Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/AmXoGVm2nzzF_UZt-Tp2A_hygfQ.roa
File: AmXoGVm2nzzF_UZt-Tp2A_hygfQ.roa (raw, json)
Hash identifier: z5mWttkva3fYLf2+4NSeBWzB6XiU8YUJ/nIYENgg598=
Subject key identifier: 02:65:E8:19:59:B6:9F:3C:C5:FD:46:6D:F9:3A:76:03:F8:72:81:F4
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01893A9F60DC26D81D1E72631BB39DB904D8
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/AmXoGVm2nzzF_UZt-Tp2A_hygfQ.roa
Signing time: Sun 09 Jul 2023 12:27:50 +0000
ROA not before: Sun 09 Jul 2023 12:27:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8895
IP address blocks: 212.26.37.0/24 maxlen: 24
212.26.36.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.46.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.51.0/24 maxlen: 24
212.26.50.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.78.0/24 maxlen: 24
212.26.72.0/24 maxlen: 24
212.26.6.0/23 maxlen: 24
212.26.8.0/24 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.138.250.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.82.0/24 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.96.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.97.0/24 maxlen: 24
212.138.104.0/24 maxlen: 25
212.138.108.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.127.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.130.0/24 maxlen: 24
212.138.41.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.42.0/24 maxlen: 25
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.190.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.153.0/24 maxlen: 24
212.138.157.0/24 maxlen: 24
212.138.166.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.162.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.177.0/24 maxlen: 24
212.138.183.0/24 maxlen: 25
212.138.181.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
2001:1490:1::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:9f:60:dc:26:d8:1d:1e:72:63:1b:b3:9d:b9:04:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jul 9 12:27:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0265e81959b69f3cc5fd466df93a7603f87281f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:59:4c:c0:a3:65:bc:57:8a:e5:54:fb:e3:
9d:9e:2a:de:d7:90:05:dc:79:9c:c9:a5:07:81:b1:
c5:54:5a:fd:74:7e:c4:35:05:a9:6e:cf:aa:2a:ad:
4c:b1:8c:df:f5:b9:12:08:f2:ae:79:fa:7f:a9:ed:
9a:38:a8:aa:f7:8b:35:e0:1a:24:7e:21:db:51:9b:
67:fd:19:73:05:0a:14:34:32:75:99:c1:0d:79:38:
14:63:84:ce:5a:d6:b4:d9:86:f4:a9:13:7b:be:7e:
24:32:e3:96:08:c0:a6:62:11:9f:83:bd:f9:7b:9f:
b3:51:70:15:81:42:68:1a:78:0d:dd:03:f1:57:6c:
b7:50:68:81:bd:69:b8:a1:62:cb:79:05:1b:94:b3:
5f:15:f6:b7:6b:9c:57:13:cd:aa:2c:49:95:4e:3b:
f6:9b:49:70:d1:d0:f7:5e:09:d4:ce:7c:f3:23:62:
9d:1c:6c:c2:a6:75:73:ea:4d:bc:e0:f7:67:41:cc:
9e:d7:54:cb:b0:44:09:49:cd:08:0e:27:c6:c2:0d:
d0:d0:d6:42:ff:27:c0:7e:88:21:45:2d:e7:4d:40:
46:c6:12:4a:d7:65:80:1a:a9:67:f6:23:0b:f7:22:
af:56:6e:f6:d0:ed:cc:1c:eb:78:05:ff:a7:1a:ff:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:65:E8:19:59:B6:9F:3C:C5:FD:46:6D:F9:3A:76:03:F8:72:81:F4
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/AmXoGVm2nzzF_UZt-Tp2A_hygfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.26.6.0-212.26.8.255
212.26.16.0/20
212.26.36.0/23
212.26.40.0-212.26.46.255
212.26.48.0/24
212.26.50.0-212.26.54.255
212.26.56.0/24
212.26.58.0/24
212.26.60.0/24
212.26.63.0-212.26.65.255
212.26.68.0/23
212.26.71.0-212.26.72.255
212.26.78.0/24
212.138.41.0-212.138.43.255
212.138.52.0-212.138.67.255
212.138.70.0-212.138.86.255
212.138.88.0/24
212.138.92.0/24
212.138.94.0/24
212.138.96.0/22
212.138.104.0/24
212.138.108.0/24
212.138.115.0-212.138.121.255
212.138.125.0-212.138.128.255
212.138.130.0/24
212.138.134.0/24
212.138.139.0-212.138.140.255
212.138.153.0/24
212.138.155.0/24
212.138.157.0/24
212.138.160.0/24
212.138.162.0/24
212.138.164.0/24
212.138.166.0/24
212.138.168.0/24
212.138.170.0/24
212.138.172.0/24
212.138.175.0-212.138.177.255
212.138.181.0/24
212.138.183.0/24
212.138.185.0/24
212.138.187.0-212.138.188.255
212.138.190.0/24
212.138.194.0/24
212.138.196.0/24
212.138.201.0/24
212.138.203.0/24
212.138.206.0/24
212.138.250.0/24
IPv6:
2001:1490::/47
2001:1490:103::/48
2001:1490:106::/47
Signature Algorithm: sha256WithRSAEncryption
06:0a:dc:80:5f:d0:10:32:c6:71:6f:15:bb:19:3a:f6:13:9b:
b5:82:a6:58:b8:db:4f:4b:34:61:47:57:b7:5c:92:78:16:b1:
0c:7a:7c:0f:98:9b:da:23:c0:ac:96:4e:01:6e:07:d3:42:2b:
51:79:63:63:52:fa:4a:bb:fe:ea:37:49:c2:0b:4b:d0:96:b4:
a2:22:54:46:24:be:ec:c7:a5:63:53:91:c1:4f:fa:ff:ad:64:
81:c4:e6:b8:09:ef:b0:59:a9:80:99:05:90:0d:aa:ea:ca:a0:
2d:8d:a4:e4:a1:83:96:f8:7e:45:9e:40:ef:87:0c:04:b3:f1:
aa:fb:ba:8e:eb:ca:4c:c2:14:41:96:3e:7e:bd:e2:1f:a0:4a:
1c:34:86:8b:41:dc:7b:ae:5b:18:27:bb:27:5f:4c:02:b5:3d:
11:5f:a5:48:76:bf:bd:53:f4:ec:fa:06:79:1f:54:70:cb:25:
51:01:5a:12:e3:a1:a9:0b:13:7b:f6:96:67:2b:3c:56:40:1d:
f1:1a:cf:97:92:2d:fc:a2:07:84:08:3c:0f:3b:4e:fd:85:ac:
77:73:40:cb:f0:82:81:c9:e2:01:cc:7a:42:50:28:c9:42:45:
5e:30:57:d6:a6:20:28:06:d6:07:7d:88:b7:d0:fb:18:3f:d6:
39:a6:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:35:49 2025 by rpki-client