Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/IJEjzmqC-Z_R9nZgtaAYV_Ng3p0.roa
File: IJEjzmqC-Z_R9nZgtaAYV_Ng3p0.roa (raw, json)
Hash identifier: XyIkbRg7OvvgjiknF+eOQmaR73kyq8VfP88C5AssGco=
Subject key identifier: 20:91:23:CE:6A:82:F9:9F:D1:F6:76:60:B5:A0:18:57:F3:60:DE:9D
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 46A412
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/IJEjzmqC-Z_R9nZgtaAYV_Ng3p0.roa
Signing time: Tue 19 Apr 2022 07:12:28 +0000
ROA not before: Tue 19 Apr 2022 07:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16371
IP address blocks: 109.70.32.0/21 maxlen: 21
109.70.32.0/24 maxlen: 24
109.70.32.0/22 maxlen: 22
109.70.36.0/22 maxlen: 22
45.6.48.0/22 maxlen: 23
93.90.28.0/22 maxlen: 22
93.90.28.0/23 maxlen: 23
93.90.30.0/23 maxlen: 23
87.238.88.0/21 maxlen: 22
85.187.56.0/23 maxlen: 23
85.187.56.0/22 maxlen: 22
85.187.58.0/23 maxlen: 23
86.109.124.0/22 maxlen: 22
86.109.124.0/23 maxlen: 23
213.149.232.0/21 maxlen: 21
86.109.126.0/23 maxlen: 23
213.149.240.0/20 maxlen: 20
213.149.240.0/21 maxlen: 21
213.149.248.0/21 maxlen: 21
213.149.248.0/24 maxlen: 24
93.90.16.0/21 maxlen: 21
93.90.16.0/20 maxlen: 20
93.90.24.0/21 maxlen: 21
194.116.184.0/24 maxlen: 24
194.116.184.0/23 maxlen: 23
194.116.185.0/24 maxlen: 24
185.2.68.0/22 maxlen: 22
185.2.68.0/24 maxlen: 24
185.2.69.0/24 maxlen: 24
185.2.70.0/23 maxlen: 23
176.28.112.0/20 maxlen: 20
176.28.126.0/24 maxlen: 24
176.28.126.0/23 maxlen: 23
176.28.127.0/24 maxlen: 24
86.109.97.0/24 maxlen: 24
86.109.96.0/19 maxlen: 19
86.109.96.0/20 maxlen: 20
213.149.224.0/20 maxlen: 20
213.149.224.0/21 maxlen: 21
86.109.112.0/20 maxlen: 20
79.139.120.0/22 maxlen: 22
79.139.124.0/22 maxlen: 22
79.139.120.0/21 maxlen: 21
176.28.96.0/19 maxlen: 19
176.28.96.0/20 maxlen: 20
176.28.97.0/24 maxlen: 24
176.28.103.0/24 maxlen: 24
89.37.224.0/23 maxlen: 23
89.37.224.0/24 maxlen: 24
89.37.225.0/24 maxlen: 24
185.78.24.0/22 maxlen: 23
2a02:3b8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4629522 (0x46a412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Apr 19 07:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=209123ce6a82f99fd1f67660b5a01857f360de9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:11:10:8c:fb:3f:d7:c3:1c:a0:7d:b7:ec:
54:e7:42:5d:cb:08:a2:e6:8e:97:9a:df:75:21:be:
ea:42:f2:eb:e0:78:0b:0d:ef:7c:61:8f:92:6f:8c:
c1:30:4f:bf:db:65:2d:34:34:b3:2b:8a:92:ca:e8:
bf:bc:a3:ef:4b:c8:c4:a8:f6:31:52:8d:8d:64:f8:
2c:29:2b:f3:17:d7:5f:b5:8c:dd:f3:93:1b:fc:95:
74:f9:c6:f1:4b:e3:d2:52:6b:7c:6d:c9:42:96:12:
1c:bc:4c:82:f2:cd:20:75:bd:80:3e:7d:52:be:c6:
dc:83:de:78:85:24:8d:36:e8:b4:25:7f:84:43:cb:
d4:67:25:a1:09:b2:f0:d9:dd:dc:28:ac:83:a6:69:
99:ef:f5:29:63:2a:34:c7:66:70:f8:33:b1:15:93:
bc:23:78:ee:08:27:a8:84:eb:5a:54:72:e6:2b:d0:
fb:68:dd:51:e4:1b:b0:1a:41:34:33:c5:fb:f0:b8:
27:ce:e9:7a:fb:b4:05:7f:58:4b:b2:90:ac:e0:05:
6b:e7:ca:27:19:c4:f1:9b:bd:5b:5f:42:44:0f:37:
9c:53:56:8d:0c:08:14:1e:d2:ec:5b:05:2c:98:50:
65:ab:c3:8f:86:26:ac:90:bb:1d:78:f7:04:90:3f:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:91:23:CE:6A:82:F9:9F:D1:F6:76:60:B5:A0:18:57:F3:60:DE:9D
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/IJEjzmqC-Z_R9nZgtaAYV_Ng3p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.48.0/22
79.139.120.0/21
85.187.56.0/22
86.109.96.0/19
87.238.88.0/21
89.37.224.0/23
93.90.16.0/20
109.70.32.0/21
176.28.96.0/19
185.2.68.0/22
185.78.24.0/22
194.116.184.0/23
213.149.224.0/19
IPv6:
2a02:3b8::/32
Signature Algorithm: sha256WithRSAEncryption
3f:16:8d:2d:3a:e0:4d:c3:77:aa:f1:23:bd:6b:3c:a6:fb:8b:
b3:17:09:d2:90:88:7b:b2:2d:62:5c:97:5b:ac:5f:a1:c4:c5:
20:c6:d6:82:9d:ee:21:40:16:42:6f:fa:48:0d:eb:3f:a0:db:
1a:4f:55:87:0e:42:96:0a:40:dd:4d:0d:58:52:b4:34:fb:d9:
f2:f3:03:64:ae:6e:f9:14:17:15:fd:ec:56:46:4a:23:3f:fd:
c2:fd:3e:9e:8c:b0:0f:34:b1:bc:87:ff:a8:70:7d:79:f5:b1:
e6:f7:3e:91:75:de:11:55:b2:66:ba:1c:6f:06:89:63:18:3d:
46:84:d0:3c:89:a5:4f:db:74:dc:fb:f9:a1:de:3b:77:02:6a:
e1:fa:fc:5a:94:ca:5f:c5:ec:e4:b6:fb:ee:e5:d9:a6:e5:48:
df:e3:66:ad:c3:78:41:50:96:41:28:43:09:5a:bb:ae:e1:70:
fa:e4:8d:2d:2e:c2:e9:aa:e5:3a:c3:2f:ff:49:84:08:b4:4c:
01:55:61:71:ef:b8:e4:8d:c1:b3:32:a9:99:31:af:fc:9c:15:
bf:29:22:b1:d7:df:7c:5a:9f:b6:cd:b4:cc:e7:2b:a8:82:07:
50:22:c9:8a:27:67:a7:03:74:47:e1:03:cd:33:b7:85:18:3b:
00:fd:94:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIDRqQSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjliNjlkZGMwHhcNMjIwNDE5
MDcxMjI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyMDkxMjNjZTZhODJm
OTlmZDFmNjc2NjBiNWEwMTg1N2YzNjBkZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2SMREIz7P9fDHKB9t+xU50Jdywii5o6Xmt91Ib7qQvLr4HgL
De98YY+Sb4zBME+/22UtNDSzK4qSyui/vKPvS8jEqPYxUo2NZPgsKSvzF9dftYzd
85Mb/JV0+cbxS+PSUmt8bclClhIcvEyC8s0gdb2APn1Svsbcg954hSSNNui0JX+E
Q8vUZyWhCbLw2d3cKKyDpmmZ7/UpYyo0x2Zw+DOxFZO8I3juCCeohOtaVHLmK9D7
aN1R5BuwGkE0M8X78Lgnzul6+7QFf1hLspCs4AVr58onGcTxm71bX0JEDzecU1aN
DAgUHtLsWwUsmFBlq8OPhiaskLsdePcEkD9HGwIDAQABo4ICYDCCAlwwHQYDVR0O
BBYEFCCRI85qgvmf0fZ2YLWgGFfzYN6dMB8GA1UdIwQYMBaAFNj/cfKxqNYq9Eap
K6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNhLzEv
SUpFanptcUMtWl9SOW5aZ3RhQVlWX05nM3AwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9l
YTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNhLzEvMlA5eDhyR28xaXIw
UnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHYG
CCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQCLQYwAwQDT4t4AwQCVbs4AwQFVm1g
AwQDV+5YAwQBWSXgAwQEXVoQAwQDbUYgAwQFsBxgAwQCuQJEAwQCuU4YAwQBwnS4
AwQF1ZXgMA0EAgACMAcDBQAqAgO4MA0GCSqGSIb3DQEBCwUAA4IBAQA/Fo0tOuBN
w3eq8SO9azym+4uzFwnSkIh7si1iXJdbrF+hxMUgxtaCne4hQBZCb/pIDes/oNsa
T1WHDkKWCkDdTQ1YUrQ0+9ny8wNkrm75FBcV/exWRkojP/3C/T6ejLAPNLG8h/+o
cH159bHm9z6Rdd4RVbJmuhxvBoljGD1GhNA8iaVP23Tc+/mh3jt3Amrh+vxalMpf
xezktvvu5dmm5Ujf42atw3hBUJZBKEMJWruu4XD65I0tLsLpquU6wy//SYQItEwB
VWFx77jkjcGzMqmZMa/8nBW/KSKx1998Wp+2zbTM5yuoggdQIsmKJ2enA3RH4QPN
M7eFGDsA/ZTu
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:53 2025 by rpki-client