Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/sOjZhCpTDFslsNQMNfhxtccv-t4.roa
File: sOjZhCpTDFslsNQMNfhxtccv-t4.roa (raw, json)
Hash identifier: SI0aaihGWohRjSuKHdjU1Wrqz+t/3Z9YBAzVHRwh1vo=
Subject key identifier: B0:E8:D9:84:2A:53:0C:5B:25:B0:D4:0C:35:F8:71:B5:C7:2F:FA:DE
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 27A71170
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/sOjZhCpTDFslsNQMNfhxtccv-t4.roa
Signing time: Sat 01 Jan 2022 16:05:24 +0000
ROA not before: Sat 01 Jan 2022 16:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32590
IP address blocks: 155.133.233.0/24 maxlen: 24
155.133.232.0/24 maxlen: 24
155.133.230.0/23 maxlen: 24
155.133.228.0/23 maxlen: 23
155.133.227.0/24 maxlen: 24
155.133.240.0/23 maxlen: 23
155.133.239.0/24 maxlen: 24
155.133.238.0/24 maxlen: 24
155.133.236.0/23 maxlen: 23
155.133.235.0/24 maxlen: 24
155.133.234.0/24 maxlen: 24
146.66.152.0/23 maxlen: 24
155.133.246.0/23 maxlen: 24
155.133.245.0/24 maxlen: 24
155.133.244.0/24 maxlen: 24
155.133.242.0/23 maxlen: 23
155.133.251.0/24 maxlen: 24
146.66.158.0/23 maxlen: 23
155.133.253.0/24 maxlen: 24
155.133.252.0/24 maxlen: 24
155.133.250.0/24 maxlen: 24
146.66.156.0/23 maxlen: 23
155.133.249.0/24 maxlen: 24
146.66.155.0/24 maxlen: 24
146.66.154.0/24 maxlen: 24
155.133.248.0/24 maxlen: 24
155.133.255.0/24 maxlen: 24
155.133.254.0/24 maxlen: 24
155.133.226.0/24 maxlen: 24
155.133.224.0/23 maxlen: 23
185.25.183.0/24 maxlen: 24
185.25.182.0/24 maxlen: 24
185.25.180.0/23 maxlen: 23
2a01:bc80:9::/48 maxlen: 48
2a01:bc80:c::/48 maxlen: 48
2a01:bc80:7::/48 maxlen: 48
2a01:bc80:2::/48 maxlen: 48
2a01:bc80:b::/48 maxlen: 48
2a01:bc80:6::/48 maxlen: 48
2a01:bc80:1::/48 maxlen: 48
2a01:bc80:4::/48 maxlen: 48
2a01:bc80:8::/48 maxlen: 48
2a01:bc80:3::/48 maxlen: 48
2a01:bc80::/48 maxlen: 48
2a01:bc80:a::/48 maxlen: 48
2a01:bc80:5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665260400 (0x27a71170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Jan 1 16:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0e8d9842a530c5b25b0d40c35f871b5c72ffade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:f2:67:26:87:3f:86:5b:64:56:fc:3b:9f:
51:ea:e9:d2:5b:bd:76:3e:f0:ee:08:93:71:f8:d4:
48:0a:c4:2d:f3:41:40:17:ec:8d:c0:2a:19:dd:99:
00:de:41:c1:1f:be:ff:be:3e:80:b6:0d:68:cb:61:
13:3e:bf:60:82:3e:a2:b8:20:24:c5:ca:25:65:1c:
42:62:e1:39:56:cd:8b:1d:11:46:86:2b:68:d6:d3:
5c:57:d6:66:1b:b2:f3:0f:8f:2f:21:5b:e8:f0:2b:
69:b2:34:2d:38:05:6a:d7:3c:e2:df:d7:de:ef:4d:
91:25:96:09:77:23:2b:22:4b:8d:29:84:de:93:23:
46:e8:18:de:10:dc:13:a4:11:96:19:a5:7e:af:e6:
dc:56:12:6d:50:92:f0:01:f7:70:60:2c:a2:29:bc:
10:c5:ed:e3:8c:83:0c:b6:d2:30:f4:7e:2d:37:83:
20:04:91:28:d5:09:a8:49:d1:2d:c0:51:27:0a:ac:
f4:f1:d7:fc:66:ed:e9:f4:57:d0:b4:6d:8f:e1:ad:
03:e9:6f:14:2e:6d:54:91:46:12:c0:8c:e5:c9:1f:
18:16:69:86:8d:55:f6:c4:34:1b:a7:00:a9:f2:64:
3a:36:62:d2:15:b5:b8:7b:b8:a4:86:c3:e8:dc:ea:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E8:D9:84:2A:53:0C:5B:25:B0:D4:0C:35:F8:71:B5:C7:2F:FA:DE
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/sOjZhCpTDFslsNQMNfhxtccv-t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.152.0/21
155.133.224.0/19
185.25.180.0/22
IPv6:
2a01:bc80::-2a01:bc80:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:7e:ee:99:2c:15:27:df:20:49:a3:26:cc:5a:4d:c0:d5:33:
09:9f:b1:e0:ca:d5:65:1a:26:69:a8:58:05:59:e7:ea:b9:60:
6f:9d:b3:7a:ab:d6:94:12:20:6c:76:5c:75:d0:9d:cb:d1:46:
64:fd:98:8d:6b:9e:08:4a:dd:13:17:2b:92:78:22:bc:ea:83:
d3:41:83:16:0a:c0:ac:6b:44:0c:40:3b:b4:e5:46:a2:b4:af:
81:d3:bf:2d:90:8f:22:e5:ec:15:ce:2f:bb:e4:0a:1b:c7:06:
d5:43:79:0f:eb:a3:39:8e:72:94:59:4b:00:34:37:d0:f6:c5:
79:b8:0d:df:a6:49:9f:d2:49:58:95:56:81:c5:64:5f:ff:da:
6d:28:a9:b9:7c:99:c7:2a:64:2b:c3:b8:27:67:6b:92:07:d3:
cd:77:91:5b:d9:e9:c5:62:50:eb:17:b4:1f:d9:e0:96:90:e3:
ef:a7:34:d2:14:0c:dd:a2:fa:dc:1e:19:fb:e7:51:42:0e:df:
95:d3:77:3f:75:7f:05:75:d3:84:13:be:25:49:0b:73:9f:e1:
dd:96:d0:56:41:ea:69:33:db:67:46:00:82:d0:00:d6:af:cb:
cb:42:2b:bd:36:35:df:dd:cb:04:38:63:ce:32:1a:d5:5e:32:
b3:e4:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:21 2025 by rpki-client