Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/6iDCSFRZ2OqPf7kmix4R-pW5QR8.roa
File: 6iDCSFRZ2OqPf7kmix4R-pW5QR8.roa (raw, json)
Hash identifier: YtoaT2SSPe3K/XhvVtqOrLPOKiAdEJs33O2ihj5Z058=
Subject key identifier: EA:20:C2:48:54:59:D8:EA:8F:7F:B9:26:8B:1E:11:FA:95:B9:41:1F
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0187B7B0AEBD4A24BC20E7569A800CF4C2E4
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/6iDCSFRZ2OqPf7kmix4R-pW5QR8.roa
Signing time: Tue 25 Apr 2023 09:13:42 +0000
ROA not before: Tue 25 Apr 2023 09:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202468
IP address blocks: 185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.220.227.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.0.0/22 maxlen: 22
37.32.0.0/19 maxlen: 24
37.32.8.0/22 maxlen: 22
37.32.17.0/24 maxlen: 24
37.32.16.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
193.176.240.0/22 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
185.143.232.0/22 maxlen: 24
37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 24
188.121.124.0/23 maxlen: 23
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.104.0/22 maxlen: 24
185.239.105.0/24 maxlen: 24
188.121.127.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.226.116.0/22 maxlen: 24
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:b0:ae:bd:4a:24:bc:20:e7:56:9a:80:0c:f4:c2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Apr 25 09:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea20c2485459d8ea8f7fb9268b1e11fa95b9411f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:a6:7c:22:fe:1d:c4:34:fe:74:bc:a4:91:
c6:7a:df:96:5f:cb:24:9f:ce:b5:41:3e:11:a0:cf:
76:c5:69:ab:34:12:d4:bf:a6:51:ed:f3:a6:46:38:
6f:5b:7c:ed:7a:02:07:49:35:90:9e:38:54:f5:a8:
ae:df:91:f6:86:aa:03:84:75:0c:f4:15:e7:df:01:
46:c7:6a:21:dd:76:57:50:34:80:21:6b:15:e8:ad:
c4:c9:94:30:24:a1:26:d1:5c:0d:a4:34:02:a9:d1:
f1:1e:af:1f:44:b4:85:70:9f:3a:01:5f:84:2b:7f:
b1:86:de:bc:8e:85:a5:e0:45:8c:32:66:fc:74:7a:
48:02:ef:a1:fe:f2:fb:88:b0:1c:42:73:53:86:97:
25:29:9f:3e:0c:a0:39:bc:71:3f:60:43:7f:a9:37:
ea:4e:20:74:99:4e:49:b8:7c:3d:64:ee:0e:2c:88:
60:da:65:de:2a:61:18:9f:90:fa:77:65:14:17:d5:
3d:89:38:25:cb:f8:6e:3f:6a:7d:9f:8e:26:f9:56:
64:16:34:16:4d:0b:c5:41:e9:c0:86:0b:e2:b0:95:
f0:21:66:cb:2b:09:cc:e4:d0:09:91:66:28:f1:d6:
14:01:30:07:4d:99:1b:d7:57:bd:8e:b4:dd:8c:f1:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:20:C2:48:54:59:D8:EA:8F:7F:B9:26:8B:1E:11:FA:95:B9:41:1F
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/6iDCSFRZ2OqPf7kmix4R-pW5QR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
90:03:64:d0:82:07:43:f9:c0:af:bf:a0:f5:49:2a:0f:55:28:
07:fe:6e:53:dd:b6:c4:53:13:1c:58:8a:a0:0c:ea:df:3c:45:
44:cb:1e:e0:b3:15:c8:ef:28:0e:b7:22:68:b3:68:9f:76:7a:
84:74:ee:fe:ee:33:f9:ee:53:af:6d:10:e5:67:30:e8:bc:72:
ba:1c:19:40:46:47:2e:81:b1:b8:8f:a6:bf:d8:28:48:bd:65:
31:14:fa:59:1c:22:13:ea:9f:28:17:c3:35:f0:9a:e2:a1:2f:
4c:7a:44:b4:a4:bb:d8:78:d7:84:00:73:32:01:2c:9c:97:84:
54:73:2e:24:50:57:41:b5:d3:df:16:b9:9f:79:a3:b7:ad:9c:
dd:17:02:b9:10:bd:62:70:85:1d:7e:19:14:16:5c:db:11:a3:
dc:30:20:b9:70:d9:0a:fd:48:3d:4c:34:0a:ff:1c:ab:34:b3:
74:5a:0f:33:e8:17:31:cb:7b:84:43:7c:53:19:f8:ed:76:a0:
e4:bf:4f:59:ed:c8:3c:5e:ad:8c:b7:ba:a3:ba:a3:f6:01:ed:
d3:e4:af:12:3d:57:bb:32:44:36:99:2d:f3:f8:98:5f:bd:a5:
cd:58:e8:a2:c6:2b:8d:4c:9a:a5:11:6f:a8:21:d8:c1:6d:5f:
1f:8f:79:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:39:18 2025 by rpki-client