Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/2MJNGlaxg9wrBzeZ9mbbDBuhVI8.roa
File: 2MJNGlaxg9wrBzeZ9mbbDBuhVI8.roa (raw, json)
Hash identifier: mECTHibJ9AKzW1eC6o0Nb2XignVvdLBNuwDnI8Ql+xY=
Subject key identifier: D8:C2:4D:1A:56:B1:83:DC:2B:07:37:99:F6:66:DB:0C:1B:A1:54:8F
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 018891B005C06DD389688CCC5ADA8BF9F22B
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/2MJNGlaxg9wrBzeZ9mbbDBuhVI8.roa
Signing time: Tue 06 Jun 2023 17:10:11 +0000
ROA not before: Tue 06 Jun 2023 17:10:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47376
IP address blocks: 195.238.247.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
103.215.222.0/24 maxlen: 24
103.215.221.0/24 maxlen: 24
103.215.220.0/22 maxlen: 22
103.215.220.0/24 maxlen: 24
185.221.239.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:b0:05:c0:6d:d3:89:68:8c:cc:5a:da:8b:f9:f2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jun 6 17:10:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8c24d1a56b183dc2b073799f666db0c1ba1548f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:25:c5:df:f3:06:55:04:12:ab:35:f5:c0:
4f:74:07:ef:67:4a:d9:8c:e0:6b:00:53:80:f0:b3:
b9:0c:ea:41:4d:44:18:36:d2:45:0d:99:2b:c3:54:
58:e0:84:dc:c3:8a:0f:60:99:e3:a4:c9:e5:de:4a:
1f:81:ae:60:1d:4b:7f:e3:ce:73:69:a0:4d:25:fb:
89:01:94:9b:4c:79:07:9e:19:fe:e7:2e:b8:72:5e:
d6:b0:98:38:66:a7:12:b7:9f:a6:75:cc:8c:e1:58:
26:03:d9:7e:7c:49:e4:b7:ae:df:81:d0:df:bd:27:
9e:9a:c7:b2:a2:71:3e:ae:f6:05:91:a3:1a:5a:fe:
0a:ee:95:45:3d:d0:fe:8b:a4:45:04:5b:09:f3:07:
da:a0:3e:5e:e6:8e:04:08:57:63:10:2b:a1:89:ee:
70:2f:ad:19:8c:50:81:7e:d5:28:bf:47:b1:c5:3c:
3d:b5:a1:6a:de:c0:8b:57:49:c4:de:e0:91:94:95:
07:b8:8a:da:b4:69:f1:6e:9c:e3:83:82:2e:f6:63:
8e:20:0c:7e:2f:c8:d3:57:cd:c8:67:30:f5:6a:96:
ca:6c:0b:b6:4a:cb:48:29:82:97:56:1d:e6:bd:87:
3c:15:b8:05:a5:f6:85:c0:d3:6e:9a:66:f7:29:2d:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C2:4D:1A:56:B1:83:DC:2B:07:37:99:F6:66:DB:0C:1B:A1:54:8F
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/2MJNGlaxg9wrBzeZ9mbbDBuhVI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/22
185.221.239.0/24
195.28.11.0/24
195.238.231.0/24
195.238.247.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e1:8e:d5:2d:96:48:72:b7:74:0b:05:55:d3:e8:00:14:9a:
5a:7c:3a:dd:be:27:4d:59:ec:eb:05:dd:93:ef:cb:7f:3b:d4:
44:50:14:a5:68:cd:35:e1:97:1d:c8:df:a2:68:ca:dc:1c:95:
b0:70:3b:12:76:38:7c:cd:78:c6:fa:a0:51:b4:41:3f:4f:42:
df:2f:59:c7:af:fc:73:1d:28:c2:40:d3:89:cf:f5:a9:34:aa:
5b:17:39:7f:4a:f7:d2:1f:37:bf:9d:98:e4:39:8f:d5:71:3f:
7e:b1:4b:2c:f6:ae:0c:3e:c0:d8:a1:0a:8a:f2:23:c1:d7:b1:
0d:12:f9:42:ca:ce:f0:71:76:1e:0c:5f:15:50:3a:61:a8:d2:
f0:2b:b7:92:6e:a1:51:27:fd:d9:6d:1b:e6:4a:5d:a7:e7:8e:
96:47:a9:33:a8:e1:9c:e4:2d:b4:fd:c6:93:b1:b6:f9:35:09:
48:9b:46:48:24:93:a8:d7:93:e5:d9:ff:08:79:03:24:28:6e:
26:74:02:a4:8e:e1:13:1f:93:1e:66:ba:d5:03:37:45:fb:a9:
ca:1d:76:3f:2a:5a:6b:9a:91:0b:fb:09:aa:56:4a:fb:07:9e:
7e:52:37:d0:c9:18:b5:95:59:26:c6:76:9c:16:b6:17:0d:f1:
59:c5:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:22:17 2025 by rpki-client