Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/bfdLRRAkpUmsRJDebE7ZvlDhSgw.roa
File: bfdLRRAkpUmsRJDebE7ZvlDhSgw.roa (raw, json)
Hash identifier: s35tY+vLCmN+9jJRK9XDRfijBSNxj7OqvS0D9twxKjg=
Subject key identifier: 6D:F7:4B:45:10:24:A5:49:AC:44:90:DE:6C:4E:D9:BE:50:E1:4A:0C
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 018857AF475B3D95E4A6275DB663C34A0077
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/bfdLRRAkpUmsRJDebE7ZvlDhSgw.roa
Signing time: Fri 26 May 2023 10:51:24 +0000
ROA not before: Fri 26 May 2023 10:51:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30722
IP address blocks: 109.114.0.0/15 maxlen: 19
176.242.0.0/15 maxlen: 15
91.80.0.0/19 maxlen: 19
2.43.0.0/16 maxlen: 16
83.225.0.0/16 maxlen: 16
2.40.0.0/16 maxlen: 20
83.224.64.0/20 maxlen: 20
83.224.81.0/24 maxlen: 24
83.224.80.0/24 maxlen: 24
83.224.86.0/23 maxlen: 23
2.32.0.0/16 maxlen: 20
2.36.0.0/14 maxlen: 18
31.26.0.0/16 maxlen: 16
188.218.0.0/15 maxlen: 18
37.117.0.0/16 maxlen: 19
83.224.128.0/17 maxlen: 17
2.46.0.0/15 maxlen: 20
37.176.0.0/13 maxlen: 20
37.119.0.0/17 maxlen: 19
109.119.0.0/16 maxlen: 16
31.156.0.0/14 maxlen: 19
37.159.128.0/17 maxlen: 20
109.115.192.0/19 maxlen: 19
2.45.0.0/16 maxlen: 20
109.115.96.0/19 maxlen: 19
109.112.0.0/15 maxlen: 15
188.152.128.0/17 maxlen: 20
31.27.224.0/19 maxlen: 19
37.116.0.0/16 maxlen: 19
109.116.0.0/15 maxlen: 20
176.244.0.0/14 maxlen: 14
2.42.0.0/16 maxlen: 20
37.119.128.0/17 maxlen: 20
109.115.224.0/19 maxlen: 19
188.153.0.0/16 maxlen: 20
130.25.0.0/16 maxlen: 18
2.44.0.0/16 maxlen: 19
2.34.0.0/15 maxlen: 20
31.27.0.0/18 maxlen: 18
109.118.0.0/16 maxlen: 16
37.118.0.0/16 maxlen: 16
5.88.0.0/13 maxlen: 20
37.159.0.0/17 maxlen: 17
31.27.192.0/19 maxlen: 19
188.152.0.0/17 maxlen: 20
31.27.96.0/20 maxlen: 20
188.216.0.0/15 maxlen: 17
130.0.128.0/18 maxlen: 21
31.27.128.0/17 maxlen: 19
2.41.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:af:47:5b:3d:95:e4:a6:27:5d:b6:63:c3:4a:00:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: May 26 10:51:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6df74b451024a549ac4490de6c4ed9be50e14a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:67:a5:76:ca:43:d1:1c:c3:e7:d4:4a:06:
33:1f:c9:a7:6d:f2:3b:c3:a2:bd:89:1c:c6:0e:0c:
71:6b:1f:66:58:46:68:66:13:57:42:32:1f:bf:e0:
d5:31:00:fe:fd:fd:8a:cf:2c:95:60:2c:84:7e:8c:
0c:c8:de:fb:05:3e:0b:29:0d:8c:e7:de:a5:4a:ea:
81:5d:0c:b0:98:bf:7c:04:99:bc:43:a7:7f:86:84:
23:4d:c2:5a:ba:ea:09:ae:b7:25:29:9e:2e:cf:0f:
fc:86:b1:b2:1b:e9:49:23:c5:b8:03:fe:9a:f4:eb:
54:a0:b2:b9:7b:54:33:dd:83:29:ec:27:be:2e:9c:
d8:29:13:ff:53:04:44:96:c1:89:e9:ef:fb:3a:b4:
f8:15:c9:2c:4b:63:38:f6:bf:f1:93:dc:7e:45:44:
91:b2:66:87:b0:07:ee:86:b7:2f:77:d8:44:08:72:
24:8e:b1:5a:3c:93:38:c6:c3:2b:c0:b6:b9:06:14:
98:45:43:31:e0:59:c6:60:1b:a5:fa:9b:67:43:4e:
0b:96:2f:10:a2:fa:05:45:0c:a7:c4:21:36:22:de:
65:2c:7a:58:44:77:2b:eb:23:59:16:03:53:ca:9d:
7b:cc:88:df:69:fb:04:10:e4:a5:a1:72:79:95:79:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F7:4B:45:10:24:A5:49:AC:44:90:DE:6C:4E:D9:BE:50:E1:4A:0C
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/bfdLRRAkpUmsRJDebE7ZvlDhSgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.32.0.0/16
2.34.0.0-2.47.255.255
5.88.0.0/13
31.26.0.0-31.27.63.255
31.27.96.0/20
31.27.128.0/17
31.156.0.0/14
37.116.0.0/14
37.159.0.0/16
37.176.0.0/13
83.224.64.0-83.224.81.255
83.224.86.0/23
83.224.128.0-83.225.255.255
91.80.0.0/19
109.112.0.0/13
130.0.128.0/18
130.25.0.0/16
176.242.0.0-176.247.255.255
188.152.0.0/15
188.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
10:97:4a:7a:3d:91:ef:52:aa:a8:80:5b:d9:3b:ef:fd:ba:b1:
71:b0:7c:11:d1:9b:88:22:a4:26:93:ad:bc:6a:53:da:ef:a8:
48:5f:ea:ed:64:14:17:dd:65:86:6f:10:29:25:3d:db:4d:22:
d4:f9:df:c7:df:eb:82:c1:6c:a7:ac:a8:77:c6:ee:3e:91:5a:
a0:cf:96:ee:90:80:43:ce:99:b1:cd:3f:c8:b8:df:43:2c:81:
a5:bb:16:6d:9c:f8:aa:47:63:a8:c0:24:1d:91:94:e1:3d:39:
7b:2d:ce:00:c5:27:64:7c:3d:90:f7:78:82:b1:ac:c3:df:5f:
f5:dd:81:ce:1e:3a:6f:d1:c7:f0:9f:8e:c5:ec:a9:62:17:a4:
71:ba:41:8c:4b:33:af:3b:79:a7:45:e3:be:bd:24:b5:71:36:
bc:19:33:18:f2:1c:00:c6:f9:28:b5:fb:43:59:1e:d7:1b:17:
1b:51:36:8a:cc:15:b9:aa:c4:41:b0:ab:4d:4e:14:5c:d3:87:
01:4c:a0:59:8a:82:e8:cb:d8:82:c0:f2:11:27:bb:c7:60:7f:
64:f3:3f:1f:12:bc:e5:d0:c1:ca:ab:dd:72:d1:47:da:2e:c3:
51:87:25:ba:22:10:68:5e:01:af:ff:a1:99:d2:eb:04:d7:7b:
fe:72:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:33:29 2025 by rpki-client