Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BuZgsZZbkbdb1YQuwPxH234mewg.roa
File: BuZgsZZbkbdb1YQuwPxH234mewg.roa (raw, json)
Hash identifier: pon/P/rzSvgmjZprzHTHm8/orus+FKT26uhiF4Xgff8=
Subject key identifier: 06:E6:60:B1:96:5B:91:B7:5B:D5:84:2E:C0:FC:47:DB:7E:26:7B:08
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B9E315928B8297D9CC28C829D94E68EA3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BuZgsZZbkbdb1YQuwPxH234mewg.roa
Signing time: Sun 05 Nov 2023 06:35:16 +0000
ROA not before: Sun 05 Nov 2023 06:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.164.0/22 maxlen: 22
62.72.166.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/22 maxlen: 22
62.72.170.0/24 maxlen: 24
62.72.167.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.184.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:31:59:28:b8:29:7d:9c:c2:8c:82:9d:94:e6:8e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 5 06:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06e660b1965b91b75bd5842ec0fc47db7e267b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:4c:db:9d:29:b8:3e:d6:e2:5d:0e:30:e1:
77:c4:67:f7:af:19:ad:d6:ce:0c:38:70:ab:7d:f4:
86:4e:8b:47:18:9c:42:ea:dc:67:a8:02:8b:4d:f4:
81:3f:31:43:b1:87:de:64:d0:fb:fe:8d:73:91:ec:
3a:a0:bb:3f:46:4a:88:2e:f4:2f:97:d7:6e:f0:3e:
4b:80:5c:27:e5:f0:8d:e1:5a:b2:7d:ba:89:53:dc:
21:0c:18:9d:38:b9:c6:e5:6f:63:0b:fa:0f:67:0d:
48:01:13:57:dc:5c:d6:04:61:9e:d3:52:eb:83:32:
fc:33:3f:67:85:ea:69:e2:35:c1:ab:c5:a7:f7:10:
19:fb:8a:3d:cf:45:17:b1:30:b9:25:53:9f:bf:79:
bf:82:1f:4c:39:49:bb:77:84:cd:9c:55:29:1a:c9:
c1:c0:77:77:a9:de:b3:29:4a:38:4b:7b:57:0c:e3:
57:39:29:72:81:5e:4e:2d:70:24:77:57:2e:1d:d2:
ca:d7:e6:24:95:0d:bb:e0:21:82:70:fd:87:f6:fe:
a9:fd:7a:69:fe:9b:79:86:31:23:fc:06:b1:5b:40:
7a:a2:52:9f:ea:44:a8:65:1e:53:f5:72:dc:29:57:
62:29:c7:e2:16:f4:ce:74:d7:29:37:a9:1a:5c:c3:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:60:B1:96:5B:91:B7:5B:D5:84:2E:C0:FC:47:DB:7E:26:7B:08
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BuZgsZZbkbdb1YQuwPxH234mewg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.171.255
62.72.173.0-62.72.175.255
62.72.177.0/24
62.72.179.0-62.72.182.255
62.72.184.0-62.72.189.255
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.9.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b2:dd:3d:94:6f:66:97:a5:fb:5d:00:8b:4e:28:10:d0:bf:
27:ef:c9:d3:3d:6f:6d:3c:ef:49:94:a9:2b:df:fa:f3:55:f6:
87:09:79:6d:82:44:78:25:78:7d:68:de:4d:7e:bc:de:da:50:
ef:8c:34:f3:6a:14:8d:bf:c3:6a:82:11:94:fc:a0:b2:87:ef:
27:5a:a4:f4:c8:e9:5c:70:41:c0:60:c4:1e:ec:10:86:c1:de:
12:bf:64:e0:69:c3:09:23:36:6e:f1:c7:cb:28:e7:84:ed:07:
57:b8:60:b4:88:a7:95:f5:cb:c9:a0:0d:69:4e:d2:26:d3:8b:
3d:e4:44:fc:5d:40:78:f3:e3:81:d3:85:32:23:43:fc:0e:47:
46:83:ec:b3:d8:08:a1:52:d9:03:74:2c:2c:d8:1f:af:79:b8:
b1:c8:74:ca:59:7f:8a:c3:d7:f8:75:9b:d9:9d:e3:5b:8b:12:
1b:7f:14:7f:45:a5:cd:22:24:58:33:66:57:c5:6d:9f:77:33:
c3:01:9c:81:ae:b3:f8:4b:a2:f0:0b:ba:24:85:5a:64:5e:64:
c4:8f:4d:55:9c:5f:c0:5c:4c:73:ca:fc:0a:82:19:3a:b2:89:
47:fd:de:84:19:76:5f:93:05:c3:d0:08:f6:eb:f0:5d:01:f6:
1d:86:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:11:58 2025 by rpki-client