Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/e8CGeaSrz0msfOwsQ7_GFku0mFs.roa
File: e8CGeaSrz0msfOwsQ7_GFku0mFs.roa (raw, json)
Hash identifier: Li8ufiPHDeJN2U5MhaIOu45H6frgvfUwrI8ixb42h2I=
Subject key identifier: 7B:C0:86:79:A4:AB:CF:49:AC:7C:EC:2C:43:BF:C6:16:4B:B4:98:5B
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018A59F1F80FB8DE82499C4046778DCC28BE
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/e8CGeaSrz0msfOwsQ7_GFku0mFs.roa
Signing time: Sun 03 Sep 2023 07:29:04 +0000
ROA not before: Sun 03 Sep 2023 07:29:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44709
IP address blocks: 91.228.126.0/23 maxlen: 23
194.36.91.0/24 maxlen: 24
194.36.90.0/24 maxlen: 24
194.36.89.0/24 maxlen: 24
195.238.120.0/24 maxlen: 24
5.100.250.0/23 maxlen: 23
5.100.251.0/24 maxlen: 24
5.100.250.0/24 maxlen: 24
5.100.252.0/23 maxlen: 23
5.100.253.0/24 maxlen: 24
5.100.252.0/24 maxlen: 24
5.100.249.0/24 maxlen: 24
5.100.248.0/23 maxlen: 23
5.100.248.0/24 maxlen: 24
212.80.204.0/24 maxlen: 24
212.80.206.0/24 maxlen: 24
212.80.205.0/24 maxlen: 24
5.100.254.0/24 maxlen: 24
5.100.254.0/23 maxlen: 23
5.100.255.0/24 maxlen: 24
212.80.207.0/24 maxlen: 24
188.191.147.0/24 maxlen: 24
31.133.103.0/24 maxlen: 24
31.133.102.0/24 maxlen: 24
31.133.100.0/24 maxlen: 24
195.28.181.0/24 maxlen: 24
195.28.180.0/24 maxlen: 24
109.207.76.0/24 maxlen: 24
185.241.4.0/24 maxlen: 24
109.207.79.0/24 maxlen: 24
185.241.7.0/24 maxlen: 24
185.241.6.0/24 maxlen: 24
185.241.5.0/24 maxlen: 24
185.220.207.0/24 maxlen: 24
45.83.40.0/24 maxlen: 24
45.83.43.0/24 maxlen: 24
45.83.42.0/24 maxlen: 24
185.56.72.0/22 maxlen: 22
45.93.95.0/24 maxlen: 24
45.93.92.0/24 maxlen: 24
45.93.94.0/24 maxlen: 24
45.93.93.0/24 maxlen: 24
81.28.7.0/24 maxlen: 24
91.223.106.0/24 maxlen: 24
63.250.63.0/24 maxlen: 24
63.250.61.0/24 maxlen: 24
63.250.62.0/24 maxlen: 24
185.28.152.0/24 maxlen: 24
185.28.154.0/24 maxlen: 24
185.28.153.0/24 maxlen: 24
185.28.155.0/24 maxlen: 24
83.229.71.0/24 maxlen: 24
83.229.70.0/24 maxlen: 24
83.229.74.0/24 maxlen: 24
83.229.73.0/24 maxlen: 24
83.229.72.0/24 maxlen: 24
103.13.209.0/24 maxlen: 24
185.253.75.0/24 maxlen: 24
185.253.73.0/24 maxlen: 24
185.253.72.0/24 maxlen: 24
185.162.125.0/24 maxlen: 24
185.162.124.0/24 maxlen: 24
185.162.126.0/24 maxlen: 24
185.47.175.0/24 maxlen: 24
185.47.174.0/24 maxlen: 24
91.202.171.0/24 maxlen: 24
91.202.168.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
91.202.169.0/24 maxlen: 24
91.226.76.0/24 maxlen: 24
91.226.72.0/24 maxlen: 24
2a06:c5c0:900::/48 maxlen: 48
2a06:c5c0:700::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:59:f1:f8:0f:b8:de:82:49:9c:40:46:77:8d:cc:28:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Sep 3 07:29:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bc08679a4abcf49ac7cec2c43bfc6164bb4985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:47:4b:74:28:77:f0:1d:e3:bc:96:3d:72:
70:be:7a:1b:0e:ed:a9:fe:58:a5:7d:e6:c2:ce:f4:
32:9d:8c:b2:06:f4:f8:fd:dd:0e:75:26:a7:67:80:
53:ea:be:e3:8e:cc:57:18:73:42:76:44:65:b1:42:
ab:29:19:fd:cc:82:8a:50:0d:77:32:c7:d2:74:4e:
7d:2a:12:a1:3e:42:b0:53:fe:84:ac:38:c6:ec:4f:
4c:c7:58:e9:7b:91:66:d6:46:06:c5:d7:1e:95:e4:
5b:f9:2c:7d:53:61:9e:d2:ac:31:2d:52:b1:1d:1e:
03:67:bb:ab:d5:1b:aa:76:75:22:18:67:b0:8e:5a:
2c:67:b4:01:54:e1:69:3d:b7:4d:b3:31:d4:f1:b4:
93:e2:dd:b7:5c:c1:6c:5a:4c:4e:cc:b9:ca:16:87:
bc:b5:93:9e:24:9e:a6:e7:a3:77:32:68:b5:f9:88:
e7:77:f0:d9:7a:c3:07:28:85:d1:44:d3:f8:e0:ba:
27:9a:b2:89:27:77:9a:1d:34:c5:33:65:a8:95:ef:
5c:74:15:de:16:dc:1c:ca:bc:d9:fa:5d:fe:af:4d:
0a:60:37:20:cc:4f:ce:ed:6a:de:04:3e:51:d7:7e:
88:c0:10:ff:95:24:d0:0b:8e:7a:e9:fc:40:bf:cf:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C0:86:79:A4:AB:CF:49:AC:7C:EC:2C:43:BF:C6:16:4B:B4:98:5B
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/e8CGeaSrz0msfOwsQ7_GFku0mFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.248.0/21
31.133.100.0/24
31.133.102.0/23
45.83.40.0/24
45.83.42.0/23
45.93.92.0/22
63.250.61.0-63.250.63.255
81.28.7.0/24
83.229.70.0-83.229.74.255
91.202.168.0/22
91.223.106.0/24
91.226.72.0/24
91.226.76.0/24
91.228.126.0/23
103.13.209.0/24
109.207.76.0/24
109.207.79.0/24
185.28.152.0/22
185.47.174.0/23
185.56.72.0/22
185.162.124.0-185.162.126.255
185.220.207.0/24
185.241.4.0/22
185.253.72.0/23
185.253.75.0/24
188.191.147.0/24
194.36.89.0-194.36.91.255
195.28.180.0/23
195.238.120.0/24
212.80.204.0/22
IPv6:
2a06:c5c0:700::/48
2a06:c5c0:900::/48
Signature Algorithm: sha256WithRSAEncryption
ac:69:17:2f:6f:3e:a9:43:d4:e5:ce:ad:cc:6d:bb:ee:6c:9e:
fa:24:31:62:37:91:bb:92:9b:e1:57:44:07:02:10:ea:5f:19:
53:ff:7a:37:fc:54:9b:c0:c4:e5:24:20:4f:9b:73:4c:9e:5d:
26:3d:6a:81:2c:4f:4b:4b:cd:69:6d:28:8a:b0:cc:f8:0d:fd:
c6:58:58:74:22:3d:ad:81:6f:aa:07:07:9f:7e:cd:54:8a:bd:
ef:43:0d:c9:78:3b:2d:64:73:d1:1d:a5:6a:a9:50:fd:38:8a:
c4:db:30:a1:bf:49:df:91:6d:b0:de:9f:2c:10:c7:51:07:cf:
6c:6c:5b:f2:a0:c3:d5:4b:fe:40:86:b2:bb:6f:f8:2d:40:5b:
48:07:86:34:92:c6:d9:64:49:b4:94:61:de:93:75:72:c4:69:
ce:d1:8f:88:1c:2f:50:31:ce:e0:bf:1b:80:aa:e6:f6:67:ce:
24:31:f4:29:94:3e:d7:87:13:99:3e:49:a4:f5:49:68:2d:a3:
77:f6:01:ad:f6:e6:da:b1:3c:19:20:31:c5:db:fd:5e:b6:2d:
63:43:f8:55:a7:1e:61:ec:b6:cf:ab:b3:dc:e7:fa:56:fe:8f:
b3:19:c2:d4:2d:16:59:8e:45:be:76:88:0e:88:11:44:31:5d:
ec:ef:9f:c1
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAYpZ8fgPuN6CSZxARneNzCi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4
MmVkNmQwHhcNMjMwOTAzMDcyOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmMwODY3OWE0YWJjZjQ5YWM3Y2VjMmM0M2JmYzYxNjRiYjQ5ODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZdHS3Qod/Ad47yWPXJwvnobDu2p
/lilfebCzvQynYyyBvT4/d0OdSanZ4BT6r7jjsxXGHNCdkRlsUKrKRn9zIKKUA13
MsfSdE59KhKhPkKwU/6ErDjG7E9Mx1jpe5Fm1kYGxdceleRb+Sx9U2Ge0qwxLVKx
HR4DZ7ur1RuqdnUiGGewjlosZ7QBVOFpPbdNszHU8bST4t23XMFsWkxOzLnKFoe8
tZOeJJ6m56N3Mmi1+Yjnd/DZesMHKIXRRNP44LonmrKJJ3eaHTTFM2Wole9cdBXe
FtwcyrzZ+l3+r00KYDcgzE/O7WreBD5R136IwBD/lSTQC4566fxAv897JwIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFHvAhnmkq89JrHzsLEO/xhZLtJhbMB8GA1UdIwQY
MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut
MjZkMWU1NDU3OGYxLzEvZThDR2VhU3J6MG1zZk93c1E3X0dGa3UwbUZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx
LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgdsEAgABMIHUAwQD
BWT4AwQAH4VkAwQBH4VmAwQALVMoAwQBLVMqAwQCLV1cMAwDBAA/+j0DBAY/+gAD
BABRHAcwDAMEAVPlRgMEAFPlSgMEAlvKqAMEAFvfagMEAFviSAMEAFviTAMEAVvk
fgMEAGcN0QMEAG3PTAMEAG3PTwMEArkcmAMEAbkvrgMEArk4SDAMAwQCuaJ8AwQA
uaJ+AwQAudzPAwQCufEEAwQBuf1IAwQAuf1LAwQAvL+TMAwDBADCJFkDBALCJFgD
BAHDHLQDBADD7ngDBALUUMwwGAQCAAIwEgMHACoGxcAHAAMHACoGxcAJADANBgkq
hkiG9w0BAQsFAAOCAQEArGkXL28+qUPU5c6tzG277mye+iQxYjeRu5Kb4VdEBwIQ
6l8ZU/96N/xUm8DE5SQgT5tzTJ5dJj1qgSxPS0vNaW0oirDM+A39xlhYdCI9rYFv
qgcHn37NVIq970MNyXg7LWRz0R2laqlQ/TiKxNswob9J35FtsN6fLBDHUQfPbGxb
8qDD1Uv+QIayu2/4LUBbSAeGNJLG2WRJtJRh3pN1csRpztGPiBwvUDHO4L8bgKrm
9mfOJDH0KZQ+14cTmT5JpPVJaC2jd/YBrfbm2rE8GSAxxdv9XrYtY0P4VaceYey2
z6uz3Of6Vv6PsxnC1C0WWY5FvnaIDogRRDFd7O+fwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:55:52 2025 by rpki-client