Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/PJqDSFZ-4xsNR8v1qgF3LX9M874.roa
File: PJqDSFZ-4xsNR8v1qgF3LX9M874.roa (raw, json)
Hash identifier: NPldMBMTdEw7wCld10knBtD8rpw8xmiqvA9LrflMaIE=
Subject key identifier: 3C:9A:83:48:56:7E:E3:1B:0D:47:CB:F5:AA:01:77:2D:7F:4C:F3:BE
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01869C38FD3D59ACFCC7B4859830A9996E54
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/PJqDSFZ-4xsNR8v1qgF3LX9M874.roa
Signing time: Wed 01 Mar 2023 08:10:25 +0000
ROA not before: Wed 01 Mar 2023 08:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 81.16.64.0/20 maxlen: 20
194.252.0.0/16 maxlen: 16
194.215.0.0/16 maxlen: 16
86.114.0.0/16 maxlen: 21
192.83.96.0/22 maxlen: 22
212.83.96.0/19 maxlen: 24
213.140.160.0/19 maxlen: 19
192.83.100.0/24 maxlen: 24
141.208.0.0/16 maxlen: 16
193.208.0.0/14 maxlen: 14
194.111.0.0/16 maxlen: 16
195.165.0.0/16 maxlen: 16
192.89.123.0/24 maxlen: 24
194.197.68.0/24 maxlen: 24
192.194.0.0/16 maxlen: 24
192.130.0.0/16 maxlen: 24
213.173.128.0/19 maxlen: 19
194.251.0.0/16 maxlen: 16
131.177.0.0/16 maxlen: 16
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.112.0/22 maxlen: 22
62.73.32.0/19 maxlen: 19
217.140.128.0/17 maxlen: 17
192.83.64.0/19 maxlen: 19
192.103.116.0/24 maxlen: 24
192.83.0.0/18 maxlen: 18
84.248.0.0/14 maxlen: 21
188.238.0.0/16 maxlen: 16
192.103.85.0/24 maxlen: 24
194.137.0.0/16 maxlen: 16
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
88.86.128.0/19 maxlen: 19
212.149.64.0/18 maxlen: 18
192.58.80.0/21 maxlen: 21
192.58.88.0/23 maxlen: 23
213.28.0.0/16 maxlen: 24
195.156.0.0/16 maxlen: 16
80.220.0.0/14 maxlen: 21
193.210.18.0/24 maxlen: 24
193.210.19.0/24 maxlen: 24
109.240.0.0/16 maxlen: 16
212.182.192.0/18 maxlen: 24
192.58.42.0/23 maxlen: 23
192.58.44.0/22 maxlen: 22
192.58.48.0/20 maxlen: 20
192.58.64.0/20 maxlen: 20
93.106.0.0/16 maxlen: 16
194.197.0.0/16 maxlen: 16
176.72.0.0/16 maxlen: 16
194.89.0.0/16 maxlen: 16
192.89.0.0/16 maxlen: 16
62.71.0.0/16 maxlen: 16
84.34.0.0/16 maxlen: 16
193.178.133.0/24 maxlen: 24
88.192.0.0/14 maxlen: 21
80.74.192.0/19 maxlen: 19
46.132.0.0/16 maxlen: 16
212.213.0.0/16 maxlen: 24
86.115.0.0/16 maxlen: 16
194.142.0.0/16 maxlen: 16
2001:8b8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:38:fd:3d:59:ac:fc:c7:b4:85:98:30:a9:99:6e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Mar 1 08:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c9a8348567ee31b0d47cbf5aa01772d7f4cf3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:9c:f4:de:49:b0:40:88:32:ee:b3:cb:ab:
c3:cc:c8:09:27:5c:26:fa:80:30:ba:86:28:d2:33:
9e:af:49:36:c7:9c:c9:81:f2:93:f9:87:d5:8e:57:
54:9e:45:49:07:9d:94:79:77:b3:ec:88:9b:ba:af:
30:6a:4c:de:d0:c9:71:84:83:01:ed:50:ec:25:9b:
6e:2d:fb:6c:c4:79:e5:72:f1:05:32:96:2b:7f:3f:
53:24:65:0c:09:73:0d:bb:6c:03:c2:70:d9:2c:c6:
02:b0:ac:fe:ba:11:f9:0d:77:ed:34:04:be:f9:c9:
4d:5f:ff:fa:86:4f:ea:ed:9d:e1:77:b8:cd:13:c9:
d9:9d:da:70:c0:4e:25:c2:78:a8:15:8d:55:ff:95:
4e:bf:2a:b5:94:00:b3:16:69:4b:31:12:bc:ad:e0:
58:a0:5c:4b:f3:e8:72:ef:27:55:10:86:67:aa:e0:
cb:27:8c:6c:0e:af:db:ad:ea:5f:09:91:c0:89:7c:
c1:ea:84:1e:e4:b1:a4:d0:f0:a3:fa:30:00:ec:3e:
c9:d7:fd:3c:97:83:e7:f3:1a:fb:a7:81:76:4c:11:
ae:2b:25:f3:ce:78:88:06:64:18:c7:0e:c9:ff:39:
f9:20:13:39:ec:1e:9f:b3:4b:35:b7:83:ce:71:e6:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:83:48:56:7E:E3:1B:0D:47:CB:F5:AA:01:77:2D:7F:4C:F3:BE
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/PJqDSFZ-4xsNR8v1qgF3LX9M874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.132.0.0/16
62.71.0.0/16
62.73.32.0/19
80.74.192.0/19
80.220.0.0/14
81.16.64.0/20
84.34.0.0/16
84.248.0.0/14
86.114.0.0/15
88.86.128.0/19
88.192.0.0/14
93.106.0.0/16
109.240.0.0/16
131.177.0.0/16
141.208.0.0/16
176.72.0.0/16
188.238.0.0/16
192.58.42.0-192.58.89.255
192.83.0.0-192.83.100.255
192.89.0.0/16
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.112.0-192.103.116.255
192.130.0.0/16
192.194.0.0/16
193.178.133.0/24
193.208.0.0/14
194.89.0.0/16
194.111.0.0/16
194.137.0.0/16
194.142.0.0/16
194.197.0.0/16
194.215.0.0/16
194.251.0.0-194.252.255.255
195.156.0.0/16
195.165.0.0/16
212.83.96.0/19
212.149.64.0/18
212.182.192.0/18
212.213.0.0/16
213.28.0.0/16
213.140.160.0/19
213.173.128.0/19
217.140.128.0/17
IPv6:
2001:8b8::/29
Signature Algorithm: sha256WithRSAEncryption
4d:81:29:c0:ef:3d:b3:2c:82:8d:78:f6:6a:2d:d6:f1:4f:61:
dd:3b:54:2b:aa:ba:e8:a7:e9:ee:19:81:48:f9:6d:b3:7b:7f:
86:e5:7b:a5:25:5a:1e:b1:01:3b:47:96:b9:93:5e:eb:0c:82:
09:d0:36:81:ff:1e:e1:1b:71:ac:2d:67:86:61:3a:33:d5:bc:
e6:cd:31:d4:85:64:4a:ef:2c:84:71:27:af:3b:a4:fa:ce:b2:
fb:aa:02:53:cd:e0:fe:e2:d2:1c:af:34:31:ee:d4:7c:87:a4:
00:d7:4d:43:e9:e9:c9:8b:42:aa:73:11:aa:b1:36:51:e0:f9:
e5:83:f9:b6:de:1b:9e:c7:e1:d8:1f:af:71:4b:9a:89:7b:a5:
dc:46:7f:95:cc:cf:4a:d5:2e:44:a5:2e:59:09:7c:a1:4e:be:
86:65:29:92:c7:4c:1e:de:e8:f4:e4:46:df:ee:2c:55:b0:ef:
ae:62:0c:c9:13:72:c8:b1:e1:72:18:8a:25:77:a4:a1:36:c1:
97:98:1d:0a:70:db:5e:b1:a9:4a:f4:29:e9:1f:cb:88:d0:11:
41:07:11:c5:a7:bb:7f:17:9c:0a:dc:f0:0f:0d:a0:b4:e3:e9:
a6:b7:72:63:6a:13:73:bb:a5:fe:63:aa:94:7d:f7:9b:ab:b8:
cd:a2:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:50:56 2025 by rpki-client