Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/64Mn0XHfPyCG2S8t3cWtpe1JuCs.roa
File: 64Mn0XHfPyCG2S8t3cWtpe1JuCs.roa (raw, json)
Hash identifier: ywB3t34FVx547Gy9Qd2imAhf5SAjIhaLE9JPeUJ8Xx0=
Subject key identifier: EB:83:27:D1:71:DF:3F:20:86:D9:2F:2D:DD:C5:AD:A5:ED:49:B8:2B
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 0188AC1CDAD3AF5E8558B85556B049199FA4
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/64Mn0XHfPyCG2S8t3cWtpe1JuCs.roa
Signing time: Sun 11 Jun 2023 20:19:12 +0000
ROA not before: Sun 11 Jun 2023 20:19:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202940
IP address blocks: 89.208.56.0/21 maxlen: 21
89.208.0.0/21 maxlen: 21
89.208.4.0/22 maxlen: 24
147.236.176.0/20 maxlen: 20
147.236.183.0/24 maxlen: 24
188.191.224.0/21 maxlen: 21
188.191.224.0/24 maxlen: 24
185.175.32.0/22 maxlen: 23
147.234.23.0/24 maxlen: 24
89.208.128.0/21 maxlen: 21
185.184.246.0/23 maxlen: 23
89.208.135.0/24 maxlen: 24
185.184.244.0/23 maxlen: 23
185.184.244.0/22 maxlen: 22
89.208.134.0/23 maxlen: 24
185.182.76.0/22 maxlen: 24
185.149.252.0/22 maxlen: 24
217.175.80.0/20 maxlen: 20
185.180.102.0/24 maxlen: 24
185.180.103.0/24 maxlen: 24
185.180.100.0/22 maxlen: 24
185.180.100.0/24 maxlen: 24
147.236.116.0/23 maxlen: 24
147.236.120.0/21 maxlen: 21
185.167.108.0/22 maxlen: 24
147.236.125.0/24 maxlen: 24
147.236.144.0/20 maxlen: 24
141.226.121.0/24 maxlen: 24
141.226.120.0/22 maxlen: 23
147.236.152.0/23 maxlen: 23
147.236.152.0/22 maxlen: 22
147.236.152.0/21 maxlen: 21
147.236.154.0/23 maxlen: 23
147.236.156.0/24 maxlen: 24
147.236.156.0/22 maxlen: 24
147.236.157.0/24 maxlen: 24
185.108.80.0/22 maxlen: 24
147.236.104.0/21 maxlen: 21
2a00:7c40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ac:1c:da:d3:af:5e:85:58:b8:55:56:b0:49:19:9f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jun 11 20:19:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb8327d171df3f2086d92f2dddc5ada5ed49b82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:99:1c:97:7e:d6:72:5d:65:74:94:3d:58:
af:ef:87:9a:db:c1:6d:b9:2f:18:e2:aa:e7:5e:33:
64:44:0c:3f:29:e8:cb:1f:47:b8:7d:cf:9c:79:94:
69:9e:06:78:cd:37:bf:0f:db:20:a7:c2:c6:cc:9f:
d8:57:27:dd:58:4a:5e:97:33:b3:d0:8e:a4:98:97:
b8:5b:0b:54:80:5e:5c:80:63:74:1c:e9:36:68:7d:
f4:c6:2a:4b:68:39:13:eb:6c:76:d9:fd:a9:7f:e8:
b6:85:b0:39:ac:3b:96:df:4f:e9:73:db:19:a4:ab:
f7:24:c9:3f:5e:d1:c2:bb:3d:d7:fc:6a:bb:ed:53:
8b:0b:f5:9e:34:34:76:34:15:43:3e:11:df:b4:a1:
ae:9e:a6:c9:21:0e:e9:67:da:59:b9:cd:c5:bd:72:
b7:aa:ec:f6:0f:ca:eb:08:12:cc:06:8a:f2:0c:8a:
20:06:1b:82:26:f0:96:95:6d:0a:0b:36:7f:e9:ca:
2d:17:d8:b1:ab:5e:ee:72:b9:d9:fd:fe:af:c3:f4:
3b:c1:ae:75:ac:74:2e:59:96:99:33:54:09:47:02:
9d:b6:40:01:1c:c0:62:a9:9d:88:a9:ab:43:26:1b:
b1:15:ae:b4:11:2f:92:41:2f:e4:3f:6e:fe:e2:ff:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:83:27:D1:71:DF:3F:20:86:D9:2F:2D:DD:C5:AD:A5:ED:49:B8:2B
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/64Mn0XHfPyCG2S8t3cWtpe1JuCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.208.0.0/21
89.208.56.0/21
89.208.128.0/21
141.226.120.0/22
147.234.23.0/24
147.236.104.0/21
147.236.116.0/23
147.236.120.0/21
147.236.144.0/20
147.236.176.0/20
185.108.80.0/22
185.149.252.0/22
185.167.108.0/22
185.175.32.0/22
185.180.100.0/22
185.182.76.0/22
185.184.244.0/22
188.191.224.0/21
217.175.80.0/20
IPv6:
2a00:7c40::/32
Signature Algorithm: sha256WithRSAEncryption
3b:2d:5c:52:ea:c8:8a:36:33:9b:f5:e5:77:7c:3e:25:3c:e3:
da:0c:5c:28:ca:16:7b:64:ea:cc:17:90:24:30:a9:a3:af:f4:
36:70:c5:b2:fb:3a:64:87:0a:0a:69:d2:36:a7:e8:9e:8f:19:
db:4d:ab:1c:f9:c7:fa:5a:c0:03:74:60:50:d9:98:86:78:aa:
a1:17:38:30:cd:83:59:93:56:40:b8:b3:ea:46:6a:d3:d9:e4:
10:35:ae:6c:5c:23:fc:da:bf:22:08:de:68:89:95:ae:b8:8a:
03:66:95:d1:93:9e:31:ff:c3:3a:23:2e:33:b7:54:4f:d8:28:
94:53:f3:40:11:d0:68:1b:24:f9:67:a0:d3:1e:ce:40:41:24:
79:5f:6a:c2:8c:83:6f:6e:2c:ec:d0:19:07:55:b3:77:9b:28:
12:96:7e:d5:af:0b:f1:6d:21:89:8f:69:de:98:17:02:51:79:
b7:da:4f:11:23:7b:90:99:bd:7f:f1:98:17:10:06:3a:64:9e:
9b:fa:09:35:17:cc:cd:c5:dc:eb:cf:3d:c0:2b:88:26:dc:e6:
b8:40:b2:5d:cc:ac:62:82:30:62:7f:cd:9c:b7:3f:fa:b4:9c:
35:91:c3:32:0f:fb:2a:d1:f9:f7:d7:dc:69:48:c3:a6:59:53:
d6:36:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 06:15:55 2025 by rpki-client