Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/ly6TnbD11wjyov5GEPbqiq-boPM.roa
File: ly6TnbD11wjyov5GEPbqiq-boPM.roa (raw, json)
Hash identifier: dZ4POYlTeJyZmcbkAEOLFiXaYia9qfnsxzWv4T0TI/4=
Subject key identifier: 97:2E:93:9D:B0:F5:D7:08:F2:A2:FE:46:10:F6:EA:8A:AF:9B:A0:F3
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 01839D0A6787ADEA520D357B83250449CADC
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/ly6TnbD11wjyov5GEPbqiq-boPM.roa
Signing time: Mon 03 Oct 2022 08:50:48 +0000
ROA not before: Mon 03 Oct 2022 08:50:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6752
IP address blocks: 80.80.85.0/24 maxlen: 24
80.80.84.0/22 maxlen: 22
80.80.84.0/24 maxlen: 24
80.80.92.0/22 maxlen: 22
185.87.36.0/22 maxlen: 22
185.33.0.0/22 maxlen: 22
194.158.64.0/22 maxlen: 22
194.158.64.0/24 maxlen: 24
194.158.64.0/19 maxlen: 19
194.158.68.0/22 maxlen: 22
194.158.78.0/24 maxlen: 24
194.158.72.0/23 maxlen: 23
194.158.72.0/22 maxlen: 22
194.158.76.0/22 maxlen: 22
185.87.40.0/22 maxlen: 22
185.87.44.0/22 maxlen: 22
188.241.26.0/23 maxlen: 23
91.187.64.0/19 maxlen: 19
91.187.64.0/22 maxlen: 22
91.187.68.0/22 maxlen: 22
91.187.76.0/22 maxlen: 22
91.187.72.0/22 maxlen: 22
91.187.84.0/22 maxlen: 22
91.187.83.0/24 maxlen: 24
91.187.80.0/22 maxlen: 22
91.187.88.0/22 maxlen: 22
89.150.4.0/22 maxlen: 22
89.150.2.0/23 maxlen: 23
89.150.8.0/22 maxlen: 22
89.150.12.0/22 maxlen: 22
91.187.93.0/24 maxlen: 24
91.187.92.0/22 maxlen: 22
185.194.56.0/22 maxlen: 22
46.172.224.0/19 maxlen: 19
46.172.232.0/22 maxlen: 22
185.4.52.0/22 maxlen: 22
94.125.138.0/23 maxlen: 23
94.125.140.0/23 maxlen: 23
185.132.200.0/22 maxlen: 22
109.111.96.0/24 maxlen: 24
109.111.96.0/22 maxlen: 22
109.111.96.0/19 maxlen: 19
109.111.100.0/22 maxlen: 22
109.111.104.0/22 maxlen: 22
109.111.108.0/22 maxlen: 22
109.111.112.0/22 maxlen: 22
109.111.111.0/24 maxlen: 24
109.111.116.0/22 maxlen: 22
85.94.164.0/22 maxlen: 22
109.111.124.0/22 maxlen: 22
109.111.120.0/22 maxlen: 22
85.94.160.0/19 maxlen: 19
85.94.160.0/22 maxlen: 22
85.94.168.0/22 maxlen: 22
85.94.172.0/22 maxlen: 22
85.94.176.0/22 maxlen: 22
85.94.184.0/22 maxlen: 22
85.94.180.0/22 maxlen: 22
194.158.80.0/22 maxlen: 22
194.158.84.0/22 maxlen: 22
194.158.84.0/24 maxlen: 24
194.158.85.0/24 maxlen: 24
194.158.88.0/22 maxlen: 22
194.158.95.0/24 maxlen: 24
194.158.92.0/22 maxlen: 22
85.94.188.0/22 maxlen: 22
46.175.158.0/24 maxlen: 24
46.175.157.0/24 maxlen: 24
46.175.156.0/24 maxlen: 24
46.175.156.0/22 maxlen: 22
46.175.159.0/24 maxlen: 24
2a02:8060::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:0a:67:87:ad:ea:52:0d:35:7b:83:25:04:49:ca:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Oct 3 08:50:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=972e939db0f5d708f2a2fe4610f6ea8aaf9ba0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:e8:3b:2a:57:36:98:7a:48:89:6f:58:da:
a8:a5:fd:65:3c:bf:93:5d:51:27:0a:37:74:33:81:
78:a1:59:24:f1:57:0a:92:a3:c0:82:95:0b:3f:c6:
4b:3f:27:c4:a8:4f:61:e2:fe:31:17:c4:65:1d:0a:
ac:1f:f4:8f:65:c0:e1:37:50:94:cc:c5:f5:a1:9a:
ae:2f:78:b2:d1:74:18:f1:e1:6e:52:bd:97:ed:0f:
bf:6a:6b:4b:a6:a0:df:d4:96:14:69:6d:79:33:12:
67:00:df:36:02:b0:b5:7f:9e:7c:3a:36:7c:08:91:
0e:60:12:28:c2:0c:4f:aa:74:d5:3e:62:a2:e1:0b:
97:ed:fa:79:41:86:9d:0e:5b:3f:f5:7f:e3:39:0a:
6c:e3:88:aa:35:1b:a4:1d:ec:d8:00:b8:dc:5e:0b:
dd:76:16:09:b3:87:63:75:3d:57:90:d3:8c:97:40:
20:4e:c0:7e:3b:bb:7b:13:18:49:21:d2:3b:31:a7:
0e:de:ef:13:18:48:b1:e9:80:cc:4f:93:cd:56:e1:
37:ec:93:1e:f8:86:aa:2b:6d:6e:cd:af:de:99:15:
55:f3:ae:2c:7d:58:fb:2b:19:00:c1:60:35:04:19:
a7:c0:f0:16:79:0a:9a:46:94:e9:19:44:28:78:47:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:93:9D:B0:F5:D7:08:F2:A2:FE:46:10:F6:EA:8A:AF:9B:A0:F3
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/ly6TnbD11wjyov5GEPbqiq-boPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.224.0/19
46.175.156.0/22
80.80.84.0/22
80.80.92.0/22
85.94.160.0/19
89.150.2.0-89.150.15.255
91.187.64.0/19
94.125.138.0-94.125.141.255
109.111.96.0/19
185.4.52.0/22
185.33.0.0/22
185.87.36.0-185.87.47.255
185.132.200.0/22
185.194.56.0/22
188.241.26.0/23
194.158.64.0/19
IPv6:
2a02:8060::/31
Signature Algorithm: sha256WithRSAEncryption
61:42:d7:ac:d7:80:86:a9:43:32:63:f7:8e:0a:8a:1d:bc:97:
6c:94:37:f8:7e:f4:08:77:ee:ed:ba:90:a8:dc:ab:46:0e:84:
11:1e:bd:76:fa:1c:c3:87:b7:84:71:5c:35:d6:75:37:45:f1:
d3:6f:05:de:7e:ff:94:ed:e5:19:a9:09:7e:a7:7b:26:f3:e7:
1c:3e:d6:c8:08:ab:dc:a0:71:1d:20:18:d7:a8:63:c3:5a:fa:
64:92:ec:11:25:3b:36:51:c1:b5:9c:fd:3c:56:66:70:b2:77:
95:99:43:61:2a:49:2e:88:51:49:41:1a:aa:8d:9d:35:0c:26:
cf:e8:0c:06:52:04:d0:bd:d1:bf:b8:57:03:6d:24:e8:40:d4:
17:3f:d8:e1:c5:42:8d:1e:16:fd:0b:d8:17:f1:96:4c:da:34:
2e:5d:19:17:42:b5:f9:93:d3:72:f0:5c:ca:d9:ba:f8:5d:04:
39:4f:0b:be:4a:bf:a3:aa:37:05:e0:d7:32:9b:f6:04:51:28:
56:cb:62:bb:49:d8:1d:10:9b:1e:67:f9:5a:8e:2d:a8:3c:8d:
d7:83:19:47:3b:9d:ef:53:74:4d:4f:86:e3:77:c6:a5:f1:7a:
ff:89:36:05:9a:5f:49:27:9b:60:41:10:ae:f1:10:36:50:61:
5c:e1:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:19:07 2025 by rpki-client