Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/OMFxMNibeORrYdUEAQLdCeMpAPU.roa
File: OMFxMNibeORrYdUEAQLdCeMpAPU.roa (raw, json)
Hash identifier: 3Pk96WkN+rVEVjg565vKJsPUtRYB257zXB6Rcv4jB/k=
Subject key identifier: 38:C1:71:30:D8:9B:78:E4:6B:61:D5:04:01:02:DD:09:E3:29:00:F5
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01864F8EE79573C78D433F6A9F694C1A50C2
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/OMFxMNibeORrYdUEAQLdCeMpAPU.roa
Signing time: Tue 14 Feb 2023 10:53:30 +0000
ROA not before: Tue 14 Feb 2023 10:53:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 81.16.64.0/20 maxlen: 20
194.252.0.0/16 maxlen: 24
194.215.0.0/16 maxlen: 24
86.114.0.0/16 maxlen: 21
192.83.96.0/22 maxlen: 24
213.140.160.0/19 maxlen: 19
212.83.96.0/19 maxlen: 24
141.208.0.0/16 maxlen: 16
192.83.100.0/24 maxlen: 24
193.208.0.0/14 maxlen: 24
194.111.0.0/16 maxlen: 24
195.165.0.0/16 maxlen: 24
192.194.0.0/16 maxlen: 24
192.130.0.0/16 maxlen: 24
213.173.128.0/19 maxlen: 19
194.251.0.0/16 maxlen: 24
131.177.0.0/16 maxlen: 16
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.112.0/22 maxlen: 24
62.73.32.0/19 maxlen: 19
192.83.64.0/19 maxlen: 24
217.140.128.0/17 maxlen: 17
192.103.116.0/24 maxlen: 24
192.83.0.0/18 maxlen: 24
84.248.0.0/14 maxlen: 21
188.238.0.0/16 maxlen: 24
192.103.85.0/24 maxlen: 24
194.137.0.0/16 maxlen: 24
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
88.86.128.0/19 maxlen: 19
192.58.80.0/21 maxlen: 24
212.149.64.0/18 maxlen: 18
192.58.88.0/23 maxlen: 24
195.156.0.0/16 maxlen: 24
213.28.0.0/16 maxlen: 24
80.220.0.0/14 maxlen: 21
109.240.0.0/16 maxlen: 16
212.182.192.0/18 maxlen: 24
192.58.42.0/23 maxlen: 24
192.58.44.0/22 maxlen: 24
192.58.48.0/20 maxlen: 24
192.58.64.0/20 maxlen: 24
93.106.0.0/16 maxlen: 16
194.197.0.0/16 maxlen: 24
176.72.0.0/16 maxlen: 16
194.89.0.0/16 maxlen: 24
192.89.0.0/16 maxlen: 24
62.71.0.0/16 maxlen: 16
84.34.0.0/16 maxlen: 16
193.178.133.0/24 maxlen: 24
88.192.0.0/14 maxlen: 21
80.74.192.0/19 maxlen: 19
46.132.0.0/16 maxlen: 16
212.213.0.0/16 maxlen: 24
86.115.0.0/16 maxlen: 16
194.142.0.0/16 maxlen: 24
2001:8b8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:8e:e7:95:73:c7:8d:43:3f:6a:9f:69:4c:1a:50:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Feb 14 10:53:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38c17130d89b78e46b61d5040102dd09e32900f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:62:1c:87:3a:9e:a6:16:4a:66:1c:81:bb:
3f:81:92:22:10:17:c6:84:e7:ab:3f:81:c3:33:26:
9f:c4:ed:da:50:89:3f:0d:69:a7:89:f8:42:11:6e:
29:a1:01:d4:5d:3d:b3:15:78:e8:bf:58:ad:f6:fc:
df:dc:78:7d:f9:78:6d:76:ff:13:6a:44:07:fb:73:
c3:6c:c3:19:a9:74:6c:c4:8f:87:2b:55:a0:99:49:
1f:a5:ea:63:a9:0a:e0:19:c1:6d:61:2b:4f:c4:28:
3f:79:0d:34:26:ba:9e:3d:20:9b:c2:3a:0d:4f:91:
17:7f:74:2e:87:4a:8f:47:65:4e:8f:29:25:be:46:
ee:05:06:4b:6c:53:91:6c:0c:6f:f6:5f:26:a6:8b:
ef:74:d5:37:57:4b:21:49:23:29:d9:22:ec:5e:74:
18:a0:d5:f6:71:4e:d6:25:74:56:fa:08:02:2e:05:
51:58:fe:d2:3c:2a:6c:72:82:46:6d:3c:a0:92:58:
40:11:ab:6a:1a:76:40:b3:09:9e:0a:75:70:d1:44:
b4:de:8a:85:a2:76:19:14:56:61:f3:58:7d:bc:73:
cf:15:c5:fb:8d:6f:96:4c:22:a3:f1:c2:95:65:60:
45:b6:7c:6f:7e:df:71:10:ef:da:6b:5b:a5:b1:74:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C1:71:30:D8:9B:78:E4:6B:61:D5:04:01:02:DD:09:E3:29:00:F5
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/OMFxMNibeORrYdUEAQLdCeMpAPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.132.0.0/16
62.71.0.0/16
62.73.32.0/19
80.74.192.0/19
80.220.0.0/14
81.16.64.0/20
84.34.0.0/16
84.248.0.0/14
86.114.0.0/15
88.86.128.0/19
88.192.0.0/14
93.106.0.0/16
109.240.0.0/16
131.177.0.0/16
141.208.0.0/16
176.72.0.0/16
188.238.0.0/16
192.58.42.0-192.58.89.255
192.83.0.0-192.83.100.255
192.89.0.0/16
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.112.0-192.103.116.255
192.130.0.0/16
192.194.0.0/16
193.178.133.0/24
193.208.0.0/14
194.89.0.0/16
194.111.0.0/16
194.137.0.0/16
194.142.0.0/16
194.197.0.0/16
194.215.0.0/16
194.251.0.0-194.252.255.255
195.156.0.0/16
195.165.0.0/16
212.83.96.0/19
212.149.64.0/18
212.182.192.0/18
212.213.0.0/16
213.28.0.0/16
213.140.160.0/19
213.173.128.0/19
217.140.128.0/17
IPv6:
2001:8b8::/29
Signature Algorithm: sha256WithRSAEncryption
a8:7a:b3:0d:1b:f0:36:b9:3c:10:ee:ab:24:9b:3f:e0:fb:6d:
b9:fd:d3:36:f1:f1:0a:aa:ac:69:f3:27:ab:bd:63:ab:c6:8f:
8f:80:d9:d9:72:08:c3:70:a1:91:4c:39:f7:7b:37:1e:7a:ed:
06:ce:83:57:d2:54:a4:12:34:4d:b1:e5:b0:a2:7f:6a:fb:f8:
0b:0c:1c:f1:93:4b:b6:4f:77:bf:62:09:60:a8:44:24:13:4a:
53:0c:b7:c8:1d:6a:5c:fe:a6:14:37:ce:1d:e0:d4:d4:ec:1b:
a0:a0:f9:f5:fd:03:be:a1:c9:01:ac:d0:de:6a:53:96:74:96:
2f:08:a5:88:72:44:9d:5e:e4:89:3c:05:8f:f7:ec:59:05:e3:
e0:9a:a5:03:2c:0b:fb:39:c5:53:bc:90:42:f4:b4:5c:b7:3b:
92:80:6c:2c:4a:c9:13:2e:cf:02:b3:56:89:a0:b5:c9:75:f4:
f5:aa:69:42:03:f7:4b:75:73:e6:3c:86:e9:d2:c2:b7:0c:b4:
c1:25:fc:9e:6d:a7:f4:0d:ba:9f:d5:d7:7f:15:d5:54:54:74:
3b:2b:d0:bb:5c:82:6b:0a:d1:26:23:c8:a8:06:d5:c0:b3:a4:
b0:ae:b1:f5:a7:bc:ff:db:c6:95:4d:3e:97:d6:33:ef:57:91:
e7:7c:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:33 2025 by rpki-client