Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/M2ymXlr4tk_0o-9CE7G1xiIQZQY.roa
File: M2ymXlr4tk_0o-9CE7G1xiIQZQY.roa (raw, json)
Hash identifier: YArPeEcXXkNwPtf1NzgqLzoXkQdvdYmPbY90zN6H9Kg=
Subject key identifier: 33:6C:A6:5E:5A:F8:B6:4F:F4:A3:EF:42:13:B1:B5:C6:22:10:65:06
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881A4A6CC652992D645CE4AD4AA5D027C5
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/M2ymXlr4tk_0o-9CE7G1xiIQZQY.roa
Signing time: Sun 14 May 2023 12:44:25 +0000
ROA not before: Sun 14 May 2023 12:44:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49666
IP address blocks: 2.188.0.0/24 maxlen: 24
2.188.1.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.22.0/24 maxlen: 24
2.188.23.0/24 maxlen: 24
2.188.30.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
2.176.0.0/17 maxlen: 17
78.39.155.0/24 maxlen: 24
78.38.0.0/16 maxlen: 24
217.218.67.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.176.128.0/17 maxlen: 17
2.188.76.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
78.38.246.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
2.189.3.0/24 maxlen: 24
2.189.1.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.179.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.181.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
217.219.0.0/16 maxlen: 24
2.188.187.0/24 maxlen: 24
2.177.0.0/16 maxlen: 16
2.189.72.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
217.218.0.0/16 maxlen: 24
2.189.44.0/24 maxlen: 24
2.189.63.0/24 maxlen: 24
2001:4188:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:4a:6c:c6:52:99:2d:64:5c:e4:ad:4a:a5:d0:27:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 14 12:44:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=336ca65e5af8b64ff4a3ef4213b1b5c622106506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:7d:34:9d:71:9c:61:6b:e3:67:1c:2e:71:
40:37:6f:a7:f5:a5:f5:68:ff:f8:87:93:18:1b:d6:
0d:bf:de:bf:55:7c:5d:c2:9d:d9:e4:02:8f:83:f7:
2e:16:62:7a:0b:a5:15:f2:8c:f5:06:ef:26:3d:3f:
a4:d1:47:82:03:ed:f4:1f:26:42:ed:e3:11:e2:b6:
2b:06:66:70:43:21:c0:49:19:44:2e:0d:7c:b3:9d:
b4:1d:a3:50:04:58:34:dc:0c:00:f4:05:f4:ea:2b:
23:65:b4:40:b7:43:48:9d:1e:c7:2e:c0:5f:6b:c7:
32:d4:83:43:28:e8:b4:d5:42:34:ca:e2:68:1a:90:
0a:5b:d8:5e:22:56:e3:37:d5:a6:e2:dc:c4:53:45:
93:3f:2e:04:41:6f:8f:7c:44:5b:e5:77:aa:b4:eb:
ce:27:bb:4b:d3:88:cc:c7:2f:1b:05:f3:d7:c4:9d:
24:38:a2:c7:bb:53:7d:80:0f:74:94:9c:fe:56:0d:
1a:d5:20:8e:d2:2f:0b:19:81:2a:46:fc:c4:1c:a9:
2d:b9:27:93:9d:3e:9b:98:78:48:38:11:2d:b5:f6:
ea:a6:1f:d5:ae:c0:a1:59:73:01:7c:c8:55:da:6d:
59:2b:ef:cb:a5:ad:9a:bf:93:1f:7f:9d:cb:72:b7:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6C:A6:5E:5A:F8:B6:4F:F4:A3:EF:42:13:B1:B5:C6:22:10:65:06
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/M2ymXlr4tk_0o-9CE7G1xiIQZQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/15
2.185.0.0/16
2.188.0.0/15
78.38.0.0/15
80.191.0.0/16
195.146.63.0/24
217.218.0.0/15
IPv6:
2001:4188:2::/48
Signature Algorithm: sha256WithRSAEncryption
09:69:ba:5b:70:48:c4:c4:48:4f:5c:16:69:9a:10:30:72:a8:
06:05:57:c7:ce:7f:4f:01:13:99:d7:64:e3:74:c5:c4:52:69:
81:d6:b6:12:3b:e8:2e:da:12:7b:18:8d:81:55:81:1c:e8:aa:
b1:44:07:df:27:9c:ab:a3:f2:8d:11:dd:b8:a8:f2:9c:ce:87:
f0:52:5c:62:c2:79:e8:a0:6a:51:26:b4:03:75:96:b1:da:4b:
78:a3:e9:e7:13:4e:a6:17:06:b6:15:d5:03:78:b9:30:ae:d2:
53:31:d3:02:c3:2f:f7:ee:77:5d:97:e6:48:c3:46:10:9e:50:
34:df:6b:1f:fa:7c:ee:de:61:18:e3:1c:0d:d1:a1:76:b5:e5:
ac:47:0c:8b:de:46:2b:fc:81:95:10:ac:d1:9b:d0:08:6b:88:
39:fe:a4:fe:9b:26:01:40:9c:97:1a:ad:45:a0:2c:04:ee:47:
cb:4c:06:0e:85:82:25:41:26:2b:80:dc:6f:24:14:71:6b:44:
15:41:f5:3d:d6:fa:c1:40:c6:83:62:22:02:4c:f5:4b:c5:50:
b1:7d:ce:90:9f:29:e0:f8:d4:22:c7:23:4e:e7:e9:1c:25:3a:
d7:c9:36:5a:44:fb:d1:12:aa:4f:b3:9b:9d:11:6e:0d:33:62:
1a:b3:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:32:32 2025 by rpki-client