Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/mte975FVPYkGHeZ2Bj15vc8Ah58.roa
File: mte975FVPYkGHeZ2Bj15vc8Ah58.roa (raw, json)
Hash identifier: Rql5OXT4OhdDoWakVTpGjFehEazc3osT5nPSrPE2yIU=
Subject key identifier: 9A:D7:BD:EF:91:55:3D:89:06:1D:E6:76:06:3D:79:BD:CF:00:87:9F
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 01881E376F5E3010DC91A64FCE8C2E226B35
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/mte975FVPYkGHeZ2Bj15vc8Ah58.roa
Signing time: Mon 15 May 2023 07:02:09 +0000
ROA not before: Mon 15 May 2023 07:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13194
IP address blocks: 84.46.139.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
82.140.177.0/24 maxlen: 24
82.140.180.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
89.117.225.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.128.0/24 maxlen: 24
82.140.129.0/24 maxlen: 24
82.140.159.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
213.226.161.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
89.117.248.0/23 maxlen: 24
89.117.247.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
89.117.255.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:37:6f:5e:30:10:dc:91:a6:4f:ce:8c:2e:22:6b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: May 15 07:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ad7bdef91553d89061de676063d79bdcf00879f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:76:55:a3:3f:52:dc:7a:96:af:7a:59:08:2b:
9f:23:c0:22:44:f7:bb:9e:39:03:6e:75:76:0f:3f:
6f:28:b0:c1:64:3c:74:29:29:37:c5:54:46:41:d4:
6b:f1:6b:61:0e:59:23:8a:49:5e:e0:e8:6a:93:34:
b2:d6:8d:f2:61:dd:02:49:5b:23:a7:5c:22:08:f3:
8c:87:af:a9:3c:65:2a:35:d1:74:0b:89:ca:61:51:
14:06:dd:46:11:25:ab:29:1d:76:24:d2:a0:ea:dc:
9b:46:17:d5:b8:bf:c4:ec:73:f9:d9:d2:0b:77:22:
41:5c:d8:f9:26:68:88:b5:0c:4f:53:06:e4:0a:09:
65:04:52:5a:ce:98:23:73:fd:f8:73:5c:f7:b7:aa:
99:30:ca:61:ab:ae:56:90:05:db:a3:61:2e:a5:5f:
f3:32:ad:8f:1b:e0:29:b2:a1:58:2d:1a:b1:ee:64:
27:13:a6:f4:11:ee:6e:19:54:5f:ce:48:bb:28:fd:
a9:aa:37:b4:99:fe:84:df:b9:9a:4d:8c:b6:1a:ee:
2f:44:ac:77:a0:04:8e:56:3b:28:4a:c4:3f:02:e9:
14:d8:1f:af:3c:2a:c2:b4:e2:ea:24:db:f1:eb:d4:
7c:60:e3:46:bb:bf:4b:c6:95:89:8a:7d:65:15:ae:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D7:BD:EF:91:55:3D:89:06:1D:E6:76:06:3D:79:BD:CF:00:87:9F
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/mte975FVPYkGHeZ2Bj15vc8Ah58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.159.0/24
82.140.177.0/24
82.140.180.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.41.0/24
86.38.72.0/22
86.38.81.0/24
86.38.84.0/24
86.38.97.0/24
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.247.0-89.117.249.255
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
4a:b1:49:73:63:eb:99:04:17:ec:59:d5:5d:9e:2c:30:79:13:
b5:90:5d:3d:10:d9:22:73:e4:48:92:a9:db:99:98:36:23:99:
a7:9f:6e:81:83:86:c8:db:9d:bf:9f:ee:e8:d1:ce:02:0e:57:
cf:fe:03:56:a7:bc:60:f1:f9:dd:99:a4:81:32:57:fa:87:59:
82:1d:ef:6b:7d:9d:6a:30:77:65:c9:c5:c8:57:db:d9:21:b3:
07:41:2b:5d:59:cc:09:82:5d:49:9e:70:9e:4b:52:73:a3:51:
99:09:a8:09:62:e9:d9:cc:b4:4d:44:93:c7:b0:a7:ab:c9:1d:
86:32:a6:00:62:02:8b:e7:be:66:14:4f:05:c1:d9:97:d6:2f:
23:de:f6:37:c6:0b:fa:24:93:f7:7f:97:55:44:5d:6b:f9:73:
2a:c4:71:28:bd:e8:1b:ec:8d:f8:6d:d0:62:c0:98:bf:77:ed:
f4:f7:21:33:90:8b:e9:91:ab:3a:c8:e4:25:8f:f0:04:db:33:
21:ba:d3:0c:3f:bd:6c:7c:0c:a3:ac:7b:2f:ab:bc:de:ee:52:
86:f1:ae:86:f1:b9:db:d2:b8:37:fa:78:05:b2:8f:9e:11:29:
a2:8b:58:01:a0:7a:ce:f8:3c:43:d1:6d:34:24:29:3d:78:de:
3e:19:7c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:14 2025 by rpki-client