Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/e738wPixxxQPHKMTbEk2WPVuDe4.roa
File: e738wPixxxQPHKMTbEk2WPVuDe4.roa (raw, json)
Hash identifier: XC6F9r+0/y3jfvic5wJp3md7YqAoG2XGZ/6YK/zFCVw=
Subject key identifier: 7B:BD:FC:C0:F8:B1:C7:14:0F:1C:A3:13:6C:49:36:58:F5:6E:0D:EE
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 01870370F6259B7DD178B6740DE031BCBFC4
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/e738wPixxxQPHKMTbEk2WPVuDe4.roa
Signing time: Tue 21 Mar 2023 09:12:27 +0000
ROA not before: Tue 21 Mar 2023 09:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15547
IP address blocks: 81.88.176.0/21 maxlen: 21
81.88.176.0/20 maxlen: 20
213.230.56.0/21 maxlen: 21
213.230.52.0/22 maxlen: 22
92.240.96.0/19 maxlen: 19
185.17.176.0/22 maxlen: 22
31.31.48.0/20 maxlen: 20
213.221.128.0/19 maxlen: 19
195.162.160.0/22 maxlen: 22
195.162.164.0/23 maxlen: 23
185.44.196.0/22 maxlen: 22
195.162.167.0/24 maxlen: 24
195.162.168.0/21 maxlen: 21
195.162.176.0/20 maxlen: 20
178.237.80.0/20 maxlen: 20
194.12.16.0/20 maxlen: 20
86.111.128.0/20 maxlen: 20
185.50.220.0/22 maxlen: 22
92.62.176.0/20 maxlen: 20
78.155.0.0/19 maxlen: 19
77.242.160.0/20 maxlen: 20
213.238.0.0/19 maxlen: 19
185.17.108.0/22 maxlen: 22
217.79.192.0/20 maxlen: 20
2a03:4380::/32 maxlen: 32
2a02:26a0::/29 maxlen: 29
2001:14a8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:70:f6:25:9b:7d:d1:78:b6:74:0d:e0:31:bc:bf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Mar 21 09:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bbdfcc0f8b1c7140f1ca3136c493658f56e0dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:7e:f4:a1:80:79:b2:a5:ff:cc:6b:74:80:
7f:fc:0b:f5:20:50:f6:bd:f1:b0:17:04:f7:5b:b0:
9a:0f:c6:30:8f:d7:31:22:79:25:fb:ae:26:f7:37:
eb:0f:c8:4c:6e:a4:ef:1f:e1:5a:1c:56:10:15:2c:
64:2c:74:87:df:5a:a9:f1:be:d3:f1:f8:d8:5e:99:
3f:01:e8:b0:72:4c:c8:bf:13:0a:02:2c:d7:de:6c:
05:c1:c6:0c:37:ba:88:3f:35:e0:93:aa:9e:08:b9:
b2:df:75:0d:8e:54:e5:c5:a2:48:9e:a5:5c:4a:85:
f2:07:c3:cd:fa:9a:49:85:cd:ec:21:16:80:c4:63:
a8:fa:d2:76:5f:a8:6d:a3:61:04:19:df:b9:f8:d2:
c7:18:5d:17:79:66:c7:de:c7:20:ea:1d:a6:86:f6:
02:13:1c:95:08:c1:1d:dd:b4:46:f8:e3:53:56:2e:
57:f8:03:22:c6:b3:2f:67:35:02:6d:af:c6:47:b1:
87:6b:0f:73:6e:be:65:ea:96:f2:cb:4f:9f:cb:8e:
f9:bf:ea:f7:87:c5:0e:89:4b:30:bf:16:fe:c6:a8:
01:3f:9e:5d:d7:77:22:84:c3:82:44:8d:3c:49:48:
c8:e1:7a:59:3f:17:13:e6:14:ec:95:ba:7a:61:0c:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BD:FC:C0:F8:B1:C7:14:0F:1C:A3:13:6C:49:36:58:F5:6E:0D:EE
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/e738wPixxxQPHKMTbEk2WPVuDe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.48.0/20
77.242.160.0/20
78.155.0.0/19
81.88.176.0/20
86.111.128.0/20
92.62.176.0/20
92.240.96.0/19
178.237.80.0/20
185.17.108.0/22
185.17.176.0/22
185.44.196.0/22
185.50.220.0/22
194.12.16.0/20
195.162.160.0-195.162.165.255
195.162.167.0-195.162.191.255
213.221.128.0/19
213.230.52.0-213.230.63.255
213.238.0.0/19
217.79.192.0/20
IPv6:
2001:14a8::/32
2a02:26a0::/29
2a03:4380::/32
Signature Algorithm: sha256WithRSAEncryption
ac:c8:30:7e:78:15:07:31:39:18:df:08:e1:d4:3b:25:66:47:
f0:bb:d4:6d:f6:ac:12:14:2d:1f:70:54:3c:58:98:b8:49:b3:
bf:a4:0f:22:1f:da:23:5b:cd:07:af:f4:ef:ea:f6:6e:3e:29:
30:21:b0:9c:42:48:86:bb:95:65:c1:cf:e7:54:58:2d:cd:f0:
88:1c:6b:53:34:54:b3:00:20:f0:e9:2a:47:55:26:f0:50:82:
da:06:a8:62:fa:09:f7:3f:f9:60:0d:29:33:e7:33:a9:a6:2f:
f7:3c:23:27:08:af:7f:1d:c4:f9:97:8f:13:08:e9:54:99:f4:
20:40:fb:ff:5b:d0:3f:03:16:bd:a0:5c:6c:34:70:66:06:0e:
de:7e:67:ca:88:80:61:35:4e:41:b4:a7:94:63:b9:69:9a:aa:
05:d6:79:98:42:7f:f8:76:51:92:e4:58:9b:9b:b9:b4:14:ef:
39:1b:af:51:52:63:08:55:4f:77:61:1c:a1:37:5f:fa:ca:9d:
d2:e9:2c:f1:4c:4c:e0:d1:07:37:51:22:03:2f:d3:f8:d7:2e:
fc:50:39:f7:1c:e2:ff:f3:fe:cf:10:d7:a1:5e:7b:ad:6b:61:
1c:f3:7f:f6:b3:dc:43:61:c8:e2:92:75:c0:25:84:90:72:64:
93:b7:22:8e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYcDcPYlm33ReLZ0DeAxvL/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTY3ZmNiMGJkYzYwMDFkOGNmNzA3M2M2NDllYjk4MTlm
YzVlYjgwHhcNMjMwMzIxMDkxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmJkZmNjMGY4YjFjNzE0MGYxY2EzMTM2YzQ5MzY1OGY1NmUwZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZB+9KGAebKl/8xrdIB//Av1IFD2
vfGwFwT3W7CaD8Ywj9cxInkl+64m9zfrD8hMbqTvH+FaHFYQFSxkLHSH31qp8b7T
8fjYXpk/AeiwckzIvxMKAizX3mwFwcYMN7qIPzXgk6qeCLmy33UNjlTlxaJInqVc
SoXyB8PN+ppJhc3sIRaAxGOo+tJ2X6hto2EEGd+5+NLHGF0XeWbH3scg6h2mhvYC
ExyVCMEd3bRG+ONTVi5X+AMixrMvZzUCba/GR7GHaw9zbr5l6pbyy0+fy475v+r3
h8UOiUswvxb+xqgBP55d13cihMOCRI08SUjI4XpZPxcT5hTslbp6YQx4hwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHu9/MD4sccUDxyjE2xJNlj1bg3uMB8GA1UdIwQY
MBaAFLnmf8sL3GAB2M9wc8ZJ65gZ/F64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEt
ZmE3MWFlMDVkYzNmLzEvZTczOHdQaXh4eFFQSEtNVGJFazJXUFZ1RGU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEtZmE3MWFlMDVkYzNm
LzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTCBkQQCAAEwgYoDBAQf
HzADBARN8qADBAVOmwADBARRWLADBARWb4ADBARcPrADBAVc8GADBASy7VADBAK5
EWwDBAK5EbADBAK5LMQDBAK5MtwDBATCDBAwDAMEBcOioAMEAcOipDAMAwQAw6Kn
AwQGw6KAAwQF1d2AMAwDBALV5jQDBAbV5gADBAXV7gADBATZT8AwGwQCAAIwFQMF
ACABFKgDBQMqAiagAwUAKgNDgDANBgkqhkiG9w0BAQsFAAOCAQEArMgwfngVBzE5
GN8I4dQ7JWZH8LvUbfasEhQtH3BUPFiYuEmzv6QPIh/aI1vNB6/07+r2bj4pMCGw
nEJIhruVZcHP51RYLc3wiBxrUzRUswAg8OkqR1Um8FCC2gaoYvoJ9z/5YA0pM+cz
qaYv9zwjJwivfx3E+ZePEwjpVJn0IED7/1vQPwMWvaBcbDRwZgYO3n5nyoiAYTVO
QbSnlGO5aZqqBdZ5mEJ/+HZRkuRYm5u5tBTvORuvUVJjCFVPd2EcoTdf+sqd0uks
8UxM4NEHN1EiAy/T+Ncu/FA59xzi//P+zxDXoV57rWthHPN/9rPcQ2HI4pJ1wCWE
kHJkk7cijg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:12:27 2025 by rpki-client