Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mSBEr6f-lZz_QkIchZlAWMHiYKg.roa
File: mSBEr6f-lZz_QkIchZlAWMHiYKg.roa (raw, json)
Hash identifier: G4oBsGiYQiJFD5v+Hg0HZzuoj+gZdm7BC37a40Xs8RI=
Subject key identifier: 99:20:44:AF:A7:FE:95:9C:FF:42:42:1C:85:99:40:58:C1:E2:60:A8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A0D037632555E2933241DD5F0AC39F003
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mSBEr6f-lZz_QkIchZlAWMHiYKg.roa
Signing time: Sat 19 Aug 2023 08:57:25 +0000
ROA not before: Sat 19 Aug 2023 08:57:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.140.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.243.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.249.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
89.213.44.0/24 maxlen: 24
89.213.45.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.178.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.186.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.185.0/24 maxlen: 24
89.213.187.0/24 maxlen: 24
89.213.188.0/24 maxlen: 24
89.213.189.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.141.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.149.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.163.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:03:76:32:55:5e:29:33:24:1d:d5:f0:ac:39:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 19 08:57:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=992044afa7fe959cff42421c85994058c1e260a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:95:3a:9f:5f:2a:69:01:34:43:63:69:22:
3a:ce:fa:7a:ae:91:1f:ed:e1:96:71:f5:8e:03:a0:
0b:ed:d8:86:4c:57:d5:89:b2:8e:1a:0d:57:6f:da:
80:aa:72:1e:20:63:66:c0:ef:a6:52:e1:0d:7f:0a:
cf:db:4a:6b:55:98:ad:9b:0c:04:1e:6d:13:a0:c8:
16:0f:9e:2f:e2:f5:d7:6c:e3:b6:9c:21:fe:ed:ca:
48:9e:23:31:a0:d7:7c:d0:9c:b6:3f:90:9d:ff:61:
95:3f:97:11:94:a4:4c:5b:5a:3d:12:6c:fc:f1:96:
e1:49:1b:04:e1:37:02:c2:0a:5c:62:98:f0:85:8e:
da:e5:ea:51:11:c7:80:2b:d0:3b:97:5d:57:4c:67:
5d:5f:ad:9e:cc:93:5c:91:cd:49:2d:62:b9:30:2e:
60:7e:01:9f:31:f6:11:45:90:51:fc:2c:c1:d7:06:
d7:61:ba:83:e4:58:6b:a0:f2:47:68:45:2e:c7:7c:
88:13:74:9c:29:f0:3b:af:31:75:05:b5:6a:c2:50:
96:50:93:1c:09:b2:16:6b:42:d3:29:37:fa:e9:e4:
ee:a9:73:48:84:81:18:e6:35:d7:8e:bc:af:2b:97:
e0:00:88:cf:c4:3b:92:72:50:34:ae:0c:6e:bc:8c:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:20:44:AF:A7:FE:95:9C:FF:42:42:1C:85:99:40:58:C1:E2:60:A8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mSBEr6f-lZz_QkIchZlAWMHiYKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.116.0/24
81.168.119.0/24
81.168.123.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.1.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.225.0/24
82.153.227.0/24
82.153.240.0/24
82.153.249.0-82.153.250.255
89.213.5.0/24
89.213.44.0/23
89.213.133.0-89.213.134.255
89.213.136.0/24
89.213.139.0-89.213.141.255
89.213.146.0/24
89.213.148.0-89.213.155.255
89.213.157.0-89.213.160.255
89.213.162.0-89.213.164.255
89.213.168.0/23
89.213.172.0-89.213.189.255
109.176.211.0/24
109.176.216.0/21
109.176.240.0/24
109.176.242.0/23
109.176.245.0-109.176.246.255
109.176.248.0-109.176.250.255
185.49.125.0-185.49.127.255
213.152.42.0/24
213.152.61.0-213.152.62.255
Signature Algorithm: sha256WithRSAEncryption
4b:3f:8d:f2:fb:6c:ea:4c:1f:c0:78:d1:a3:00:70:2c:ed:42:
4a:22:46:c0:1e:fc:f7:7f:21:10:0f:47:10:8e:c3:e6:6f:0f:
df:37:03:ca:f9:fa:26:4e:4f:c6:2e:0e:34:03:a7:13:4c:ae:
6d:a7:77:17:43:4f:c4:ad:b2:69:28:a3:ea:f9:8e:63:1a:67:
ff:42:ff:bc:2e:30:8c:d2:38:74:c5:34:85:7c:68:57:08:97:
53:68:61:d0:10:93:2b:ac:c6:8b:d5:f3:84:e3:a8:d3:6a:b7:
03:5c:7b:d8:d0:26:61:d8:03:eb:f7:b8:7b:27:d3:0c:dc:75:
7d:e5:24:2d:11:c5:08:cd:53:ed:2c:c6:dc:aa:f2:2b:43:28:
3e:44:70:e3:a1:10:e5:d9:2f:80:05:28:71:6d:29:59:5e:68:
09:3a:6e:10:f2:30:c6:f8:e5:6f:b3:7b:c0:2e:88:ce:d0:bd:
35:bb:aa:6f:ae:1c:a1:72:ba:a2:ed:43:cc:81:a2:4e:99:80:
33:ef:ce:5e:4c:35:1b:95:fe:d9:f4:46:b7:e1:5a:a9:c5:2c:
d0:c9:44:a1:38:aa:d9:dd:e4:14:cf:7d:2e:9d:bc:f8:73:a0:
5a:bb:6d:05:d1:9f:c8:8f:49:27:62:13:d9:76:37:d8:61:8c:
c5:0c:fc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:23:33 2025 by rpki-client