Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/GRetbfEiyTM7Du9ZKJ3q11FWvDc.roa
File: GRetbfEiyTM7Du9ZKJ3q11FWvDc.roa (raw, json)
Hash identifier: HaKCyoXnusnYdMW5tjXars6YLOAVMNN6Xz3izrPPNwo=
Subject key identifier: 19:17:AD:6D:F1:22:C9:33:3B:0E:EF:59:28:9D:EA:D7:51:56:BC:37
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0188308EF09C5657BB2CD1A79EAE7CBA4EEC
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/GRetbfEiyTM7Du9ZKJ3q11FWvDc.roa
Signing time: Thu 18 May 2023 20:30:53 +0000
ROA not before: Thu 18 May 2023 20:30:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
51.107.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
192.100.104.0/21 maxlen: 21
85.212.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
57.156.0.0/14 maxlen: 14
212.173.0.0/17 maxlen: 17
172.128.0.0/11 maxlen: 11
217.176.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
51.116.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
128.85.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:8e:f0:9c:56:57:bb:2c:d1:a7:9e:ae:7c:ba:4e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: May 18 20:30:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1917ad6df122c9333b0eef59289dead75156bc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:19:b4:21:c0:f2:b8:12:c6:36:23:95:8a:
87:54:3e:fc:ff:ba:7f:be:c7:8b:44:77:df:f2:98:
ea:c7:7c:43:1a:ad:f5:7f:1c:19:20:e5:13:47:b0:
85:59:cc:c6:95:aa:6c:a6:03:86:27:c3:c2:60:e1:
e8:f7:8a:9f:3e:2e:13:52:cb:7a:5a:ff:e9:65:fd:
2f:be:01:c6:a0:47:22:d6:0a:4d:6c:27:75:59:81:
8e:7e:4d:3b:fd:04:f1:66:e7:73:a3:51:7e:ff:ee:
5a:b4:8c:02:a1:d9:83:38:cd:cf:f8:b2:40:b3:ca:
81:73:a3:b5:f6:e9:07:38:9f:94:b0:b9:bf:19:a9:
ae:c3:51:6d:35:21:a6:7c:84:64:3c:6e:29:91:bf:
34:a4:7d:6a:bb:71:ef:06:7d:d2:9c:c8:ce:a6:8b:
24:c2:00:20:42:01:f9:7d:99:b0:60:57:ca:67:65:
bf:bd:b1:43:c8:8b:05:66:10:34:9f:a7:48:5b:5b:
c7:57:ff:97:6f:da:d8:95:d4:9b:74:0b:45:df:fd:
a3:b6:5a:0e:bc:62:f0:2a:6b:2b:97:0d:74:f8:48:
10:20:e6:fb:93:c6:12:01:fa:ad:31:13:c1:f1:62:
64:ef:ba:8d:5c:f1:c1:8b:6a:39:69:ef:5f:ab:ef:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:17:AD:6D:F1:22:C9:33:3B:0E:EF:59:28:9D:EA:D7:51:56:BC:37
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/GRetbfEiyTM7Du9ZKJ3q11FWvDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
82.87.0.0/16
85.212.0.0/16
94.245.64.0/18
128.85.0.0/16
132.164.0.0/16
135.130.0.0/16
138.105.0.0/16
143.226.0.0/16
147.243.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
157.31.0.0/16
157.95.0.0/16
159.128.0.0/16
167.162.0.0/16
167.186.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
209.199.0.0/16
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
03:af:7b:05:fd:2e:b7:5c:e7:08:b1:34:ae:33:4b:d2:67:5c:
30:36:9a:5e:b3:12:70:6d:37:eb:48:aa:b4:85:58:60:1a:00:
9e:9b:0b:e2:49:d4:0d:54:8d:53:16:1a:56:83:f4:e6:ee:89:
2a:5b:a5:2f:b0:91:1a:a6:1a:ce:1c:5a:ee:4b:a2:c3:87:51:
93:fb:e4:b6:6d:c1:c0:20:16:ba:01:61:e2:57:06:2b:ea:86:
4f:d2:09:57:82:53:6a:19:6b:3d:06:e2:f9:14:e4:19:aa:40:
85:67:4a:d7:3a:c9:f8:59:14:6f:a2:11:21:c9:cd:de:60:aa:
ba:22:a2:75:a2:45:b4:ad:19:b9:23:21:1b:88:6f:32:4e:2b:
d4:2a:b6:ec:0d:ec:29:f9:c5:0c:85:77:9d:ef:56:14:a1:a1:
45:51:be:ef:05:5e:37:de:5f:b6:4c:0d:f2:14:94:2f:53:6b:
23:95:7a:25:c0:bc:ec:a3:8c:34:ba:b5:90:6b:e4:2b:95:30:
41:54:28:14:45:e4:db:f7:e0:3c:8d:46:03:f7:71:4f:27:60:
0c:88:a7:ee:ee:93:af:7d:2d:d8:23:5b:94:fd:c5:4f:46:b2:
da:df:42:f7:55:8d:d0:99:7c:2d:43:65:e4:76:9e:6e:47:48:
29:bd:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:58 2025 by rpki-client