Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/JeFUfoZgc4-FKiAD2EJTym9xG90.roa
File: JeFUfoZgc4-FKiAD2EJTym9xG90.roa (raw, json)
Hash identifier: hfkRG+U/LH8b3IK4ftCMbfKxB+je3mKvWwDCPuepovI=
Subject key identifier: 25:E1:54:7E:86:60:73:8F:85:2A:20:03:D8:42:53:CA:6F:71:1B:DD
Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial: 1063F3A0
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/JeFUfoZgc4-FKiAD2EJTym9xG90.roa
Signing time: Sat 01 Jan 2022 02:50:59 +0000
ROA not before: Sat 01 Jan 2022 02:50:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33983
IP address blocks: 37.35.64.0/21 maxlen: 21
37.35.64.0/24 maxlen: 24
37.35.70.0/24 maxlen: 24
37.35.69.0/24 maxlen: 24
37.35.68.0/24 maxlen: 24
37.35.67.0/24 maxlen: 24
37.35.71.0/24 maxlen: 24
37.35.66.0/24 maxlen: 24
37.35.65.0/24 maxlen: 24
84.22.32.0/24 maxlen: 24
84.22.36.0/24 maxlen: 24
84.22.35.0/24 maxlen: 24
84.22.34.0/24 maxlen: 24
84.22.32.0/19 maxlen: 19
84.22.33.0/24 maxlen: 24
84.22.38.0/24 maxlen: 24
84.22.37.0/24 maxlen: 24
84.22.44.0/24 maxlen: 24
84.22.39.0/24 maxlen: 24
84.22.43.0/24 maxlen: 24
84.22.42.0/24 maxlen: 24
84.22.41.0/24 maxlen: 24
84.22.40.0/24 maxlen: 24
84.22.46.0/24 maxlen: 24
84.22.45.0/24 maxlen: 24
84.22.50.0/24 maxlen: 24
84.22.49.0/24 maxlen: 24
84.22.48.0/24 maxlen: 24
84.22.47.0/24 maxlen: 24
84.22.51.0/24 maxlen: 24
84.22.53.0/24 maxlen: 24
84.22.58.0/24 maxlen: 24
185.173.206.0/24 maxlen: 24
84.22.54.0/24 maxlen: 24
84.22.57.0/24 maxlen: 24
84.22.52.0/24 maxlen: 24
185.173.205.0/24 maxlen: 24
185.173.204.0/24 maxlen: 24
84.22.56.0/24 maxlen: 24
84.22.55.0/24 maxlen: 24
185.173.204.0/22 maxlen: 22
84.22.60.0/24 maxlen: 24
185.173.207.0/24 maxlen: 24
84.22.59.0/24 maxlen: 24
84.22.63.0/24 maxlen: 24
84.22.62.0/24 maxlen: 24
84.22.61.0/24 maxlen: 24
2a0b:6300::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274985888 (0x1063f3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
Validity
Not Before: Jan 1 02:50:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25e1547e8660738f852a2003d84253ca6f711bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:bc:81:00:d5:99:d7:07:17:3b:c8:24:93:
fc:f3:e9:bf:3f:2e:07:9d:d6:2c:b1:5e:56:e9:13:
de:5f:b4:4b:83:e7:52:3d:ae:d6:47:c5:27:4a:d4:
1d:e4:05:bd:02:04:d3:1f:e0:45:65:55:2b:9d:de:
50:03:04:de:ae:ff:0a:95:38:bd:f6:0a:9b:d9:f2:
93:c0:c8:18:05:a7:11:3b:e5:42:9e:be:e9:16:74:
56:1c:b9:a7:ec:6b:fa:de:a0:7b:78:af:5d:67:ff:
11:81:e1:b5:6d:43:c1:de:af:ad:d2:4c:ff:d6:85:
c2:97:6c:63:25:55:8b:b4:d6:f7:13:1d:bc:95:df:
90:b6:38:9c:5b:5d:f8:fe:62:7c:e0:e2:ed:b4:33:
7c:7a:dd:2d:81:4d:a9:3f:f0:12:37:d6:1f:5e:98:
5b:b9:43:98:d2:f0:26:8a:1a:08:f0:fd:3b:f5:52:
04:5d:66:cf:90:2b:f8:2e:ef:e8:ec:1f:f4:b5:24:
2d:b2:e5:3e:b5:a5:da:d0:a4:83:e8:2f:54:f8:bf:
a5:4e:2a:a6:73:07:d8:d9:14:2c:9a:5d:4b:8e:50:
5b:4c:f9:19:d8:27:bc:44:f1:0b:ba:70:c3:c4:dc:
87:4f:e8:ab:ab:87:1c:f7:0e:7a:b0:f4:91:c0:11:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E1:54:7E:86:60:73:8F:85:2A:20:03:D8:42:53:CA:6F:71:1B:DD
X509v3 Authority Key Identifier:
keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/JeFUfoZgc4-FKiAD2EJTym9xG90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.64.0/21
84.22.32.0/19
185.173.204.0/22
IPv6:
2a0b:6300::/29
Signature Algorithm: sha256WithRSAEncryption
90:ae:ac:f9:ab:79:df:f1:60:9a:90:b7:65:10:0f:be:b0:47:
10:7e:c5:76:d6:c5:ad:eb:5b:57:11:38:0a:78:36:90:99:fb:
52:eb:05:2b:b6:bd:84:a9:f8:50:44:33:1d:03:16:69:d2:76:
75:cf:13:9f:fb:92:64:d5:81:a7:54:53:be:69:13:2c:23:ff:
25:6a:f0:ba:9c:da:62:c6:fc:7f:f8:99:3b:1a:cd:36:05:99:
de:56:cf:ea:57:6b:22:fd:a7:cf:a8:6e:07:22:1f:99:ca:66:
f7:99:8a:e0:a6:09:35:2e:de:41:49:f5:ad:93:89:d8:12:cc:
d3:e2:f4:c1:8e:0a:25:6f:6b:86:15:be:1c:10:ee:92:b1:e2:
38:c4:1f:ed:b6:47:a2:81:ba:41:07:55:77:ac:dc:4c:f6:d4:
29:02:d4:75:37:8d:15:28:ec:a7:cc:09:b1:a6:a6:d6:5c:2e:
dd:8e:03:c2:6c:ac:88:99:60:5f:32:36:56:e0:9c:8a:59:40:
41:51:ef:00:b6:ff:1c:61:f3:f7:28:29:bc:22:c6:cd:4c:b7:
9d:76:a5:15:7a:ac:b7:ad:15:90:f0:58:c8:fb:f9:4d:d9:bb:
34:38:8e:1f:18:75:9f:e8:07:ff:06:d3:b5:b5:72:38:f4:81:
40:f0:61:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 11 22:10:28 2025 by rpki-client