Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uxUgj8yHrLM4n1mJg2dl59hCEws.roa
File: uxUgj8yHrLM4n1mJg2dl59hCEws.roa (raw, json)
Hash identifier: WOEmSm+c/fOkdYlosqPcz9Y2x9JwhIleMkEw0vk2OlI=
Subject key identifier: BB:15:20:8F:CC:87:AC:B3:38:9F:59:89:83:67:65:E7:D8:42:13:0B
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881A64BBCD06613A7C2DAD5B2527965AF1
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uxUgj8yHrLM4n1mJg2dl59hCEws.roa
Signing time: Sun 14 May 2023 13:13:09 +0000
ROA not before: Sun 14 May 2023 13:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.39.43.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:64:bb:cd:06:61:3a:7c:2d:ad:5b:25:27:96:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 14 13:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb15208fcc87acb3389f5989836765e7d842130b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:dd:c1:4c:d2:de:dd:3d:6c:2a:ee:37:91:
b1:a2:93:a3:a6:99:c3:d7:88:c9:15:6b:81:29:38:
ee:1f:83:71:c8:58:f5:12:e8:3f:b0:3e:93:bd:d9:
fe:99:78:e7:c3:42:08:e4:19:cc:4d:50:30:1a:73:
24:bb:18:b5:32:36:2d:ef:89:af:da:0c:1d:8f:5f:
9b:36:4a:2a:a6:42:c3:ab:e1:8c:f2:28:4d:61:c8:
04:d1:1d:3a:f5:93:20:5e:c8:56:c4:e7:e9:2e:d9:
98:cb:0a:6b:f7:c4:c1:df:f4:fb:a8:58:51:f3:56:
96:ff:ab:f0:1f:13:e1:99:23:1a:b7:ad:36:b7:55:
56:37:78:b4:87:c1:69:ef:ed:5c:a7:1a:e0:ee:6b:
f1:b7:66:9d:de:d7:db:81:30:b6:5d:50:3b:4f:19:
75:61:bb:a8:cb:b9:9d:5b:bd:37:75:f4:77:1b:75:
d7:21:19:d6:ac:b5:9e:53:74:e7:47:9b:09:a8:e5:
63:06:50:12:8a:c0:4b:42:fc:67:e3:61:5e:97:ad:
73:03:08:2f:96:4d:8a:e9:74:fc:f5:61:b4:4e:64:
9a:38:f8:c4:2f:a2:bc:33:ad:e0:75:d7:e6:fc:26:
34:8b:1d:50:52:71:64:2d:b2:64:b2:90:ab:f7:c2:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:15:20:8F:CC:87:AC:B3:38:9F:59:89:83:67:65:E7:D8:42:13:0B
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uxUgj8yHrLM4n1mJg2dl59hCEws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
7e:5a:7e:0c:e5:8e:db:86:29:03:d9:a8:95:f6:d8:95:97:10:
28:7a:12:17:24:bb:78:57:b8:c8:f0:20:16:5f:3e:46:ef:b7:
4a:60:41:44:98:66:8a:cc:b1:f3:fd:38:b5:b4:df:df:52:11:
b2:4a:d1:11:0c:23:e9:f9:b4:5a:85:e1:c4:ad:16:18:c2:9d:
b2:88:45:e9:7d:c8:e3:5d:cc:ca:76:9d:56:5a:e0:ef:a5:d7:
3b:62:2e:98:53:93:34:1b:82:1a:71:ea:54:9c:54:c8:19:17:
c6:34:13:b6:74:33:de:4f:81:82:e1:36:d1:fa:36:58:91:75:
bd:c7:c5:d1:51:bb:5d:10:c9:20:18:b2:c1:fd:22:34:4a:ed:
b6:d3:39:7b:33:8e:9b:5a:f9:db:4f:8b:61:cf:49:44:a9:bc:
83:fe:02:4a:9c:c5:c2:92:47:2d:5d:b0:e0:e3:32:87:b5:47:
53:39:54:75:88:cc:ff:65:58:d1:1f:b0:36:0a:25:a6:33:2c:
df:01:1e:fa:a4:44:f8:64:ea:30:98:ce:0e:34:f7:53:94:65:
41:28:bb:2c:d0:b4:62:8a:b7:1e:f7:43:d0:6f:2a:b2:90:39:
7f:c9:e0:fa:a2:91:af:13:80:03:5b:6f:cf:d8:c0:b3:f6:a6:
0a:24:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:48:22 2025 by rpki-client