Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eYYtOGWdvKubj4Og-85fHsw0pak.roa
File: eYYtOGWdvKubj4Og-85fHsw0pak.roa (raw, json)
Hash identifier: XvtUq60cby4B50YF/Q/Dou7unOT62AqoHyfs31T9kGM=
Subject key identifier: 79:86:2D:38:65:9D:BC:AB:9B:8F:83:A0:FB:CE:5F:1E:CC:34:A5:A9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B7704A93FEA9A4B963631B029B3A5571F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eYYtOGWdvKubj4Og-85fHsw0pak.roa
Signing time: Sat 28 Oct 2023 16:01:15 +0000
ROA not before: Sat 28 Oct 2023 16:01:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.233.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.237.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.253.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.182.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.67.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.33.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:77:04:a9:3f:ea:9a:4b:96:36:31:b0:29:b3:a5:57:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 28 16:01:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79862d38659dbcab9b8f83a0fbce5f1ecc34a5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:2f:b4:5f:a2:91:89:2d:e2:eb:9d:c0:42:
d4:f4:c0:b8:7c:84:bb:e2:05:c3:a4:ee:43:ec:a2:
d5:2c:9a:32:ea:c1:54:16:67:f4:7b:ac:7e:e1:a7:
87:b6:84:01:89:a6:f0:ac:7e:b6:51:dd:c6:0e:b9:
81:d4:70:69:ba:bf:1a:f5:cb:68:a0:69:a1:48:db:
5e:4e:52:32:94:bf:d9:7f:3b:5e:cc:b0:57:f6:e2:
52:a8:67:6b:bd:63:dd:b0:d2:4f:3f:96:16:84:1e:
18:7c:57:5f:d0:d3:bc:72:63:5a:54:94:5a:e7:18:
05:57:86:72:08:1e:62:df:1b:69:5a:34:21:24:ac:
42:36:bd:ec:ea:d2:32:25:a0:14:b4:37:95:17:0b:
e9:14:36:e9:2c:cd:a7:28:fb:74:b8:6f:22:a9:85:
21:22:d3:4d:b5:4e:a7:fb:5d:25:25:b6:47:f4:aa:
8a:5c:56:78:03:34:5a:a5:cb:49:b2:73:17:f4:26:
ed:a6:34:ee:72:16:0b:5f:aa:d4:34:7a:39:f7:b4:
35:a3:b0:9b:80:42:9f:17:50:15:87:5f:26:8d:56:
01:20:ea:a6:e9:0f:65:e0:e7:ab:22:1c:63:7a:ff:
66:d1:f0:93:24:ef:d0:ec:ee:42:ee:16:8e:08:18:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:86:2D:38:65:9D:BC:AB:9B:8F:83:A0:FB:CE:5F:1E:CC:34:A5:A9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eYYtOGWdvKubj4Og-85fHsw0pak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.66.0/24
84.32.95.0/24
84.32.105.0/24
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.157.0-84.32.159.255
84.32.174.0/23
84.32.178.0/23
84.32.210.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0/24
84.32.226.0/24
84.32.228.0/24
84.32.232.0/22
84.32.237.0-84.32.242.255
84.32.244.0/22
84.32.249.0-84.32.255.255
88.216.0.0/23
88.216.3.0/24
88.216.16.0/24
88.216.22.0/23
88.216.33.0/24
88.216.35.0/24
88.216.38.0/24
88.216.40.0/24
88.216.42.0-88.216.45.255
88.216.47.0/24
88.216.58.0/24
88.216.64.0/22
88.216.93.0/24
88.216.95.0/24
88.216.101.0-88.216.102.255
88.216.104.0/22
88.216.109.0-88.216.111.255
88.216.128.0-88.216.132.255
88.216.134.0/23
88.216.180.0/22
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.220.0/24
88.216.223.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:d6:b2:ac:bf:a4:01:c6:0d:cf:f4:9b:16:b4:25:92:3f:fb:
2d:ee:f7:62:2d:2d:8f:52:cf:98:a0:45:cf:22:8e:b1:0a:60:
a5:06:46:60:c6:de:d8:53:33:29:f3:26:12:1e:3f:61:40:e3:
e1:bc:5c:32:0b:fa:71:c3:2a:0e:49:4b:c5:8c:5d:d7:67:26:
52:51:9c:a8:ea:3e:b9:0e:b1:19:f6:28:d2:9c:cb:2d:4c:3d:
a0:5a:42:f9:a9:13:b8:1a:74:7f:37:a9:66:14:0f:fd:7a:7e:
c9:6a:9b:1c:10:aa:cd:9c:2d:b4:61:9b:8f:1d:f5:7e:99:76:
4c:9b:84:cf:66:e6:99:89:55:8f:e1:ec:bb:da:c0:8c:71:57:
ca:61:b2:8b:a6:41:64:f9:4d:ab:5b:ce:29:fd:ca:ac:10:36:
2b:d2:c5:66:d7:4c:73:1c:15:31:05:c1:d1:b8:97:5c:48:6c:
40:b9:fa:1e:b0:ce:da:ae:a8:bd:ec:6d:38:04:90:cb:5e:4c:
41:35:53:db:05:9f:f2:f8:62:f2:a7:af:fe:4a:4a:6b:60:2c:
56:4a:17:0b:7e:24:2a:1f:05:7e:a8:f8:d7:b7:f0:2e:12:4a:
cc:26:d5:64:c8:6c:7c:0e:06:96:d7:a0:8a:ac:62:ef:28:c4:
37:53:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:08:14 2025 by rpki-client