Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/OVzF13WSn2GGSbl2dufgUoM7xPc.roa
File: OVzF13WSn2GGSbl2dufgUoM7xPc.roa (raw, json)
Hash identifier: XaaZLCTXORGDlMCm0AattY1J292GHqAc9VKqVQna3Fc=
Subject key identifier: 39:5C:C5:D7:75:92:9F:61:86:49:B9:76:76:E7:E0:52:83:3B:C4:F7
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0189C220D24E1DCFBAF57782FEB6CA85E2B0
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/OVzF13WSn2GGSbl2dufgUoM7xPc.roa
Signing time: Fri 04 Aug 2023 19:57:58 +0000
ROA not before: Fri 04 Aug 2023 19:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 176.126.163.0/24 maxlen: 24
185.237.224.0/23 maxlen: 23
91.210.164.0/23 maxlen: 23
91.210.167.0/24 maxlen: 24
91.90.195.0/24 maxlen: 24
91.90.193.0/24 maxlen: 24
92.118.151.0/24 maxlen: 24
92.118.150.0/24 maxlen: 24
92.118.149.0/24 maxlen: 24
185.253.44.0/23 maxlen: 23
185.253.46.0/23 maxlen: 23
2a0a:8c44::/32 maxlen: 32
2a0a:8c45::/32 maxlen: 32
2a0a:8c43::/32 maxlen: 32
2a0a:8c42::/32 maxlen: 32
2a0a:8c41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c2:20:d2:4e:1d:cf:ba:f5:77:82:fe:b6:ca:85:e2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Aug 4 19:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=395cc5d775929f618649b97676e7e052833bc4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:a5:9c:8a:f4:d9:2f:78:2b:91:1d:b7:da:
e2:ee:5c:fc:4b:14:3b:1d:28:5f:f0:c9:13:45:c3:
47:92:18:47:fc:ef:2c:0f:4e:b2:c6:ba:0a:76:96:
6e:3c:c0:9f:f6:c0:2d:88:8b:e5:ce:28:2d:a8:1e:
6f:30:92:b6:83:ef:9a:b3:96:7c:02:95:95:a3:43:
fa:05:c3:7b:fc:3c:da:68:0b:c1:b1:de:3c:89:43:
13:6c:ec:c0:d3:34:a4:9f:4f:42:2e:8f:22:00:af:
4a:5a:90:94:76:67:47:ba:62:31:23:69:c9:de:29:
c4:45:9b:0e:81:62:80:fc:11:af:ab:cf:81:dd:d7:
7f:9c:87:f7:31:e6:fe:8b:56:7b:ae:74:03:4e:9d:
46:f0:2c:e7:a1:61:76:a9:61:18:eb:f4:c1:75:eb:
85:0c:8b:ab:8a:18:d1:29:60:a9:ab:fc:3b:d1:88:
ff:83:93:3f:d6:61:25:e7:28:9f:7e:6d:f8:b2:91:
3b:00:6b:d1:21:8a:a3:93:8e:9c:32:14:da:f4:68:
28:49:f1:27:49:64:79:3f:1a:56:ec:e5:cf:5a:93:
81:46:c7:3b:d4:24:91:29:21:11:65:05:e9:ef:e1:
a3:60:43:b9:cf:17:d5:20:c7:85:3f:38:cf:c9:96:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:C5:D7:75:92:9F:61:86:49:B9:76:76:E7:E0:52:83:3B:C4:F7
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/OVzF13WSn2GGSbl2dufgUoM7xPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.193.0/24
91.90.195.0/24
91.210.164.0/23
91.210.167.0/24
92.118.149.0-92.118.151.255
176.126.163.0/24
185.237.224.0/23
185.253.44.0/22
IPv6:
2a0a:8c41::-2a0a:8c45:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
65:5e:93:c2:56:3c:65:d1:83:a3:a4:63:31:33:4f:a2:4c:32:
0e:fe:0b:80:da:d8:fe:c4:b1:56:09:58:2d:49:8e:70:be:21:
e3:1d:4a:98:5a:f2:aa:98:1c:b7:f5:ac:41:d2:08:2b:42:c0:
79:46:1c:68:67:d8:91:48:f4:86:78:7a:86:c4:d0:9d:6a:d0:
2e:69:f0:60:f3:38:84:ca:d9:6c:99:a3:5c:c1:46:b3:67:8c:
48:86:7b:8a:b0:ca:52:1e:8d:c9:40:5f:fd:52:8c:bd:c9:50:
fb:2c:44:e3:94:6f:93:53:e9:63:cc:50:7f:ed:32:cb:b1:ce:
9e:4f:83:17:74:3b:ac:b1:75:77:80:e7:f8:ee:52:d2:2d:26:
61:68:49:55:28:dd:2a:13:df:e0:3c:10:45:6b:03:9d:dc:4d:
f8:c9:c1:d3:f6:1b:53:cb:0d:87:33:8a:05:ad:46:66:de:7c:
44:8a:63:ab:05:00:1e:3a:c7:fe:aa:74:c7:a4:ed:7d:af:b6:
49:6e:07:83:f5:ec:1d:16:10:69:6a:d5:a5:00:5a:6f:87:96:
08:07:3b:96:7e:8f:dd:3f:ac:f8:cc:89:db:f8:40:51:6e:3c:
0e:6f:66:a9:52:77:aa:1b:49:ab:f7:d5:00:39:fa:09:e6:a2:
01:9c:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:43:52 2025 by rpki-client