Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/xWakvQ2hxTs3BzEsjnyFjyIIV90.roa
File: xWakvQ2hxTs3BzEsjnyFjyIIV90.roa (raw, json)
Hash identifier: KCi4wAALZDw9WWJ9XYPqpvz5sc5TN0cOAAQ2LBcYdSI=
Subject key identifier: C5:66:A4:BD:0D:A1:C5:3B:37:07:31:2C:8E:7C:85:8F:22:08:57:DD
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018968E15E5DCBBA1CFF743712C19BA866ED
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/xWakvQ2hxTs3BzEsjnyFjyIIV90.roa
Signing time: Tue 18 Jul 2023 12:02:27 +0000
ROA not before: Tue 18 Jul 2023 12:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 217.19.192.0/20 maxlen: 24
88.141.0.0/16 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 18
85.168.0.0/14 maxlen: 24
79.174.232.0/21 maxlen: 21
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 24
88.140.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
212.39.128.0/19 maxlen: 19
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
81.65.0.0/16 maxlen: 16
78.112.0.0/12 maxlen: 24
37.64.0.0/13 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
84.205.128.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.70.32.0/20 maxlen: 20
80.124.0.0/16 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 24
77.144.0.0/12 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 21
213.245.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
109.0.0.0/11 maxlen: 24
93.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
77.134.204.0/24 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 19
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 32
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400:12::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:e1:5e:5d:cb:ba:1c:ff:74:37:12:c1:9b:a8:66:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 18 12:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c566a4bd0da1c53b3707312c8e7c858f220857dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:40:73:ce:aa:fc:89:9f:df:bd:1c:7c:3b:57:
1a:bd:a6:98:a5:73:a5:79:47:31:3e:c5:99:13:3a:
b0:44:d3:a0:08:fe:45:8d:a7:c1:83:d0:08:f7:2a:
6b:73:64:ec:a1:df:46:b8:06:bd:db:52:e2:79:eb:
b5:d7:f2:83:23:be:d7:cd:04:77:5f:d9:54:69:a4:
de:18:b6:29:5a:78:44:d9:b9:4e:43:28:6c:f9:26:
7b:ad:53:c3:e6:a0:6e:27:ac:2f:60:ce:4a:6d:a7:
4f:7c:5e:5a:2d:16:95:1a:79:46:34:e0:d7:3d:0b:
f4:da:90:fd:02:48:7a:0d:7d:ff:9a:f2:28:2d:f4:
f2:80:3c:18:1d:b9:15:db:04:6c:78:f3:c6:3f:b8:
6d:e2:77:5d:12:07:2c:57:b4:43:62:a1:49:6e:24:
f4:e1:36:39:82:98:ef:f7:a3:e3:2a:0b:fd:dc:3c:
21:d2:6a:89:83:d1:ae:49:a1:bb:ad:dd:24:d3:6b:
cf:d3:93:4f:67:88:c8:60:fa:49:3d:dd:a4:42:1b:
24:09:5f:99:c2:e7:16:c6:dd:25:8e:dd:fd:49:83:
ad:fb:59:d7:b9:d0:55:5b:ad:31:ad:df:81:97:a6:
cb:7c:16:46:7e:c8:85:71:21:ca:b0:a6:42:1c:6c:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:A4:BD:0D:A1:C5:3B:37:07:31:2C:8E:7C:85:8F:22:08:57:DD
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/xWakvQ2hxTs3BzEsjnyFjyIIV90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:ec80::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
97:f4:3c:26:cd:2d:df:e7:b5:c0:50:c4:df:6e:cd:40:fc:4a:
8c:d1:99:1c:bc:9c:e3:8b:f3:fd:5f:53:7b:f6:48:82:af:b4:
7a:a0:5b:f9:16:99:54:a9:24:59:09:f9:c0:84:3b:41:e6:02:
53:66:5d:2d:2c:f9:40:a5:5c:81:27:77:97:bd:1f:a4:2f:a2:
35:80:3b:4d:ed:e5:0a:e6:7a:b1:c7:85:48:a0:dc:61:10:68:
d2:71:d2:02:63:a4:88:90:0f:f2:5e:50:fb:2b:0f:78:1a:bf:
fb:51:33:6e:09:fc:88:51:15:b5:18:17:bb:93:e1:eb:74:bc:
b9:e3:5d:36:2a:d5:42:13:c4:d0:e9:22:73:76:df:0e:75:96:
c0:27:e8:eb:0f:c0:07:3a:e3:d7:8e:5a:c7:6d:34:a8:a7:f4:
10:90:9c:59:18:2a:c0:7e:98:fc:b9:9c:d4:ed:20:6b:fb:f6:
58:05:d7:1b:f0:d8:d0:5e:c4:09:7d:ce:81:7c:cc:d4:d2:ad:
4b:21:b1:b0:dc:63:4d:af:c5:64:38:e8:64:fd:06:16:32:3a:
da:65:24:6b:2b:31:f4:ee:9f:a0:48:84:13:48:8f:58:fd:c9:
de:2d:8f:11:95:7a:36:cf:25:64:4f:0f:f0:48:9c:9d:a3:9c:
b1:ce:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:42:34 2025 by rpki-client