Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MH8sw5ztf_cKuRkQXeyDUNBrs44.roa
File: MH8sw5ztf_cKuRkQXeyDUNBrs44.roa (raw, json)
Hash identifier: 8LxYS96ezPN6GK2SWdy1WadTpuVuk0xw+bmasmkJBYo=
Subject key identifier: 30:7F:2C:C3:9C:ED:7F:F7:0A:B9:19:10:5D:EC:83:50:D0:6B:B3:8E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188E3FAF9C10A7A25B940665CAE358FCB49
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MH8sw5ztf_cKuRkQXeyDUNBrs44.roa
Signing time: Thu 22 Jun 2023 16:40:55 +0000
ROA not before: Thu 22 Jun 2023 16:40:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.62.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.184.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:fa:f9:c1:0a:7a:25:b9:40:66:5c:ae:35:8f:cb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 22 16:40:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=307f2cc39ced7ff70ab919105dec8350d06bb38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:83:51:de:36:49:61:5a:aa:52:e7:7b:82:
51:c3:80:c1:f1:54:de:81:e9:03:bf:86:a5:a1:f6:
f0:fd:3f:0f:79:f8:51:71:7e:93:39:08:35:43:1f:
61:28:ec:c0:37:8e:de:1b:93:e0:a0:69:c1:18:1b:
90:e8:d6:d9:56:cd:d0:82:65:dc:18:cd:e0:dc:6d:
56:67:5f:6e:bd:5f:d5:16:21:d3:25:24:fb:f1:c0:
fa:8e:2e:a8:23:fb:90:f6:dc:4b:fa:e8:70:73:70:
7a:ac:f0:59:67:34:69:e0:e8:8d:52:93:f4:a1:48:
68:8a:5b:76:1d:ce:c2:3d:db:f3:fb:90:7f:89:f6:
88:64:b1:09:dd:69:b5:71:d1:6f:1f:8a:f1:ce:9a:
bd:11:62:c7:8f:a6:3e:75:9f:d3:55:76:d3:89:63:
7b:3c:84:dc:19:b1:24:6e:50:c4:a2:a1:59:b9:fa:
93:c2:e1:7f:ba:b2:55:c8:df:44:4b:04:82:57:28:
fc:c7:61:3c:6c:58:7e:9b:26:e9:9f:a4:65:72:5d:
2c:1e:0f:1f:ba:e6:f6:d5:2a:50:48:9c:9f:7f:b7:
d2:ed:18:7f:ff:ce:e1:e7:e9:ac:b9:d0:d5:98:32:
4d:9d:ba:0c:93:8d:36:c3:9e:c3:84:2a:1b:74:e4:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7F:2C:C3:9C:ED:7F:F7:0A:B9:19:10:5D:EC:83:50:D0:6B:B3:8E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MH8sw5ztf_cKuRkQXeyDUNBrs44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.31.0/24
84.32.46.0/24
84.32.60.0/24
84.32.62.0/24
84.32.65.0/24
84.32.67.0-84.32.68.255
84.32.79.0/24
84.32.92.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.156.0/22
84.32.178.0/23
84.32.214.0/23
84.32.221.0/24
84.32.224.0/24
84.32.231.0-84.32.232.255
84.32.235.0/24
84.32.239.0-84.32.240.255
84.32.243.0/24
84.32.246.0/23
84.32.250.0-84.32.253.255
88.216.0.0/24
88.216.3.0/24
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0/24
88.216.38.0-88.216.40.255
88.216.44.0/23
88.216.58.0/24
88.216.60.0-88.216.65.255
88.216.100.0/23
88.216.106.0/24
88.216.109.0/24
88.216.111.0/24
88.216.130.0/23
88.216.134.0/23
88.216.180.0/24
88.216.183.0-88.216.184.255
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
46:30:9c:d8:42:42:6a:75:ce:a6:f8:f9:19:cc:fe:4e:aa:76:
81:f4:97:10:bd:d1:92:a4:54:39:09:06:2e:1e:17:07:71:27:
0c:d9:08:fa:14:5f:12:8f:78:5b:c8:94:4a:bd:14:75:79:0d:
e2:96:d0:75:aa:c7:d6:e3:f9:df:d8:80:80:b1:b3:40:e3:14:
ef:d9:2a:09:15:2e:3d:2e:69:af:43:86:e5:7c:42:e3:ce:af:
78:d8:c8:fa:d8:dd:1c:3b:e8:7a:55:c2:f8:02:a9:5d:ec:af:
36:cb:99:03:ac:bb:0f:c9:d9:af:05:8d:5a:71:d9:11:0f:a3:
7d:3b:61:ef:45:12:2f:33:5b:7a:74:e2:fa:d5:f3:6e:ff:9c:
36:b6:89:3c:85:93:39:41:6b:60:2d:4f:7f:e5:3b:18:21:f3:
c1:f0:17:cb:8a:f3:4d:38:68:4e:93:5c:2e:5f:9c:d7:c0:1b:
89:fb:b4:e7:04:5a:a3:29:61:cb:3b:f4:1a:32:07:3c:c2:f4:
08:82:39:e4:51:41:ec:84:22:a4:05:cd:cd:b8:17:fb:56:56:
bb:eb:73:a9:3c:6e:5c:7e:2a:01:56:67:ea:f6:59:10:35:f8:
c8:88:5b:9c:ac:e6:23:c3:5a:db:c6:aa:ba:37:39:4e:e1:fc:
7e:b4:83:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:23:17 2025 by rpki-client