Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/gi4TmLiJbMg-uPV72fzDwBrKjrI.roa
File: gi4TmLiJbMg-uPV72fzDwBrKjrI.roa (raw, json)
Hash identifier: aarpXpWYtVqnk5AAOtx1QwCM4enySGwjFVLC0OcXtgQ=
Subject key identifier: 82:2E:13:98:B8:89:6C:C8:3E:B8:F5:7B:D9:FC:C3:C0:1A:CA:8E:B2
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 018697138B6E2DD92FAC33CCDC7AD895B6D2
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/gi4TmLiJbMg-uPV72fzDwBrKjrI.roa
Signing time: Tue 28 Feb 2023 08:11:25 +0000
ROA not before: Tue 28 Feb 2023 08:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 81.16.64.0/20 maxlen: 20
194.252.0.0/16 maxlen: 24
194.215.0.0/16 maxlen: 24
86.114.0.0/16 maxlen: 21
192.83.96.0/22 maxlen: 22
212.83.96.0/19 maxlen: 24
213.140.160.0/19 maxlen: 19
192.83.100.0/24 maxlen: 24
141.208.0.0/16 maxlen: 16
193.208.0.0/14 maxlen: 14
194.111.0.0/16 maxlen: 24
195.165.0.0/16 maxlen: 24
192.89.123.0/24 maxlen: 24
194.197.68.0/24 maxlen: 24
192.194.0.0/16 maxlen: 24
192.130.0.0/16 maxlen: 24
213.173.128.0/19 maxlen: 19
194.251.0.0/16 maxlen: 24
131.177.0.0/16 maxlen: 16
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.112.0/22 maxlen: 22
62.73.32.0/19 maxlen: 19
217.140.128.0/17 maxlen: 17
192.83.64.0/19 maxlen: 19
192.103.116.0/24 maxlen: 24
192.83.0.0/18 maxlen: 18
84.248.0.0/14 maxlen: 21
188.238.0.0/16 maxlen: 16
192.103.85.0/24 maxlen: 24
194.137.0.0/16 maxlen: 24
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
88.86.128.0/19 maxlen: 19
212.149.64.0/18 maxlen: 18
192.58.80.0/21 maxlen: 21
192.58.88.0/23 maxlen: 23
195.156.0.0/16 maxlen: 24
213.28.0.0/16 maxlen: 24
80.220.0.0/14 maxlen: 21
193.210.18.0/24 maxlen: 24
193.210.19.0/24 maxlen: 24
109.240.0.0/16 maxlen: 16
212.182.192.0/18 maxlen: 24
192.58.42.0/23 maxlen: 23
192.58.44.0/22 maxlen: 22
192.58.48.0/20 maxlen: 20
192.58.64.0/20 maxlen: 20
93.106.0.0/16 maxlen: 16
194.197.0.0/16 maxlen: 24
176.72.0.0/16 maxlen: 16
192.89.0.0/16 maxlen: 24
194.89.0.0/16 maxlen: 16
62.71.0.0/16 maxlen: 16
84.34.0.0/16 maxlen: 16
193.178.133.0/24 maxlen: 24
88.192.0.0/14 maxlen: 21
80.74.192.0/19 maxlen: 19
46.132.0.0/16 maxlen: 16
212.213.0.0/16 maxlen: 24
86.115.0.0/16 maxlen: 16
194.142.0.0/16 maxlen: 24
2001:8b8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:13:8b:6e:2d:d9:2f:ac:33:cc:dc:7a:d8:95:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Feb 28 08:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=822e1398b8896cc83eb8f57bd9fcc3c01aca8eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:c1:6e:1f:12:8c:4f:21:ae:90:4a:af:bf:
48:0c:ba:4b:da:7e:92:9d:fa:b3:4f:fe:1d:27:39:
a3:42:22:cf:94:80:a3:21:2f:97:82:ba:76:54:46:
9a:90:d3:07:10:0b:45:13:fb:b0:e1:ac:6a:e3:3b:
c3:b6:32:be:ab:f0:12:cb:7e:d4:97:65:91:ef:1f:
43:b3:06:bf:97:4b:d0:0e:40:19:67:de:99:5a:d7:
82:61:c3:28:cd:2a:01:97:48:1d:a9:2d:ae:ff:29:
41:d0:c9:4c:5b:66:76:c1:30:d1:43:c5:62:c4:a5:
43:5f:1e:ff:7b:4e:53:ab:8f:58:86:f5:28:27:bb:
d8:ca:1e:d7:01:50:7d:09:9b:f4:78:33:a8:00:44:
5c:39:4c:5c:03:12:89:33:4d:dc:06:18:2e:15:5e:
8e:20:eb:84:09:6e:14:a3:5d:09:7d:38:17:48:a6:
d6:ac:73:1a:29:32:ea:e9:1c:0d:db:29:9a:3b:49:
de:4e:0a:c4:da:b2:07:7a:c6:c9:dd:a9:ce:7f:1a:
11:c2:e2:ff:d8:39:25:27:ea:97:ad:85:1c:fb:84:
00:8b:bb:49:bf:22:e7:8c:98:7c:f6:db:14:02:9f:
e9:3b:0f:10:5d:6a:a6:0b:c8:33:4c:75:04:20:f6:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2E:13:98:B8:89:6C:C8:3E:B8:F5:7B:D9:FC:C3:C0:1A:CA:8E:B2
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/gi4TmLiJbMg-uPV72fzDwBrKjrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.132.0.0/16
62.71.0.0/16
62.73.32.0/19
80.74.192.0/19
80.220.0.0/14
81.16.64.0/20
84.34.0.0/16
84.248.0.0/14
86.114.0.0/15
88.86.128.0/19
88.192.0.0/14
93.106.0.0/16
109.240.0.0/16
131.177.0.0/16
141.208.0.0/16
176.72.0.0/16
188.238.0.0/16
192.58.42.0-192.58.89.255
192.83.0.0-192.83.100.255
192.89.0.0/16
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.112.0-192.103.116.255
192.130.0.0/16
192.194.0.0/16
193.178.133.0/24
193.208.0.0/14
194.89.0.0/16
194.111.0.0/16
194.137.0.0/16
194.142.0.0/16
194.197.0.0/16
194.215.0.0/16
194.251.0.0-194.252.255.255
195.156.0.0/16
195.165.0.0/16
212.83.96.0/19
212.149.64.0/18
212.182.192.0/18
212.213.0.0/16
213.28.0.0/16
213.140.160.0/19
213.173.128.0/19
217.140.128.0/17
IPv6:
2001:8b8::/29
Signature Algorithm: sha256WithRSAEncryption
8e:21:19:81:52:06:c7:d0:57:57:e6:2a:6e:fa:97:6d:be:90:
f2:68:39:ab:23:c9:a7:27:2b:87:e2:07:3a:4f:fd:ec:05:cd:
c8:bb:95:f9:29:24:5d:98:a4:8f:1a:f2:64:8a:71:fc:c2:80:
87:75:f9:47:e9:87:c6:94:c8:a6:0c:70:5b:15:25:36:4e:8c:
24:6b:48:20:a0:e7:76:fe:ad:63:d3:5e:d2:d2:74:ed:5b:90:
56:47:8a:73:f6:3b:11:de:fa:ae:3d:c9:cf:7d:80:f7:08:ee:
5c:e0:a5:b0:41:3c:0c:7e:1c:71:eb:0b:9c:48:36:b8:be:8a:
eb:bd:8b:04:2b:11:41:6f:7c:37:cb:5e:66:19:ef:97:82:5e:
87:1c:d8:34:ab:1c:62:0d:3d:00:67:c4:65:f5:10:27:b7:27:
f3:2f:f7:7f:67:5f:1f:b2:df:4e:18:78:24:2a:fc:64:4c:ab:
70:ff:72:0a:ab:73:35:69:57:e8:57:84:98:72:98:4f:06:58:
f7:c2:af:53:54:6f:51:db:4c:23:ff:b2:e5:9f:4b:48:a8:5c:
ac:9b:65:ae:45:99:ef:a2:95:96:ee:e2:22:a3:ee:cd:b0:c4:
83:cd:bc:08:40:7a:b6:0e:22:90:d1:cb:c4:67:15:22:66:43:
72:81:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:01:28 2025 by rpki-client