Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/sQvHdEVoqjxRdIz__9DY6Ay3mU4.roa
File: sQvHdEVoqjxRdIz__9DY6Ay3mU4.roa (raw, json)
Hash identifier: O1z3Nbi79h60+Wgf2e5quTnf6z0wKYtUzpCXah3/Rm4=
Subject key identifier: B1:0B:C7:74:45:68:AA:3C:51:74:8C:FF:FF:D0:D8:E8:0C:B7:99:4E
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 0187772E641CEED9DF434089C4F7E0614F8F
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/sQvHdEVoqjxRdIz__9DY6Ay3mU4.roa
Signing time: Wed 12 Apr 2023 20:35:41 +0000
ROA not before: Wed 12 Apr 2023 20:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35819
IP address blocks: 178.80.64.0/21 maxlen: 21
178.80.72.0/21 maxlen: 21
178.80.80.0/21 maxlen: 21
178.80.88.0/21 maxlen: 21
178.80.96.0/20 maxlen: 20
178.80.0.0/20 maxlen: 20
178.80.16.0/20 maxlen: 20
178.80.32.0/20 maxlen: 20
178.80.48.0/20 maxlen: 20
178.80.160.0/20 maxlen: 20
178.80.176.0/20 maxlen: 20
178.80.192.0/19 maxlen: 19
178.80.112.0/20 maxlen: 20
178.80.128.0/20 maxlen: 20
178.80.144.0/20 maxlen: 20
46.153.128.0/20 maxlen: 20
46.153.144.0/20 maxlen: 20
46.153.160.0/19 maxlen: 19
31.166.192.0/19 maxlen: 19
46.153.96.0/19 maxlen: 19
31.166.224.0/20 maxlen: 20
46.153.240.0/20 maxlen: 20
46.153.192.0/20 maxlen: 20
46.153.208.0/20 maxlen: 20
46.153.224.0/20 maxlen: 20
46.152.160.0/20 maxlen: 20
31.166.32.0/19 maxlen: 19
46.152.176.0/20 maxlen: 20
46.152.192.0/19 maxlen: 19
46.152.128.0/19 maxlen: 19
31.166.0.0/20 maxlen: 20
31.166.16.0/20 maxlen: 20
46.153.16.0/20 maxlen: 20
46.153.32.0/20 maxlen: 20
31.166.160.0/19 maxlen: 19
46.153.48.0/20 maxlen: 20
46.153.64.0/19 maxlen: 19
46.152.224.0/20 maxlen: 20
46.152.240.0/20 maxlen: 20
46.153.0.0/20 maxlen: 20
31.166.128.0/20 maxlen: 20
46.152.64.0/19 maxlen: 19
46.152.96.0/19 maxlen: 19
46.152.0.0/19 maxlen: 19
46.152.32.0/19 maxlen: 19
5.110.144.0/20 maxlen: 20
5.110.160.0/20 maxlen: 20
5.110.176.0/20 maxlen: 20
5.110.80.0/20 maxlen: 20
5.110.96.0/20 maxlen: 20
5.110.112.0/20 maxlen: 20
5.110.128.0/20 maxlen: 20
5.110.240.0/20 maxlen: 20
5.110.192.0/20 maxlen: 20
5.110.208.0/20 maxlen: 20
5.110.224.0/20 maxlen: 20
5.109.176.0/20 maxlen: 20
5.109.192.0/20 maxlen: 20
5.109.208.0/20 maxlen: 20
5.109.224.0/20 maxlen: 20
5.109.128.0/20 maxlen: 20
5.109.144.0/20 maxlen: 20
5.109.160.0/20 maxlen: 20
5.110.32.0/20 maxlen: 20
5.110.48.0/20 maxlen: 20
5.110.64.0/20 maxlen: 20
5.109.240.0/20 maxlen: 20
5.110.0.0/20 maxlen: 20
5.110.16.0/20 maxlen: 20
5.108.224.0/20 maxlen: 20
178.81.240.0/20 maxlen: 20
5.108.240.0/20 maxlen: 20
5.109.0.0/20 maxlen: 20
5.108.160.0/20 maxlen: 20
5.108.176.0/20 maxlen: 20
178.81.192.0/20 maxlen: 20
5.108.192.0/20 maxlen: 20
178.81.208.0/20 maxlen: 20
178.81.224.0/20 maxlen: 20
5.108.208.0/20 maxlen: 20
5.109.80.0/20 maxlen: 20
5.109.96.0/20 maxlen: 20
5.109.112.0/20 maxlen: 20
5.109.16.0/20 maxlen: 20
5.109.32.0/20 maxlen: 20
5.109.48.0/20 maxlen: 20
5.109.64.0/20 maxlen: 20
5.108.0.0/20 maxlen: 20
178.81.16.0/20 maxlen: 20
5.108.16.0/20 maxlen: 20
178.81.32.0/20 maxlen: 20
178.81.48.0/20 maxlen: 20
5.108.32.0/20 maxlen: 20
5.108.48.0/20 maxlen: 20
178.80.224.0/19 maxlen: 19
178.81.0.0/20 maxlen: 20
5.108.112.0/20 maxlen: 20
5.108.128.0/20 maxlen: 20
5.108.144.0/20 maxlen: 20
5.108.64.0/20 maxlen: 20
5.108.80.0/20 maxlen: 20
5.108.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:77:2e:64:1c:ee:d9:df:43:40:89:c4:f7:e0:61:4f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Apr 12 20:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b10bc7744568aa3c51748cffffd0d8e80cb7994e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:47:86:29:18:6a:d3:6a:93:c8:f2:d2:a6:dc:
2d:f3:67:18:1c:cf:07:fd:21:42:9f:e8:3a:bc:45:
b8:a8:d4:75:21:65:b8:b5:67:9f:5c:7e:e9:12:a7:
17:62:da:5f:43:26:5c:8c:55:c5:78:f2:e6:c4:97:
a7:c3:2e:f1:f6:8c:9a:d3:f8:0e:ae:9b:bb:40:85:
80:9a:30:3d:d7:8e:fc:74:5f:27:60:d2:92:db:94:
b2:c9:21:4a:ea:b6:e8:f4:7e:11:ca:83:27:7a:0b:
0c:a8:33:4b:3e:03:e2:47:84:3a:c6:b1:79:9d:26:
90:74:9a:a5:ae:23:53:83:db:b8:17:64:d1:59:2d:
c3:b6:b3:00:dc:3b:b1:20:3d:fa:40:05:e5:e2:d7:
60:eb:fa:cb:1b:25:bb:c5:90:24:42:7c:dd:a5:bc:
2b:6d:d4:9f:47:28:15:b5:e6:65:9c:f5:51:52:0d:
9b:8b:45:a3:1d:97:57:ef:92:03:b1:71:f2:79:a2:
05:d3:f1:a3:3b:b6:c5:e4:fd:23:31:58:6b:de:db:
1d:b3:b6:58:5a:63:cc:a7:20:0d:31:19:de:cc:19:
8a:df:49:df:b3:f3:de:0b:b5:3e:51:52:69:a9:ab:
73:79:8c:5b:09:6c:fd:a8:be:ff:51:63:50:4e:4c:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0B:C7:74:45:68:AA:3C:51:74:8C:FF:FF:D0:D8:E8:0C:B7:99:4E
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/sQvHdEVoqjxRdIz__9DY6Ay3mU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.108.0.0-5.110.255.255
31.166.0.0/18
31.166.128.0/20
31.166.160.0-31.166.239.255
46.152.0.0/15
178.80.0.0-178.81.63.255
178.81.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7e:de:0a:9e:55:d3:e2:5d:51:7e:4a:7e:7c:67:e1:34:d2:97:
95:d4:6d:7f:fd:f5:24:7c:cb:ab:92:5c:b7:f1:f4:35:74:57:
0f:ce:06:a0:1b:1a:b1:a1:88:8a:31:a0:eb:5a:9c:89:4c:59:
bc:07:41:34:77:12:23:37:89:7a:5d:e4:92:63:b4:e5:fa:50:
48:30:e2:b4:59:db:d9:5e:29:e3:58:d6:e1:c7:b0:a6:9c:65:
af:93:2f:ff:31:91:a0:fd:9f:f2:f8:15:a4:51:ba:a1:4b:67:
a4:7d:c4:85:5c:62:02:e0:84:99:38:90:95:bd:d9:64:92:74:
1a:5a:59:06:a7:5c:05:4c:5c:ad:e5:b3:b6:4d:b8:b2:1c:89:
72:e8:b0:ad:3f:4e:6a:b4:a7:b0:cb:10:06:47:0a:7f:66:70:
69:e9:de:ba:e1:26:a0:b9:e1:dc:4b:bc:b9:b7:1f:f4:8f:66:
3e:2d:b4:35:51:25:be:90:a1:6d:b2:fb:df:8a:1c:10:73:ac:
ee:9a:7c:a2:67:8d:05:90:36:74:00:68:bc:0b:7e:42:53:7a:
65:68:83:4f:79:5d:f3:65:de:1f:36:07:ea:39:3f:3a:67:a8:
aa:3f:51:4b:56:d1:4f:47:1c:6f:5b:72:1c:bb:55:6c:ba:21:
0d:7f:50:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:25:48 2025 by rpki-client