Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/clF9nUY2cxKgrHUZeMsnmNE3Xwk.roa
File: clF9nUY2cxKgrHUZeMsnmNE3Xwk.roa (raw, json)
Hash identifier: g6uK3xkB+cSyunpRZICscupJlOyIokyn251iS75u9uM=
Subject key identifier: 72:51:7D:9D:46:36:73:12:A0:AC:75:19:78:CB:27:98:D1:37:5F:09
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 01856D418DE7FF2A265198CF7934426ACBB8
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/clF9nUY2cxKgrHUZeMsnmNE3Xwk.roa
Signing time: Sun 01 Jan 2023 12:14:50 +0000
ROA not before: Sun 01 Jan 2023 12:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48582
IP address blocks: 217.147.178.0/24 maxlen: 24
217.147.178.0/23 maxlen: 23
217.147.177.0/24 maxlen: 24
217.147.179.0/24 maxlen: 24
217.147.176.0/24 maxlen: 24
217.147.176.0/23 maxlen: 23
217.147.182.0/24 maxlen: 24
217.147.182.0/23 maxlen: 23
217.147.181.0/24 maxlen: 24
217.147.183.0/24 maxlen: 24
217.147.180.0/24 maxlen: 24
193.118.192.0/24 maxlen: 24
193.118.196.0/24 maxlen: 24
193.118.198.0/24 maxlen: 24
193.118.194.0/24 maxlen: 24
193.118.193.0/24 maxlen: 24
193.118.199.0/24 maxlen: 24
193.118.201.0/24 maxlen: 24
193.118.206.0/24 maxlen: 24
193.118.203.0/24 maxlen: 24
193.118.202.0/24 maxlen: 24
193.118.205.0/24 maxlen: 24
193.118.204.0/23 maxlen: 23
193.118.204.0/24 maxlen: 24
193.118.200.0/22 maxlen: 22
193.118.200.0/24 maxlen: 24
193.118.210.0/24 maxlen: 24
193.118.209.0/24 maxlen: 24
193.118.212.0/24 maxlen: 24
193.118.211.0/24 maxlen: 24
193.118.208.0/24 maxlen: 24
193.118.207.0/24 maxlen: 24
193.118.213.0/24 maxlen: 24
193.118.216.0/22 maxlen: 22
193.118.217.0/24 maxlen: 24
193.118.216.0/24 maxlen: 24
193.118.219.0/24 maxlen: 24
193.118.218.0/24 maxlen: 24
193.118.215.0/24 maxlen: 24
193.118.214.0/23 maxlen: 23
193.118.214.0/24 maxlen: 24
209.213.48.0/22 maxlen: 22
209.213.49.0/24 maxlen: 24
209.213.48.0/20 maxlen: 20
209.213.48.0/24 maxlen: 24
209.213.50.0/24 maxlen: 24
193.118.220.0/24 maxlen: 24
209.213.51.0/24 maxlen: 24
209.213.56.0/22 maxlen: 22
209.213.56.0/24 maxlen: 24
209.213.55.0/24 maxlen: 24
209.213.57.0/24 maxlen: 24
209.213.52.0/24 maxlen: 24
209.213.52.0/22 maxlen: 22
209.213.54.0/24 maxlen: 24
209.213.53.0/24 maxlen: 24
209.213.58.0/24 maxlen: 24
209.213.63.0/24 maxlen: 24
209.213.62.0/24 maxlen: 24
209.213.59.0/24 maxlen: 24
209.213.60.0/22 maxlen: 22
209.213.61.0/24 maxlen: 24
209.213.60.0/24 maxlen: 24
193.118.138.0/24 maxlen: 24
193.118.137.0/24 maxlen: 24
193.118.136.0/24 maxlen: 24
193.118.139.0/24 maxlen: 24
193.118.138.0/23 maxlen: 23
193.118.133.0/24 maxlen: 24
193.118.135.0/24 maxlen: 24
193.118.134.0/23 maxlen: 23
193.118.134.0/24 maxlen: 24
193.118.140.0/24 maxlen: 24
193.118.142.0/24 maxlen: 24
193.118.141.0/24 maxlen: 24
193.118.144.0/24 maxlen: 24
193.118.143.0/24 maxlen: 24
193.118.144.0/22 maxlen: 22
193.118.145.0/24 maxlen: 24
193.118.152.0/24 maxlen: 24
193.118.151.0/24 maxlen: 24
193.118.150.0/23 maxlen: 23
193.118.150.0/24 maxlen: 24
193.118.152.0/23 maxlen: 23
193.118.147.0/24 maxlen: 24
193.118.149.0/24 maxlen: 24
193.118.148.0/24 maxlen: 24
193.118.146.0/24 maxlen: 24
193.118.154.0/24 maxlen: 24
193.118.153.0/24 maxlen: 24
193.118.156.0/24 maxlen: 24
193.118.155.0/24 maxlen: 24
193.118.158.0/24 maxlen: 24
193.118.157.0/24 maxlen: 24
193.118.159.0/24 maxlen: 24
193.118.128.0/24 maxlen: 24
193.118.128.0/23 maxlen: 23
193.118.130.0/24 maxlen: 24
193.118.129.0/24 maxlen: 24
193.118.132.0/24 maxlen: 24
193.118.132.0/23 maxlen: 23
193.118.131.0/24 maxlen: 24
138.43.4.0/24 maxlen: 24
138.43.10.0/24 maxlen: 24
138.43.6.0/24 maxlen: 24
138.43.8.0/24 maxlen: 24
138.43.7.0/24 maxlen: 24
138.43.9.0/24 maxlen: 24
138.43.5.0/24 maxlen: 24
138.43.11.0/24 maxlen: 24
138.43.15.0/24 maxlen: 24
138.43.14.0/24 maxlen: 24
138.43.13.0/24 maxlen: 24
138.43.12.0/24 maxlen: 24
138.43.31.0/24 maxlen: 24
138.43.28.0/22 maxlen: 22
138.43.29.0/24 maxlen: 24
138.43.28.0/24 maxlen: 24
138.43.30.0/24 maxlen: 24
138.43.26.0/24 maxlen: 24
185.170.161.0/24 maxlen: 24
185.170.163.0/24 maxlen: 24
185.170.162.0/24 maxlen: 24
63.142.4.0/24 maxlen: 24
63.142.1.0/24 maxlen: 24
63.142.3.0/24 maxlen: 24
63.142.2.0/24 maxlen: 24
63.142.0.0/24 maxlen: 24
63.142.5.0/24 maxlen: 24
63.142.6.0/24 maxlen: 24
63.142.6.0/23 maxlen: 23
63.142.11.0/24 maxlen: 24
63.142.8.0/24 maxlen: 24
63.142.7.0/24 maxlen: 24
63.142.10.0/24 maxlen: 24
63.142.9.0/24 maxlen: 24
63.142.15.0/24 maxlen: 24
63.142.14.0/23 maxlen: 23
63.142.14.0/24 maxlen: 24
63.142.12.0/24 maxlen: 24
63.142.13.0/24 maxlen: 24
2a0b:2900:11c0::/42 maxlen: 42
2a0b:2900:61c0::/42 maxlen: 42
2a0b:2900:2140::/42 maxlen: 42
2a0b:2900:1140::/42 maxlen: 42
2a0b:2900:3240::/42 maxlen: 42
2a0b:2900:6140::/42 maxlen: 42
2a0b:2900:12c0::/42 maxlen: 42
2a0b:2900:3140::/42 maxlen: 42
2a0b:2900:31c0::/42 maxlen: 42
2a0b:2900:32c0::/42 maxlen: 42
2a0b:2900:21c0::/42 maxlen: 42
2a0b:2900:216c::/48 maxlen: 48
2a0b:2900:1f00::/40 maxlen: 40
2a0b:2900:7f::/48 maxlen: 48
2a0b:2900:3180::/42 maxlen: 42
2a0b:2900:6100::/42 maxlen: 42
2a0b:2900:3100::/42 maxlen: 42
2a0b:2900:1100::/42 maxlen: 42
2a0b:2900:3200::/42 maxlen: 42
2a0b:2900:3280::/42 maxlen: 42
2a0b:2900:2180::/42 maxlen: 42
2a0b:2900:6180::/42 maxlen: 42
2a0b:2900:1180::/42 maxlen: 42
2a0b:2900:2100::/42 maxlen: 42
2a0b:2900:5234::/47 maxlen: 47
2a0b:2900:52b4::/47 maxlen: 47
2a0b:2900:4100::/41 maxlen: 41
2a0b:2900:3200::/41 maxlen: 41
2a0b:2900:2180::/41 maxlen: 41
2a0b:2900:1080::/41 maxlen: 42
2a0b:2900:2300::/41 maxlen: 42
2a0b:2900:1200::/41 maxlen: 42
2a0b:2900:3280::/41 maxlen: 41
2a0b:2900:2100::/41 maxlen: 41
2a0b:2900:1000::/41 maxlen: 42
2a0b:2900:2280::/41 maxlen: 42
2a0b:2900:5280::/41 maxlen: 41
2a0b:2900:6200::/41 maxlen: 41
2a0b:2900:4180::/41 maxlen: 41
2a0b:2900:1100::/41 maxlen: 41
2a0b:2900:4280::/41 maxlen: 41
2a0b:2900:3180::/41 maxlen: 41
2a0b:2900:2200::/41 maxlen: 42
2a0b:2900:1180::/41 maxlen: 41
2a0b:2900:5200::/41 maxlen: 41
2a0b:2900:4200::/41 maxlen: 41
2a0b:2900:6280::/41 maxlen: 41
2a0b:2900:2380::/41 maxlen: 42
2a0b:2900:1280::/41 maxlen: 42
2a0b:2900:3100::/41 maxlen: 41
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:8d:e7:ff:2a:26:51:98:cf:79:34:42:6a:cb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Jan 1 12:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72517d9d46367312a0ac751978cb2798d1375f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:52:fc:9d:05:fa:72:1c:b0:16:20:eb:29:
66:99:17:7d:d9:00:67:8e:ce:85:ad:b5:fe:47:17:
eb:0d:77:20:9b:af:dd:ad:ed:7a:6c:a9:86:e5:c3:
22:e7:93:da:5f:9d:e2:36:ac:1f:2b:0d:bf:9f:67:
3c:e2:6d:a0:d3:7e:d6:08:47:2a:5f:6a:93:5f:d6:
38:91:dd:f1:21:2a:b9:9c:dc:b6:a7:8c:ed:f6:40:
a8:b5:5a:a2:cb:92:c1:00:9b:56:81:c5:6c:02:dd:
bd:aa:63:93:28:43:27:ff:1c:48:31:14:9c:a5:96:
3e:7f:77:11:01:f6:09:40:24:c3:eb:03:9a:6c:2e:
33:71:11:27:f7:72:7c:3a:46:64:60:ac:6a:6a:a8:
7f:00:71:ef:88:d0:17:05:e7:b2:a4:59:c8:5e:e1:
fe:23:1d:7c:e6:14:7e:31:12:ec:3e:45:cf:2c:10:
8a:7a:3c:d8:e7:36:83:f2:75:c1:77:59:ef:7e:37:
7c:f1:c7:8e:0b:74:6a:ab:d9:a2:b4:88:72:38:f8:
42:d4:c0:b9:b8:30:1a:bf:33:f1:11:1d:27:a8:89:
75:4d:bb:0f:d1:bd:c7:d6:a6:b8:cb:c4:0c:4a:d0:
58:8b:2c:f3:f1:89:a6:ba:a1:4e:f6:98:9e:90:34:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:51:7D:9D:46:36:73:12:A0:AC:75:19:78:CB:27:98:D1:37:5F:09
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/clF9nUY2cxKgrHUZeMsnmNE3Xwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.142.0.0/20
138.43.4.0-138.43.15.255
138.43.26.0/24
138.43.28.0/22
185.170.161.0-185.170.163.255
193.118.128.0/19
193.118.192.0-193.118.194.255
193.118.196.0/24
193.118.198.0-193.118.220.255
209.213.48.0/20
217.147.176.0/21
IPv6:
2a0b:2900:7f::/48
2a0b:2900:1000::-2a0b:2900:12ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:1f00::/40
2a0b:2900:2100::-2a0b:2900:23ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:3100::-2a0b:2900:32ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:4100::-2a0b:2900:42ff:ffff:ffff:ffff:ffff:ffff
2a0b:2900:5200::/40
2a0b:2900:6100::-2a0b:2900:62ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
99:21:63:20:b6:6a:31:86:cc:c9:ee:f7:4a:4c:a7:5a:aa:28:
92:3f:d2:18:23:fe:26:3d:20:f8:8b:9d:dc:be:cc:1d:53:f0:
a0:fa:97:97:d4:02:f8:6f:da:be:8b:7b:d2:04:96:92:c8:98:
9f:7f:5e:f3:56:04:9d:30:b2:6e:32:6e:b8:b0:f4:83:be:3e:
f4:c9:7c:b4:70:7f:10:77:6b:89:7a:b6:bd:93:e6:62:f7:85:
24:2f:1c:d8:a7:b7:9f:82:f9:45:45:c6:1a:aa:aa:e5:0e:a1:
9e:1d:a7:37:fe:90:02:69:40:af:da:87:bb:8b:ed:b9:58:4b:
bf:5b:b7:ed:1c:99:4b:7d:42:0c:34:60:d5:a9:57:29:4d:cc:
7c:59:09:ec:31:8f:29:b5:48:c1:78:0c:1a:4b:7a:be:d3:89:
f0:f5:53:35:92:7d:ae:4b:c6:ae:aa:34:b7:7c:17:de:f7:0c:
54:bb:fd:6a:8c:15:be:41:6a:0c:9c:49:4d:b7:40:bb:8f:36:
9d:29:26:e1:df:5c:04:72:7c:bb:0d:ee:b0:f9:ce:5b:70:49:
03:8c:e9:73:2e:e9:47:af:f6:1a:91:8f:a3:0e:ac:7b:a8:2f:
be:84:f0:5b:25:75:c8:bc:2a:f2:17:f3:ae:d8:36:ae:ee:c2:
5e:a7:02:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:14 2025 by rpki-client