Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/5xDjEg7yimw00R8AMNsO99mbZgo.roa
File: 5xDjEg7yimw00R8AMNsO99mbZgo.roa (raw, json)
Hash identifier: W5B2uqFXiq4IogKxGgVVLZ9Hwl19+5Da9/9RtIW/ANg=
Subject key identifier: E7:10:E3:12:0E:F2:8A:6C:34:D1:1F:00:30:DB:0E:F7:D9:9B:66:0A
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 0185710327C09D4B6DC1CEBF45AE88A48392
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/5xDjEg7yimw00R8AMNsO99mbZgo.roa
Signing time: Mon 02 Jan 2023 05:45:10 +0000
ROA not before: Mon 02 Jan 2023 05:45:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31263
IP address blocks: 80.88.160.0/20 maxlen: 20
45.142.184.0/22 maxlen: 22
31.44.160.0/20 maxlen: 20
45.67.40.0/22 maxlen: 22
31.193.144.0/20 maxlen: 20
80.68.176.0/20 maxlen: 20
45.94.0.0/22 maxlen: 22
77.241.12.0/22 maxlen: 22
84.247.208.0/20 maxlen: 20
84.247.224.0/19 maxlen: 19
79.133.100.0/22 maxlen: 22
119.12.32.0/20 maxlen: 20
92.62.80.0/20 maxlen: 20
77.240.224.0/20 maxlen: 20
77.241.0.0/21 maxlen: 21
84.247.192.0/18 maxlen: 18
77.241.10.0/24 maxlen: 24
77.241.10.0/23 maxlen: 23
77.241.11.0/24 maxlen: 24
178.238.48.0/20 maxlen: 20
185.5.196.0/22 maxlen: 22
93.91.128.0/20 maxlen: 20
185.229.172.0/22 maxlen: 22
178.175.192.0/18 maxlen: 18
2a07:5ec0::/29 maxlen: 29
2a07:55c0::/29 maxlen: 29
2a07:580::/29 maxlen: 29
2a07:4f00::/29 maxlen: 29
2a02:600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:27:c0:9d:4b:6d:c1:ce:bf:45:ae:88:a4:83:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jan 2 05:45:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e710e3120ef28a6c34d11f0030db0ef7d99b660a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:a2:09:fb:d8:c2:5a:1d:55:4c:33:e1:f4:
a5:21:c1:e0:f9:9e:ee:55:02:57:70:f3:b5:d8:52:
e8:0e:21:99:7a:6d:a0:3d:7e:d5:b0:cc:64:bd:7e:
c6:0b:01:af:0f:63:28:5e:e8:ab:32:dc:50:18:af:
f4:d6:4d:46:6e:a9:fe:02:57:a0:20:b3:24:4d:84:
3b:35:84:0f:cf:e6:09:ce:b2:d4:eb:22:ce:a9:09:
d0:1d:21:bc:44:2b:98:8a:17:e1:81:0b:8a:e1:6c:
86:2c:e0:d9:fe:6e:3f:f9:64:93:f6:9e:e4:74:f1:
5e:25:ee:2d:09:64:87:ea:db:9a:88:60:da:2a:90:
cc:8d:be:50:e0:54:51:f3:73:a9:77:d4:16:cd:8e:
45:d4:ed:f0:ce:7b:c4:f1:9e:ee:fa:0a:7d:a0:dd:
ec:3d:f4:65:b2:34:8a:cb:35:ca:21:34:f3:37:f4:
6c:5d:74:2c:6b:37:5f:33:d2:1d:8f:fd:6b:3e:e7:
c1:ac:d9:75:c9:7e:78:eb:a0:ad:c3:3f:c2:03:05:
ee:6f:02:01:10:8e:2a:83:0f:ad:33:ca:e9:55:27:
31:c0:29:5f:ac:b2:e8:25:09:fe:7f:9a:09:7f:36:
b4:71:a9:1e:3d:63:89:87:6c:f3:32:f9:2d:0d:08:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:E3:12:0E:F2:8A:6C:34:D1:1F:00:30:DB:0E:F7:D9:9B:66:0A
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/5xDjEg7yimw00R8AMNsO99mbZgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.160.0/20
31.193.144.0/20
45.67.40.0/22
45.94.0.0/22
45.142.184.0/22
77.240.224.0/20
77.241.0.0/21
77.241.10.0-77.241.15.255
79.133.100.0/22
80.68.176.0/20
80.88.160.0/20
84.247.192.0/18
92.62.80.0/20
93.91.128.0/20
119.12.32.0/20
178.175.192.0/18
178.238.48.0/20
185.5.196.0/22
185.229.172.0/22
IPv6:
2a02:600::/29
2a07:580::/29
2a07:4f00::/29
2a07:55c0::/29
2a07:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
93:be:2e:e7:37:33:b6:76:8f:fe:39:91:2e:c6:af:18:ac:e5:
f4:7a:8c:f9:2c:53:15:ef:9f:39:85:f5:5f:c5:10:16:9a:91:
fa:71:2e:86:02:f3:0a:bf:75:f9:e7:cd:dd:5e:ab:2e:be:b1:
34:7e:42:b1:a3:67:a4:7a:2e:95:43:2c:e4:f5:2c:a9:1f:57:
1e:70:79:52:4b:d1:bd:f3:cb:bd:84:66:d3:27:06:b4:6b:4f:
13:8f:8c:00:f4:34:04:e6:32:3d:ca:56:e6:aa:25:60:24:30:
41:55:d1:0d:3b:e9:b9:5c:47:03:91:42:c8:9c:72:19:8e:77:
4d:58:6a:ce:c5:d5:8b:d7:fd:64:cf:1d:04:4a:3e:46:67:a4:
52:0c:a3:2d:57:6e:1e:c5:49:42:56:a7:2a:2e:89:1e:c9:58:
5e:eb:0f:14:f4:16:7b:0c:fc:3b:33:1b:be:e1:9f:8d:9a:39:
a8:c4:b0:3b:2c:71:10:f8:df:4f:f5:87:51:ae:5d:53:03:2a:
74:a6:76:00:73:cb:e0:80:ae:64:9f:20:26:da:99:b6:c5:50:
e6:20:51:40:d0:5b:cf:9b:58:3a:d5:7d:7f:4c:cc:1a:45:5e:
70:d2:87:1b:1f:16:c4:73:b9:ac:30:36:bd:c2:eb:31:10:5c:
d6:9d:91:15
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAYVxAyfAnUttwc6/Ra6IpIOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk
ZmEwNmEwHhcNMjMwMTAyMDU0NTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzEwZTMxMjBlZjI4YTZjMzRkMTFmMDAzMGRiMGVmN2Q5OWI2NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP+iCfvYwlodVUwz4fSlIcHg+Z7u
VQJXcPO12FLoDiGZem2gPX7VsMxkvX7GCwGvD2MoXuirMtxQGK/01k1Gbqn+Aleg
ILMkTYQ7NYQPz+YJzrLU6yLOqQnQHSG8RCuYihfhgQuK4WyGLODZ/m4/+WST9p7k
dPFeJe4tCWSH6tuaiGDaKpDMjb5Q4FRR83Opd9QWzY5F1O3wznvE8Z7u+gp9oN3s
PfRlsjSKyzXKITTzN/RsXXQsazdfM9Idj/1rPufBrNl1yX5466Ctwz/CAwXubwIB
EI4qgw+tM8rpVScxwClfrLLoJQn+f5oJfza0cakePWOJh2zzMvktDQiAWwIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFOcQ4xIO8opsNNEfADDbDvfZm2YKMB8GA1UdIwQY
MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt
NTRkOGY2YjA2YjgzLzEvNXhEakVnN3lpbXcwMFI4QU1Oc085OW1iWmdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz
LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBgAQCAAEwegMEBB8s
oAMEBB/BkAMEAi1DKAMEAi1eAAMEAi2OuAMEBE3w4AMEA03xADAMAwQBTfEKAwQE
TfEAAwQCT4VkAwQEUESwAwQEUFigAwQGVPfAAwQEXD5QAwQEXVuAAwQEdwwgAwQG
sq/AAwQEsu4wAwQCuQXEAwQCueWsMCkEAgACMCMDBQMqAgYAAwUDKgcFgAMFAyoH
TwADBQMqB1XAAwUDKgdewDANBgkqhkiG9w0BAQsFAAOCAQEAk74u5zcztnaP/jmR
LsavGKzl9HqM+SxTFe+fOYX1X8UQFpqR+nEuhgLzCr91+efN3V6rLr6xNH5CsaNn
pHoulUMs5PUsqR9XHnB5UkvRvfPLvYRm0ycGtGtPE4+MAPQ0BOYyPcpW5qolYCQw
QVXRDTvpuVxHA5FCyJxyGY53TVhqzsXVi9f9ZM8dBEo+RmekUgyjLVduHsVJQlan
Ki6JHslYXusPFPQWewz8OzMbvuGfjZo5qMSwOyxxEPjfT/WHUa5dUwMqdKZ2AHPL
4ICuZJ8gJtqZtsVQ5iBRQNBbz5tYOtV9f0zMGkVecNKHGx8WxHO5rDA2vcLrMRBc
1p2RFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:08:04 2025 by rpki-client