Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/53VdIVCvy5aCGkeA4MmnhQ2sejo.roa
File: 53VdIVCvy5aCGkeA4MmnhQ2sejo.roa (raw, json)
Hash identifier: 4Ucjf+JT3Y3VDlKpfzUGaXQWHVnXufqnzh8sT7VMqyc=
Subject key identifier: E7:75:5D:21:50:AF:CB:96:82:1A:47:80:E0:C9:A7:85:0D:AC:7A:3A
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 018BDCD41D85DEC7E12C3586CF189ACDCC24
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/53VdIVCvy5aCGkeA4MmnhQ2sejo.roa
Signing time: Fri 17 Nov 2023 10:29:30 +0000
ROA not before: Fri 17 Nov 2023 10:29:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58321
IP address blocks: 185.73.88.0/22 maxlen: 22
185.80.212.0/22 maxlen: 22
91.232.44.0/23 maxlen: 23
109.199.0.0/19 maxlen: 19
176.227.160.0/21 maxlen: 21
109.207.48.0/20 maxlen: 20
81.161.192.0/24 maxlen: 24
81.161.192.0/21 maxlen: 21
81.161.192.0/20 maxlen: 20
81.161.193.0/24 maxlen: 24
81.161.194.0/24 maxlen: 24
81.161.195.0/24 maxlen: 24
178.249.88.0/21 maxlen: 21
81.161.196.0/24 maxlen: 24
81.161.197.0/24 maxlen: 24
81.161.198.0/24 maxlen: 24
81.161.199.0/24 maxlen: 24
81.161.203.0/24 maxlen: 24
81.161.204.0/24 maxlen: 24
81.161.200.0/21 maxlen: 21
81.161.205.0/24 maxlen: 24
81.161.206.0/24 maxlen: 24
81.161.200.0/24 maxlen: 24
81.161.201.0/24 maxlen: 24
81.161.202.0/24 maxlen: 24
193.242.169.0/24 maxlen: 24
193.242.168.0/24 maxlen: 24
193.242.168.0/23 maxlen: 23
195.3.232.0/22 maxlen: 22
5.104.248.0/21 maxlen: 21
185.34.76.0/22 maxlen: 22
2a04:4c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:d4:1d:85:de:c7:e1:2c:35:86:cf:18:9a:cd:cc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Nov 17 10:29:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7755d2150afcb96821a4780e0c9a7850dac7a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:27:39:8a:06:a7:ab:9d:28:e7:86:d8:08:
22:3a:67:db:72:32:66:e6:02:69:4f:b6:28:46:75:
75:90:62:7a:b1:54:90:28:b1:2f:ab:71:df:c4:e1:
31:ae:fa:4d:af:29:ff:84:06:39:f3:1a:3e:23:f9:
70:9a:0f:ef:98:8a:87:2c:53:64:1e:cd:cb:64:05:
b7:a5:4e:1a:00:3a:29:0a:3f:b2:dd:98:83:43:19:
f3:4e:ac:84:d2:87:34:42:4e:c3:fc:99:fd:2a:4f:
cc:be:21:38:2f:d5:d6:02:67:c5:1a:ba:59:91:bc:
1d:b2:27:b1:8a:57:4e:5c:b7:05:7f:73:c5:45:84:
5f:8d:a4:79:30:1d:2a:df:21:23:fc:a0:05:fa:48:
52:21:a7:9e:20:77:77:6a:4c:ff:5e:8e:c8:5d:d8:
86:ee:7b:75:25:96:87:33:25:6d:11:03:a3:1d:98:
70:f9:46:7f:0d:7a:25:b2:77:27:45:1a:e4:70:8e:
d3:5d:a7:8e:0e:f1:09:9c:1a:f5:04:65:24:cb:59:
da:5a:9e:ec:c9:8e:86:49:34:60:59:70:fb:4e:c5:
db:7b:41:59:68:d8:03:24:7e:14:99:b3:e4:94:a5:
57:ec:10:7a:a5:28:0c:b2:81:3b:78:61:aa:11:63:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:75:5D:21:50:AF:CB:96:82:1A:47:80:E0:C9:A7:85:0D:AC:7A:3A
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/53VdIVCvy5aCGkeA4MmnhQ2sejo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.248.0/21
81.161.192.0/20
91.232.44.0/23
109.199.0.0/19
109.207.48.0/20
176.227.160.0/21
178.249.88.0/21
185.34.76.0/22
185.73.88.0/22
185.80.212.0/22
193.242.168.0/23
195.3.232.0/22
IPv6:
2a04:4c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:b4:3f:b3:71:d4:5c:b1:75:9f:5c:8c:1e:5d:6d:d1:a0:9c:
b7:76:61:68:89:ea:bc:b7:5f:b0:b4:ab:5c:da:c9:21:18:2b:
64:b4:94:f6:40:dd:2d:cf:e6:df:4c:65:12:e5:c2:17:e6:dc:
7f:4b:27:5a:5d:30:f2:c1:0f:b4:b5:c6:a5:c7:7b:54:0f:df:
2e:da:e5:5b:88:2e:b2:f0:a6:82:7b:40:45:78:77:7c:c4:ff:
50:6c:37:64:20:ce:15:fc:c7:c3:d5:a0:b0:c6:8f:85:9d:60:
06:38:84:28:f2:9f:de:aa:c4:e7:23:48:db:e4:0b:81:60:77:
d9:f8:e6:36:d9:48:60:39:49:6b:a7:35:ed:39:c1:3b:4a:20:
2e:1a:da:2e:0f:22:57:0f:94:77:5d:e7:f7:73:c2:ff:30:e9:
78:aa:ae:77:bc:d6:01:2b:94:99:8b:bc:63:17:7e:bc:2a:a1:
25:bc:bb:77:3d:87:ef:08:14:c3:0e:a7:db:6e:5b:f1:af:b1:
2c:89:fd:3b:58:9d:cf:e9:58:58:52:40:26:fe:cd:41:fb:1e:
c4:73:30:15:f5:e8:7d:6b:07:60:26:a0:a0:72:11:7f:ce:54:
96:ec:63:1a:45:af:60:75:61:e0:e7:e6:11:de:11:0e:e5:2a:
7b:a5:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:40:29 2025 by rpki-client