Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Erg-3IaQ9F5Ax_2ZEna6SBPoWNI.roa
File: Erg-3IaQ9F5Ax_2ZEna6SBPoWNI.roa (raw, json)
Hash identifier: oaYPeZUGpNEh2/i+6akzaHzzLT37cY3rW83ZEDryfb8=
Subject key identifier: 12:B8:3E:DC:86:90:F4:5E:40:C7:FD:99:12:76:BA:48:13:E8:58:D2
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 018B1D69CFD4C5FBEBB4CB1FA3433BAE0D30
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Erg-3IaQ9F5Ax_2ZEna6SBPoWNI.roa
Signing time: Wed 11 Oct 2023 06:25:55 +0000
ROA not before: Wed 11 Oct 2023 06:25:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2116
IP address blocks: 85.252.0.0/16 maxlen: 16
194.29.200.0/22 maxlen: 22
37.191.128.0/17 maxlen: 17
213.160.224.0/20 maxlen: 20
213.160.240.0/21 maxlen: 21
31.185.24.0/21 maxlen: 21
81.175.0.0/20 maxlen: 20
178.74.0.0/18 maxlen: 18
81.175.24.0/21 maxlen: 21
81.175.20.0/22 maxlen: 22
213.151.128.0/19 maxlen: 19
81.175.32.0/19 maxlen: 19
217.77.32.0/20 maxlen: 20
195.204.0.0/16 maxlen: 16
85.221.0.0/17 maxlen: 17
217.8.128.0/19 maxlen: 19
77.234.48.0/21 maxlen: 21
86.62.128.0/18 maxlen: 18
62.63.0.0/18 maxlen: 18
89.191.0.0/19 maxlen: 19
81.191.0.0/16 maxlen: 16
193.90.0.0/16 maxlen: 16
80.241.80.0/20 maxlen: 20
194.19.0.0/17 maxlen: 17
212.62.224.0/19 maxlen: 19
64.28.0.0/19 maxlen: 19
85.196.64.0/18 maxlen: 18
193.75.0.0/17 maxlen: 17
195.139.0.0/16 maxlen: 16
213.172.192.0/19 maxlen: 19
78.24.144.0/21 maxlen: 21
109.199.192.0/19 maxlen: 19
195.1.0.0/16 maxlen: 16
213.52.0.0/17 maxlen: 17
185.129.156.0/22 maxlen: 22
185.35.80.0/22 maxlen: 22
193.69.0.0/16 maxlen: 16
195.18.128.0/17 maxlen: 17
185.8.16.0/22 maxlen: 22
85.112.128.0/19 maxlen: 19
82.196.192.0/19 maxlen: 19
217.118.32.0/19 maxlen: 19
79.135.0.0/19 maxlen: 19
91.135.32.0/20 maxlen: 20
217.144.224.0/19 maxlen: 19
77.40.128.0/17 maxlen: 17
185.67.116.0/22 maxlen: 22
213.239.64.0/18 maxlen: 18
87.118.0.0/18 maxlen: 18
84.20.96.0/19 maxlen: 19
77.88.64.0/18 maxlen: 18
195.159.0.0/16 maxlen: 16
62.101.192.0/18 maxlen: 18
80.64.192.0/20 maxlen: 20
88.84.160.0/19 maxlen: 19
194.54.96.0/19 maxlen: 19
81.0.128.0/18 maxlen: 18
212.71.64.0/19 maxlen: 19
195.0.128.0/17 maxlen: 17
217.14.0.0/20 maxlen: 20
193.91.128.0/17 maxlen: 17
213.158.224.0/19 maxlen: 19
2a00:c440::/29 maxlen: 29
2001:840::/29 maxlen: 29
2a03:c000::/29 maxlen: 29
2a01:520::/29 maxlen: 29
2a02:270::/29 maxlen: 29
2001:4dd8::/29 maxlen: 29
2001:8c0::/29 maxlen: 29
2a04:6340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:69:cf:d4:c5:fb:eb:b4:cb:1f:a3:43:3b:ae:0d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Oct 11 06:25:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12b83edc8690f45e40c7fd991276ba4813e858d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:69:2b:12:91:4f:a7:17:c9:91:78:11:22:
9e:7f:10:ec:27:09:8e:0d:09:0a:93:f2:40:3d:fb:
88:b7:40:a5:da:8c:21:3a:47:2f:7f:2b:c2:22:1f:
7d:bc:00:58:b4:53:58:f7:bc:b0:62:cd:7c:c7:32:
b0:ba:5d:c3:c3:60:42:51:64:72:71:bf:c1:5a:c8:
12:b9:0b:65:89:2a:4a:0a:f9:cf:ea:3a:2c:00:e9:
d9:8d:45:0f:3d:90:ae:4f:22:23:12:4f:ac:03:50:
27:13:9b:e2:7b:a5:ef:92:97:da:2a:30:37:c9:34:
9d:02:d1:45:bd:63:12:2a:7b:36:72:4d:ab:44:38:
73:6e:2c:0b:a6:4a:c4:67:0f:8e:a6:c0:05:20:7f:
df:48:ef:7d:da:34:53:43:85:a8:e4:a1:b1:7c:93:
d2:dd:49:78:8d:a8:a0:72:15:3c:f6:ff:8d:b8:b5:
e6:ad:04:98:10:dd:03:e2:6a:94:47:e4:8a:fa:2d:
4f:a8:0e:85:3d:0c:49:f3:1f:f8:97:6d:b1:48:77:
80:3b:b3:38:fc:38:30:70:51:88:7a:1a:5a:69:8f:
b9:fa:7b:34:7e:e2:37:f0:06:95:b4:a5:7e:e6:3f:
6a:e4:c0:59:8e:bf:16:37:4b:55:bb:ec:5f:d2:f1:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:3E:DC:86:90:F4:5E:40:C7:FD:99:12:76:BA:48:13:E8:58:D2
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Erg-3IaQ9F5Ax_2ZEna6SBPoWNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.24.0/21
37.191.128.0/17
62.63.0.0/18
62.101.192.0/18
64.28.0.0/19
77.40.128.0/17
77.88.64.0/18
77.234.48.0/21
78.24.144.0/21
79.135.0.0/19
80.64.192.0/20
80.241.80.0/20
81.0.128.0/18
81.175.0.0/20
81.175.20.0-81.175.63.255
81.191.0.0/16
82.196.192.0/19
84.20.96.0/19
85.112.128.0/19
85.196.64.0/18
85.221.0.0/17
85.252.0.0/16
86.62.128.0/18
87.118.0.0/18
88.84.160.0/19
89.191.0.0/19
91.135.32.0/20
109.199.192.0/19
178.74.0.0/18
185.8.16.0/22
185.35.80.0/22
185.67.116.0/22
185.129.156.0/22
193.69.0.0/16
193.75.0.0/17
193.90.0.0/16
193.91.128.0/17
194.19.0.0/17
194.29.200.0/22
194.54.96.0/19
195.0.128.0-195.1.255.255
195.18.128.0/17
195.139.0.0/16
195.159.0.0/16
195.204.0.0/16
212.62.224.0/19
212.71.64.0/19
213.52.0.0/17
213.151.128.0/19
213.158.224.0/19
213.160.224.0-213.160.247.255
213.172.192.0/19
213.239.64.0/18
217.8.128.0/19
217.14.0.0/20
217.77.32.0/20
217.118.32.0/19
217.144.224.0/19
IPv6:
2001:840::/29
2001:8c0::/29
2001:4dd8::/29
2a00:c440::/29
2a01:520::/29
2a02:270::/29
2a03:c000::/29
2a04:6340::/29
Signature Algorithm: sha256WithRSAEncryption
67:75:8b:a7:57:0f:a0:8b:89:71:bc:eb:04:e2:b7:0c:6e:06:
d0:ca:87:c2:78:37:cf:df:23:47:53:18:49:56:42:60:a2:43:
7f:87:f6:b4:d2:fd:c2:ed:ed:ed:1a:9f:93:70:e7:8d:eb:d8:
3a:c9:90:07:3f:0c:f1:28:fb:79:8d:a1:87:29:b5:6b:98:37:
f4:4d:7d:b8:62:f8:64:ae:53:31:b8:2c:75:34:f0:dd:07:06:
e4:4d:34:21:97:83:b0:b2:4a:28:f1:88:7f:c5:c3:9e:31:c8:
e1:de:2e:de:d6:92:6d:25:68:54:b1:64:54:7b:44:11:4f:d5:
05:b5:50:d4:10:d4:33:87:1e:4c:fe:c9:cc:7f:40:2d:88:ca:
96:1c:d2:8d:1a:9f:3d:75:81:35:18:9a:c5:3b:10:23:bd:a2:
87:aa:03:7b:14:9b:e8:34:c0:e9:9e:61:17:34:55:4e:2a:85:
99:4a:40:54:68:30:ee:8e:f0:31:04:90:62:eb:2d:2e:a0:7b:
c1:87:c6:af:73:e7:25:9e:b7:71:61:51:69:e8:4b:b7:45:34:
5b:31:fc:02:d1:04:40:73:3c:71:68:d9:2d:d0:4d:2c:5c:72:
61:fc:c4:73:0f:d7:38:df:0f:5a:b2:04:65:4a:df:da:7a:3f:
3b:b8:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:32 2025 by rpki-client