Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/rlxh5G6iZ6zSpjX3aaZzFeDRWDo.roa
File: rlxh5G6iZ6zSpjX3aaZzFeDRWDo.roa (raw, json)
Hash identifier: 8G7NkJd5S3bIpT4JChcooToP6TlJXcsJtvTEHT1AM1Q=
Subject key identifier: AE:5C:61:E4:6E:A2:67:AC:D2:A6:35:F7:69:A6:73:15:E0:D1:58:3A
Certificate issuer: /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial: 1C5D939A
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/rlxh5G6iZ6zSpjX3aaZzFeDRWDo.roa
Signing time: Sat 01 Jan 2022 15:58:42 +0000
ROA not before: Sat 01 Jan 2022 15:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12302
IP address blocks: 93.117.66.0/23 maxlen: 23
93.113.242.0/23 maxlen: 23
93.113.241.0/24 maxlen: 24
185.63.136.0/22 maxlen: 23
89.42.252.0/22 maxlen: 22
188.214.196.0/23 maxlen: 23
188.214.195.0/24 maxlen: 24
89.42.248.0/21 maxlen: 22
85.204.184.0/21 maxlen: 22
85.204.188.0/22 maxlen: 22
213.164.224.0/19 maxlen: 20
188.208.118.0/23 maxlen: 23
188.208.117.0/24 maxlen: 24
84.117.128.0/17 maxlen: 17
89.33.72.0/21 maxlen: 22
93.117.138.0/23 maxlen: 23
82.208.128.0/18 maxlen: 19
93.117.154.0/23 maxlen: 23
85.204.0.0/21 maxlen: 21
85.204.0.0/20 maxlen: 21
194.102.248.0/21 maxlen: 22
95.76.0.0/15 maxlen: 16
93.119.224.0/23 maxlen: 23
93.113.32.0/23 maxlen: 23
93.119.226.0/24 maxlen: 24
86.106.32.0/19 maxlen: 20
78.96.0.0/15 maxlen: 16
86.106.48.0/20 maxlen: 20
188.214.153.0/24 maxlen: 24
83.103.128.0/17 maxlen: 18
84.117.0.0/17 maxlen: 17
84.117.0.0/16 maxlen: 16
31.5.128.0/17 maxlen: 17
195.234.172.0/24 maxlen: 24
188.240.64.0/23 maxlen: 23
188.240.64.0/22 maxlen: 22
188.240.66.0/23 maxlen: 23
89.38.72.0/22 maxlen: 23
194.102.146.0/24 maxlen: 24
93.119.126.0/23 maxlen: 23
31.5.0.0/17 maxlen: 17
93.119.138.0/23 maxlen: 23
93.119.137.0/24 maxlen: 24
82.210.128.0/18 maxlen: 19
31.5.0.0/16 maxlen: 16
89.136.0.0/15 maxlen: 16
194.102.99.0/24 maxlen: 24
81.89.0.0/20 maxlen: 21
77.81.16.0/20 maxlen: 21
93.118.46.0/23 maxlen: 23
62.121.64.0/18 maxlen: 19
193.178.165.0/24 maxlen: 24
86.104.136.0/21 maxlen: 22
194.105.17.0/24 maxlen: 24
194.105.24.0/22 maxlen: 22
31.14.35.0/24 maxlen: 24
194.105.28.0/22 maxlen: 23
85.186.0.0/16 maxlen: 17
86.105.64.0/20 maxlen: 21
89.44.78.0/23 maxlen: 23
89.44.78.0/24 maxlen: 24
2a04:2400::/28 maxlen: 28
2a04:2400::/27 maxlen: 27
2a04:2410::/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475894682 (0x1c5d939a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
Validity
Not Before: Jan 1 15:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae5c61e46ea267acd2a635f769a67315e0d1583a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:2b:77:93:07:81:a7:21:6a:e5:9d:5c:56:
07:f9:e7:5f:c1:fe:a0:b3:82:81:ac:fd:65:17:ae:
4c:be:9b:bf:d9:d5:22:68:82:06:1a:2f:75:90:2e:
57:a7:a2:a2:f2:6a:60:5a:1d:47:25:9e:3b:7e:68:
a5:c2:46:7f:30:82:a4:f9:70:66:1e:a5:fe:7c:f5:
03:b1:f1:93:44:ec:1b:c6:a6:52:15:7d:5f:a6:f2:
db:d9:2e:df:ad:bb:b9:0f:72:86:60:a2:71:76:22:
3f:8c:9c:ff:ca:44:88:4a:b4:64:29:31:6a:9f:f6:
81:36:be:3d:d1:b7:50:e4:bc:54:aa:6e:ed:50:51:
1b:da:58:53:6e:23:62:d0:e5:62:7e:63:2c:75:d9:
27:15:4b:bd:c1:97:11:64:60:a1:86:09:db:45:0b:
f1:58:e9:fd:05:bc:98:fd:9d:a9:2a:a9:b4:28:95:
d7:5b:5e:75:32:fd:e4:74:c8:58:1d:64:63:0c:7a:
b6:97:8e:56:89:90:65:41:74:28:63:65:e0:01:f8:
d6:98:fd:f0:ae:9c:78:62:28:a2:2f:90:2f:4e:1f:
dd:6e:4c:e0:d9:b6:ba:f8:73:24:b1:86:c9:d3:18:
73:14:73:64:30:a2:d1:9e:e8:d1:09:69:05:f6:7a:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5C:61:E4:6E:A2:67:AC:D2:A6:35:F7:69:A6:73:15:E0:D1:58:3A
X509v3 Authority Key Identifier:
keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/rlxh5G6iZ6zSpjX3aaZzFeDRWDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.5.0.0/16
31.14.35.0/24
62.121.64.0/18
77.81.16.0/20
78.96.0.0/15
81.89.0.0/20
82.208.128.0/18
82.210.128.0/18
83.103.128.0/17
84.117.0.0/16
85.186.0.0/16
85.204.0.0/20
85.204.184.0/21
86.104.136.0/21
86.105.64.0/20
86.106.32.0/19
89.33.72.0/21
89.38.72.0/22
89.42.248.0/21
89.44.78.0/23
89.136.0.0/15
93.113.32.0/23
93.113.241.0-93.113.243.255
93.117.66.0/23
93.117.138.0/23
93.117.154.0/23
93.118.46.0/23
93.119.126.0/23
93.119.137.0-93.119.139.255
93.119.224.0-93.119.226.255
95.76.0.0/15
185.63.136.0/22
188.208.117.0-188.208.119.255
188.214.153.0/24
188.214.195.0-188.214.197.255
188.240.64.0/22
193.178.165.0/24
194.102.99.0/24
194.102.146.0/24
194.102.248.0/21
194.105.17.0/24
194.105.24.0/21
195.234.172.0/24
213.164.224.0/19
IPv6:
2a04:2400::/27
Signature Algorithm: sha256WithRSAEncryption
0d:fa:a3:e5:10:b0:5f:9b:f3:7e:d6:4e:88:96:e0:d7:92:15:
1b:0e:a7:b5:90:76:e8:4f:87:21:a1:e5:3e:14:c2:03:72:c5:
4c:38:73:0d:cc:46:36:fa:60:a0:f6:5e:83:89:48:55:93:b1:
b2:df:47:b8:29:c2:88:20:73:b7:99:d4:5e:03:7e:d5:83:cf:
15:e3:db:2f:cc:c6:8f:ca:11:c7:69:42:a9:7b:72:04:20:12:
e9:3c:a3:fe:83:3f:7b:f1:2a:7b:89:fc:41:9d:57:5f:23:f0:
dc:7c:26:59:1c:25:76:6d:04:60:98:95:c2:6e:47:10:6e:1e:
ee:c0:76:f1:bb:a9:19:9a:cb:ea:af:5e:ea:8a:6d:44:52:f5:
4f:0c:3b:be:74:0d:48:d7:bb:fb:a0:ea:42:f2:10:1e:a5:ea:
e3:26:b2:3e:62:e7:4f:37:21:d9:ec:8e:63:25:66:9d:1d:5d:
5a:8d:67:0a:5e:49:00:f0:59:32:ae:f8:7b:e9:2c:93:cc:92:
cc:65:81:a5:be:6d:91:8c:46:e2:55:49:56:09:9a:01:ae:18:
56:a1:65:5d:f8:be:71:fc:1b:05:3d:05:23:6c:a4:08:2b:88:
e5:87:1a:75:a4:2c:2c:36:d4:25:7e:35:7e:c5:a6:b1:e8:76:
22:7e:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:28:47 2025 by rpki-client