Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/4wWGRk7Cdt_3jxyOyETVFnhF3Lk.roa
File: 4wWGRk7Cdt_3jxyOyETVFnhF3Lk.roa (raw, json)
Hash identifier: 7L4Da2YSmVy9/KR+Wd1udgSMrh3lxvbRZXj9Z00zhWo=
Subject key identifier: E3:05:86:46:4E:C2:76:DF:F7:8F:1C:8E:C8:44:D5:16:78:45:DC:B9
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0188B4232995F0D8A32A84E2EECB52DFEEAD
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/4wWGRk7Cdt_3jxyOyETVFnhF3Lk.roa
Signing time: Tue 13 Jun 2023 09:43:03 +0000
ROA not before: Tue 13 Jun 2023 09:43:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202468
IP address blocks: 185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.220.227.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.0.0/22 maxlen: 22
37.32.0.0/19 maxlen: 24
37.32.8.0/22 maxlen: 22
37.32.17.0/24 maxlen: 24
37.32.16.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
193.176.240.0/22 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
185.143.232.0/22 maxlen: 24
37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 24
188.121.124.0/23 maxlen: 23
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.104.0/22 maxlen: 24
185.239.105.0/24 maxlen: 24
188.121.127.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.226.116.0/22 maxlen: 24
2a0c:a7c0:3::/48 maxlen: 48
2a07:3900::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900:1::/48 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:23:29:95:f0:d8:a3:2a:84:e2:ee:cb:52:df:ee:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jun 13 09:43:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e30586464ec276dff78f1c8ec844d5167845dcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:11:b9:b4:84:db:ea:3b:41:c8:a7:7c:51:e4:
b2:f6:66:0b:ab:b6:86:91:a6:cd:59:b8:62:eb:e4:
eb:90:f8:10:71:0b:11:4a:8b:86:ff:b5:f1:89:9d:
e2:67:39:46:33:d7:aa:76:fb:b5:65:e6:31:8e:01:
17:e5:4f:2d:31:5f:ac:6c:65:63:9f:72:a5:9e:27:
49:57:d1:85:68:0f:87:e0:f1:d1:b6:5b:79:ff:c7:
bc:a7:27:4d:73:1f:76:dc:d2:57:28:90:9f:35:c1:
2f:e9:3b:c7:63:5c:3c:80:41:4b:e6:a0:09:cd:19:
05:f3:7b:3e:8c:c5:6e:1d:08:8b:88:34:3f:1b:3f:
86:4f:c4:32:96:f8:13:d3:d0:4e:b1:6b:10:d0:ac:
b5:95:38:3d:2d:7f:42:41:88:4d:63:50:bd:b0:4b:
86:3a:43:a8:14:a1:c3:ef:8b:42:f7:4c:c7:8d:34:
b6:41:15:3b:59:46:1b:40:82:b8:0b:7f:14:b6:cb:
aa:56:17:ba:00:1b:34:a2:b5:be:be:f3:e7:80:80:
86:79:ca:2e:0e:73:b3:bb:e9:49:b5:f5:fe:c7:be:
ee:41:b8:a8:28:12:c8:b2:eb:d2:86:b4:37:6f:03:
f4:8e:12:70:2f:bc:8e:aa:18:23:0d:01:37:94:1e:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:05:86:46:4E:C2:76:DF:F7:8F:1C:8E:C8:44:D5:16:78:45:DC:B9
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/4wWGRk7Cdt_3jxyOyETVFnhF3Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
65:b0:de:99:20:c6:f2:8c:08:03:12:ef:a3:f7:c4:27:b9:ec:
59:a4:18:58:20:c8:72:57:56:fa:a0:75:19:de:af:7a:13:58:
fb:c1:b9:34:e7:64:9b:80:31:7e:9a:bf:fa:49:62:34:6b:01:
99:76:54:07:43:d2:90:d1:ec:53:a2:6a:38:9f:b8:08:3d:39:
d4:da:e8:c5:6e:d8:4e:50:54:3c:aa:ab:d3:6c:9b:8f:61:7c:
9d:00:be:ab:08:de:a1:07:d2:ee:ac:e1:86:f2:d9:cd:64:35:
01:79:1d:d7:6b:5f:0f:83:20:90:85:8a:d4:3c:f8:04:97:82:
61:60:76:a9:4d:c8:77:32:47:fe:99:e6:ba:c7:cd:4a:8b:9b:
d5:11:10:75:38:74:57:05:03:39:4b:bb:7c:f5:fb:4a:2e:a9:
3b:e4:98:28:69:21:c4:34:70:7c:50:70:83:e3:82:74:3c:61:
3b:6a:6d:7d:dd:0c:21:01:29:7f:4d:6b:0f:80:7f:78:3f:01:
5e:af:df:21:f7:4c:22:e6:ed:14:80:d5:52:27:51:a4:31:95:
9d:34:51:c5:95:06:23:d4:79:d5:68:a2:41:2a:4b:ab:e9:70:
02:34:9b:28:e8:e9:f6:02:43:c3:28:76:a0:83:cf:b4:72:60:
6b:1a:0f:57
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYi0IymV8NijKoTi7stS3+6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw
N2VjMDIwHhcNMjMwNjEzMDk0MzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzA1ODY0NjRlYzI3NmRmZjc4ZjFjOGVjODQ0ZDUxNjc4NDVkY2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRG5tITb6jtByKd8UeSy9mYLq7aG
kabNWbhi6+TrkPgQcQsRSouG/7XxiZ3iZzlGM9eqdvu1ZeYxjgEX5U8tMV+sbGVj
n3KlnidJV9GFaA+H4PHRtlt5/8e8pydNcx923NJXKJCfNcEv6TvHY1w8gEFL5qAJ
zRkF83s+jMVuHQiLiDQ/Gz+GT8QylvgT09BOsWsQ0Ky1lTg9LX9CQYhNY1C9sEuG
OkOoFKHD74tC90zHjTS2QRU7WUYbQIK4C38UtsuqVhe6ABs0orW+vvPngICGecou
DnOzu+lJtfX+x77uQbioKBLIsuvShrQ3bwP0jhJwL7yOqhgjDQE3lB62gQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFOMFhkZOwnbf948cjshE1RZ4Rdy5MB8GA1UdIwQY
MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt
MWJiMTdhOGIyNmZlLzEvNHdXR1JrN0NkdF8zanh5T3lFVFZGbmhGM0xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl
LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBUBAIAATBOAwQFJSAAAwQE
JZiwAwQEXmWwAwQCuWF0AwQCuY/oAwQCuc5cAwQCudzgAwQCueJ0AwQCueTsAwQC
uee0AwQCue9oAwQFvHlgAwQCwbDwMBYEAgACMBADBQMqBzkAAwcCKgynwAAAMA0G
CSqGSIb3DQEBCwUAA4IBAQBlsN6ZIMbyjAgDEu+j98QnuexZpBhYIMhyV1b6oHUZ
3q96E1j7wbk052SbgDF+mr/6SWI0awGZdlQHQ9KQ0exTomo4n7gIPTnU2ujFbthO
UFQ8qqvTbJuPYXydAL6rCN6hB9LurOGG8tnNZDUBeR3Xa18PgyCQhYrUPPgEl4Jh
YHapTch3Mkf+mea6x81Ki5vVERB1OHRXBQM5S7t89ftKLqk75JgoaSHENHB8UHCD
44J0PGE7am193QwhASl/TWsPgH94PwFer98h90wi5u0UgNVSJ1GkMZWdNFHFlQYj
1HnVaKJBKkur6XACNJso6On2AkPDKHagg8+0cmBrGg9X
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:25:34 2025 by rpki-client