Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/oTF-F2IardPgMYNEV6eWNuKKSV4.roa
File: oTF-F2IardPgMYNEV6eWNuKKSV4.roa (raw, json)
Hash identifier: N+WutZ31lmySsvf2mX6dm/uMmCZdL8HVM6fZl+hsY6U=
Subject key identifier: A1:31:7E:17:62:1A:AD:D3:E0:31:83:44:57:A7:96:36:E2:8A:49:5E
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018B4343EC806C5160B869902597BD34E3D0
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/oTF-F2IardPgMYNEV6eWNuKKSV4.roa
Signing time: Wed 18 Oct 2023 14:50:06 +0000
ROA not before: Wed 18 Oct 2023 14:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3352
IP address blocks: 83.60.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
213.99.44.0/24 maxlen: 24
83.52.0.0/16 maxlen: 16
195.55.110.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
88.15.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:43:ec:80:6c:51:60:b8:69:90:25:97:bd:34:e3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Oct 18 14:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1317e17621aadd3e031834457a79636e28a495e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:33:fe:fc:f4:11:0c:d4:5c:21:5b:6d:0b:
5f:55:39:46:7a:db:b7:be:f6:5f:62:8e:a5:06:f3:
a1:c1:54:bd:ef:75:40:ba:d2:f2:5c:ce:cc:b4:66:
99:83:86:31:e9:6a:5b:49:47:36:77:4a:78:52:cf:
56:17:8b:f2:2d:ee:b5:fc:52:99:64:47:ee:dc:59:
f2:54:72:5f:ef:11:47:19:6c:8f:08:24:20:c8:99:
b8:cd:7f:00:9a:92:fa:13:06:39:86:11:18:fa:e6:
7b:d2:e5:4c:6b:40:e0:f5:b4:54:67:d7:d0:05:db:
97:cc:a2:a1:2f:7a:af:03:35:08:dc:9a:8a:c5:85:
34:19:c2:ee:31:02:db:6a:5f:b8:84:00:78:90:a9:
11:a5:c3:76:63:49:4b:b9:e1:35:fe:ad:e1:8f:9e:
71:5b:c8:a2:e3:4b:9e:25:f2:6e:09:7e:8f:db:3f:
07:58:0d:aa:3a:80:67:df:e3:a8:71:99:cb:d1:eb:
a2:4b:d4:6a:1e:75:2a:07:5c:67:dd:90:26:52:75:
6e:59:ae:29:88:a6:c7:43:64:3e:88:42:cd:74:e1:
69:57:22:18:c5:9c:df:1a:20:f1:0d:b4:09:c8:35:
1c:ef:7b:97:12:ff:0d:30:bf:90:b6:00:47:74:85:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:7E:17:62:1A:AD:D3:E0:31:83:44:57:A7:96:36:E2:8A:49:5E
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/oTF-F2IardPgMYNEV6eWNuKKSV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.137.0.0-2.138.255.255
79.144.0.0/14
80.30.0.0/15
81.32.0.0/16
81.34.0.0-81.41.255.255
83.32.0.0/14
83.37.0.0-83.39.255.255
83.47.0.0/16
83.52.0.0/14
83.57.0.0-83.60.255.255
83.63.0.0/16
88.0.0.0/15
88.8.0.0/14
88.13.0.0-88.16.255.255
88.24.0.0/15
195.55.110.0/24
213.99.44.0/24
213.99.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6f:47:7e:98:51:d8:b4:b8:d8:67:73:2f:e6:61:dc:f4:b8:
ab:c2:53:c3:76:02:fd:27:b5:b5:bc:37:38:32:3e:d4:1f:f4:
ce:ba:10:19:f3:c4:ca:73:67:16:d4:f7:09:0d:f9:a5:32:d4:
5d:3f:53:8e:82:27:b7:52:d3:c5:f7:fa:58:92:6a:f4:f1:4b:
56:d0:ee:ea:95:7e:ab:00:3f:9c:d3:df:71:76:6f:83:98:b3:
6c:e0:de:69:e6:34:96:49:86:bd:94:7a:2e:cc:c5:72:10:74:
3a:a7:41:ff:6c:98:91:9f:a6:b3:1e:b3:07:b6:af:1b:1e:48:
11:2a:f7:4f:22:b0:e2:93:32:02:1a:2c:88:63:eb:dd:bd:73:
f1:c6:54:00:c7:b9:66:1d:41:67:32:19:8c:34:00:79:f7:f3:
84:5d:dd:6d:90:66:0d:fc:86:dc:2e:33:83:93:f3:45:32:ae:
e3:77:87:97:0a:e1:fe:d5:12:c5:a4:33:3c:a0:f5:f5:d0:34:
ad:a1:d3:04:22:c3:14:8b:02:04:1a:28:42:7b:71:d2:cc:68:
f4:a7:95:52:81:2a:cd:90:14:00:ae:a4:e4:ce:d0:09:ac:cc:
89:e0:b6:4d:a6:c8:e4:00:2e:87:51:02:10:4f:b8:78:06:9e:
21:5a:c0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:43:33 2025 by rpki-client