Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Ak5hTncJy9FJJL4CTZJAxuj-2Jg.roa
File: Ak5hTncJy9FJJL4CTZJAxuj-2Jg.roa (raw, json)
Hash identifier: uA9P9FT/Ug9KTffi3cQQ3/PvYuIEFCNU7jJmYpb5Vdc=
Subject key identifier: 02:4E:61:4E:77:09:CB:D1:49:24:BE:02:4D:92:40:C6:E8:FE:D8:98
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881A64BC053F3E5DD0556F3750293E5B32
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Ak5hTncJy9FJJL4CTZJAxuj-2Jg.roa
Signing time: Sun 14 May 2023 13:13:09 +0000
ROA not before: Sun 14 May 2023 13:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48159
IP address blocks: 2.188.1.0/24 maxlen: 24
2.188.0.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
78.39.240.0/24 maxlen: 24
78.39.149.0/24 maxlen: 24
78.39.150.0/24 maxlen: 24
78.39.151.0/24 maxlen: 24
80.191.56.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
2.185.18.0/24 maxlen: 24
2.185.40.0/21 maxlen: 21
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
2.185.0.0/20 maxlen: 20
2.185.0.0/16 maxlen: 16
78.38.243.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
2.177.0.0/16 maxlen: 16
2.191.0.0/16 maxlen: 16
80.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
2.176.128.0/17 maxlen: 17
2.185.164.0/24 maxlen: 24
2.185.160.0/19 maxlen: 19
2.188.179.0/24 maxlen: 24
2.185.88.0/22 maxlen: 22
217.219.0.0/16 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
2.188.187.0/24 maxlen: 24
2.189.68.0/24 maxlen: 24
2.189.72.0/24 maxlen: 24
2.189.42.0/24 maxlen: 24
2.189.43.0/24 maxlen: 24
2.189.56.0/24 maxlen: 24
2.189.58.0/24 maxlen: 24
2.182.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:64:bc:05:3f:3e:5d:d0:55:6f:37:50:29:3e:5b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 14 13:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=024e614e7709cbd14924be024d9240c6e8fed898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:2c:e0:cb:b0:0f:33:e1:09:d4:d8:8a:b7:
c0:e7:9c:20:ee:d3:8a:96:d6:e2:dd:80:80:a4:73:
6a:85:4e:c6:0b:cf:2b:4c:67:37:c8:ec:e3:f6:6e:
0b:26:2a:a0:01:94:5a:5a:36:b9:73:7d:21:5e:a3:
3e:30:17:07:93:6a:86:ba:b1:2f:d5:15:d6:d0:ea:
7c:fe:22:ce:ce:02:d9:8f:6c:23:ed:38:55:93:d0:
6d:16:78:9f:27:61:47:a9:82:92:5e:df:2a:34:0d:
87:35:43:19:a5:db:cb:a9:87:f2:ff:f8:c3:b9:12:
b1:50:f6:cf:ce:1a:2b:7c:21:b5:95:74:e3:c0:62:
68:be:6a:97:19:4b:07:7c:a5:69:8a:ba:ec:8c:84:
e1:a2:36:88:29:c4:54:a7:bd:93:a4:31:69:28:2d:
68:06:e6:8d:e9:ba:03:60:49:90:37:48:d7:c8:3e:
47:b0:8f:61:47:17:c6:91:3b:a2:39:40:f6:4f:42:
33:27:21:a3:07:f9:ae:96:b2:f2:f4:23:77:14:01:
a2:7e:67:9f:47:9a:29:5e:4e:7d:79:ef:8a:dd:b6:
f6:12:7d:b8:d9:01:31:fc:a7:88:44:5d:01:02:bc:
8d:55:81:59:85:ef:47:69:3a:f1:49:93:24:61:c3:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:61:4E:77:09:CB:D1:49:24:BE:02:4D:92:40:C6:E8:FE:D8:98
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Ak5hTncJy9FJJL4CTZJAxuj-2Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.128.0-2.177.255.255
2.182.128.0/21
2.185.0.0/16
2.188.0.0/23
2.188.22.0/24
2.188.28.0/24
2.188.64.0/21
2.188.76.0/24
2.188.179.0/24
2.188.184.0/23
2.188.187.0/24
2.189.42.0/23
2.189.56.0/24
2.189.58.0/24
2.189.68.0/24
2.189.72.0/24
2.191.0.0/16
78.38.0.0/15
80.191.0.0/16
217.218.0.0/15
Signature Algorithm: sha256WithRSAEncryption
07:03:c7:e2:a5:37:c5:8f:7d:1c:38:08:be:f1:37:2d:40:89:
d5:a7:77:42:02:eb:cd:41:d3:af:1e:31:3c:c2:24:8d:20:de:
f5:d4:cc:40:fd:f6:7f:1d:77:04:ba:88:56:47:2d:19:ec:fb:
45:4c:6e:14:db:6a:44:d4:5a:cc:52:f6:7e:67:83:9f:48:12:
24:9e:29:a4:ca:03:ce:0f:1c:48:1c:67:94:4b:c7:d8:6b:c8:
29:26:89:49:9d:c4:ed:e2:2b:1b:9f:85:9b:d1:75:21:a5:0a:
8e:b9:79:95:7d:d9:71:32:b2:8b:60:7c:8c:d3:09:f0:cf:ed:
26:4d:0c:76:11:77:ed:c6:e4:15:9c:3a:3d:72:d5:8c:99:79:
60:c4:e7:67:af:75:cd:01:19:05:17:68:7d:d6:9e:0a:33:36:
52:fc:a9:7c:46:bc:54:de:e6:6c:fc:9b:da:2d:d5:ef:a9:1b:
21:95:80:78:9d:11:3c:21:52:d4:35:20:c0:6e:25:48:34:57:
f0:c5:67:20:df:56:b9:4b:d2:26:0a:4a:74:b8:e2:47:5a:48:
a7:f7:df:97:21:00:ee:5d:41:03:d2:4d:49:f2:fd:3d:fb:95:
4c:b6:ff:33:7e:27:df:37:f9:6f:37:6e:f7:45:32:89:94:be:
0b:f5:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:37 2025 by rpki-client