Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/scQuLQ4Tu1Q75h2MXQgE97dGk2s.roa
File: scQuLQ4Tu1Q75h2MXQgE97dGk2s.roa (raw, json)
Hash identifier: PZqNHLY/7rsJSUvkorKmLHjKzFx1+yI7ewaJxD1HpMM=
Subject key identifier: B1:C4:2E:2D:0E:13:BB:54:3B:E6:1D:8C:5D:08:04:F7:B7:46:93:6B
Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial: 018C8CAA455C36C3C06E64B6C68B9995530E
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/scQuLQ4Tu1Q75h2MXQgE97dGk2s.roa
Signing time: Thu 21 Dec 2023 13:56:58 +0000
ROA not before: Thu 21 Dec 2023 13:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203877
IP address blocks: 91.226.240.0/24 maxlen: 24
62.240.3.0/24 maxlen: 24
62.240.2.0/24 maxlen: 24
62.240.1.0/24 maxlen: 24
62.240.0.0/24 maxlen: 24
62.240.6.0/24 maxlen: 24
62.240.5.0/24 maxlen: 24
62.240.8.0/22 maxlen: 22
62.240.7.0/24 maxlen: 24
62.240.17.0/24 maxlen: 24
62.240.16.0/24 maxlen: 24
62.240.13.0/24 maxlen: 24
62.240.12.0/24 maxlen: 24
62.240.15.0/24 maxlen: 24
62.240.14.0/24 maxlen: 24
62.240.20.0/24 maxlen: 24
62.240.19.0/24 maxlen: 24
62.240.18.0/24 maxlen: 24
178.22.219.0/24 maxlen: 24
178.22.218.0/24 maxlen: 24
178.22.216.0/24 maxlen: 24
178.22.217.0/24 maxlen: 24
178.22.223.0/24 maxlen: 24
178.22.222.0/24 maxlen: 24
178.22.221.0/24 maxlen: 24
178.22.220.0/24 maxlen: 24
91.226.242.0/24 maxlen: 24
91.226.241.0/24 maxlen: 24
91.226.243.0/24 maxlen: 24
85.202.112.0/24 maxlen: 24
85.202.116.0/24 maxlen: 24
85.202.118.0/24 maxlen: 24
85.202.113.0/24 maxlen: 24
85.202.115.0/24 maxlen: 24
85.202.114.0/24 maxlen: 24
85.202.120.0/24 maxlen: 24
85.202.122.0/24 maxlen: 24
85.202.121.0/24 maxlen: 24
85.202.127.0/24 maxlen: 24
85.202.126.0/24 maxlen: 24
109.94.119.0/24 maxlen: 24
109.94.120.0/22 maxlen: 22
185.102.236.0/22 maxlen: 22
185.118.169.0/24 maxlen: 24
185.118.168.0/24 maxlen: 24
185.118.170.0/24 maxlen: 24
185.118.171.0/24 maxlen: 24
109.94.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:aa:45:5c:36:c3:c0:6e:64:b6:c6:8b:99:95:53:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Validity
Not Before: Dec 21 13:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1c42e2d0e13bb543be61d8c5d0804f7b746936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:d9:6d:fa:da:2e:84:4e:fe:b5:5e:9d:8c:
28:0e:48:ac:80:ca:47:a8:ca:87:99:e3:bf:e2:d5:
3b:04:1a:d5:99:7f:48:99:8e:39:95:2d:60:b9:01:
bc:a9:35:f0:5e:ab:83:2b:3c:43:28:1c:f1:56:36:
42:49:58:9f:9a:87:2c:0e:d4:c2:54:da:96:0b:d7:
16:6f:65:4f:8c:65:2f:bf:c5:df:81:cd:4d:17:03:
e3:43:79:ce:21:03:3d:29:5c:55:25:94:ae:a1:49:
7a:f0:6a:24:2d:64:f9:b9:63:ed:4a:6d:d8:2a:38:
a6:af:4b:ba:ad:ef:e7:3d:91:db:7b:18:f2:90:08:
6d:a9:f6:94:4a:80:1d:06:6c:78:2f:63:9e:e4:81:
9e:ca:25:38:3b:4d:28:1d:c1:14:04:e9:2e:e9:09:
f3:b6:38:27:d5:ad:00:92:72:3e:0a:65:00:f4:86:
18:10:22:04:c7:9a:6b:b0:a8:01:80:7e:cb:84:08:
c4:8a:07:e9:51:0b:c6:fe:9f:9b:9f:03:87:74:75:
92:93:55:e6:34:f1:36:01:59:31:c4:df:59:f3:24:
a8:e7:f1:10:86:48:4e:30:51:53:87:3a:23:f9:a1:
30:33:27:1c:6d:ec:6d:a5:99:67:f2:68:12:55:85:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:2E:2D:0E:13:BB:54:3B:E6:1D:8C:5D:08:04:F7:B7:46:93:6B
X509v3 Authority Key Identifier:
keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/scQuLQ4Tu1Q75h2MXQgE97dGk2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.0.0/22
62.240.5.0-62.240.20.255
85.202.112.0-85.202.116.255
85.202.118.0/24
85.202.120.0-85.202.122.255
85.202.126.0/23
91.226.240.0/22
109.94.119.0-109.94.123.255
109.94.224.0/22
178.22.216.0/21
185.102.236.0/22
185.118.168.0/22
Signature Algorithm: sha256WithRSAEncryption
94:ca:8f:fe:2b:4e:08:32:27:af:fd:aa:00:08:be:26:e4:d4:
48:ac:b8:e0:b1:2e:3f:e9:8b:55:aa:fe:ab:6d:27:27:e7:64:
d7:76:f4:d7:29:aa:2f:35:98:64:a5:fd:a4:c9:d8:e5:7e:09:
d0:91:ef:ce:ad:67:d7:d1:f6:e7:5d:24:22:97:ec:dd:b5:6e:
05:0c:92:7d:9c:98:bd:59:be:f1:ad:f7:4e:a0:5c:60:55:74:
2c:a2:50:09:dc:21:1a:5a:80:b5:50:a3:4f:b3:4f:20:45:61:
45:c9:67:0c:bf:a5:7e:82:92:69:b0:07:3a:69:dc:ef:60:24:
24:fe:1c:82:41:83:06:f4:64:23:97:0f:78:3f:91:16:43:12:
fd:57:cb:2c:e6:11:93:d0:b9:f1:f7:7d:00:3e:c4:33:70:85:
30:1e:dc:82:32:4e:3b:2a:3a:e3:27:12:ee:97:e4:1b:4e:28:
18:fe:f1:3a:63:05:03:dd:e3:95:42:45:fa:1c:5d:80:a5:39:
d7:18:5d:bf:0c:4d:c9:df:1f:ac:23:1b:91:06:16:2f:ff:e0:
a3:59:f4:5a:42:0c:9f:87:6c:ab:01:37:57:5a:ab:78:52:fb:
00:48:b2:f6:a6:ae:04:b7:0b:93:8d:32:0c:21:d9:44:71:29:
2b:1a:df:7d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAYyMqkVcNsPAbmS2xouZlVMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmUyZTdmZjJjNzAyYzhhYjUxNDlmZWVhNzE3NTk5MWM3
MzQwOWMwHhcNMjMxMjIxMTM1NjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWM0MmUyZDBlMTNiYjU0M2JlNjFkOGM1ZDA4MDRmN2I3NDY5MzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+fZbfraLoRO/rVenYwoDkisgMpH
qMqHmeO/4tU7BBrVmX9ImY45lS1guQG8qTXwXquDKzxDKBzxVjZCSVifmocsDtTC
VNqWC9cWb2VPjGUvv8Xfgc1NFwPjQ3nOIQM9KVxVJZSuoUl68GokLWT5uWPtSm3Y
Kjimr0u6re/nPZHbexjykAhtqfaUSoAdBmx4L2Oe5IGeyiU4O00oHcEUBOku6Qnz
tjgn1a0AknI+CmUA9IYYECIEx5prsKgBgH7LhAjEigfpUQvG/p+bnwOHdHWSk1Xm
NPE2AVkxxN9Z8ySo5/EQhkhOMFFThzoj+aEwMyccbextpZln8mgSVYU1/wIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFLHELi0OE7tUO+YdjF0IBPe3RpNrMB8GA1UdIwQY
MBaAFDpuLn/yxwLIq1FJ/upxdZkcc0CcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzct
Nzc1YTA1Nzg4Y2Y1LzEvc2NRdUxRNFR1MVE3NWgyTVhRZ0U5N2RHazJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzctNzc1YTA1Nzg4Y2Y1
LzEvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAj7wADAM
AwQAPvAFAwQAPvAUMAwDBARVynADBABVynQDBABVynYwDAMEA1XKeAMEAFXKegME
AVXKfgMEAlvi8DAMAwQAbV53AwQCbV54AwQCbV7gAwQDshbYAwQCuWbsAwQCuXao
MA0GCSqGSIb3DQEBCwUAA4IBAQCUyo/+K04IMiev/aoACL4m5NRIrLjgsS4/6YtV
qv6rbScn52TXdvTXKaovNZhkpf2kydjlfgnQke/OrWfX0fbnXSQil+zdtW4FDJJ9
nJi9Wb7xrfdOoFxgVXQsolAJ3CEaWoC1UKNPs08gRWFFyWcMv6V+gpJpsAc6adzv
YCQk/hyCQYMG9GQjlw94P5EWQxL9V8ss5hGT0Lnx930APsQzcIUwHtyCMk47Kjrj
JxLul+QbTigY/vE6YwUD3eOVQkX6HF2ApTnXGF2/DE3J3x+sIxuRBhYv/+CjWfRa
Qgyfh2yrATdXWqt4UvsASLL2pq4EtwuTjTIMIdlEcSkrGt99
-----END CERTIFICATE-----
Generated at Thu May 8 17:36:43 2025 by rpki-client