Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/9mkNmzmP6yLPke_YypCoYUx94Nk.roa
File: 9mkNmzmP6yLPke_YypCoYUx94Nk.roa (raw, json)
Hash identifier: HNW5M0NAzIjpSecdaohC1w7eMkOeLK6ynJ6p5ESbSEo=
Subject key identifier: F6:69:0D:9B:39:8F:EB:22:CF:91:EF:D8:CA:90:A8:61:4C:7D:E0:D9
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 0183E4B9F9CE3D4275F5396957093A33026A
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/9mkNmzmP6yLPke_YypCoYUx94Nk.roa
Signing time: Mon 17 Oct 2022 06:55:36 +0000
ROA not before: Mon 17 Oct 2022 06:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2119
IP address blocks: 195.134.32.0/19 maxlen: 19
77.16.0.0/14 maxlen: 14
80.212.0.0/15 maxlen: 15
134.47.0.0/16 maxlen: 16
2.148.0.0/14 maxlen: 14
193.212.0.0/14 maxlen: 14
84.202.0.0/16 maxlen: 16
87.252.64.0/19 maxlen: 19
130.67.0.0/16 maxlen: 16
62.16.128.0/17 maxlen: 17
46.66.0.0/15 maxlen: 15
82.116.64.0/19 maxlen: 19
148.123.0.0/16 maxlen: 16
82.164.0.0/16 maxlen: 16
85.164.0.0/14 maxlen: 14
193.160.192.0/22 maxlen: 22
193.160.196.0/22 maxlen: 22
84.53.0.0/18 maxlen: 18
193.160.200.0/22 maxlen: 22
194.248.0.0/16 maxlen: 16
148.120.0.0/15 maxlen: 15
212.251.128.0/17 maxlen: 17
46.9.0.0/16 maxlen: 16
62.92.0.0/16 maxlen: 16
46.156.0.0/15 maxlen: 15
31.45.0.0/17 maxlen: 17
62.128.224.0/19 maxlen: 19
176.75.0.0/16 maxlen: 16
144.193.0.0/16 maxlen: 16
194.143.0.0/17 maxlen: 17
62.102.160.0/19 maxlen: 19
37.200.0.0/18 maxlen: 18
185.4.172.0/22 maxlen: 22
146.172.0.0/16 maxlen: 16
83.108.0.0/15 maxlen: 15
95.34.0.0/16 maxlen: 16
217.148.144.0/20 maxlen: 20
62.249.160.0/19 maxlen: 19
217.199.32.0/19 maxlen: 19
37.253.0.0/16 maxlen: 16
109.189.0.0/16 maxlen: 16
148.118.0.0/15 maxlen: 15
88.88.0.0/13 maxlen: 13
212.17.128.0/19 maxlen: 19
148.122.0.0/16 maxlen: 16
212.4.32.0/19 maxlen: 19
213.142.64.0/19 maxlen: 19
62.209.64.0/18 maxlen: 18
109.179.0.0/16 maxlen: 16
78.158.224.0/19 maxlen: 19
2a02:a38::/32 maxlen: 32
2a02:2120::/30 maxlen: 30
2001:4600::/24 maxlen: 24
2001:67c:19e4::/48 maxlen: 48
2a02:2640::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:b9:f9:ce:3d:42:75:f5:39:69:57:09:3a:33:02:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Oct 17 06:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6690d9b398feb22cf91efd8ca90a8614c7de0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:23:7a:a3:7a:c2:11:71:65:16:b5:32:ca:
7d:a2:28:e8:b3:d9:81:95:9c:9f:34:03:6f:ab:10:
f3:f1:f5:d5:a9:1a:ae:3c:b5:de:29:f1:2d:93:cc:
98:83:18:07:12:77:9a:df:03:09:b7:33:07:ef:75:
53:9c:58:31:af:11:ee:d4:12:4c:7b:96:12:ff:d9:
c0:ac:cb:6a:10:63:26:e4:3a:5f:2b:83:44:69:55:
a1:dd:21:41:80:b7:33:64:5d:75:89:2d:13:fc:57:
a6:7d:45:66:e2:b0:dd:86:b6:10:60:bf:cd:0f:1b:
03:d2:35:ba:92:bc:4d:36:c6:7f:15:8b:9f:43:4b:
05:cc:82:28:82:40:00:dd:7c:31:21:ac:48:a3:de:
0f:26:bb:47:c4:84:04:71:24:5b:f9:9e:f4:2c:c6:
9b:ef:10:46:91:7e:b6:91:9c:28:3a:8e:a8:78:bd:
e9:75:29:38:75:6e:21:39:e0:0e:1b:58:70:2c:67:
0c:ee:a3:1f:e4:88:9e:b4:bc:e8:c3:50:e4:be:e1:
87:1f:02:fc:41:86:5f:6f:8d:9e:53:0a:f5:60:4a:
d3:10:8f:3a:59:19:15:19:12:2d:47:f3:99:ce:c7:
f2:e9:c3:2d:04:36:b6:cd:c1:d6:87:4a:69:84:f6:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:0D:9B:39:8F:EB:22:CF:91:EF:D8:CA:90:A8:61:4C:7D:E0:D9
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/9mkNmzmP6yLPke_YypCoYUx94Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.148.0.0/14
31.45.0.0/17
37.200.0.0/18
37.253.0.0/16
46.9.0.0/16
46.66.0.0/15
46.156.0.0/15
62.16.128.0/17
62.92.0.0/16
62.102.160.0/19
62.128.224.0/19
62.209.64.0/18
62.249.160.0/19
77.16.0.0/14
78.158.224.0/19
80.212.0.0/15
82.116.64.0/19
82.164.0.0/16
83.108.0.0/15
84.53.0.0/18
84.202.0.0/16
85.164.0.0/14
87.252.64.0/19
88.88.0.0/13
95.34.0.0/16
109.179.0.0/16
109.189.0.0/16
130.67.0.0/16
134.47.0.0/16
144.193.0.0/16
146.172.0.0/16
148.118.0.0-148.123.255.255
176.75.0.0/16
185.4.172.0/22
193.160.192.0-193.160.203.255
193.212.0.0/14
194.143.0.0/17
194.248.0.0/16
195.134.32.0/19
212.4.32.0/19
212.17.128.0/19
212.251.128.0/17
213.142.64.0/19
217.148.144.0/20
217.199.32.0/19
IPv6:
2001:67c:19e4::/48
2001:4600::/24
2a02:a38::/32
2a02:2120::/30
2a02:2640::/32
Signature Algorithm: sha256WithRSAEncryption
2c:39:07:5b:cb:fd:3c:d6:c2:d2:6c:c6:ed:ae:a4:36:08:a3:
5a:50:18:50:ce:44:45:11:a5:ff:87:e0:dc:a0:3a:c0:6f:72:
ff:d1:7f:8a:03:db:e9:14:c6:e7:0f:34:0e:2e:54:dd:13:d8:
2a:b8:de:07:68:ce:c8:94:fb:b6:5b:d2:4f:c4:ff:3c:cc:22:
c7:b5:6c:89:e9:c9:d3:20:a2:6e:c9:a0:21:7d:e7:3d:50:87:
f6:21:96:26:81:a8:9c:96:87:d0:38:ae:b8:8f:a3:b0:34:55:
9e:87:90:9f:81:e8:42:bf:49:95:b1:3b:0d:50:b7:ce:4c:fb:
5b:fd:18:38:2f:8c:b3:0b:ec:d1:cc:be:b9:72:28:85:13:23:
94:41:de:7d:e9:b5:0a:8d:46:aa:0a:c7:92:92:24:58:d8:83:
d4:99:1a:f3:6f:6b:3d:82:38:7d:29:bc:e4:67:9b:bf:b8:e7:
dd:72:30:44:ca:7b:b1:98:a8:b8:50:e3:a3:5f:96:2d:8e:06:
6b:90:76:2a:41:a9:ac:07:15:ca:b4:63:14:75:7b:b2:18:40:
dc:9e:88:56:23:5e:51:a1:f7:91:17:4d:cf:a4:88:d1:58:68:
3e:8b:c6:55:d0:7c:1b:6d:aa:9c:23:ec:01:1b:4a:d0:cc:c3:
7d:3c:c4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:37 2025 by rpki-client