Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/xs65RpLbkd5HCcgxCyJXaCnKLMs.roa
File: xs65RpLbkd5HCcgxCyJXaCnKLMs.roa (raw, json)
Hash identifier: UZKVc6cGXiUkG5761G9JIblYrCW2snmqg5lvVIyvZew=
Subject key identifier: C6:CE:B9:46:92:DB:91:DE:47:09:C8:31:0B:22:57:68:29:CA:2C:CB
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881A4A2F4A9E43B8D466CD97AFF30B6BEB
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/xs65RpLbkd5HCcgxCyJXaCnKLMs.roa
Signing time: Sun 14 May 2023 12:44:09 +0000
ROA not before: Sun 14 May 2023 12:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:4a:2f:4a:9e:43:b8:d4:66:cd:97:af:f3:0b:6b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 14 12:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6ceb94692db91de4709c8310b22576829ca2ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:84:c0:39:b4:42:22:0f:0f:0a:3b:df:bb:
12:73:80:d4:4a:4d:01:15:99:46:d9:ff:96:7a:88:
8a:e0:4b:53:10:9a:5a:a0:04:76:ee:be:b6:a0:79:
5a:94:ed:05:d0:2f:6b:f1:28:95:df:8d:e7:0e:02:
2f:16:33:50:a4:78:60:a6:8d:e6:fa:e6:89:1b:5b:
af:bf:a3:e2:e1:f2:1f:d7:14:3b:3d:91:7c:48:89:
60:d8:bb:b4:a7:08:4a:12:f1:5f:0b:c7:3c:39:ed:
0d:4b:62:67:ea:f6:03:dc:f6:7e:18:1f:a2:17:ff:
e5:75:6a:bf:f7:6e:13:f3:e8:5b:88:58:90:87:e9:
8a:00:6e:2f:25:9a:77:95:13:27:63:62:bd:53:bc:
54:90:c1:0a:ac:a8:94:ae:ef:0a:6a:1e:df:57:37:
a1:77:47:81:61:85:f8:bc:f1:f8:ea:bd:e0:0d:31:
da:ec:51:f0:a6:cc:ee:c1:7e:25:cf:c0:f3:70:05:
72:0e:60:95:9e:7c:b8:e5:c1:19:62:49:da:d0:1d:
6d:7b:6e:48:8e:b2:2d:08:13:41:e5:d3:40:b4:ee:
38:11:36:fa:b9:e0:40:dd:d2:e2:4f:c9:9f:d8:2c:
87:d0:55:3a:d1:71:17:30:29:03:21:99:43:14:2a:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CE:B9:46:92:DB:91:DE:47:09:C8:31:0B:22:57:68:29:CA:2C:CB
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/xs65RpLbkd5HCcgxCyJXaCnKLMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
7c:c1:90:d8:09:e7:cf:3a:e6:59:07:9d:12:ff:38:bb:a8:40:
fc:67:b3:c4:63:09:52:bb:96:a5:ea:9b:52:b7:84:f1:d3:ea:
5f:e7:7e:72:89:5d:1e:92:c6:73:c5:c7:b7:9a:4e:e5:3a:1b:
b6:42:c8:91:12:8b:ef:0a:5b:8d:ac:7a:6e:b4:1d:de:ce:2f:
45:38:6f:fd:d0:08:b8:89:ba:60:ce:a5:b4:3e:cb:b9:89:c7:
85:38:c7:59:be:b9:5b:36:41:33:63:8e:3a:77:da:e2:40:2a:
03:d4:c4:33:dd:e9:bc:a7:ff:aa:47:13:79:86:85:8d:6e:d3:
e4:cc:b6:39:f4:f5:e9:65:cd:a5:05:93:b8:77:9a:35:50:7d:
4b:75:d2:b6:7d:a3:be:ca:45:6b:8b:63:0c:7b:ed:ec:d8:de:
c8:34:ef:cf:8f:39:15:f9:11:71:da:00:ed:98:42:00:0a:8d:
71:ad:5b:b7:bf:40:f6:34:85:c7:9e:ac:e4:22:ba:fc:ae:08:
76:25:3b:22:8a:5a:79:c0:5b:18:38:f2:e6:25:99:26:26:46:
b4:47:65:f1:b9:04:d8:35:a3:6e:81:e7:79:f9:df:d8:30:1a:
c8:74:50:7b:6e:d3:02:ad:32:d3:5b:ae:fc:13:46:50:39:7e:
e2:0d:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:36:24 2025 by rpki-client