Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/SX_3L4VbZ2Q34M7cvQkYSH6nk70.roa
File: SX_3L4VbZ2Q34M7cvQkYSH6nk70.roa (raw, json)
Hash identifier: /5+a7rqNh0a9osoxF6cAYyy6L6FtcrVLv8rrlyONRpM=
Subject key identifier: 49:7F:F7:2F:85:5B:67:64:37:E0:CE:DC:BD:09:18:48:7E:A7:93:BD
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01884898AA912ACDEFDDC2016214E7506AD4
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/SX_3L4VbZ2Q34M7cvQkYSH6nk70.roa
Signing time: Tue 23 May 2023 12:32:24 +0000
ROA not before: Tue 23 May 2023 12:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
178.157.120.0/22 maxlen: 22
5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.232.0/21 maxlen: 21
5.157.228.0/22 maxlen: 22
5.157.248.0/21 maxlen: 21
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
188.119.182.0/23 maxlen: 23
188.119.180.0/24 maxlen: 24
188.119.188.0/22 maxlen: 24
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.101.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
185.76.61.0/24 maxlen: 24
185.76.63.0/24 maxlen: 24
188.74.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
188.119.128.0/20 maxlen: 24
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
188.74.212.0/22 maxlen: 22
62.216.72.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.84.0/22 maxlen: 22
62.216.80.0/22 maxlen: 22
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
62.216.84.0/24 maxlen: 24
62.216.85.0/24 maxlen: 24
188.74.216.0/21 maxlen: 21
62.216.88.0/22 maxlen: 22
188.74.224.0/21 maxlen: 21
62.216.86.0/24 maxlen: 24
62.216.87.0/24 maxlen: 24
62.216.88.0/24 maxlen: 24
62.216.89.0/24 maxlen: 24
62.216.90.0/24 maxlen: 24
62.216.91.0/24 maxlen: 24
188.74.232.0/21 maxlen: 21
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:98:aa:91:2a:cd:ef:dd:c2:01:62:14:e7:50:6a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: May 23 12:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=497ff72f855b676437e0cedcbd0918487ea793bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:d2:c2:50:7b:bf:09:79:88:d8:3b:33:62:
98:22:2f:cd:be:f5:d3:c6:10:96:e9:f2:af:5d:62:
a8:c9:e6:5b:86:ed:ff:7c:1d:66:56:34:c1:2c:0b:
8c:f5:55:96:23:5e:ce:31:5b:f1:4d:89:4c:bf:86:
4d:62:3c:35:30:b7:8a:a3:5d:14:cc:b4:46:23:7f:
fa:01:a3:9b:73:e1:cd:b3:d5:99:64:74:2e:d2:59:
c3:43:54:5c:25:24:20:15:48:7c:c3:85:ae:bc:69:
16:8c:86:4d:88:78:2f:8c:a2:30:27:02:29:5e:e2:
bd:78:e0:72:a8:79:d3:91:70:9e:fe:4e:70:62:48:
d4:1f:68:86:c9:b1:2c:52:05:43:ca:2d:76:dd:81:
56:9f:3f:7a:78:e6:ef:dc:f2:9f:ea:7d:c2:41:7f:
59:d2:6c:4a:fd:7e:62:05:b4:31:7d:55:50:9e:7d:
07:ac:fc:2c:37:42:85:28:ce:20:6d:9d:1f:38:63:
dd:12:17:30:49:33:a3:90:d0:48:32:24:aa:d1:90:
7b:e1:7c:4b:b6:18:24:cd:a4:a5:7b:5a:3f:28:4b:
77:06:dc:7b:d6:f6:69:b7:91:1e:45:67:43:08:58:
19:c9:d1:90:7b:e5:02:5b:b0:ee:f0:a8:52:5b:9d:
98:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7F:F7:2F:85:5B:67:64:37:E0:CE:DC:BD:09:18:48:7E:A7:93:BD
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/SX_3L4VbZ2Q34M7cvQkYSH6nk70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0/21
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/20
178.157.68.0/22
178.157.94.0/24
178.157.101.0/24
178.157.112.0-178.157.123.255
185.76.61.0/24
185.76.63.0/24
188.74.144.0/21
188.74.160.0/21
188.74.184.0/22
188.74.192.0/20
188.74.212.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.180.0/24
188.119.182.0-188.119.191.255
Signature Algorithm: sha256WithRSAEncryption
37:64:ad:79:29:cb:21:3f:f3:f7:b3:af:16:a9:6c:d9:ab:f1:
9b:64:22:84:25:11:85:6d:d2:16:4f:ff:f6:06:2b:8f:4d:27:
5c:74:7c:2f:04:1d:d4:ba:f1:26:fc:9a:70:28:92:58:56:f6:
09:11:96:9d:1c:7f:7e:b5:0f:24:34:3e:20:8a:23:19:40:a0:
44:fa:18:ea:b2:18:f6:30:54:76:d5:77:da:df:e4:96:ee:2e:
33:5d:76:50:7c:59:06:6c:3f:fe:35:cc:1f:57:94:50:7b:fc:
48:77:23:ea:9d:da:2e:6c:db:0a:0e:35:0d:9b:20:a9:5f:3b:
d0:34:0d:0f:00:ff:dd:05:68:fc:06:98:d1:e6:57:a2:c9:8c:
95:83:a3:81:f1:6c:24:0c:50:f2:47:9d:57:02:dc:89:39:c7:
f5:8e:e2:ef:eb:a4:0a:56:b0:46:ba:c7:8b:6b:68:4c:34:87:
28:3c:ad:95:97:46:33:3b:d1:05:68:6a:25:3c:1f:98:40:86:
ff:82:a7:5c:f7:d0:e4:46:0a:5a:bc:90:d2:e3:43:62:5c:5a:
43:d8:f5:af:3a:ad:6d:4b:09:34:92:1d:f2:5b:0a:e2:98:6f:
8c:14:d4:55:1f:f4:41:36:e7:3b:5b:b1:9d:27:2e:f6:0a:16:
b1:b4:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:32:24 2025 by rpki-client