Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/TCpP15OGhE2EXVsKl6ZHRVh1OtI.roa
File: TCpP15OGhE2EXVsKl6ZHRVh1OtI.roa (raw, json)
Hash identifier: DDTbmEiFNf0aB5/FgkWhMHfdxfeIiXjs66DunCfd8m4=
Subject key identifier: 4C:2A:4F:D7:93:86:84:4D:84:5D:5B:0A:97:A6:47:45:58:75:3A:D2
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 0189F83D3594A33D9FEA32C9B4AAE67C324E
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/TCpP15OGhE2EXVsKl6ZHRVh1OtI.roa
Signing time: Tue 15 Aug 2023 08:08:28 +0000
ROA not before: Tue 15 Aug 2023 08:08:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8895
IP address blocks: 212.26.37.0/24 maxlen: 24
212.26.36.0/24 maxlen: 24
212.26.38.0/24 maxlen: 25
212.26.41.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.39.0/24 maxlen: 25
212.26.44.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.46.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.51.0/24 maxlen: 24
212.26.50.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.74.0/24 maxlen: 25
212.26.78.0/24 maxlen: 24
212.26.72.0/24 maxlen: 24
212.26.0.0/17 maxlen: 17
212.26.6.0/23 maxlen: 24
212.26.8.0/24 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.138.250.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.82.0/24 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.96.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.97.0/24 maxlen: 24
212.138.104.0/24 maxlen: 25
212.138.108.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.127.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.130.0/24 maxlen: 24
212.138.41.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.42.0/24 maxlen: 25
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.190.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.153.0/24 maxlen: 24
212.138.157.0/24 maxlen: 24
212.138.166.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.162.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.177.0/24 maxlen: 24
212.138.183.0/24 maxlen: 25
212.138.181.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
2001:1490:1::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:110:8000::/49 maxlen: 49
2001:1490::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:3d:35:94:a3:3d:9f:ea:32:c9:b4:aa:e6:7c:32:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Aug 15 08:08:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c2a4fd79386844d845d5b0a97a6474558753ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:66:1d:5a:c9:42:d9:17:c4:0e:9e:85:23:
0e:5d:3d:9d:a4:16:2d:f3:09:7d:15:ec:10:31:36:
4b:b8:f2:bd:53:56:29:ec:94:60:d0:06:ee:6e:53:
a8:17:52:87:de:e6:66:7a:2e:e7:5b:cd:00:44:2b:
0c:33:77:fb:8b:fe:53:6f:33:dc:51:b3:0e:86:03:
68:7f:08:04:48:bd:93:cd:2a:a1:8d:64:d1:c7:60:
c3:68:88:af:ab:c3:b9:08:ca:92:65:86:67:44:8e:
9a:33:c1:41:10:9e:12:e9:a6:26:37:a3:f3:16:39:
29:0e:be:96:26:69:a4:22:e5:65:8d:9d:59:93:34:
6d:a5:fa:68:e9:50:1b:44:4c:8a:60:a2:26:2f:b4:
96:6f:1e:f7:c5:8a:9c:07:e1:7b:25:3e:d1:7f:5a:
a9:3f:e8:41:99:8b:02:c9:7f:72:26:35:16:3c:cd:
cc:e2:f7:01:64:eb:b0:20:2b:db:92:eb:f1:3e:8d:
95:f1:77:3b:91:ff:0d:00:f2:cf:28:3c:ae:2c:9a:
49:92:5f:90:7e:82:db:97:4b:b7:91:6b:c3:a6:97:
41:bc:b8:3f:2b:81:ee:ca:65:b0:c1:82:15:00:d8:
10:67:65:fe:d5:cb:ce:cf:67:56:a5:9d:1d:c8:1b:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2A:4F:D7:93:86:84:4D:84:5D:5B:0A:97:A6:47:45:58:75:3A:D2
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/TCpP15OGhE2EXVsKl6ZHRVh1OtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.26.0.0/17
212.138.41.0-212.138.43.255
212.138.52.0-212.138.67.255
212.138.70.0-212.138.86.255
212.138.88.0/24
212.138.92.0/24
212.138.94.0/24
212.138.96.0/22
212.138.104.0/24
212.138.108.0/24
212.138.115.0-212.138.121.255
212.138.125.0-212.138.128.255
212.138.130.0/24
212.138.134.0/24
212.138.139.0-212.138.140.255
212.138.153.0/24
212.138.155.0/24
212.138.157.0/24
212.138.160.0/24
212.138.162.0/24
212.138.164.0/24
212.138.166.0/24
212.138.168.0/24
212.138.170.0/24
212.138.172.0/24
212.138.175.0-212.138.177.255
212.138.181.0/24
212.138.183.0/24
212.138.185.0/24
212.138.187.0-212.138.188.255
212.138.190.0/24
212.138.194.0/24
212.138.196.0/24
212.138.201.0/24
212.138.203.0/24
212.138.206.0/24
212.138.250.0/24
IPv6:
2001:1490::/47
2001:1490:103::/48
2001:1490:106::/47
2001:1490:110::/48
Signature Algorithm: sha256WithRSAEncryption
9d:fc:ba:fe:fe:94:60:d5:1f:3b:f2:85:a1:bd:b1:20:f5:63:
ae:2f:e9:95:f8:b4:57:bd:16:4a:e6:92:26:d0:73:1b:b2:d0:
c4:8e:66:54:f6:69:22:b9:d5:2c:20:ef:7f:5f:85:d9:8d:a1:
94:a2:1e:6b:1b:e5:b3:77:f5:08:ff:e8:26:f6:de:51:4f:3d:
5d:86:56:59:6a:7d:79:b6:aa:7d:7d:21:65:78:3f:20:0b:d4:
65:d9:7c:47:87:fc:bd:fb:e8:05:7b:1a:1d:15:b1:09:41:87:
7b:c9:52:b3:6a:63:dd:d5:b7:a9:40:ad:28:ba:9b:73:20:84:
45:9a:3d:24:a4:8b:ad:70:56:1c:71:31:39:45:03:23:bf:fe:
0a:7f:8a:56:9a:0e:ba:7a:89:11:85:3b:ed:1c:e9:67:a2:d2:
66:04:50:da:58:34:e7:d2:35:19:04:c5:40:6f:3a:7a:3b:1b:
27:1a:cc:6c:62:92:eb:c6:0f:61:f8:71:80:7d:0c:a3:74:d6:
2d:e0:a0:72:bc:b2:e3:c3:d6:a3:49:0f:44:fc:cf:d1:b7:39:
59:dd:37:f1:63:e8:de:f2:f8:94:42:39:be:ba:c0:95:74:68:
5e:8b:62:9a:72:99:b5:d1:f7:0e:b9:d4:ce:97:2a:a2:2d:72:
81:06:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:17 2025 by rpki-client