Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Dmwk6aYF1Xoxy0JTpCztzUqTIAI.roa
File: Dmwk6aYF1Xoxy0JTpCztzUqTIAI.roa (raw, json)
Hash identifier: BNSa6pMb6zIeyn03fQ581Buv93QRTsRl0JFZeGt3gCw=
Subject key identifier: 0E:6C:24:E9:A6:05:D5:7A:31:CB:42:53:A4:2C:ED:CD:4A:93:20:02
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018BF6FB3B84FE403932852924BC9087946A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Dmwk6aYF1Xoxy0JTpCztzUqTIAI.roa
Signing time: Wed 22 Nov 2023 12:22:21 +0000
ROA not before: Wed 22 Nov 2023 12:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
89.34.225.0/24 maxlen: 24
89.34.224.0/24 maxlen: 24
89.34.224.0/23 maxlen: 23
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.116.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.122.0/24 maxlen: 24
89.47.121.0/24 maxlen: 24
89.47.123.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.124.0/24 maxlen: 24
89.47.120.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:fb:3b:84:fe:40:39:32:85:29:24:bc:90:87:94:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 22 12:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e6c24e9a605d57a31cb4253a42cedcd4a932002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:3e:1e:99:ca:5e:ad:99:6b:c3:57:c0:63:
a2:a2:a8:da:e5:ad:fa:a1:81:ff:4a:23:76:b4:9f:
2b:9e:98:64:30:1f:e4:5e:84:47:6c:82:cd:bc:07:
69:1e:1c:24:0f:fa:95:84:a4:82:a2:14:24:42:32:
59:e7:59:8d:63:8c:b0:ad:03:c8:af:62:49:60:a4:
a3:cd:6f:36:fd:9b:ca:8a:f0:52:45:dd:16:f6:f6:
1a:c3:fe:e2:bd:fe:cf:30:8b:9a:cf:72:68:13:0e:
9a:e7:af:16:dd:77:6f:58:9f:2d:e5:b9:c7:ad:e4:
5b:0f:0e:ed:0a:bf:32:55:75:72:08:67:f5:4f:ed:
00:81:f0:6d:7d:93:e3:e6:69:4c:01:54:c0:bb:53:
90:c6:fb:77:68:3d:5c:85:cf:a8:58:1f:5f:f8:ea:
23:58:3a:24:f0:94:8b:80:04:4a:1e:8b:02:eb:de:
bd:0a:28:58:fa:6e:96:26:9a:03:66:54:11:e6:57:
ba:f6:43:69:fe:ee:8d:3a:9a:b8:87:55:f3:47:2d:
d6:86:f4:14:a4:29:e9:8e:f6:7e:7e:8f:07:f0:83:
da:9a:5b:3f:e1:9c:64:1a:95:96:e3:87:84:a2:cd:
4a:5d:df:1f:e2:a6:74:ef:8e:bd:1c:26:d2:d8:64:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:24:E9:A6:05:D5:7A:31:CB:42:53:A4:2C:ED:CD:4A:93:20:02
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Dmwk6aYF1Xoxy0JTpCztzUqTIAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.27.0/24
89.34.224.0/23
89.35.158.0/24
89.39.111.0/24
89.40.67.0/24
89.45.164.0/24
89.47.96.0/19
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
22:ca:c4:7a:9d:43:05:fb:d3:7f:38:e7:5b:9f:27:ac:50:0e:
91:eb:f7:25:bc:85:65:09:a2:a6:14:6f:6a:92:7a:e6:a3:d1:
aa:e9:f9:43:c9:6e:f8:ff:9c:6b:6c:90:2e:1d:f2:c3:9d:3e:
b3:b7:19:f4:25:a6:ad:c9:eb:f5:c4:32:60:4a:0c:3a:23:aa:
ef:28:69:73:4b:fa:08:76:87:a0:b4:30:f2:29:0c:cb:a3:89:
86:f3:d7:89:83:94:9e:ff:64:f6:bc:56:86:ff:60:20:7b:fb:
9f:09:2c:5c:68:11:ca:0c:0d:a4:ce:32:4d:4b:e2:a5:ba:c2:
21:c4:c7:5d:3f:d5:66:18:89:c0:13:cd:67:b1:41:10:04:8d:
69:41:45:b9:24:c5:20:dc:ae:11:28:7d:fb:8e:eb:3f:0b:1a:
86:9c:da:fd:df:c8:b6:55:75:55:7e:7e:cf:09:a6:e1:f1:02:
6e:c1:fa:eb:63:6a:67:cc:c5:e1:63:47:e8:09:a0:29:97:0b:
7b:25:ca:56:5b:fe:df:ba:87:ac:6c:6d:cb:54:5e:70:6a:a1:
bd:8f:5b:61:0b:31:37:9c:90:d2:3d:b6:ac:bf:43:1c:ce:cc:
64:f8:92:79:39:54:54:9c:b2:46:31:7a:0d:71:86:12:58:04:
04:aa:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:22:34 2025 by rpki-client