Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/cnFYubFH20zTzOp9Hfmaku-eTl8.roa
File: cnFYubFH20zTzOp9Hfmaku-eTl8.roa (raw, json)
Hash identifier: u2goZTHrr2TimifhvVT0kiozNV/Zuhw72PIOufEGhuc=
Subject key identifier: 72:71:58:B9:B1:47:DB:4C:D3:CC:EA:7D:1D:F9:9A:92:EF:9E:4E:5F
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 01872C79644B7C36EB9BFFA982D911D8DD33
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/cnFYubFH20zTzOp9Hfmaku-eTl8.roa
Signing time: Wed 29 Mar 2023 08:26:05 +0000
ROA not before: Wed 29 Mar 2023 08:26:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15774
IP address blocks: 37.61.176.0/21 maxlen: 32
31.216.170.0/24 maxlen: 24
46.166.65.0/24 maxlen: 24
109.233.172.0/22 maxlen: 32
185.43.86.0/23 maxlen: 32
83.234.240.0/21 maxlen: 21
62.33.122.0/23 maxlen: 32
81.18.128.0/19 maxlen: 32
46.226.240.0/21 maxlen: 32
46.166.80.0/23 maxlen: 24
46.166.80.0/24 maxlen: 24
46.166.79.0/24 maxlen: 24
46.166.83.0/24 maxlen: 24
46.166.82.0/24 maxlen: 24
46.166.81.0/24 maxlen: 24
46.166.84.0/22 maxlen: 23
46.166.88.0/23 maxlen: 23
46.166.91.0/24 maxlen: 24
46.166.95.0/24 maxlen: 24
46.166.94.0/24 maxlen: 24
46.166.93.0/24 maxlen: 24
81.4.192.0/18 maxlen: 32
46.20.64.0/20 maxlen: 32
185.6.236.0/22 maxlen: 32
83.234.136.0/23 maxlen: 23
185.61.24.0/22 maxlen: 32
91.204.96.0/22 maxlen: 32
46.182.128.0/22 maxlen: 22
46.182.131.0/24 maxlen: 24
2a03:3700:4000::/36 maxlen: 128
2a03:3700:1000::/36 maxlen: 128
2a03:3700::/36 maxlen: 128
2a03:3700:5000::/36 maxlen: 128
2a03:3700:2000::/36 maxlen: 128
2a03:3700:3000::/36 maxlen: 128
2a03:3700:6000::/36 maxlen: 128
2a03:3700:7000::/36 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:79:64:4b:7c:36:eb:9b:ff:a9:82:d9:11:d8:dd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Mar 29 08:26:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=727158b9b147db4cd3ccea7d1df99a92ef9e4e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:98:34:a6:20:4b:ea:b2:df:ee:47:a0:2c:
23:7c:63:6d:c3:80:cc:46:9d:73:34:76:b4:0d:12:
b7:a8:b9:3a:25:66:a8:6c:e9:d9:e6:9e:23:d2:13:
52:af:42:51:f2:16:dd:8c:07:c3:99:08:59:2d:d6:
01:81:f2:f3:69:a7:ce:87:2c:b6:5a:5d:4d:74:82:
69:7d:f7:34:39:36:c0:3d:1e:22:6a:9c:a2:2a:28:
a0:73:0a:8a:6f:0a:00:00:97:c8:65:ce:83:c4:5c:
ae:a7:ed:1b:5f:6f:61:98:df:1b:8d:ae:98:21:82:
e8:75:50:2d:b3:94:ba:67:0c:32:b3:f1:10:bc:ab:
12:83:e8:64:1b:d7:6d:b4:8c:71:09:ba:28:40:63:
4f:4d:85:8d:a6:0b:53:aa:e5:3e:4d:cb:01:e3:c1:
4a:80:1c:47:35:68:94:8c:70:8f:e9:c1:f9:96:66:
5b:ca:35:31:de:bf:6d:0a:cf:66:d4:fc:e8:2b:0c:
9a:6c:e8:f0:b4:93:01:09:45:05:2c:69:27:e8:7a:
27:d1:0d:e3:8e:ae:1d:b0:19:3d:cb:4a:c0:96:9b:
fa:8f:30:a8:27:cf:ad:57:3a:2e:90:44:ee:e9:ac:
46:96:10:a0:aa:db:4e:2f:b4:71:47:6a:4e:6e:12:
e0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:58:B9:B1:47:DB:4C:D3:CC:EA:7D:1D:F9:9A:92:EF:9E:4E:5F
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/cnFYubFH20zTzOp9Hfmaku-eTl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.170.0/24
37.61.176.0/21
46.20.64.0/20
46.166.65.0/24
46.166.79.0-46.166.89.255
46.166.91.0/24
46.166.93.0-46.166.95.255
46.182.128.0/22
46.226.240.0/21
62.33.122.0/23
81.4.192.0/18
81.18.128.0/19
83.234.136.0/23
83.234.240.0/21
91.204.96.0/22
109.233.172.0/22
185.6.236.0/22
185.43.86.0/23
185.61.24.0/22
IPv6:
2a03:3700::/33
Signature Algorithm: sha256WithRSAEncryption
c4:3c:0a:0e:a4:7f:b5:e5:df:97:d3:3c:2f:b9:7c:9b:5d:76:
8e:40:fe:74:65:d2:fe:32:4b:e6:6c:33:79:5c:4f:2c:cc:d6:
b4:c7:9a:ed:af:71:25:15:08:43:c1:ef:84:f4:08:6d:40:4e:
6b:ea:16:f5:e2:0f:e4:c7:ae:85:9d:c8:30:37:ab:d8:9a:8d:
54:e1:46:7d:22:b6:d2:9d:6b:5c:ff:04:7c:ad:dd:d0:a0:cf:
c8:4f:b0:9d:79:a4:c7:aa:d6:3b:f1:cd:dd:59:29:cc:c8:76:
fd:e4:99:df:63:2c:67:2d:c5:16:dd:56:98:37:71:e5:b1:f2:
fe:44:60:ef:37:63:0e:e3:63:e4:38:cb:9f:9d:46:d5:2b:be:
19:8b:f3:b2:ce:10:f9:3a:87:84:ce:82:0f:ff:14:06:d5:63:
f5:77:fe:e4:b7:e6:90:54:79:7a:17:d6:f8:56:04:ec:f4:8f:
3f:ac:35:5a:cf:0b:d4:b9:38:29:ba:d9:ac:18:49:a7:18:86:
f9:16:6d:d8:2c:8b:3d:f5:96:ef:ea:29:c2:f5:d8:b1:f8:3e:
b6:32:df:91:63:7f:54:9b:9a:e6:db:e7:b7:ea:85:da:00:c5:
68:0e:44:bc:f2:81:24:6f:4e:cc:23:47:88:ae:d3:a6:38:d6:
c8:c0:32:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:54 2025 by rpki-client