Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/q1u9yvSvySelo4lV98cSWQ8CgbY.roa
File: q1u9yvSvySelo4lV98cSWQ8CgbY.roa (raw, json)
Hash identifier: sw2QB4I4a+GKos5TmyPjxVKe5k2VbKhZAzHP1Xu+61I=
Subject key identifier: AB:5B:BD:CA:F4:AF:C9:27:A5:A3:89:55:F7:C7:12:59:0F:02:81:B6
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 0189F7CAC64DD4501E08B7EBB86842BD43F1
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/q1u9yvSvySelo4lV98cSWQ8CgbY.roa
Signing time: Tue 15 Aug 2023 06:03:28 +0000
ROA not before: Tue 15 Aug 2023 06:03:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20911
IP address blocks: 178.254.246.0/24 maxlen: 24
178.254.245.0/24 maxlen: 24
178.254.244.0/24 maxlen: 24
178.254.243.0/24 maxlen: 24
178.254.242.0/24 maxlen: 24
178.254.241.0/24 maxlen: 24
178.254.240.0/20 maxlen: 20
178.254.248.0/24 maxlen: 24
178.254.247.0/24 maxlen: 24
178.254.253.0/24 maxlen: 24
178.254.252.0/24 maxlen: 24
178.254.251.0/24 maxlen: 24
178.254.250.0/24 maxlen: 24
178.254.249.0/24 maxlen: 24
178.254.255.0/24 maxlen: 24
178.254.254.0/24 maxlen: 24
178.254.192.0/24 maxlen: 24
178.254.194.0/24 maxlen: 24
178.254.199.0/24 maxlen: 24
178.254.193.0/24 maxlen: 24
178.254.198.0/23 maxlen: 23
178.254.198.0/24 maxlen: 24
178.254.197.0/24 maxlen: 24
178.254.196.0/23 maxlen: 23
178.254.196.0/24 maxlen: 24
178.254.195.0/24 maxlen: 24
178.254.194.0/23 maxlen: 23
178.254.200.0/24 maxlen: 24
178.254.206.0/23 maxlen: 23
178.254.206.0/24 maxlen: 24
178.254.205.0/24 maxlen: 24
178.254.204.0/22 maxlen: 22
178.254.204.0/24 maxlen: 24
178.254.203.0/24 maxlen: 24
178.254.202.0/24 maxlen: 24
178.254.201.0/24 maxlen: 24
178.254.200.0/23 maxlen: 23
178.254.212.0/23 maxlen: 23
178.254.213.0/24 maxlen: 24
178.254.212.0/24 maxlen: 24
178.254.211.0/24 maxlen: 24
178.254.210.0/24 maxlen: 24
178.254.209.0/24 maxlen: 24
178.254.208.0/24 maxlen: 24
178.254.208.0/22 maxlen: 22
178.254.207.0/24 maxlen: 24
178.254.219.0/24 maxlen: 24
178.254.218.0/24 maxlen: 24
178.254.217.0/24 maxlen: 24
178.254.216.0/24 maxlen: 24
178.254.216.0/21 maxlen: 21
178.254.215.0/24 maxlen: 24
178.254.214.0/24 maxlen: 24
178.254.226.0/24 maxlen: 24
178.254.225.0/24 maxlen: 24
178.254.224.0/23 maxlen: 23
178.254.224.0/24 maxlen: 24
178.254.223.0/24 maxlen: 24
178.254.222.0/24 maxlen: 24
178.254.221.0/24 maxlen: 24
178.254.220.0/24 maxlen: 24
178.254.228.0/24 maxlen: 24
178.254.233.0/24 maxlen: 24
178.254.232.0/24 maxlen: 24
178.254.232.0/21 maxlen: 21
178.254.231.0/24 maxlen: 24
178.254.230.0/24 maxlen: 24
178.254.229.0/24 maxlen: 24
178.254.228.0/22 maxlen: 22
178.254.227.0/24 maxlen: 24
178.254.240.0/24 maxlen: 24
178.254.239.0/24 maxlen: 24
178.254.238.0/24 maxlen: 24
178.254.237.0/24 maxlen: 24
178.254.236.0/24 maxlen: 24
178.254.235.0/24 maxlen: 24
178.254.234.0/24 maxlen: 24
93.152.229.0/24 maxlen: 24
93.152.228.0/24 maxlen: 24
93.152.228.0/23 maxlen: 23
93.152.253.0/24 maxlen: 24
93.152.252.0/23 maxlen: 23
93.152.252.0/24 maxlen: 24
93.152.251.0/24 maxlen: 24
93.152.250.0/24 maxlen: 24
93.152.249.0/24 maxlen: 24
93.152.248.0/24 maxlen: 24
93.152.248.0/22 maxlen: 22
93.152.255.0/24 maxlen: 24
93.152.254.0/24 maxlen: 24
93.152.254.0/23 maxlen: 23
46.229.207.128/25 maxlen: 25
46.229.206.128/25 maxlen: 25
185.95.251.0/24 maxlen: 24
185.95.250.0/24 maxlen: 24
185.95.249.0/24 maxlen: 24
185.95.248.0/24 maxlen: 24
46.229.192.0/24 maxlen: 24
46.229.192.0/23 maxlen: 23
46.229.192.0/20 maxlen: 20
46.229.194.0/24 maxlen: 24
46.229.193.0/24 maxlen: 24
46.229.199.0/24 maxlen: 24
46.229.198.0/24 maxlen: 24
46.229.197.0/24 maxlen: 24
46.229.196.0/24 maxlen: 24
46.229.196.0/22 maxlen: 22
46.229.195.0/24 maxlen: 24
46.229.205.0/24 maxlen: 24
46.229.204.0/24 maxlen: 24
46.229.203.0/24 maxlen: 24
46.229.202.0/24 maxlen: 24
46.229.201.0/24 maxlen: 24
46.229.200.0/22 maxlen: 22
46.229.200.0/24 maxlen: 24
46.229.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:ca:c6:4d:d4:50:1e:08:b7:eb:b8:68:42:bd:43:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Aug 15 06:03:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab5bbdcaf4afc927a5a38955f7c712590f0281b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:fc:97:6e:cd:20:67:c5:d0:99:9d:76:80:
5f:d8:33:9b:a7:aa:34:47:f3:aa:9f:eb:ca:59:e3:
e7:41:68:2b:06:68:82:f9:d2:14:5a:98:a2:cf:f6:
f1:74:88:78:4a:7e:46:4d:c4:39:04:f8:af:73:b2:
40:22:9b:6d:9d:04:7c:cd:f9:80:e6:ba:6c:de:99:
dd:18:26:37:44:45:f9:5f:05:ad:e1:7d:ff:5e:e9:
b4:b0:45:e4:37:79:7d:a2:36:77:b0:f3:3e:7b:91:
d3:74:b3:48:28:7f:b5:8e:81:38:43:ed:01:24:05:
b6:76:fc:43:87:95:9e:a3:38:c8:2c:3e:37:c0:fa:
41:c3:ab:62:68:a1:b8:1a:b1:d7:76:8d:26:d7:97:
e0:54:12:92:2a:19:f8:1f:c3:5e:a6:41:8d:98:89:
14:5d:38:5f:dd:11:1f:76:aa:4d:ae:29:87:48:4d:
25:1f:bf:28:09:6d:ed:3c:d8:55:a9:cd:36:2f:32:
74:97:1e:60:ad:2c:c8:e5:b4:ef:95:c7:d4:d6:02:
9f:1e:0e:c0:92:42:75:3d:23:f0:96:3b:0e:11:4d:
c5:2e:39:f3:f6:ea:46:36:d1:9a:92:46:0e:f8:7a:
d6:cf:9b:5f:f4:cd:0f:9a:6b:2e:80:7a:60:63:99:
85:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5B:BD:CA:F4:AF:C9:27:A5:A3:89:55:F7:C7:12:59:0F:02:81:B6
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/q1u9yvSvySelo4lV98cSWQ8CgbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.192.0/20
93.152.228.0/23
93.152.248.0/21
178.254.192.0/18
185.95.248.0/22
Signature Algorithm: sha256WithRSAEncryption
77:ed:25:fe:3f:c6:53:36:e7:9e:59:33:6e:92:fe:9d:09:c2:
1c:8f:4b:48:a4:de:89:8a:1b:ef:5a:ba:52:f8:58:09:46:21:
b0:0c:11:6a:34:a5:a9:97:d7:aa:12:97:4c:49:32:6e:f1:92:
e2:c9:e1:f3:8d:6c:59:46:b3:aa:f4:66:32:92:06:b0:7d:7e:
b8:5e:b9:68:a6:0f:46:3e:32:1e:95:1b:26:77:3a:78:86:45:
ab:39:04:38:72:38:aa:68:ea:2f:91:c7:db:ad:9c:93:bc:6b:
09:02:d5:ba:dd:bc:87:45:1f:5e:09:e9:2b:34:6f:5d:83:6f:
0c:04:6a:90:94:57:4f:ff:f9:a4:98:dd:b2:8f:38:97:13:9f:
12:1b:bd:b7:ab:c8:a4:f7:85:16:22:9e:c8:b8:0f:25:ba:a8:
31:bd:2a:16:99:8b:aa:21:c3:60:e8:cb:26:bd:e6:b2:47:65:
56:aa:b7:31:51:4f:2e:19:bd:01:e7:6b:eb:b9:25:c5:a3:ba:
8c:a6:a0:21:9a:2a:99:11:40:88:25:dd:eb:5c:80:a0:42:69:
3c:d2:a2:8a:fc:45:9a:61:4b:6e:be:65:4a:d4:b3:42:60:56:
b2:21:93:02:55:ba:2b:d3:a2:13:0e:37:00:32:3e:b7:2a:d2:
ed:17:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:22 2025 by rpki-client