Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/Ja78Ww9d_sNOkuL5HDmGzoIpjhw.roa
File: Ja78Ww9d_sNOkuL5HDmGzoIpjhw.roa (raw, json)
Hash identifier: BTdP3+8x5AD/t2jK2HbMJdqgTpIDA/RTtJgkws0/DSE=
Subject key identifier: 25:AE:FC:5B:0F:5D:FE:C3:4E:92:E2:F9:1C:39:86:CE:82:29:8E:1C
Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial: 018B909C2C364B4A66643DA1D29531876F09
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/Ja78Ww9d_sNOkuL5HDmGzoIpjhw.roa
Signing time: Thu 02 Nov 2023 15:17:15 +0000
ROA not before: Thu 02 Nov 2023 15:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21040
IP address blocks: 185.19.122.0/23 maxlen: 23
185.19.120.0/23 maxlen: 23
185.19.120.0/22 maxlen: 22
185.178.120.0/22 maxlen: 22
185.178.120.0/23 maxlen: 23
37.203.252.0/22 maxlen: 22
37.203.248.0/21 maxlen: 21
37.203.248.0/22 maxlen: 22
213.196.132.0/24 maxlen: 24
213.196.131.0/24 maxlen: 24
213.196.130.0/24 maxlen: 24
213.196.128.0/18 maxlen: 18
213.196.129.0/24 maxlen: 24
213.196.128.0/24 maxlen: 24
213.196.138.0/24 maxlen: 24
213.196.137.0/24 maxlen: 24
213.196.136.0/24 maxlen: 24
213.196.135.0/24 maxlen: 24
213.196.133.0/24 maxlen: 24
213.196.144.0/24 maxlen: 24
213.196.143.0/24 maxlen: 24
213.196.142.0/24 maxlen: 24
213.196.141.0/24 maxlen: 24
213.196.140.0/24 maxlen: 24
213.196.145.0/24 maxlen: 24
213.196.152.0/24 maxlen: 24
213.196.151.0/24 maxlen: 24
213.196.147.0/24 maxlen: 24
213.196.146.0/24 maxlen: 24
213.196.159.0/24 maxlen: 24
213.196.158.0/24 maxlen: 24
213.196.156.0/24 maxlen: 24
213.196.155.0/24 maxlen: 24
213.196.154.0/24 maxlen: 24
213.196.153.0/24 maxlen: 24
213.196.162.0/24 maxlen: 24
213.196.161.0/24 maxlen: 24
213.196.160.0/24 maxlen: 24
213.196.174.0/23 maxlen: 23
213.196.184.0/22 maxlen: 22
213.196.188.0/22 maxlen: 22
109.205.204.0/22 maxlen: 22
185.71.16.0/23 maxlen: 23
109.205.203.0/24 maxlen: 24
109.205.202.0/24 maxlen: 24
109.205.201.0/24 maxlen: 24
109.205.200.0/24 maxlen: 24
109.205.200.0/21 maxlen: 21
185.71.16.0/22 maxlen: 22
185.71.18.0/23 maxlen: 23
84.20.56.0/21 maxlen: 21
84.20.56.0/22 maxlen: 22
84.20.60.0/22 maxlen: 22
185.71.112.0/22 maxlen: 22
185.71.112.0/23 maxlen: 23
185.71.114.0/23 maxlen: 23
2a02:24e8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:9c:2c:36:4b:4a:66:64:3d:a1:d2:95:31:87:6f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Validity
Not Before: Nov 2 15:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25aefc5b0f5dfec34e92e2f91c3986ce82298e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:78:dc:6e:29:f9:48:f9:be:98:18:b2:0d:
4b:1c:56:62:53:f8:01:a0:14:80:70:98:ed:52:56:
27:40:bd:3e:04:8f:17:9d:64:c4:c9:1f:e4:44:86:
91:a1:9e:89:d1:8c:8a:ac:24:c6:37:30:17:fe:33:
75:42:31:ae:17:bb:e3:e2:64:07:f7:d6:06:dc:f9:
1e:17:fd:db:01:7a:24:62:c0:ab:17:b3:a6:bc:85:
04:80:59:36:22:30:82:be:19:9b:aa:df:9e:81:a9:
1f:ad:ea:a6:27:16:a4:d4:d0:94:0e:a9:ef:7f:81:
07:2e:63:81:cd:20:32:a6:f2:96:66:57:a1:56:e9:
df:75:61:d1:58:4b:ce:14:cc:d6:5c:df:74:36:d1:
c2:d9:b3:2b:9d:1b:5a:c9:9d:dd:b5:44:07:7b:29:
fd:48:c7:81:e6:d4:58:2c:08:1b:d1:50:fa:2f:3d:
9d:f3:bc:eb:85:08:e4:b9:8c:ca:25:27:73:5b:d5:
f3:97:7a:fe:8c:e4:be:c1:95:ae:7d:32:17:1b:6d:
f8:d4:9f:94:2f:17:6d:79:f8:cf:0c:9d:7f:44:f3:
eb:80:64:92:64:03:4d:0f:3e:81:81:25:fb:2a:78:
64:ef:dd:75:c1:67:28:9f:8a:44:75:c5:fa:62:ec:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:FC:5B:0F:5D:FE:C3:4E:92:E2:F9:1C:39:86:CE:82:29:8E:1C
X509v3 Authority Key Identifier:
keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/Ja78Ww9d_sNOkuL5HDmGzoIpjhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.248.0/21
84.20.56.0/21
109.205.200.0/21
185.19.120.0/22
185.71.16.0/22
185.71.112.0/22
185.178.120.0/22
213.196.128.0/18
IPv6:
2a02:24e8::/29
Signature Algorithm: sha256WithRSAEncryption
41:cf:8b:4d:7b:5f:47:49:8d:93:85:07:0f:81:7f:90:25:1d:
4f:f9:73:3e:c9:d2:ea:5f:39:d4:9c:71:fd:48:15:b8:8a:60:
4c:a2:02:54:6b:6e:e2:c5:0c:08:33:3b:8d:ea:4f:5b:da:90:
53:f8:9e:b8:4f:f0:b2:5c:33:cb:d5:65:14:ce:93:51:e4:cc:
00:94:d5:9f:c7:4c:f3:ce:8b:7c:c3:21:bf:34:23:7e:aa:70:
19:21:63:bc:db:2d:f6:3f:40:dd:47:fb:b5:a5:41:91:7a:2c:
f3:2c:74:05:3e:5d:56:a6:cf:85:cd:a2:43:d0:44:86:0c:eb:
2f:ae:20:03:02:aa:ea:b0:25:61:3c:d5:7c:76:1a:62:63:8f:
1a:0e:ed:62:d5:db:14:dd:c6:e6:d8:22:99:f7:ee:46:dd:25:
45:56:f4:03:51:8b:37:b7:91:50:73:68:74:b8:b1:03:62:87:
54:47:f1:e2:dd:2c:31:be:03:76:a3:52:46:14:35:58:4c:7b:
04:35:6f:fb:84:ab:00:01:20:29:07:ea:b1:fe:08:45:d9:1a:
e7:94:21:62:58:a4:04:36:64:5c:e6:58:a2:51:54:3c:e4:42:
97:72:12:0f:f2:e8:a8:65:0b:17:09:19:5e:fb:2a:61:78:b5:
77:68:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:16 2025 by rpki-client