Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/1-obeDDDG0M16W-IGNKumLCKHtNs.roa
File: 1-obeDDDG0M16W-IGNKumLCKHtNs.roa (raw, json)
Hash identifier: iDgz5156liFxbDwfwPmwI8VngQ7oMMb40QZjAsVrQUM=
Subject key identifier: FA:86:DE:0C:30:C6:D0:CD:7A:5B:E2:06:34:AB:A6:2C:22:87:B4:DB
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 01867CFBBA671E0AC9CAAD0062F5BFA7F228
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/1-obeDDDG0M16W-IGNKumLCKHtNs.roa
Signing time: Thu 23 Feb 2023 06:35:17 +0000
ROA not before: Thu 23 Feb 2023 06:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198589
IP address blocks: 37.77.48.0/21 maxlen: 21
37.77.49.0/24 maxlen: 24
37.77.48.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.52.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
37.77.54.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
5.62.133.0/24 maxlen: 24
5.62.137.0/24 maxlen: 24
5.62.136.0/24 maxlen: 24
5.62.135.0/24 maxlen: 24
5.62.134.0/24 maxlen: 24
5.62.139.0/24 maxlen: 24
5.62.138.0/24 maxlen: 24
5.62.144.0/24 maxlen: 24
5.62.140.0/24 maxlen: 24
5.62.143.0/24 maxlen: 24
5.62.144.0/21 maxlen: 21
5.62.142.0/24 maxlen: 24
5.62.141.0/24 maxlen: 24
5.62.145.0/24 maxlen: 24
5.62.147.0/24 maxlen: 24
5.62.146.0/24 maxlen: 24
5.62.151.0/24 maxlen: 24
5.62.150.0/24 maxlen: 24
5.62.149.0/24 maxlen: 24
5.62.148.0/24 maxlen: 24
5.62.130.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
5.62.128.0/24 maxlen: 24
5.62.128.0/20 maxlen: 20
5.62.132.0/24 maxlen: 24
5.62.131.0/24 maxlen: 24
185.69.4.0/22 maxlen: 22
185.69.4.0/24 maxlen: 24
185.69.7.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
31.7.83.0/24 maxlen: 24
31.7.82.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.80.0/24 maxlen: 24
31.7.85.0/24 maxlen: 24
31.7.84.0/24 maxlen: 24
31.7.86.0/24 maxlen: 24
31.7.87.0/24 maxlen: 24
2a00:c9e0:0:1::/64 maxlen: 64
2a00:c9e0::/48 maxlen: 48
2a00:c9e0:8000::/48 maxlen: 48
2a00:c9e0:8::/48 maxlen: 48
2a00:c9e0::/32 maxlen: 32
2a00:c9e0::/62 maxlen: 62
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:fb:ba:67:1e:0a:c9:ca:ad:00:62:f5:bf:a7:f2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Feb 23 06:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa86de0c30c6d0cd7a5be20634aba62c2287b4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:0c:34:8e:3e:9e:e1:c3:5f:30:00:75:5f:
f8:63:69:b8:b9:03:95:36:8a:a7:c5:97:93:ab:6f:
0e:5d:26:be:ca:25:8c:41:a7:5b:46:38:a0:c5:4f:
1d:3d:77:b0:8b:99:94:68:e7:1c:1c:72:85:5e:c8:
7b:84:f5:69:3b:f7:8e:a7:45:a4:ec:89:ac:0a:4f:
70:bf:33:cf:89:79:2e:23:42:a3:b1:bd:e6:13:86:
63:48:79:76:28:37:d3:b1:92:4d:b3:54:78:d9:c0:
8b:e3:60:36:7d:af:e0:c2:27:6e:5e:06:d9:6a:2d:
0f:88:ab:80:a6:74:5d:c8:e5:bc:23:ae:48:90:7c:
fa:f8:7f:75:5c:c2:26:75:9f:7d:d2:df:25:60:31:
2d:7c:b2:b6:48:6c:bc:a5:bc:cd:6b:e2:1a:99:3c:
ca:8e:ba:70:b6:ad:9c:eb:89:7e:46:5b:16:88:71:
b7:30:f5:a5:78:0e:7e:15:97:3b:6e:88:25:cc:dc:
e3:67:02:58:36:00:e8:4f:17:38:d5:ac:d5:ac:9c:
76:e0:64:04:b5:ff:10:dd:a4:00:47:44:e9:b6:67:
71:67:e5:fc:84:48:b1:fa:b2:33:84:ec:e0:b4:38:
40:39:b7:4c:25:be:07:ca:8b:e7:32:54:04:06:49:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:86:DE:0C:30:C6:D0:CD:7A:5B:E2:06:34:AB:A6:2C:22:87:B4:DB
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/1-obeDDDG0M16W-IGNKumLCKHtNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0-5.62.151.255
31.7.80.0/21
37.77.48.0/21
185.69.4.0/22
IPv6:
2a00:c9e0::/32
Signature Algorithm: sha256WithRSAEncryption
46:a7:f5:89:d9:77:45:bc:49:8c:bd:ba:31:fa:27:c5:44:27:
80:12:ca:2a:af:b7:54:9a:6e:72:43:93:d5:37:68:6f:34:03:
c9:e3:e1:87:73:f4:bf:d3:18:8c:6b:67:13:a5:72:59:29:45:
72:dc:f4:0d:78:ea:6e:7e:7a:53:df:fd:77:bf:20:7a:2e:40:
ab:ae:74:eb:f2:d3:db:c2:c8:13:93:4c:c6:97:8d:14:4f:57:
c8:35:33:32:28:92:f0:fc:3d:41:28:11:88:5e:51:33:da:7a:
a6:22:e4:ec:f3:a9:dc:73:95:1d:e8:97:f8:32:b5:da:3b:5d:
b3:b0:68:52:72:ff:bd:c4:d7:28:6d:6e:81:09:5c:64:49:70:
40:85:ba:0a:7b:ba:86:83:7c:b5:6c:23:7d:bf:cc:d8:68:c3:
ca:7d:91:72:07:77:fd:55:16:4c:91:7a:7a:3e:41:75:eb:15:
5a:06:59:e5:89:69:60:84:c7:75:a7:df:c0:64:77:10:0f:32:
79:19:9d:e2:33:3e:65:cc:0b:39:76:fb:15:6a:51:0e:41:88:
9a:48:6a:9e:15:87:42:46:25:29:b0:8c:83:23:80:93:90:05:
64:3b:2e:4a:66:0b:71:e7:65:e1:d7:94:61:72:9a:e0:e2:c7:
f4:bb:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:31 2025 by rpki-client