Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yIUQt4qUNQ4IwO9WxRy0swJiaSo.roa
File: yIUQt4qUNQ4IwO9WxRy0swJiaSo.roa (raw, json)
Hash identifier: kCDpcj6ZT/9StY7iTfZqkRLtJx8pS41sWwRAKFjebnk=
Subject key identifier: C8:85:10:B7:8A:94:35:0E:08:C0:EF:56:C5:1C:B4:B3:02:62:69:2A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188E7881A74B64891E9312844E6C4049C26
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yIUQt4qUNQ4IwO9WxRy0swJiaSo.roa
Signing time: Fri 23 Jun 2023 09:13:56 +0000
ROA not before: Fri 23 Jun 2023 09:13:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
37.153.158.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
89.46.42.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
45.88.14.0/23 maxlen: 23
77.81.88.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:88:1a:74:b6:48:91:e9:31:28:44:e6:c4:04:9c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 23 09:13:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c88510b78a94350e08c0ef56c51cb4b30262692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c6:c5:0d:d9:9f:f4:75:e9:94:32:f8:7d:03:
72:d6:8c:72:9b:0a:f6:67:f5:c3:92:47:ac:3b:af:
55:ec:6e:7e:d7:3b:d4:1a:fd:93:1f:d3:43:b7:e0:
0c:94:b3:18:36:29:f8:9e:a4:c3:aa:39:19:cf:e3:
69:fb:95:98:18:0a:51:0a:17:67:6d:38:1e:ad:6a:
d0:e8:9a:dd:39:9f:cd:ea:4e:52:76:58:f1:87:75:
c4:22:ed:a1:92:6c:5f:c1:f6:40:24:42:0b:66:ff:
0a:b2:ea:40:6d:b8:da:82:cd:e3:ca:78:ef:e6:c0:
a5:8d:70:41:24:6c:19:de:3d:55:d5:26:7b:50:e3:
0e:2c:9a:37:22:a4:fe:3d:72:e8:ab:e6:91:d3:d9:
66:bf:e2:5c:27:f8:0b:84:33:c5:bc:73:e3:11:ec:
91:d9:66:4d:a9:be:7c:19:bf:c5:6f:44:24:24:71:
fd:dc:25:6c:e1:73:01:73:6d:70:ac:cc:79:a6:50:
72:30:9b:07:35:e3:15:97:e8:9c:33:d8:5a:d6:c9:
64:91:90:a4:bc:06:1a:ad:34:a1:5b:d8:c2:40:0e:
be:68:20:b2:31:be:0a:88:2b:35:21:87:6f:f6:ce:
37:c0:71:da:3c:ce:16:ce:9b:22:4c:b3:fe:cf:b1:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:85:10:B7:8A:94:35:0E:08:C0:EF:56:C5:1C:B4:B3:02:62:69:2A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yIUQt4qUNQ4IwO9WxRy0swJiaSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.158.0/24
45.88.13.0-45.88.15.255
46.102.237.0/24
77.81.65.0/24
77.81.88.0/24
86.107.51.0/24
86.107.100.0/24
89.34.106.0/24
89.35.130.0/23
89.40.215.0/24
89.45.35.0/24
89.45.162.0/24
89.46.42.0/24
89.47.36.0/24
89.47.55.0/24
92.114.32.0/24
93.90.74.0/24
94.198.171.0/24
176.223.188.0/24
188.213.216.0/24
188.214.107.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f6:b9:09:ad:7c:ed:73:ce:7a:26:3e:78:a9:22:bb:c7:8e:
08:cc:e6:85:5a:17:7a:20:21:15:9e:43:de:bb:fb:8e:3b:da:
fa:16:be:73:6f:7c:b2:f1:c8:d4:f5:56:5f:9d:2d:e2:3a:3d:
4a:83:09:df:70:5f:b1:22:07:6e:54:e0:cb:58:2f:0e:10:65:
cd:5e:b2:76:a3:9e:c1:c9:09:8f:93:0f:32:0a:a8:4e:9c:ea:
03:85:e4:d5:1c:8f:b4:49:64:4d:62:35:99:da:36:1e:a9:ed:
25:22:ea:1b:f9:07:9f:12:2f:d4:f3:fe:71:59:d7:76:0a:e2:
a3:7e:cb:49:2c:a1:a9:b5:85:49:22:61:47:36:f6:db:7c:14:
1d:c5:7e:8b:4d:5a:eb:6e:17:d5:f8:fa:dd:6e:fc:b2:34:61:
ef:da:2f:69:6a:ae:5d:74:ab:68:c8:2b:c6:d2:31:dc:7b:eb:
9b:e1:92:da:42:1d:b0:69:12:41:75:be:02:ee:e1:4c:1c:7f:
2e:b6:da:c0:44:23:cc:f6:35:f3:4b:8f:26:f7:bf:db:fd:96:
8f:ce:8a:f7:4e:49:f9:85:94:1e:d0:de:e5:9e:85:46:09:7f:
56:8e:ce:3f:86:32:ea:91:5c:71:a8:53:3e:04:b4:d0:54:94:
cf:7c:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:24 2025 by rpki-client