Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/1-xvEhmAhZJLb6NaEhVTyJ-If6Vs.roa
File: 1-xvEhmAhZJLb6NaEhVTyJ-If6Vs.roa (raw, json)
Hash identifier: zWQHehE/KtpbIxigJtY+oEWgt28r8at9R9vcGLRKbBg=
Subject key identifier: FB:1B:C4:86:60:21:64:92:DB:E8:D6:84:85:54:F2:27:E2:1F:E9:5B
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 0184335E9DFE37D1E890732F849109EA5270
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/1-xvEhmAhZJLb6NaEhVTyJ-If6Vs.roa
Signing time: Tue 01 Nov 2022 13:25:49 +0000
ROA not before: Tue 01 Nov 2022 13:25:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12302
IP address blocks: 81.12.216.0/21 maxlen: 21
81.12.224.0/21 maxlen: 21
81.12.231.0/24 maxlen: 24
81.12.230.0/24 maxlen: 24
81.12.229.0/24 maxlen: 24
81.12.228.0/24 maxlen: 24
81.12.232.0/21 maxlen: 21
81.12.245.0/24 maxlen: 24
81.12.243.0/24 maxlen: 24
81.12.242.0/24 maxlen: 24
81.12.240.0/21 maxlen: 21
81.12.246.0/24 maxlen: 24
81.12.248.0/21 maxlen: 21
81.12.247.0/24 maxlen: 24
81.12.160.0/21 maxlen: 21
81.12.168.0/21 maxlen: 21
81.12.176.0/21 maxlen: 21
81.12.184.0/21 maxlen: 21
81.12.192.0/21 maxlen: 21
81.12.195.0/24 maxlen: 24
81.12.199.0/24 maxlen: 24
81.12.200.0/21 maxlen: 21
81.12.208.0/21 maxlen: 21
136.255.224.0/20 maxlen: 20
136.255.251.0/24 maxlen: 24
81.12.128.0/17 maxlen: 17
136.255.0.0/16 maxlen: 24
81.12.128.0/21 maxlen: 21
81.12.136.0/21 maxlen: 21
81.12.144.0/21 maxlen: 21
81.12.152.0/21 maxlen: 21
81.12.153.0/24 maxlen: 24
81.12.159.0/24 maxlen: 24
213.233.123.0/24 maxlen: 24
213.233.122.0/24 maxlen: 24
213.233.121.0/24 maxlen: 24
213.233.120.0/24 maxlen: 24
213.233.119.0/24 maxlen: 24
213.233.125.0/24 maxlen: 24
213.233.124.0/24 maxlen: 24
213.233.127.0/24 maxlen: 24
213.233.126.0/24 maxlen: 24
165.78.160.0/19 maxlen: 19
213.233.67.0/24 maxlen: 24
213.233.66.0/24 maxlen: 24
213.233.65.0/24 maxlen: 24
213.233.71.0/24 maxlen: 24
213.233.70.0/24 maxlen: 24
213.233.69.0/24 maxlen: 24
213.233.68.0/24 maxlen: 24
213.233.74.0/24 maxlen: 24
213.233.73.0/24 maxlen: 24
213.233.72.0/24 maxlen: 24
213.233.78.0/24 maxlen: 24
213.233.77.0/24 maxlen: 24
213.233.76.0/24 maxlen: 24
213.233.75.0/24 maxlen: 24
213.233.81.0/24 maxlen: 24
213.233.80.0/24 maxlen: 24
213.233.79.0/24 maxlen: 24
213.233.85.0/24 maxlen: 24
165.78.96.0/19 maxlen: 19
213.233.84.0/24 maxlen: 24
213.233.83.0/24 maxlen: 24
213.233.82.0/24 maxlen: 24
213.233.88.0/24 maxlen: 24
213.233.87.0/24 maxlen: 24
213.233.86.0/24 maxlen: 24
213.233.91.0/24 maxlen: 24
213.233.90.0/24 maxlen: 24
213.233.89.0/24 maxlen: 24
213.233.95.0/24 maxlen: 24
213.233.94.0/24 maxlen: 24
213.233.93.0/24 maxlen: 24
213.233.92.0/24 maxlen: 24
213.233.98.0/24 maxlen: 24
213.233.97.0/24 maxlen: 24
213.233.96.0/24 maxlen: 24
213.233.102.0/24 maxlen: 24
213.233.101.0/24 maxlen: 24
213.233.100.0/24 maxlen: 24
213.233.99.0/24 maxlen: 24
213.233.105.0/24 maxlen: 24
213.233.104.0/24 maxlen: 24
213.233.103.0/24 maxlen: 24
213.233.109.0/24 maxlen: 24
213.233.108.0/24 maxlen: 24
213.233.107.0/24 maxlen: 24
213.233.106.0/24 maxlen: 24
213.233.112.0/24 maxlen: 24
213.233.111.0/24 maxlen: 24
213.233.110.0/24 maxlen: 24
213.233.118.0/24 maxlen: 24
213.233.117.0/24 maxlen: 24
213.233.116.0/24 maxlen: 24
165.78.128.0/21 maxlen: 21
165.78.128.0/19 maxlen: 19
213.233.115.0/24 maxlen: 24
213.233.114.0/24 maxlen: 24
213.233.113.0/24 maxlen: 24
165.78.192.0/21 maxlen: 21
165.78.192.0/19 maxlen: 19
165.78.224.0/19 maxlen: 19
46.97.232.0/21 maxlen: 21
46.97.240.0/21 maxlen: 21
46.97.176.0/21 maxlen: 21
46.97.184.0/21 maxlen: 21
46.97.192.0/21 maxlen: 21
46.97.200.0/21 maxlen: 21
46.97.208.0/21 maxlen: 21
46.97.216.0/21 maxlen: 21
46.97.224.0/21 maxlen: 21
217.10.192.0/24 maxlen: 24
217.10.193.0/24 maxlen: 24
217.10.199.0/24 maxlen: 24
217.10.198.0/24 maxlen: 24
217.10.197.0/24 maxlen: 24
217.10.196.0/24 maxlen: 24
217.10.195.0/24 maxlen: 24
165.78.32.0/19 maxlen: 19
217.10.194.0/24 maxlen: 24
217.10.200.0/24 maxlen: 24
217.10.206.0/24 maxlen: 24
217.10.205.0/24 maxlen: 24
217.10.204.0/24 maxlen: 24
217.10.203.0/24 maxlen: 24
217.10.202.0/24 maxlen: 24
217.10.201.0/24 maxlen: 24
217.10.207.0/24 maxlen: 24
217.10.213.0/24 maxlen: 24
217.10.212.0/24 maxlen: 24
217.10.211.0/24 maxlen: 24
217.10.210.0/24 maxlen: 24
217.10.209.0/24 maxlen: 24
217.10.208.0/24 maxlen: 24
217.10.214.0/24 maxlen: 24
217.10.219.0/24 maxlen: 24
217.10.218.0/24 maxlen: 24
217.10.217.0/24 maxlen: 24
217.10.216.0/24 maxlen: 24
217.10.215.0/24 maxlen: 24
217.10.221.0/24 maxlen: 24
217.10.220.0/24 maxlen: 24
165.78.64.0/21 maxlen: 21
165.78.64.0/19 maxlen: 19
217.10.223.0/24 maxlen: 24
217.10.222.0/24 maxlen: 24
213.233.64.0/24 maxlen: 24
165.78.0.0/21 maxlen: 21
165.78.0.0/19 maxlen: 19
165.78.0.0/16 maxlen: 16
46.97.16.0/21 maxlen: 21
46.97.24.0/21 maxlen: 21
46.97.32.0/21 maxlen: 21
46.97.40.0/21 maxlen: 21
46.97.48.0/21 maxlen: 21
46.97.56.0/21 maxlen: 21
46.97.64.0/21 maxlen: 21
46.97.0.0/21 maxlen: 21
46.97.8.0/21 maxlen: 21
46.97.0.0/16 maxlen: 16
46.97.120.0/21 maxlen: 21
46.97.128.0/24 maxlen: 24
46.97.136.0/21 maxlen: 21
46.97.144.0/21 maxlen: 21
46.97.152.0/21 maxlen: 21
46.97.160.0/21 maxlen: 21
46.97.168.0/21 maxlen: 21
46.97.72.0/21 maxlen: 21
46.97.80.0/21 maxlen: 21
46.97.88.0/21 maxlen: 21
46.97.96.0/21 maxlen: 21
46.97.104.0/21 maxlen: 21
46.97.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:5e:9d:fe:37:d1:e8:90:73:2f:84:91:09:ea:52:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Nov 1 13:25:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb1bc48660216492dbe8d6848554f227e21fe95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:af:00:20:d7:94:c3:0c:65:df:f0:72:1c:9f:
58:d6:ff:c9:ed:b9:5d:44:4a:aa:ff:b3:fc:c1:7e:
5b:cd:40:d8:ad:d3:49:a8:18:b7:88:6e:c8:22:1b:
27:bb:0b:14:49:b6:f8:ca:cd:9a:e2:b8:c8:e7:81:
77:72:49:38:1e:48:53:25:5b:19:d8:5a:58:d5:23:
6f:d5:01:8f:91:b3:96:82:e9:e2:bc:38:a5:21:ee:
50:e0:05:50:4a:75:21:2a:d0:5a:61:b1:af:ff:86:
59:55:11:ea:48:e3:f1:43:05:43:27:dd:a6:e8:da:
30:06:c3:23:4c:8b:eb:ef:9f:92:48:fe:5c:71:47:
1e:6d:19:25:fe:f3:fd:41:e0:55:3e:e1:be:df:a6:
23:ec:aa:f6:16:3e:2e:9e:db:19:3c:c2:c6:9b:0f:
27:2d:b4:40:bd:ad:13:9c:1b:1f:46:e6:5d:54:05:
f1:5e:71:fb:3e:36:85:20:04:5e:86:a4:9f:e0:45:
5e:bd:e3:b5:b3:9f:21:30:82:3b:a1:16:cb:bd:c0:
ef:f3:69:d1:1a:c7:70:98:56:1c:29:e6:95:06:da:
c1:21:b4:46:f6:19:e2:7c:bd:6b:d9:90:87:dc:97:
bb:6e:91:ad:86:ab:c9:c4:fe:cc:05:e1:70:55:88:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:C4:86:60:21:64:92:DB:E8:D6:84:85:54:F2:27:E2:1F:E9:5B
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/1-xvEhmAhZJLb6NaEhVTyJ-If6Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.97.0.0/16
81.12.128.0/17
136.255.0.0/16
165.78.0.0/16
213.233.64.0/18
217.10.192.0/19
Signature Algorithm: sha256WithRSAEncryption
84:24:d1:c5:3c:bb:cb:bb:04:2a:58:42:b6:07:e6:0e:fd:34:
17:8a:22:38:b3:d6:91:51:23:99:e6:06:fd:95:22:fe:a9:34:
8c:7e:b8:ef:ab:69:35:52:f9:18:da:03:11:c1:f5:a9:e0:c6:
06:b6:50:64:bb:85:c9:a0:41:3b:9c:ac:f2:f1:64:13:cc:1b:
28:5a:3e:e7:a9:53:c6:93:80:85:50:63:bd:2d:eb:f3:04:cc:
38:dc:d8:72:d4:e2:14:c7:62:0e:0d:e0:96:c4:f1:2e:62:ea:
df:e0:30:ea:e4:06:27:69:c4:97:c1:62:36:b3:cc:f5:bc:f6:
fc:5d:43:8d:60:4b:bf:7e:da:42:64:8c:cc:6b:05:f8:58:d7:
91:e5:d4:1b:fd:60:69:b8:aa:cc:40:9b:92:b3:d5:61:fa:94:
e1:18:60:e8:dd:c0:f4:2e:2f:de:7c:20:d9:8a:f5:43:5e:9a:
86:e4:cc:e7:17:10:f4:d0:4a:2a:68:d4:a0:74:e7:ea:c6:8f:
f7:0f:6a:d5:9d:4e:0f:47:75:dc:c5:4f:a2:2b:26:ab:e3:bd:
06:09:5f:b5:7a:46:7e:44:c6:61:4f:5c:be:fb:11:c1:35:ab:
eb:56:6d:9f:7f:35:7c:9e:43:09:3f:17:65:46:38:88:72:29:
5c:d9:c5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:14:07 2025 by rpki-client