Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/dDCL6TyqwbfG90BjnLC4a8t6Ulo.roa
File: dDCL6TyqwbfG90BjnLC4a8t6Ulo.roa (raw, json)
Hash identifier: iUGVLtQo9krnLMKod88gCfk9/Ncm0pTkq3qGRXVjGUY=
Subject key identifier: 74:30:8B:E9:3C:AA:C1:B7:C6:F7:40:63:9C:B0:B8:6B:CB:7A:52:5A
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 018570303AA16B6A9C6332C2B70A5A2BE341
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/dDCL6TyqwbfG90BjnLC4a8t6Ulo.roa
Signing time: Mon 02 Jan 2023 01:54:46 +0000
ROA not before: Mon 02 Jan 2023 01:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61323
IP address blocks: 81.201.128.0/20 maxlen: 20
80.66.200.0/22 maxlen: 22
185.241.248.0/22 maxlen: 24
185.221.204.0/22 maxlen: 22
193.39.252.0/22 maxlen: 22
194.39.164.0/22 maxlen: 22
185.160.252.0/23 maxlen: 23
185.160.254.0/24 maxlen: 24
78.137.112.0/20 maxlen: 20
178.238.128.0/20 maxlen: 20
45.84.20.0/22 maxlen: 24
185.181.196.0/22 maxlen: 22
176.124.52.0/22 maxlen: 24
185.210.196.0/22 maxlen: 22
185.207.108.0/22 maxlen: 22
195.69.102.0/24 maxlen: 24
185.234.36.0/22 maxlen: 22
78.109.160.0/20 maxlen: 20
185.197.60.0/22 maxlen: 22
185.160.180.0/22 maxlen: 22
80.244.176.0/20 maxlen: 20
45.157.40.0/22 maxlen: 22
192.166.44.0/24 maxlen: 24
192.166.45.0/24 maxlen: 24
192.166.46.0/23 maxlen: 23
159.253.208.0/21 maxlen: 21
185.226.220.0/22 maxlen: 22
185.162.224.0/22 maxlen: 22
31.193.0.0/20 maxlen: 20
185.217.40.0/22 maxlen: 22
185.220.60.0/22 maxlen: 22
185.156.64.0/24 maxlen: 24
185.156.65.0/24 maxlen: 24
185.156.66.0/23 maxlen: 23
37.220.88.0/21 maxlen: 21
185.55.78.0/23 maxlen: 23
185.55.77.0/24 maxlen: 24
185.166.128.0/22 maxlen: 22
45.131.136.0/22 maxlen: 22
109.108.128.0/19 maxlen: 19
185.216.76.0/22 maxlen: 22
78.24.89.0/24 maxlen: 24
78.24.90.0/23 maxlen: 23
78.24.88.0/24 maxlen: 24
185.182.88.0/22 maxlen: 22
45.145.100.0/22 maxlen: 22
46.37.160.0/19 maxlen: 19
94.229.160.0/20 maxlen: 20
2a02:21a8:5::/48 maxlen: 48
2a02:21a8:6::/48 maxlen: 48
2a02:22d0::/32 maxlen: 32
2a09:b600:5::/48 maxlen: 48
2a02:21a8:2::/48 maxlen: 48
2a09:ba00:4::/48 maxlen: 48
2a02:22d0:c::/48 maxlen: 48
2a09:b200:6::/48 maxlen: 48
2a0c:3dc0::/29 maxlen: 29
2a02:21a8::/48 maxlen: 48
2a02:21a8:1::/48 maxlen: 48
2a02:21a8:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:3a:a1:6b:6a:9c:63:32:c2:b7:0a:5a:2b:e3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jan 2 01:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74308be93caac1b7c6f740639cb0b86bcb7a525a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:47:5c:2d:ef:4e:5d:68:e1:d7:cb:b0:71:ba:
90:38:e3:f3:50:48:51:e7:7c:67:39:91:af:00:de:
a4:c4:c9:ba:00:cf:db:44:1f:16:79:40:68:c4:0a:
f8:49:8d:4c:49:63:71:51:a1:9e:45:c3:0e:0f:48:
4a:46:e1:5c:80:d5:70:90:55:92:31:f0:97:86:c8:
d6:41:55:7c:ba:7e:ed:85:97:ad:eb:0e:36:b9:16:
7c:d9:71:45:5e:26:04:a1:6f:b5:ae:11:31:0b:f5:
f4:38:44:67:c8:f6:82:8e:77:a3:27:e5:c0:06:d2:
4b:08:96:32:fc:a3:af:2e:57:6e:8e:aa:e6:42:23:
90:fe:34:b3:36:4e:69:b5:bb:46:f8:3f:86:2b:6d:
4f:cd:f5:b6:eb:80:1d:d9:17:1f:cb:f9:c3:4c:ec:
b4:a8:79:c2:41:50:81:61:b2:9b:6f:8d:9d:c6:00:
79:a8:20:a5:46:8a:16:95:d1:64:5e:af:3f:92:cc:
52:f0:17:7a:85:90:32:64:d2:74:bd:78:72:27:9f:
c9:7f:bd:2c:a4:74:99:c5:9d:fb:fd:7b:04:9e:51:
21:4e:f2:d1:cf:2e:37:c3:f9:11:35:80:58:a9:b3:
65:e1:4d:fc:b8:71:1d:5d:43:66:4a:40:aa:43:f8:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:30:8B:E9:3C:AA:C1:B7:C6:F7:40:63:9C:B0:B8:6B:CB:7A:52:5A
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/dDCL6TyqwbfG90BjnLC4a8t6Ulo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.0.0/20
37.220.88.0/21
45.84.20.0/22
45.131.136.0/22
45.145.100.0/22
45.157.40.0/22
46.37.160.0/19
78.24.88.0/22
78.109.160.0/20
78.137.112.0/20
80.66.200.0/22
80.244.176.0/20
81.201.128.0/20
94.229.160.0/20
109.108.128.0/19
159.253.208.0/21
176.124.52.0/22
178.238.128.0/20
185.55.77.0-185.55.79.255
185.156.64.0/22
185.160.180.0/22
185.160.252.0-185.160.254.255
185.162.224.0/22
185.166.128.0/22
185.181.196.0/22
185.182.88.0/22
185.197.60.0/22
185.207.108.0/22
185.210.196.0/22
185.216.76.0/22
185.217.40.0/22
185.220.60.0/22
185.221.204.0/22
185.226.220.0/22
185.234.36.0/22
185.241.248.0/22
192.166.44.0/22
193.39.252.0/22
194.39.164.0/22
195.69.102.0/24
IPv6:
2a02:21a8::-2a02:21a8:2:ffff:ffff:ffff:ffff:ffff
2a02:21a8:4::-2a02:21a8:6:ffff:ffff:ffff:ffff:ffff
2a02:22d0::/32
2a09:b200:6::/48
2a09:b600:5::/48
2a09:ba00:4::/48
2a0c:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
55:69:c0:a1:93:d9:1e:67:0f:a9:5b:14:d8:eb:ee:50:c9:0d:
9b:cd:72:4d:7c:ef:5c:28:d4:52:b6:28:e0:da:04:36:d9:b0:
35:3d:18:63:14:b5:e7:06:46:ea:41:9c:96:1e:c5:0d:e1:7a:
ce:de:a5:65:6f:37:b4:10:9f:2d:57:56:dc:61:a2:3b:69:ca:
bb:20:33:3b:00:13:7d:c5:b8:b8:65:fa:0e:46:9f:c3:8c:2c:
e2:e3:41:92:3f:e5:26:bf:bb:0e:36:4e:09:f7:64:86:d4:ab:
48:fb:3d:46:23:6d:61:7d:81:a3:ea:0e:5c:4d:79:fa:ed:68:
0b:91:31:5a:09:c2:a4:78:21:0e:9c:6a:f5:7a:c7:91:d5:bf:
8e:a3:9e:eb:33:80:58:98:70:df:97:2f:4b:da:54:41:18:37:
6c:ba:71:30:d7:e0:47:65:31:8d:ef:f0:ed:b1:02:91:d6:cb:
2c:bc:d1:10:7b:7a:db:03:75:45:62:db:91:4f:88:17:8e:e1:
05:fc:c1:ff:67:7d:ae:83:a4:49:b8:dd:9f:4a:03:94:94:9e:
1d:31:c6:57:1f:f4:71:0c:05:ed:41:92:3b:9a:12:00:82:6f:
9a:42:c3:20:a0:e5:ae:ec:0e:d1:7a:5b:c2:73:ed:b4:c8:7e:
0c:8d:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:47 2025 by rpki-client