Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pLs51u7M8tuTpCdWodHQGCthU-Q.roa
File: pLs51u7M8tuTpCdWodHQGCthU-Q.roa (raw, json)
Hash identifier: Faz0rlhxiV4xCq6kPXHuc8eR43xv9II1ZCeV8xTaWPw=
Subject key identifier: A4:BB:39:D6:EE:CC:F2:DB:93:A4:27:56:A1:D1:D0:18:2B:61:53:E4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018ABC5B09C0933F6D7A8C6DC806776BA08A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pLs51u7M8tuTpCdWodHQGCthU-Q.roa
Signing time: Fri 22 Sep 2023 10:06:37 +0000
ROA not before: Fri 22 Sep 2023 10:06:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.209.36.0/23 maxlen: 24
185.220.249.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:5b:09:c0:93:3f:6d:7a:8c:6d:c8:06:77:6b:a0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 22 10:06:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4bb39d6eeccf2db93a42756a1d1d0182b6153e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:2a:1f:6c:66:ea:84:91:6b:56:93:89:b7:
35:e4:e3:5e:19:54:a2:6b:83:5d:34:3f:b1:4d:fa:
01:10:b2:46:7d:c8:0a:5d:51:b1:7b:cd:01:65:82:
79:c0:29:eb:63:c6:cb:9c:ca:a5:c7:42:da:fa:a4:
c3:62:b8:dd:a0:43:e7:2f:40:46:10:f9:9a:69:cc:
b4:bc:3f:dc:54:19:0d:6d:44:75:6e:f7:ce:29:26:
9f:f1:98:2e:f4:a2:7a:f5:03:f7:0e:d6:f2:6d:88:
6e:60:0f:40:60:37:c6:04:9a:8b:fc:d8:d3:09:bd:
45:d8:68:35:f3:1e:97:e6:a7:d7:c4:63:2f:0b:a8:
e9:b9:88:95:17:ee:13:6d:c1:8f:db:70:41:1a:55:
2b:34:79:39:48:11:73:97:ec:ae:ec:c6:0d:1e:72:
ec:7b:52:08:a9:94:05:6c:47:fc:8e:b7:19:20:47:
db:9f:fb:e8:0b:42:08:50:90:da:55:33:66:72:b4:
45:6f:65:cc:c6:da:4d:5e:e6:19:dd:13:d9:28:c1:
06:5d:f7:23:8f:99:f7:fa:5c:c1:2c:c0:b0:5a:6d:
8d:2c:8e:fb:b8:ce:13:32:25:6d:87:f1:39:7d:5f:
90:34:9b:60:fd:65:35:25:2a:1b:c8:e4:d0:ed:d6:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BB:39:D6:EE:CC:F2:DB:93:A4:27:56:A1:D1:D0:18:2B:61:53:E4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pLs51u7M8tuTpCdWodHQGCthU-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.12.0/22
185.199.159.0/24
185.206.248.0/23
185.206.251.0/24
185.209.36.0/23
185.210.152.0/22
185.220.249.0/24
185.223.76.0/24
185.225.2.0/24
185.226.105.0/24
185.226.107.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
Signature Algorithm: sha256WithRSAEncryption
88:14:e4:8d:af:a3:5a:c6:49:59:ad:6c:59:97:be:62:d4:fa:
12:85:8d:36:45:20:e8:6b:d6:8c:77:fb:76:6d:b6:7c:46:0c:
6a:c8:83:33:e6:f1:58:28:ea:0b:0f:4b:62:aa:4f:f1:cf:31:
99:74:77:c9:a8:a2:f9:ea:6b:8c:37:e2:74:70:2a:ef:66:d4:
ce:d6:08:13:da:39:01:a7:5e:bb:5a:df:c8:ac:6b:8c:56:b5:
09:2e:ca:e0:47:be:1f:b0:04:20:ce:85:17:93:30:b5:02:04:
13:23:ef:86:e8:2d:88:75:f4:38:89:3c:f7:ab:17:48:6c:4b:
cf:52:ea:da:42:f9:51:b6:3b:70:6d:de:c4:13:9e:c5:41:d8:
db:1f:19:3b:86:03:ce:8d:e2:00:af:85:27:67:f1:27:cd:f5:
a3:7a:4f:80:cb:f0:03:10:2b:95:9f:d3:28:3b:fa:72:23:aa:
12:f6:77:fb:f6:fd:36:f8:f9:d2:11:1a:3e:a3:30:53:29:2f:
77:8d:a1:4f:cc:fd:b1:52:ce:a6:db:c2:10:73:bd:76:09:cf:
c7:99:e5:23:86:c4:f3:68:6e:9e:41:4f:97:dc:dc:db:c8:31:
c2:81:51:64:18:36:31:a6:9e:3f:a5:33:03:51:83:d0:ef:e0:
be:8c:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:29:47 2025 by rpki-client