Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/MeDIQbsgfsHYUKofVLFI8sZeVT0.roa
File: MeDIQbsgfsHYUKofVLFI8sZeVT0.roa (raw, json)
Hash identifier: Iy9EvNcjYLicBJZeqaHYBRB4cG338+7gxa8Vp4JG0EY=
Subject key identifier: 31:E0:C8:41:BB:20:7E:C1:D8:50:AA:1F:54:B1:48:F2:C6:5E:55:3D
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0188165108F0E94A8C43A658E9CE4F9FFE7A
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/MeDIQbsgfsHYUKofVLFI8sZeVT0.roa
Signing time: Sat 13 May 2023 18:13:09 +0000
ROA not before: Sat 13 May 2023 18:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48159
IP address blocks: 2.188.1.0/24 maxlen: 24
2.188.0.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
78.39.240.0/24 maxlen: 24
78.39.149.0/24 maxlen: 24
78.39.150.0/24 maxlen: 24
78.39.151.0/24 maxlen: 24
80.191.56.0/24 maxlen: 24
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
217.218.67.0/24 maxlen: 24
2.185.18.0/24 maxlen: 24
2.185.40.0/21 maxlen: 21
78.38.160.0/19 maxlen: 19
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
2.176.128.0/17 maxlen: 17
2.185.0.0/20 maxlen: 20
2.185.0.0/16 maxlen: 16
78.39.0.0/16 maxlen: 24
2.185.164.0/24 maxlen: 24
2.185.160.0/19 maxlen: 19
2.188.179.0/24 maxlen: 24
2.185.88.0/22 maxlen: 22
217.219.0.0/16 maxlen: 16
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
2.188.187.0/24 maxlen: 24
2.177.0.0/16 maxlen: 16
2.189.68.0/24 maxlen: 24
2.189.72.0/24 maxlen: 24
2.191.0.0/16 maxlen: 16
80.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
2.189.42.0/24 maxlen: 24
2.189.43.0/24 maxlen: 24
2.189.56.0/24 maxlen: 24
2.189.58.0/24 maxlen: 24
2.182.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:16:51:08:f0:e9:4a:8c:43:a6:58:e9:ce:4f:9f:fe:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 13 18:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31e0c841bb207ec1d850aa1f54b148f2c65e553d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:4c:3b:59:89:95:2d:11:1a:0a:4c:8e:5f:
1e:0f:9b:42:74:8d:7d:32:85:ae:c7:d7:3c:80:99:
e0:c9:f6:55:77:2f:ec:62:f6:33:99:06:52:a1:fc:
15:2c:26:2d:48:c3:e8:1e:03:22:68:ed:04:51:08:
2f:84:8a:a9:7b:71:05:2f:df:46:4e:92:a8:24:29:
7d:c6:a3:33:ef:80:2a:f8:8b:02:8c:82:54:97:ef:
46:59:ae:02:95:c5:cd:ff:b0:36:c9:3a:64:f0:74:
2c:ff:10:2a:2d:6d:69:ff:01:49:15:6e:1a:a0:ea:
03:79:57:f4:ab:75:19:db:99:b6:73:d7:c9:47:2c:
77:a8:4d:1a:71:92:88:f1:86:72:8f:0b:b7:82:ea:
17:9a:1c:cc:35:e5:02:a0:5c:60:88:b2:6d:c1:b3:
c7:7a:51:a4:fa:bb:19:a7:d2:c7:ed:99:81:d5:ca:
9f:22:5a:71:7a:30:20:61:51:ba:d1:38:db:2f:b3:
c8:3d:92:6b:94:c2:21:d9:86:08:16:fe:72:60:32:
e4:fc:f4:ce:d6:71:0e:74:fb:5b:3a:d6:22:44:6c:
6c:d3:1c:c5:f7:7d:10:7f:2f:d2:45:1a:be:11:a1:
a9:44:6d:f5:09:a6:fd:36:0b:58:cd:ed:37:a9:3f:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E0:C8:41:BB:20:7E:C1:D8:50:AA:1F:54:B1:48:F2:C6:5E:55:3D
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/MeDIQbsgfsHYUKofVLFI8sZeVT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.128.0-2.177.255.255
2.182.128.0/21
2.185.0.0/16
2.188.0.0/23
2.188.22.0/24
2.188.28.0/24
2.188.64.0/21
2.188.76.0/24
2.188.179.0/24
2.188.184.0/23
2.188.187.0/24
2.189.42.0/23
2.189.56.0/24
2.189.58.0/24
2.189.68.0/24
2.189.72.0/24
2.191.0.0/16
78.38.0.0/15
80.191.0.0/16
217.218.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5e:bb:db:14:8c:fd:0d:75:c5:75:f5:70:7c:08:fc:9c:5f:30:
8f:a8:60:d8:51:5c:a9:8c:d1:f7:b1:f5:2d:63:7a:f7:eb:8f:
72:e4:2d:8e:2b:34:0c:26:a4:3c:9b:21:d7:6a:7d:36:af:6b:
49:9a:5e:0a:26:dd:36:49:0d:e1:5d:21:9c:cb:e9:24:4f:e6:
b1:83:6c:86:b6:ee:a8:cc:26:a9:4e:f3:9c:c1:6b:51:5e:28:
96:d4:3b:dd:cf:d2:7b:c9:3e:9d:f9:b0:d4:2d:46:a3:c3:60:
e5:88:2a:ab:df:eb:1f:c0:27:7e:ec:4e:50:50:e0:5c:57:08:
eb:50:da:80:35:a2:bd:07:49:93:12:a7:53:80:8e:52:c2:b2:
3a:0b:52:70:bd:a4:b9:31:95:0d:a0:ac:9a:64:b1:71:40:69:
e6:de:c2:ca:2f:30:39:8f:f4:3a:04:32:da:d3:51:9e:34:d8:
b2:ef:0e:e8:d3:29:24:7f:5d:af:b2:06:fe:45:ad:8e:d8:10:
aa:c0:b4:27:7e:61:15:bb:a4:20:29:ba:eb:dd:6f:6e:36:c5:
5c:f6:5a:7f:5b:40:21:21:24:d4:bd:42:c9:83:14:f3:18:f0:
28:d7:d9:ef:5e:09:5e:bb:53:6d:2a:20:3d:8e:c6:06:7d:95:
01:2f:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:19:04 2025 by rpki-client