Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/reP_9KU5Z-akzn2R5VkDOTB9vqc.roa
File: reP_9KU5Z-akzn2R5VkDOTB9vqc.roa (raw, json)
Hash identifier: nNy2yT62pgJLXs5NPgsJtBPhC1DxJY5aWGa/H9mjo6A=
Subject key identifier: AD:E3:FF:F4:A5:39:67:E6:A4:CE:7D:91:E5:59:03:39:30:7D:BE:A7
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 37EFD73C
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/reP_9KU5Z-akzn2R5VkDOTB9vqc.roa
Signing time: Wed 05 Jan 2022 15:44:59 +0000
ROA not before: Wed 05 Jan 2022 15:44:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20911
IP address blocks: 178.254.246.0/24 maxlen: 24
178.254.245.0/24 maxlen: 24
178.254.244.0/24 maxlen: 24
178.254.243.0/24 maxlen: 24
178.254.242.0/24 maxlen: 24
178.254.241.0/24 maxlen: 24
178.254.240.0/20 maxlen: 20
178.254.248.0/24 maxlen: 24
178.254.247.0/24 maxlen: 24
178.254.253.0/24 maxlen: 24
178.254.252.0/24 maxlen: 24
178.254.251.0/24 maxlen: 24
178.254.250.0/24 maxlen: 24
178.254.249.0/24 maxlen: 24
178.254.255.0/24 maxlen: 24
178.254.254.0/24 maxlen: 24
178.254.192.0/24 maxlen: 24
178.254.199.0/24 maxlen: 24
178.254.198.0/23 maxlen: 23
178.254.198.0/24 maxlen: 24
178.254.197.0/24 maxlen: 24
178.254.193.0/24 maxlen: 24
178.254.200.0/24 maxlen: 24
178.254.206.0/23 maxlen: 23
178.254.206.0/24 maxlen: 24
178.254.205.0/24 maxlen: 24
178.254.204.0/22 maxlen: 22
178.254.204.0/24 maxlen: 24
178.254.203.0/24 maxlen: 24
178.254.202.0/24 maxlen: 24
178.254.201.0/24 maxlen: 24
178.254.200.0/23 maxlen: 23
178.254.212.0/23 maxlen: 23
178.254.213.0/24 maxlen: 24
178.254.212.0/24 maxlen: 24
178.254.211.0/24 maxlen: 24
178.254.210.0/24 maxlen: 24
178.254.209.0/24 maxlen: 24
178.254.208.0/24 maxlen: 24
178.254.208.0/22 maxlen: 22
178.254.207.0/24 maxlen: 24
178.254.219.0/24 maxlen: 24
178.254.218.0/24 maxlen: 24
178.254.217.0/24 maxlen: 24
178.254.216.0/24 maxlen: 24
178.254.216.0/21 maxlen: 21
178.254.226.0/24 maxlen: 24
178.254.225.0/24 maxlen: 24
178.254.224.0/23 maxlen: 23
178.254.224.0/24 maxlen: 24
178.254.223.0/24 maxlen: 24
178.254.222.0/24 maxlen: 24
178.254.221.0/24 maxlen: 24
178.254.220.0/24 maxlen: 24
178.254.228.0/24 maxlen: 24
178.254.233.0/24 maxlen: 24
178.254.232.0/24 maxlen: 24
178.254.232.0/21 maxlen: 21
178.254.231.0/24 maxlen: 24
178.254.230.0/24 maxlen: 24
178.254.229.0/24 maxlen: 24
178.254.228.0/22 maxlen: 22
178.254.227.0/24 maxlen: 24
178.254.240.0/24 maxlen: 24
178.254.239.0/24 maxlen: 24
178.254.238.0/24 maxlen: 24
178.254.237.0/24 maxlen: 24
178.254.236.0/24 maxlen: 24
178.254.235.0/24 maxlen: 24
178.254.234.0/24 maxlen: 24
93.152.229.0/24 maxlen: 24
93.152.228.0/24 maxlen: 24
93.152.228.0/23 maxlen: 23
93.152.253.0/24 maxlen: 24
93.152.252.0/23 maxlen: 23
93.152.252.0/24 maxlen: 24
93.152.251.0/24 maxlen: 24
93.152.250.0/24 maxlen: 24
93.152.249.0/24 maxlen: 24
93.152.248.0/24 maxlen: 24
93.152.248.0/22 maxlen: 22
93.152.255.0/24 maxlen: 24
93.152.254.0/24 maxlen: 24
93.152.254.0/23 maxlen: 23
46.229.207.128/25 maxlen: 25
46.229.206.128/25 maxlen: 25
185.95.251.0/24 maxlen: 24
185.95.250.0/24 maxlen: 24
185.95.249.0/24 maxlen: 24
185.95.248.0/24 maxlen: 24
46.229.192.0/24 maxlen: 24
46.229.192.0/23 maxlen: 23
46.229.192.0/20 maxlen: 20
46.229.194.0/24 maxlen: 24
46.229.193.0/24 maxlen: 24
46.229.199.0/24 maxlen: 24
46.229.198.0/24 maxlen: 24
46.229.197.0/24 maxlen: 24
46.229.196.0/24 maxlen: 24
46.229.196.0/22 maxlen: 22
46.229.195.0/24 maxlen: 24
46.229.204.0/24 maxlen: 24
46.229.203.0/24 maxlen: 24
46.229.202.0/24 maxlen: 24
46.229.201.0/24 maxlen: 24
46.229.200.0/22 maxlen: 22
46.229.200.0/24 maxlen: 24
46.229.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938465084 (0x37efd73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Jan 5 15:44:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ade3fff4a53967e6a4ce7d91e5590339307dbea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:d1:35:9d:1a:46:7f:01:22:33:81:43:8c:
8a:8e:78:94:7a:e7:10:5f:4b:08:65:34:0c:12:a6:
c0:c0:36:87:e8:b6:23:da:2a:37:ef:9c:43:2f:a7:
bd:06:39:f6:31:6d:8a:78:2e:ab:10:c5:06:3c:10:
45:9a:c2:5e:f3:fb:4e:1d:bd:e9:9d:d4:63:86:32:
b0:20:ab:54:ba:e5:af:4a:11:7e:48:88:5d:cf:ad:
f6:5f:31:29:6d:ee:75:90:54:86:db:14:d3:c9:26:
81:97:c1:75:0b:9c:f9:c4:b0:93:7b:e0:f9:b0:53:
15:d2:2c:8e:15:30:d2:31:cb:e7:fd:0b:ea:4a:6a:
aa:fd:b4:70:4e:87:4d:34:45:47:38:f9:62:69:74:
a5:f7:1f:80:fd:31:52:7e:2f:cd:20:2b:d1:33:78:
c3:dd:69:c3:1c:9e:05:39:b5:1b:e7:81:18:1f:c6:
08:91:e8:e4:d1:8f:8b:f9:a3:2c:3f:ca:15:ae:91:
0a:9a:22:eb:4a:42:02:02:95:5f:cc:87:71:31:31:
9c:f2:53:dc:0e:c7:b4:fb:16:1b:24:45:8e:01:97:
bd:7a:79:58:30:00:5c:9b:12:9f:26:28:1c:a7:d4:
4e:81:27:17:57:e9:a3:bf:44:18:6d:f7:8c:3b:dc:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:FF:F4:A5:39:67:E6:A4:CE:7D:91:E5:59:03:39:30:7D:BE:A7
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/reP_9KU5Z-akzn2R5VkDOTB9vqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.192.0/20
93.152.228.0/23
93.152.248.0/21
178.254.192.0/23
178.254.197.0-178.254.213.255
178.254.216.0-178.254.255.255
185.95.248.0/22
Signature Algorithm: sha256WithRSAEncryption
79:be:14:53:93:ac:a2:87:3a:72:87:4f:07:4f:b6:5d:43:58:
a0:ec:51:55:a5:fa:70:ca:98:26:5f:a9:89:03:c1:6c:e2:e6:
bf:c0:0a:4c:2e:d1:c1:58:e0:2b:22:53:09:4f:db:b6:23:8a:
cd:4c:55:ae:27:f5:9c:ae:1e:0d:b6:27:a7:89:b0:21:89:c9:
07:e5:7a:f3:34:98:dd:9f:c9:84:c8:c5:34:53:a1:f2:60:31:
9d:bc:c7:18:e2:80:11:0f:04:b2:20:3d:f1:6b:1f:6f:88:44:
3c:43:a0:05:8b:8a:81:04:4d:b0:4f:06:df:35:60:25:df:de:
47:25:ae:77:a1:4e:1c:b3:43:2d:a1:4e:5d:d9:93:5c:7b:12:
8e:39:e2:fe:72:55:b9:28:40:5c:3c:1a:22:e5:a5:4a:4c:29:
3e:e1:c3:38:19:87:bd:57:04:68:b9:06:d0:ba:86:7f:a1:1a:
58:bb:32:9a:82:50:10:87:9e:9d:a3:7e:f4:ee:36:bf:53:2f:
ae:69:0f:52:3f:21:20:39:57:7a:0c:ce:69:43:7c:08:fd:e5:
10:e2:8b:5c:7f:35:28:a5:bb:7b:7e:7b:2a:95:fa:48:ee:fd:
e0:71:48:ff:10:e6:4c:8c:28:02:cb:c5:e7:17:96:23:b4:04:
bd:8b:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:56 2025 by rpki-client