Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/qcMUXPTuCCbnOBQn7tdvfAUeyQ0.roa
File: qcMUXPTuCCbnOBQn7tdvfAUeyQ0.roa (raw, json)
Hash identifier: oYuS0N9sRGBPwWoMmUdmmpInZOuz9rI/rymCZRsnEjA=
Subject key identifier: A9:C3:14:5C:F4:EE:08:26:E7:38:14:27:EE:D7:6F:7C:05:1E:C9:0D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 01891AD4BE7B2B2F865A37C9C428BB116CE9
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/qcMUXPTuCCbnOBQn7tdvfAUeyQ0.roa
Signing time: Mon 03 Jul 2023 08:18:17 +0000
ROA not before: Mon 03 Jul 2023 08:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21021
IP address blocks: 217.172.224.0/19 maxlen: 19
217.75.48.0/20 maxlen: 20
217.70.48.0/20 maxlen: 20
195.93.222.0/23 maxlen: 23
83.68.64.0/19 maxlen: 19
195.93.134.0/23 maxlen: 23
89.230.0.0/16 maxlen: 16
89.17.224.0/19 maxlen: 19
94.78.128.0/18 maxlen: 18
80.245.176.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
31.42.16.0/20 maxlen: 20
89.229.0.0/16 maxlen: 16
84.38.80.0/20 maxlen: 20
176.107.112.0/21 maxlen: 21
81.190.0.0/16 maxlen: 16
185.31.184.0/22 maxlen: 22
31.6.128.0/18 maxlen: 18
194.116.132.0/23 maxlen: 23
89.231.0.0/16 maxlen: 16
80.244.128.0/19 maxlen: 19
62.141.192.0/18 maxlen: 18
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
31.6.192.0/19 maxlen: 19
193.200.118.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
193.43.240.0/22 maxlen: 22
37.131.128.0/19 maxlen: 19
193.43.243.0/24 maxlen: 24
193.43.242.0/24 maxlen: 24
95.129.224.0/21 maxlen: 21
193.106.76.0/22 maxlen: 22
37.190.128.0/17 maxlen: 17
89.228.0.0/16 maxlen: 16
95.174.32.0/19 maxlen: 19
82.115.64.0/19 maxlen: 19
176.221.96.0/19 maxlen: 19
46.186.0.0/17 maxlen: 17
85.117.0.0/19 maxlen: 19
213.136.224.0/19 maxlen: 19
46.231.56.0/21 maxlen: 21
62.61.32.0/19 maxlen: 19
87.116.192.0/18 maxlen: 18
94.251.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:d4:be:7b:2b:2f:86:5a:37:c9:c4:28:bb:11:6c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jul 3 08:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c3145cf4ee0826e7381427eed76f7c051ec90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:85:09:ab:27:60:00:cb:1f:d3:ea:1c:07:
b2:ef:8a:3f:ee:06:ea:3f:d4:80:4d:dd:33:db:72:
ac:0c:1d:c6:ae:37:16:81:82:89:4a:61:ad:67:3f:
30:9d:29:04:77:17:b9:1d:d1:b6:3a:51:2a:34:cf:
61:c2:54:75:e2:3d:8f:7e:d2:c9:ef:60:6b:0f:16:
fa:6f:ba:2c:be:c7:98:57:ed:82:61:b5:8a:c7:c3:
d1:ad:b9:5c:84:1c:4e:56:25:f0:36:b3:5f:c3:e9:
8b:d2:80:8f:e3:69:47:58:9e:1f:87:02:7a:3d:59:
b6:d6:88:3d:17:4d:fe:99:c7:d1:92:a0:17:d7:bf:
f1:00:53:0c:f0:d6:6e:2c:38:71:1e:bb:5e:1d:9a:
b2:b9:f0:e1:bf:d7:ce:28:8a:e3:ea:31:58:68:da:
4b:99:cd:ac:20:41:27:99:5f:df:b4:1e:a0:d4:be:
c8:63:03:20:51:af:7e:b5:5a:23:0a:54:47:3a:c9:
94:49:c2:52:3f:59:b6:38:1b:9f:56:ec:52:ee:93:
8d:0d:df:e0:69:a0:a5:57:01:50:d1:4c:01:12:c6:
09:b1:14:93:03:f7:07:10:3d:72:e3:e3:6f:fd:4e:
1e:a6:43:be:ac:de:64:2d:6d:b6:9b:33:3f:73:4a:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C3:14:5C:F4:EE:08:26:E7:38:14:27:EE:D7:6F:7C:05:1E:C9:0D
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/qcMUXPTuCCbnOBQn7tdvfAUeyQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:c0:89:93:eb:7c:58:eb:60:6e:98:0e:21:06:77:04:df:25:
d8:87:c2:d6:c8:26:63:c8:88:34:b5:3e:10:56:c7:e2:4a:75:
b2:b8:be:90:24:49:d1:5d:7b:a6:f7:ad:b5:65:ae:58:72:c9:
44:2c:29:57:9e:d5:a6:ef:09:d7:fb:55:0c:41:97:16:35:85:
1a:8f:46:e0:81:15:fc:cf:58:61:a4:40:5b:ec:2c:d9:28:bc:
9a:0d:ac:c2:1b:6f:22:a8:7d:a1:6c:68:09:b1:03:50:f5:6d:
da:fa:81:f7:39:0f:2f:39:a6:60:47:9e:9f:13:4c:65:e5:7a:
52:38:6f:7d:34:8f:d6:98:b2:24:8f:89:9d:0b:99:ce:64:0f:
0c:f4:e8:ab:8b:ec:a7:62:ab:e5:13:3c:0f:7d:de:8b:7a:1f:
84:2f:cd:7a:69:e5:9c:b4:2b:d3:be:c6:77:56:9e:bd:cb:9e:
cf:7f:86:7a:71:56:b0:ab:80:9c:41:47:58:57:3b:21:30:76:
b0:95:66:92:0f:e6:3f:1b:4c:7a:67:12:9c:d5:f1:6c:45:5d:
4b:4d:64:6a:ef:7a:e6:56:7f:12:08:f8:ca:aa:fa:42:07:9f:
67:b2:96:eb:80:49:bc:e4:88:67:28:e6:fe:6f:aa:8a:b4:e1:
03:ae:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:09 2025 by rpki-client