Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/uPwpLGglDgw_U_MtO4cPYQGldYs.roa
File: uPwpLGglDgw_U_MtO4cPYQGldYs.roa (raw, json)
Hash identifier: zLwRcu0zrZH+dx3Xq5oadDV2v+3HKQSRqGY2Z/kL3LQ=
Subject key identifier: B8:FC:29:2C:68:25:0E:0C:3F:53:F3:2D:3B:87:0F:61:01:A5:75:8B
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 018B18B5E50F2DF94706228D8B56CB0F54AC
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/uPwpLGglDgw_U_MtO4cPYQGldYs.roa
Signing time: Tue 10 Oct 2023 08:30:55 +0000
ROA not before: Tue 10 Oct 2023 08:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15704
IP address blocks: 119.12.224.0/23 maxlen: 23
119.12.226.0/23 maxlen: 23
119.12.228.0/23 maxlen: 23
119.12.230.0/23 maxlen: 23
119.12.232.0/23 maxlen: 23
217.113.240.0/20 maxlen: 20
119.12.236.0/23 maxlen: 23
119.12.238.0/23 maxlen: 23
119.12.240.0/23 maxlen: 23
119.12.234.0/23 maxlen: 23
119.12.242.0/23 maxlen: 23
119.12.244.0/23 maxlen: 23
119.12.246.0/23 maxlen: 23
119.12.250.0/23 maxlen: 23
119.12.248.0/23 maxlen: 23
185.228.152.0/23 maxlen: 23
185.228.154.0/23 maxlen: 23
195.160.224.0/22 maxlen: 22
207.188.130.0/24 maxlen: 24
213.94.0.0/18 maxlen: 23
193.53.160.0/22 maxlen: 22
137.59.58.0/24 maxlen: 24
185.153.164.0/23 maxlen: 23
185.153.166.0/23 maxlen: 23
94.73.32.0/19 maxlen: 19
185.227.212.0/23 maxlen: 23
89.39.52.0/24 maxlen: 24
185.227.214.0/23 maxlen: 23
91.194.62.0/23 maxlen: 23
91.106.16.0/21 maxlen: 21
185.146.56.0/22 maxlen: 22
170.253.0.0/20 maxlen: 20
185.145.64.0/22 maxlen: 22
170.253.16.0/20 maxlen: 20
170.253.32.0/20 maxlen: 20
170.253.48.0/20 maxlen: 20
185.252.12.0/22 maxlen: 22
185.197.240.0/23 maxlen: 23
213.177.192.0/19 maxlen: 21
185.197.242.0/23 maxlen: 23
188.212.23.0/24 maxlen: 24
93.177.120.0/22 maxlen: 23
93.115.152.0/24 maxlen: 24
181.41.128.0/21 maxlen: 21
212.14.96.0/19 maxlen: 23
93.115.128.0/22 maxlen: 22
93.115.132.0/22 maxlen: 22
93.176.160.0/20 maxlen: 20
93.176.176.0/20 maxlen: 20
89.35.62.0/23 maxlen: 23
93.115.202.0/24 maxlen: 24
93.176.128.0/18 maxlen: 18
93.176.128.0/21 maxlen: 21
93.176.136.0/21 maxlen: 21
93.176.144.0/21 maxlen: 21
93.176.152.0/21 maxlen: 21
93.115.242.0/24 maxlen: 24
207.188.160.0/21 maxlen: 21
188.208.219.0/24 maxlen: 24
207.188.168.0/21 maxlen: 21
91.242.152.0/21 maxlen: 21
93.115.37.0/24 maxlen: 24
2a00:d100:1000::/37 maxlen: 37
2a00:d100:800::/37 maxlen: 37
2a00:d100:6000::/37 maxlen: 37
2a00:d100:3800::/37 maxlen: 37
2a00:d100:3000::/37 maxlen: 37
2a00:d100:4000::/37 maxlen: 37
2a00:d100:5000::/37 maxlen: 37
2a00:d100:2800::/37 maxlen: 37
2a00:d100:5800::/37 maxlen: 37
2a01:8480:2004::/48 maxlen: 48
2a00:d100::/37 maxlen: 37
2a00:d100:4800::/37 maxlen: 37
2a00:d100:1800::/37 maxlen: 37
2a00:d100:2000::/37 maxlen: 37
2a00:d100:6800::/37 maxlen: 37
2a00:d103::/37 maxlen: 37
2a00:d103:800::/37 maxlen: 37
2a00:d103:1000::/37 maxlen: 37
2a00:d103:1800::/37 maxlen: 37
2a00:d103:2000::/37 maxlen: 37
2a00:d103:2800::/37 maxlen: 37
2a00:d102::/37 maxlen: 37
2a00:d102:800::/37 maxlen: 37
2a00:d102:1000::/37 maxlen: 37
2a00:d102:1800::/37 maxlen: 37
2a00:d102:2000::/37 maxlen: 37
2a00:d102:2800::/37 maxlen: 37
2a00:d101:1000::/37 maxlen: 37
2a00:d101:4000::/37 maxlen: 37
2a00:d101:800::/37 maxlen: 37
2a00:d101:4800::/37 maxlen: 37
2a00:d101:3000::/37 maxlen: 37
2a00:d101:2000::/37 maxlen: 37
2a00:d101::/37 maxlen: 37
2a00:d101:2800::/37 maxlen: 37
2a00:d101:1800::/37 maxlen: 37
2a01:8480::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:b5:e5:0f:2d:f9:47:06:22:8d:8b:56:cb:0f:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Oct 10 08:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8fc292c68250e0c3f53f32d3b870f6101a5758b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:4e:cf:ad:9e:80:26:d3:61:11:09:5e:34:
ba:96:98:5d:36:a2:ab:85:bf:31:32:ff:1a:54:99:
01:57:79:1c:21:a6:12:4b:c7:40:3e:3d:34:3f:31:
ba:72:e9:73:a2:57:c1:9c:16:ad:37:83:56:12:c9:
22:d1:2a:ad:13:e4:06:a1:a5:e5:35:c4:30:4d:00:
ac:ed:31:31:b3:24:77:e5:e2:63:08:b4:cb:8e:6e:
d3:58:fb:b6:d0:79:50:30:4d:d3:a7:a2:30:37:f3:
7d:c7:f6:9b:36:af:bc:21:4b:88:2d:07:1f:64:e1:
4e:66:0d:e7:88:d7:58:27:4b:b0:50:a1:30:25:d1:
43:08:e6:cf:c7:31:f8:20:d7:3d:ca:d1:1d:03:75:
60:62:80:16:2f:4d:ff:26:8e:04:41:f8:de:ab:ef:
75:ef:12:7e:be:ae:e1:1e:d1:7c:cb:50:a2:40:5d:
b1:4f:9a:dd:05:2d:14:37:1f:d5:13:a8:25:a3:7c:
af:8f:bc:f1:30:8e:76:7e:06:17:f2:24:39:be:a6:
53:2a:79:b3:04:30:f8:5a:fa:fd:39:3d:3c:4e:81:
9a:63:49:8e:e6:f7:84:8e:85:8c:de:10:64:58:dd:
7a:4c:a8:19:aa:fd:ac:7a:b0:be:68:7c:71:29:52:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FC:29:2C:68:25:0E:0C:3F:53:F3:2D:3B:87:0F:61:01:A5:75:8B
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/uPwpLGglDgw_U_MtO4cPYQGldYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.62.0/23
89.39.52.0/24
91.106.16.0/21
91.194.62.0/23
91.242.152.0/21
93.115.37.0/24
93.115.128.0/21
93.115.152.0/24
93.115.202.0/24
93.115.242.0/24
93.176.128.0/18
93.177.120.0/22
94.73.32.0/19
119.12.224.0-119.12.251.255
137.59.58.0/24
170.253.0.0/18
181.41.128.0/21
185.145.64.0/22
185.146.56.0/22
185.153.164.0/22
185.197.240.0/22
185.227.212.0/22
185.228.152.0/22
185.252.12.0/22
188.208.219.0/24
188.212.23.0/24
193.53.160.0/22
195.160.224.0/22
207.188.130.0/24
207.188.160.0/20
212.14.96.0/19
213.94.0.0/18
213.177.192.0/19
217.113.240.0/20
IPv6:
2a00:d100::-2a00:d100:6fff:ffff:ffff:ffff:ffff:ffff
2a00:d101::-2a00:d101:37ff:ffff:ffff:ffff:ffff:ffff
2a00:d101:4000::/36
2a00:d102::-2a00:d102:2fff:ffff:ffff:ffff:ffff:ffff
2a00:d103::-2a00:d103:2fff:ffff:ffff:ffff:ffff:ffff
2a01:8480::/32
Signature Algorithm: sha256WithRSAEncryption
61:ad:b2:02:70:65:bb:ca:0a:72:b6:0a:dd:b3:55:16:2e:02:
3c:26:b5:9a:60:f9:56:50:9b:7d:7f:36:7a:5d:9b:ab:25:b3:
ae:e6:77:6e:b7:bc:b7:78:29:8d:36:57:31:16:3c:33:0c:a5:
48:d3:4c:b6:cf:50:04:fb:14:e9:ed:42:67:2c:7c:85:1d:1c:
66:1b:c7:ce:b4:2f:a6:a5:f0:c6:1e:dc:55:e2:70:1f:4c:06:
3c:24:23:f3:b9:de:35:0d:b3:d7:59:b2:62:f1:b8:2d:92:dc:
8b:45:98:92:bb:08:b0:0f:74:b7:8e:31:29:6a:83:88:22:c8:
1c:ac:01:5a:3c:31:8f:0c:2a:9d:83:e3:12:5c:6c:60:73:06:
36:43:a2:ed:af:61:e0:30:f0:83:ca:21:5f:ee:f5:08:6f:11:
db:b3:f6:41:64:55:0a:e0:58:ab:b9:5e:f0:86:ff:13:96:cc:
e5:fb:26:ab:d7:9c:95:74:1a:5e:13:78:6b:0d:13:8d:b4:50:
8a:94:88:f9:f6:98:4b:7a:bc:a0:9a:b3:43:2d:b4:67:e1:29:
9d:05:17:58:78:fb:2f:ee:ed:33:f7:8e:f1:9d:97:00:5f:20:
32:4b:f4:37:a1:e8:6e:dd:e3:61:f5:99:b7:35:33:9c:5f:64:
4c:0c:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:41 2025 by rpki-client