Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/KgrreFe1Yg2eCNhc4J8fWfJWD1k.roa
File: KgrreFe1Yg2eCNhc4J8fWfJWD1k.roa (raw, json)
Hash identifier: Q1d4apWChkaIROKzyeY4zyRN8ArNoouAt2zTaSW5olM=
Subject key identifier: 2A:0A:EB:78:57:B5:62:0D:9E:08:D8:5C:E0:9F:1F:59:F2:56:0F:59
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 018C5EA562C2DFCA9C5C4170CCB395A31FF2
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/KgrreFe1Yg2eCNhc4J8fWfJWD1k.roa
Signing time: Tue 12 Dec 2023 15:29:06 +0000
ROA not before: Tue 12 Dec 2023 15:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21334
IP address blocks: 195.184.160.0/20 maxlen: 20
195.184.160.0/19 maxlen: 19
195.184.176.0/20 maxlen: 20
176.63.128.0/17 maxlen: 17
89.134.0.0/15 maxlen: 15
86.101.0.0/17 maxlen: 17
130.43.192.0/18 maxlen: 18
86.101.0.0/16 maxlen: 16
185.33.80.0/23 maxlen: 23
185.33.80.0/24 maxlen: 24
185.33.81.0/24 maxlen: 24
37.188.80.0/22 maxlen: 22
37.188.80.0/21 maxlen: 21
37.188.84.0/22 maxlen: 22
5.63.192.0/18 maxlen: 18
212.48.240.0/21 maxlen: 21
212.48.240.0/20 maxlen: 20
37.220.192.0/18 maxlen: 18
212.96.32.0/20 maxlen: 20
212.48.248.0/21 maxlen: 21
212.96.32.0/19 maxlen: 19
80.244.96.0/20 maxlen: 20
185.123.28.0/22 maxlen: 23
212.96.48.0/20 maxlen: 20
37.191.0.0/19 maxlen: 19
176.63.0.0/17 maxlen: 17
37.191.0.0/18 maxlen: 18
176.63.0.0/16 maxlen: 16
37.191.32.0/19 maxlen: 19
188.142.160.0/20 maxlen: 20
188.142.160.0/19 maxlen: 19
89.223.128.0/17 maxlen: 17
89.223.128.0/18 maxlen: 18
188.142.176.0/20 maxlen: 20
178.48.0.0/17 maxlen: 17
178.48.0.0/16 maxlen: 16
78.139.0.0/19 maxlen: 19
78.139.0.0/18 maxlen: 18
78.139.32.0/19 maxlen: 19
5.206.128.0/18 maxlen: 18
188.142.192.0/19 maxlen: 19
188.142.192.0/18 maxlen: 18
80.99.0.0/16 maxlen: 16
178.48.128.0/17 maxlen: 17
188.142.224.0/19 maxlen: 19
89.223.192.0/18 maxlen: 18
94.44.0.0/17 maxlen: 17
94.44.0.0/16 maxlen: 16
151.0.64.0/18 maxlen: 18
213.222.160.0/19 maxlen: 19
88.87.240.0/22 maxlen: 22
80.98.0.0/16 maxlen: 16
88.87.240.0/21 maxlen: 21
88.87.244.0/22 maxlen: 22
80.98.0.0/15 maxlen: 15
185.10.124.0/22 maxlen: 22
185.10.124.0/23 maxlen: 23
185.10.126.0/23 maxlen: 23
213.222.128.0/19 maxlen: 19
213.222.128.0/18 maxlen: 18
5.148.224.0/19 maxlen: 19
89.132.0.0/15 maxlen: 15
94.44.128.0/17 maxlen: 17
89.132.0.0/14 maxlen: 14
86.101.128.0/17 maxlen: 17
89.135.60.0/24 maxlen: 24
5.148.192.0/19 maxlen: 19
5.148.192.0/18 maxlen: 18
2a02:ab80::/29 maxlen: 29
2a02:ab80::/28 maxlen: 28
2a02:ab88::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:a5:62:c2:df:ca:9c:5c:41:70:cc:b3:95:a3:1f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Dec 12 15:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a0aeb7857b5620d9e08d85ce09f1f59f2560f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:16:27:c8:03:62:5f:80:19:60:31:37:35:
f5:55:de:c6:a1:d4:15:ad:c9:89:3e:4a:72:63:ba:
af:15:90:df:f7:99:91:2b:43:e6:be:25:a6:43:2f:
27:2c:b5:03:d9:99:45:7a:a6:58:2f:f7:57:6e:3a:
14:15:d7:2b:5f:93:ab:e6:b8:80:e1:a3:73:c5:9b:
fe:9d:c1:2b:2f:ca:03:61:b3:87:a2:cf:60:42:2f:
fc:a9:02:4a:76:9d:f5:bf:12:c5:83:99:3e:3e:be:
0f:cb:92:a3:f8:63:1a:1e:f4:f1:8f:dd:68:09:5f:
ee:68:f8:46:74:00:4f:04:ef:6f:a8:91:fb:01:52:
d1:8d:e0:2b:5e:1e:79:38:4e:06:02:a9:27:ef:7b:
b4:0f:df:2a:d8:46:b2:98:7f:a8:99:f6:4f:fc:1c:
a8:5a:2a:01:bd:4a:ce:d8:c4:f3:75:fc:80:4a:76:
da:d0:93:6a:b8:59:f4:e5:44:d6:9f:48:0a:88:01:
e8:91:df:b8:99:d2:c7:30:f4:0d:2b:a9:5d:33:3a:
56:ac:7c:4a:2f:46:9f:d4:ad:49:c1:4b:b2:2c:4b:
fa:e8:3c:c3:16:c3:c6:5a:ce:e1:2e:4e:72:cd:a2:
54:69:17:1d:1a:c1:ca:0f:0e:0c:a5:42:5c:a1:59:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0A:EB:78:57:B5:62:0D:9E:08:D8:5C:E0:9F:1F:59:F2:56:0F:59
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/KgrreFe1Yg2eCNhc4J8fWfJWD1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.192.0/18
5.148.192.0/18
5.206.128.0/18
37.188.80.0/21
37.191.0.0/18
37.220.192.0/18
78.139.0.0/18
80.98.0.0/15
80.244.96.0/20
86.101.0.0/16
88.87.240.0/21
89.132.0.0/14
89.223.128.0/17
94.44.0.0/16
130.43.192.0/18
151.0.64.0/18
176.63.0.0/16
178.48.0.0/16
185.10.124.0/22
185.33.80.0/23
185.123.28.0/22
188.142.160.0-188.142.255.255
195.184.160.0/19
212.48.240.0/20
212.96.32.0/19
213.222.128.0/18
IPv6:
2a02:ab80::/28
Signature Algorithm: sha256WithRSAEncryption
7f:e7:82:a1:05:2d:83:ae:f2:8e:cf:2a:89:47:9c:4f:bb:96:
e1:4b:87:60:6b:12:bc:20:b4:c5:91:d9:f6:a5:6b:53:69:2f:
07:d4:b5:d2:0d:41:6f:72:7c:e3:70:a8:9a:61:92:33:4e:2a:
13:e2:70:72:75:24:ce:71:d1:9e:8e:e3:3e:75:5e:94:79:4c:
6c:8c:5a:2b:29:24:04:8c:66:cc:fc:4c:e9:b9:97:25:18:04:
0f:7b:1f:9a:89:29:14:5e:ca:3b:ee:d8:ba:bd:2d:85:39:4d:
37:7e:96:c1:47:93:ee:4f:c1:d5:49:4a:1f:a9:0a:f6:21:3a:
d0:11:db:8a:b1:81:da:db:ce:b2:8c:85:03:df:52:e8:53:f3:
b5:62:8a:da:f5:c5:1e:c0:cb:76:d5:2a:e7:a0:6b:e6:8e:1f:
2c:48:bc:aa:14:eb:e7:7d:fc:a1:e3:19:e2:5e:9e:9d:64:50:
09:c8:d0:d7:01:ae:9f:b8:09:e1:8c:64:f4:be:01:12:46:ee:
18:36:22:14:2e:19:90:64:2e:a7:e8:eb:21:94:28:69:4f:2e:
65:43:d6:15:f9:87:99:2d:ec:08:16:bb:c1:8e:d8:1f:5b:36:
e5:e7:2a:d9:c3:15:db:5d:cb:2d:7f:d9:03:e4:4a:d2:38:72:
7d:65:c9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:24 2025 by rpki-client