Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/ySz1HyZBCm0-rL-ecu9ALYyqnIQ.roa
File: ySz1HyZBCm0-rL-ecu9ALYyqnIQ.roa (raw, json)
Hash identifier: ErqLmCZgySoC+DrnjTL0WgfbqcWLkehg5IuGm9opdGg=
Subject key identifier: C9:2C:F5:1F:26:41:0A:6D:3E:AC:BF:9E:72:EF:40:2D:8C:AA:9C:84
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 01857115160E28D19310E38F1401E74B5C96
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/ySz1HyZBCm0-rL-ecu9ALYyqnIQ.roa
Signing time: Mon 02 Jan 2023 06:04:45 +0000
ROA not before: Mon 02 Jan 2023 06:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44327
IP address blocks: 93.188.11.0/24 maxlen: 24
93.188.8.0/21 maxlen: 21
93.188.8.0/24 maxlen: 24
93.188.8.0/22 maxlen: 22
93.188.12.0/22 maxlen: 22
93.188.14.0/24 maxlen: 24
92.51.96.0/20 maxlen: 20
92.51.96.0/21 maxlen: 21
92.51.92.0/24 maxlen: 24
92.51.104.0/21 maxlen: 21
92.51.99.0/24 maxlen: 24
92.51.112.0/24 maxlen: 24
92.51.112.0/22 maxlen: 22
92.51.116.0/22 maxlen: 22
92.51.112.0/21 maxlen: 21
92.51.112.0/20 maxlen: 20
92.51.113.0/24 maxlen: 24
92.51.121.0/24 maxlen: 24
92.51.124.0/22 maxlen: 22
92.51.120.0/22 maxlen: 22
92.51.120.0/21 maxlen: 21
92.51.126.0/24 maxlen: 24
109.234.112.0/22 maxlen: 22
109.234.112.0/24 maxlen: 24
109.234.116.0/22 maxlen: 22
109.234.112.0/21 maxlen: 21
92.51.64.0/20 maxlen: 20
92.51.64.0/21 maxlen: 21
92.51.64.0/24 maxlen: 24
92.51.64.0/18 maxlen: 18
92.51.66.0/24 maxlen: 24
92.51.65.0/24 maxlen: 24
92.51.69.0/24 maxlen: 24
92.51.75.0/24 maxlen: 24
92.51.72.0/21 maxlen: 21
92.51.80.0/24 maxlen: 24
92.51.80.0/20 maxlen: 20
92.51.80.0/21 maxlen: 21
92.51.82.0/24 maxlen: 24
92.51.87.0/24 maxlen: 24
92.51.88.0/21 maxlen: 21
92.51.86.0/24 maxlen: 24
37.131.226.0/24 maxlen: 24
37.131.224.0/21 maxlen: 21
37.131.224.0/22 maxlen: 22
37.131.228.0/22 maxlen: 22
37.131.227.0/24 maxlen: 24
37.131.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:16:0e:28:d1:93:10:e3:8f:14:01:e7:4b:5c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Jan 2 06:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c92cf51f26410a6d3eacbf9e72ef402d8caa9c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:11:65:80:36:92:92:e8:26:48:e0:9b:8a:
b4:a4:ba:50:ba:c7:86:04:30:7d:5a:1f:64:d4:4d:
56:2b:6e:35:65:a0:05:66:5e:1b:3a:24:ef:a6:b6:
4a:74:13:07:73:86:13:c5:96:e2:50:b3:0e:86:59:
da:a8:56:73:fd:30:16:34:95:51:e1:9f:28:e5:6d:
af:ed:4d:42:b0:77:13:ea:fb:bc:06:81:bc:b8:c1:
8b:d0:41:ba:2b:f1:f5:a0:a6:cd:6d:49:b1:c2:0a:
6d:8d:fc:2b:c4:7a:2b:5b:3e:86:0c:4d:ab:82:ef:
a3:23:ff:e2:13:15:d7:9a:c9:71:8b:52:14:2d:0f:
84:cf:79:07:0d:e8:a5:8d:0e:18:e3:68:81:ee:73:
2c:ce:e1:cf:16:8b:cd:fa:32:26:32:e0:b2:17:1f:
4f:df:16:64:b5:b6:fe:b8:1b:21:e3:84:6e:2a:db:
88:e8:69:23:a7:63:5b:82:60:70:eb:36:34:e4:75:
e6:d8:ef:b1:43:38:5a:63:7c:4e:d9:f9:fa:00:d2:
a3:70:2e:10:dd:7a:c3:1e:d3:05:3f:de:59:b9:90:
34:e7:cf:c5:c0:03:cc:47:00:6a:c5:19:4b:e9:74:
fc:1f:97:5e:e7:98:73:ce:f1:79:d0:1d:26:f8:17:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2C:F5:1F:26:41:0A:6D:3E:AC:BF:9E:72:EF:40:2D:8C:AA:9C:84
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/ySz1HyZBCm0-rL-ecu9ALYyqnIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.224.0/21
92.51.64.0/18
93.188.8.0/21
109.234.112.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:ba:5f:51:d3:66:61:a0:7d:67:63:9b:a1:d0:53:ae:01:d3:
85:b6:2a:d0:bc:72:c6:05:13:31:57:50:47:cc:fe:7f:df:3d:
45:bc:1d:80:1a:4c:5c:1e:ee:d7:33:7e:f0:96:4e:78:97:26:
a0:a3:3e:24:19:6b:76:15:62:0d:ca:75:70:d8:65:3d:3d:4b:
2d:60:83:75:dc:23:5c:f6:8c:04:03:7a:74:ed:42:b3:2e:35:
13:95:ef:73:e9:83:a3:c2:f1:ef:a8:39:67:9d:ca:4f:76:6a:
ea:0d:1d:a0:72:f8:8d:87:4d:c6:cd:44:95:14:7e:0f:31:93:
1a:ba:b1:b9:f7:4c:54:ee:11:42:7c:de:78:11:e5:58:fc:7f:
2d:9e:30:e2:35:4e:be:47:c7:f1:a1:68:9c:19:f2:85:d7:83:
9d:6e:cd:c5:c3:ee:10:5c:7e:e9:7d:b0:95:60:29:6d:6e:29:
54:0b:58:60:34:6f:8d:1a:58:14:a0:0e:c0:bd:7d:87:2d:97:
bf:f6:3c:aa:10:7b:3a:9a:4a:e5:c6:ae:61:8f:85:8d:d5:64:
ea:cc:86:bd:ac:97:5c:ba:df:cd:fd:0f:3a:0e:8b:86:24:7c:
7d:3a:90:2e:25:24:c3:71:df:af:69:54:4d:33:f8:ba:65:84:
ce:30:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:10 2025 by rpki-client