Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6Pc6cAua-0AbjRUuzbpWIaeo7G0.roa
File: 6Pc6cAua-0AbjRUuzbpWIaeo7G0.roa (raw, json)
Hash identifier: hST9LtZK6Cn/JOwddtDn/uH44mOB1uHtM3MtTn+g3i0=
Subject key identifier: E8:F7:3A:70:0B:9A:FB:40:1B:8D:15:2E:CD:BA:56:21:A7:A8:EC:6D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189E3FA49DD47FE1ACF0D13997A5189296B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6Pc6cAua-0AbjRUuzbpWIaeo7G0.roa
Signing time: Fri 11 Aug 2023 09:42:58 +0000
ROA not before: Fri 11 Aug 2023 09:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
109.176.214.0/24 maxlen: 24
109.176.215.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.243.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.41.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.44.0/24 maxlen: 24
89.213.47.0/24 maxlen: 24
89.213.46.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.186.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.187.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.149.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:fa:49:dd:47:fe:1a:cf:0d:13:99:7a:51:89:29:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 11 09:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8f73a700b9afb401b8d152ecdba5621a7a8ec6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:d9:d0:0b:ae:f1:ea:07:32:e6:b8:28:d7:
5a:5e:f6:a7:44:66:43:39:2d:9e:8d:38:c2:b2:c9:
0a:70:7b:a1:15:9f:3e:d0:f8:21:57:28:2c:7a:41:
cf:d6:da:15:eb:9f:73:4d:fd:21:40:51:48:b7:ca:
06:ed:4d:72:77:02:9d:f8:43:86:af:8f:3e:2c:e9:
7f:82:3c:12:52:20:16:83:dd:da:cb:dd:b2:ab:16:
92:c1:a1:f8:19:ba:18:91:2f:60:24:94:12:9b:d2:
42:6a:ec:95:6e:9f:fc:69:eb:2c:c2:fc:7f:cd:45:
ef:8f:48:e0:4e:a6:4f:b7:0c:07:bc:36:71:a2:e7:
c8:a5:ec:c2:f1:c7:17:11:67:d1:16:64:c3:b4:3a:
1e:5b:1d:27:22:c8:92:fe:49:0b:77:fe:ab:04:5f:
b7:1c:c9:fb:4c:80:90:aa:33:da:0d:0c:99:af:5b:
e5:2b:b5:94:fd:4f:3c:5b:55:ee:44:d7:31:3b:b2:
3f:65:fb:ba:7e:9c:1e:04:a6:bc:c6:26:b8:e7:85:
2d:68:93:4d:04:2b:95:85:8b:04:19:18:ab:77:c1:
f5:3f:51:d6:80:e5:d0:8f:ce:22:10:9a:a8:d4:f4:
74:7c:0c:c6:d5:c2:57:94:7e:8e:39:cb:f4:a6:81:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:3A:70:0B:9A:FB:40:1B:8D:15:2E:CD:BA:56:21:A7:A8:EC:6D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6Pc6cAua-0AbjRUuzbpWIaeo7G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.249.0/24
89.213.5.0/24
89.213.41.0-89.213.42.255
89.213.44.0/24
89.213.46.0/23
89.213.133.0-89.213.134.255
89.213.136.0/24
89.213.139.0-89.213.141.255
89.213.146.0/24
89.213.148.0-89.213.155.255
89.213.157.0-89.213.160.255
89.213.162.0-89.213.164.255
89.213.168.0/23
89.213.173.0-89.213.177.255
89.213.179.0-89.213.182.255
89.213.184.0-89.213.189.255
109.176.211.0/24
109.176.214.0-109.176.223.255
109.176.240.0/24
109.176.242.0/23
109.176.245.0-109.176.246.255
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f2:52:76:aa:7b:b8:9d:70:f2:46:54:b6:b1:0c:84:cb:38:
c7:ba:fa:b9:a0:00:d6:b1:b6:0e:52:6e:86:5e:b4:85:9f:a3:
ac:ad:42:37:2d:5b:35:c3:ac:c8:f4:ef:dd:7f:12:25:80:fe:
20:42:2d:b2:35:e3:ee:f5:c7:f2:41:32:a4:b1:ea:6b:d4:58:
b7:0f:d0:3a:cf:f6:ca:14:c8:29:b9:6a:d8:d8:4f:2e:53:4b:
77:09:47:b4:d1:b9:7b:cb:5c:e8:89:2b:db:1b:48:aa:42:78:
bc:bf:65:be:30:6e:f3:3c:46:a2:be:04:cf:cf:39:e1:ae:c7:
48:a3:c2:4e:44:48:41:4f:a4:28:4c:17:22:6c:78:07:80:2a:
0b:89:0a:31:99:cf:cc:16:7b:77:99:07:d8:6c:52:0c:06:d2:
3d:fb:96:bb:03:42:fb:1f:ca:7f:d0:1b:a9:aa:8d:6a:1e:34:
bd:bd:a6:c9:ad:86:ac:1c:8d:8c:45:6e:82:e9:26:07:5a:f2:
c1:ee:ca:a4:b5:b8:1c:f1:ae:e3:0d:f7:a2:da:e3:f8:1a:c9:
7a:90:b0:9e:b7:89:3e:4c:34:9f:cd:eb:b4:c9:2b:8c:a6:11:
1e:c4:68:79:37:5c:e0:a5:b0:d9:64:15:9f:54:e4:95:1f:00:
35:f4:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:25 2025 by rpki-client