Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/OZdiswlAm0Q67muEzdM2r2Mp4-g.roa
File: OZdiswlAm0Q67muEzdM2r2Mp4-g.roa (raw, json)
Hash identifier: eww5DDrRGhexpkkaUeVXaYpwI3sI2LuOuTpKdpkI0ak=
Subject key identifier: 39:97:62:B3:09:40:9B:44:3A:EE:6B:84:CD:D3:36:AF:63:29:E3:E8
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 018C677ABDB75D7537F4640422044FFFBE41
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/OZdiswlAm0Q67muEzdM2r2Mp4-g.roa
Signing time: Thu 14 Dec 2023 08:39:06 +0000
ROA not before: Thu 14 Dec 2023 08:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8648
IP address blocks: 193.22.255.0/24 maxlen: 24
185.80.92.0/22 maxlen: 24
82.141.0.0/18 maxlen: 24
185.137.168.0/22 maxlen: 24
212.110.96.0/19 maxlen: 24
128.127.64.0/21 maxlen: 24
195.225.133.0/24 maxlen: 24
45.87.136.0/22 maxlen: 24
95.130.248.0/21 maxlen: 24
94.154.148.0/22 maxlen: 24
93.90.176.0/20 maxlen: 24
195.42.120.0/23 maxlen: 24
91.203.212.0/22 maxlen: 24
109.237.128.0/20 maxlen: 24
195.62.96.0/19 maxlen: 24
195.82.152.0/23 maxlen: 24
84.254.120.0/24 maxlen: 24
193.25.114.0/23 maxlen: 24
195.110.42.0/23 maxlen: 24
185.211.60.0/22 maxlen: 24
185.207.228.0/22 maxlen: 24
195.5.120.0/23 maxlen: 24
185.32.116.0/22 maxlen: 24
89.22.96.0/19 maxlen: 24
185.143.164.0/22 maxlen: 24
194.116.186.0/23 maxlen: 24
5.11.48.0/21 maxlen: 24
91.206.142.0/23 maxlen: 24
91.220.49.0/24 maxlen: 24
194.145.226.0/24 maxlen: 24
213.146.96.0/19 maxlen: 24
193.38.156.0/22 maxlen: 24
109.75.176.0/20 maxlen: 24
93.190.64.0/21 maxlen: 24
91.203.108.0/22 maxlen: 24
185.65.88.0/22 maxlen: 24
178.250.168.0/21 maxlen: 24
37.218.248.0/21 maxlen: 24
185.117.248.0/22 maxlen: 24
141.101.32.0/21 maxlen: 24
185.84.80.0/23 maxlen: 24
185.84.80.0/22 maxlen: 24
185.84.82.0/24 maxlen: 24
178.20.96.0/21 maxlen: 24
195.34.82.0/23 maxlen: 24
192.162.84.0/22 maxlen: 24
91.226.88.0/22 maxlen: 24
31.47.240.0/20 maxlen: 24
46.243.88.0/21 maxlen: 24
81.88.16.0/20 maxlen: 24
185.51.8.0/22 maxlen: 24
185.158.212.0/22 maxlen: 24
81.88.27.0/24 maxlen: 24
185.3.232.0/22 maxlen: 24
81.88.32.0/20 maxlen: 24
5.44.96.0/20 maxlen: 24
2a02:248::/32 maxlen: 48
2001:880::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:7a:bd:b7:5d:75:37:f4:64:04:22:04:4f:ff:be:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Dec 14 08:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=399762b309409b443aee6b84cdd336af6329e3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:98:fb:72:5b:92:6e:a0:a1:ed:f7:ee:b6:
55:66:f3:65:35:2c:72:86:a1:86:49:ed:14:aa:7d:
9b:8f:a2:2d:07:15:b6:da:b8:43:cf:0e:ee:53:7b:
91:f5:de:58:e4:25:11:3f:de:3a:32:3d:d7:77:e7:
dc:bd:44:d3:63:eb:46:c7:7b:51:71:07:cf:3c:97:
c3:5c:c7:b9:8a:ce:72:62:04:15:4a:13:76:6b:d1:
ca:6f:ed:c7:6c:00:3c:f3:1d:99:e1:6c:7e:5d:5d:
7e:2b:5d:84:12:9f:ce:84:70:0e:a1:23:10:1e:12:
39:cb:00:c9:5e:27:95:e7:73:53:fa:88:e2:00:bd:
2c:c5:eb:e0:61:b2:84:d5:47:86:9b:b6:3c:ab:72:
09:b3:53:92:32:0a:34:97:e0:0d:58:9a:43:3b:b6:
39:b7:fc:54:12:66:33:15:04:ff:66:5a:ab:05:74:
ac:7a:67:6b:41:ab:11:47:a1:6a:48:e6:0b:84:13:
f8:85:f6:0c:30:20:10:c8:f3:d2:fd:6b:2f:3c:e1:
cf:80:53:3a:8a:ab:ac:9a:0c:66:57:2c:77:86:a0:
e4:b1:4c:d5:ee:05:27:0a:10:28:56:10:4b:d1:33:
8e:08:0f:29:bf:a7:ad:72:15:8f:e5:19:2f:26:fc:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:97:62:B3:09:40:9B:44:3A:EE:6B:84:CD:D3:36:AF:63:29:E3:E8
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/OZdiswlAm0Q67muEzdM2r2Mp4-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
5.44.96.0/20
31.47.240.0/20
37.218.248.0/21
45.87.136.0/22
46.243.88.0/21
81.88.16.0-81.88.47.255
82.141.0.0/18
84.254.120.0/24
89.22.96.0/19
91.203.108.0/22
91.203.212.0/22
91.206.142.0/23
91.220.49.0/24
91.226.88.0/22
93.90.176.0/20
93.190.64.0/21
94.154.148.0/22
95.130.248.0/21
109.75.176.0/20
109.237.128.0/20
128.127.64.0/21
141.101.32.0/21
178.20.96.0/21
178.250.168.0/21
185.3.232.0/22
185.32.116.0/22
185.51.8.0/22
185.65.88.0/22
185.80.92.0/22
185.84.80.0/22
185.117.248.0/22
185.137.168.0/22
185.143.164.0/22
185.158.212.0/22
185.207.228.0/22
185.211.60.0/22
192.162.84.0/22
193.22.255.0/24
193.25.114.0/23
193.38.156.0/22
194.116.186.0/23
194.145.226.0/24
195.5.120.0/23
195.34.82.0/23
195.42.120.0/23
195.62.96.0/19
195.82.152.0/23
195.110.42.0/23
195.225.133.0/24
212.110.96.0/19
213.146.96.0/19
IPv6:
2001:880::/32
2a02:248::/32
Signature Algorithm: sha256WithRSAEncryption
04:4e:6c:03:7a:83:e7:c3:64:6e:73:9a:8d:7b:da:97:e0:3d:
30:e8:a6:a5:f2:5a:fe:1d:10:34:ab:b3:86:b7:c2:97:99:71:
3a:a8:9f:03:e7:a2:fa:93:0b:23:3e:e5:90:eb:77:4e:73:0e:
77:0b:79:5c:27:e9:ce:d4:b6:f2:0e:f5:84:71:ce:ef:1a:05:
7c:61:db:ae:0a:28:91:33:6e:27:b4:5d:8b:c4:56:0e:aa:bb:
df:8b:ea:d9:b1:b8:67:80:99:0a:5c:9e:5d:82:f9:fe:2e:87:
d8:22:3c:87:d3:7c:b7:ec:cc:d9:43:cd:5f:87:1e:5f:9c:26:
db:6d:d5:04:bb:b5:c5:44:1b:ea:e3:ab:ca:11:f6:88:b0:7d:
6f:ae:68:e0:19:0c:d8:d1:18:7b:a3:66:1b:13:19:9e:ff:a6:
a0:97:51:f3:17:2e:a9:d3:26:f3:ba:b9:2c:5e:6b:39:8a:4f:
35:a3:21:f4:a3:7c:67:3d:20:79:a0:97:e1:f5:1a:42:64:dc:
69:ce:9d:91:32:c9:80:fd:05:2d:8f:fd:b7:a8:ba:26:2b:d3:
48:83:23:d3:71:b7:db:c7:56:6d:8b:7b:dc:eb:00:e5:16:aa:
aa:0b:df:ab:bb:81:6a:4c:1e:f4:4c:f2:40:cd:04:49:28:19:
95:0a:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:19:17 2025 by rpki-client