Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/J1uoM7CkEBnL_kXHRRyFmIvXeXQ.roa
File: J1uoM7CkEBnL_kXHRRyFmIvXeXQ.roa (raw, json)
Hash identifier: 3NqhF66JDFEZOiAlgebj59cQ5dZ6hUSO1iiGtr6PMbY=
Subject key identifier: 27:5B:A8:33:B0:A4:10:19:CB:FE:45:C7:45:1C:85:98:8B:D7:79:74
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 0185E5C02592B8B590DDAA52007C10E2F274
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/J1uoM7CkEBnL_kXHRRyFmIvXeXQ.roa
Signing time: Tue 24 Jan 2023 21:47:33 +0000
ROA not before: Tue 24 Jan 2023 21:47:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12912
IP address blocks: 178.183.0.0/18 maxlen: 18
188.146.0.0/19 maxlen: 19
188.146.0.0/18 maxlen: 18
188.147.192.0/19 maxlen: 19
188.146.0.0/15 maxlen: 15
178.183.32.0/24 maxlen: 24
188.147.96.0/19 maxlen: 19
62.152.128.0/19 maxlen: 19
37.30.32.0/19 maxlen: 19
178.180.0.0/14 maxlen: 14
188.146.128.0/19 maxlen: 19
188.146.32.0/19 maxlen: 19
37.30.0.0/19 maxlen: 19
188.146.64.0/19 maxlen: 19
83.220.96.0/19 maxlen: 19
37.30.0.0/15 maxlen: 15
83.220.101.0/24 maxlen: 24
188.146.192.0/19 maxlen: 19
46.204.0.0/19 maxlen: 19
46.204.0.0/15 maxlen: 15
46.205.192.0/20 maxlen: 20
46.205.208.0/20 maxlen: 20
46.204.32.0/19 maxlen: 19
46.205.128.0/19 maxlen: 19
37.30.96.0/19 maxlen: 19
178.182.0.0/18 maxlen: 18
188.147.64.0/19 maxlen: 19
188.147.64.0/18 maxlen: 18
213.158.192.0/19 maxlen: 19
46.204.64.0/19 maxlen: 19
188.147.0.0/19 maxlen: 19
46.205.240.0/21 maxlen: 21
46.204.96.0/19 maxlen: 19
2001:1b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:c0:25:92:b8:b5:90:dd:aa:52:00:7c:10:e2:f2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Jan 24 21:47:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=275ba833b0a41019cbfe45c7451c85988bd77974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7b:ca:cc:42:8f:b8:fd:23:00:8e:3b:54:6f:
79:00:a4:a9:f6:52:3d:35:44:cc:3b:ca:48:92:90:
e5:0b:46:b9:72:86:03:43:38:39:8a:d5:fa:6e:cb:
7b:d6:ce:8c:16:dd:25:62:16:93:3b:75:99:93:c7:
2a:02:90:dd:dc:18:38:09:b5:66:9e:8c:0d:2f:93:
99:12:a6:50:8e:ee:ab:60:a3:25:60:e4:5f:4e:54:
f5:65:fd:f6:4e:80:40:b2:67:93:42:66:4f:c9:bd:
9d:73:7b:6b:ff:3f:58:8f:85:44:01:07:41:1d:24:
05:d6:c7:2c:b6:d6:fe:e7:70:12:81:05:68:83:46:
8d:2d:b4:6a:5f:ad:0c:57:aa:e6:d5:cf:ad:9b:93:
cf:94:e5:fa:60:3a:99:e5:28:9d:3a:f6:b0:87:ba:
1c:12:38:32:9e:1f:b9:3e:c5:b4:e1:ec:2d:08:a7:
7d:ce:3c:83:a2:b3:28:23:1b:72:21:f2:9f:08:eb:
5c:bd:c7:52:65:ac:19:9a:f1:27:03:f0:eb:da:a6:
2b:77:37:51:6d:ae:ca:68:1b:ff:9b:55:30:3d:e2:
a7:52:4e:9a:02:fa:b0:42:ab:4a:c5:d1:1c:30:86:
21:e0:be:d1:7f:41:be:93:73:de:0d:01:ab:6a:c5:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5B:A8:33:B0:A4:10:19:CB:FE:45:C7:45:1C:85:98:8B:D7:79:74
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/J1uoM7CkEBnL_kXHRRyFmIvXeXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.30.0.0/15
46.204.0.0/15
62.152.128.0/19
83.220.96.0/19
178.180.0.0/14
188.146.0.0/15
213.158.192.0/19
IPv6:
2001:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
2c:fc:e1:da:68:8f:e4:42:c3:34:db:1d:fa:3f:9c:9c:be:8a:
2d:e3:58:4b:5a:b7:31:2f:9c:60:73:2a:bf:29:72:e4:de:48:
e8:7a:c4:34:a1:be:c5:de:ca:35:12:fd:90:62:08:e1:24:50:
f3:02:73:53:43:34:9a:dd:cf:de:3e:dc:e5:18:4d:a8:77:bb:
9c:e8:d2:5a:a5:dd:46:b3:89:d9:9d:bf:94:ff:c2:89:58:1f:
d9:f9:9c:72:07:a7:16:f5:43:c5:0b:3d:b3:d2:e4:03:10:af:
97:57:cf:69:e4:12:27:da:95:0a:40:f1:0a:1b:c2:28:53:52:
b4:c5:58:99:e7:c7:7f:03:73:e5:a4:50:49:e0:f7:df:23:f9:
a3:3b:15:f0:ca:f6:ca:89:92:d8:5a:1f:97:4b:3e:e9:77:a0:
6b:f8:18:4d:11:e3:b3:cb:94:fc:fb:cf:4e:b3:cf:35:ef:f9:
bd:86:00:36:ac:7d:ab:94:cf:8a:76:c3:0c:f7:76:68:99:af:
53:09:a0:a9:db:b1:24:a7:b9:37:bc:00:d3:45:4d:f2:7c:8a:
c1:af:db:18:8b:fc:02:3b:9f:9d:02:fd:16:47:9b:e0:d5:ff:
ca:49:02:08:0a:f8:4b:7c:5b:83:60:3d:ac:78:93:75:67:e4:
a8:8b:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:05:59 2025 by rpki-client