138.0.0/15
93.172.0.0/15
95.35.0.0/16
109.186.0.0/16
109.253.0.0/16
176.12.128.0-176.13.255.255
194.90.0.0/16
199.203.0.0/16
207.232.0.0/18
212.29.192.0/18
212.143.0.0/16
212.150.0.0/16
212.235.0.0/17
217.132.0.0/16
IPv6:
2001:4df0::/29
2a02:148::/29
Signature Algorithm: sha256WithRSAEncryption
d1:c0:f5:93:96:51:33:47:50:a6:b6:ad:89:45:70:30:a0:97:
d6:43:08:d9:0b:df:0d:a0:94:ac:34:3d:da:a3:04:e2:07:c4:
9a:7d:a0:df:3c:32:ed:11:38:76:9c:fe:e0:3b:89:70:9a:a0:
a6:89:35:2f:9b:64:7c:f8:cf:29:37:4b:74:93:62:77:ee:91:
5f:7e:9c:28:ac:3d:2f:8f:9b:19:f4:8f:6d:a8:b9:0b:aa:2d:
d7:1c:6c:26:ea:d8:9f:c6:26:dc:16:4e:0e:cc:38:6e:18:24:
ae:28:f8:cf:f5:25:49:4c:36:e5:01:08:26:8d:d0:86:02:04:
f4:00:cb:e0:4c:52:c6:db:07:83:fe:52:93:a2:af:48:b8:76:
9f:6e:c4:f4:39:0b:72:38:b7:84:f3:fe:42:d0:29:0e:48:02:
5f:51:4a:7b:86:50:5c:aa:7c:8c:e3:29:63:ad:1b:ab:45:21:
5b:c3:f1:dd:37:74:a3:dd:61:78:54:e0:c0:0f:43:5d:6a:8a:
3c:0a:8e:1e:92:c0:8a:20:f4:78:41:36:0d:f7:8f:c9:69:39:
4b:2b:27:35:21:7e:6b:de:56:cf:89:27:83:25:34:bd:c1:75:
67:ef:d3:18:96:a0:ae:79:d1:58:f9:9b:93:e9:4e:d9:e3:03:
b7:96:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:50 2025 by rpki-client