Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/iW8urdJtS0LyQcvOAt9MUV6r9gI.roa
File: iW8urdJtS0LyQcvOAt9MUV6r9gI.roa (raw, json)
Hash identifier: XtvRGhfhAusvqwOrPULnmiEFCSyEjxiOzytZwUI8R6E=
Subject key identifier: 89:6F:2E:AD:D2:6D:4B:42:F2:41:CB:CE:02:DF:4C:51:5E:AB:F6:02
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 01889AF6E6034DBB1DF248093C5FCAF1F98B
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/iW8urdJtS0LyQcvOAt9MUV6r9gI.roa
Signing time: Thu 08 Jun 2023 12:24:11 +0000
ROA not before: Thu 08 Jun 2023 12:24:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 94.208.0.0/13 maxlen: 13
83.80.0.0/13 maxlen: 13
213.73.128.0/17 maxlen: 17
213.73.128.0/18 maxlen: 18
80.114.0.0/18 maxlen: 18
80.114.0.0/17 maxlen: 17
212.127.128.0/18 maxlen: 18
212.127.128.0/17 maxlen: 17
83.80.0.0/14 maxlen: 14
94.208.0.0/14 maxlen: 14
85.147.128.0/17 maxlen: 17
217.101.0.0/17 maxlen: 17
82.74.0.0/15 maxlen: 15
217.101.0.0/16 maxlen: 16
213.73.192.0/18 maxlen: 18
80.114.64.0/18 maxlen: 18
212.127.192.0/18 maxlen: 18
89.220.192.0/18 maxlen: 18
212.120.64.0/19 maxlen: 19
212.120.64.0/18 maxlen: 18
212.120.96.0/19 maxlen: 19
217.120.0.0/15 maxlen: 15
85.147.0.0/17 maxlen: 17
85.147.0.0/16 maxlen: 16
217.120.0.0/14 maxlen: 14
217.105.128.0/19 maxlen: 19
217.105.128.0/18 maxlen: 18
80.112.64.0/18 maxlen: 18
217.105.160.0/19 maxlen: 19
217.105.64.0/18 maxlen: 18
80.112.0.0/18 maxlen: 18
80.112.0.0/17 maxlen: 17
62.145.192.0/19 maxlen: 19
62.145.192.0/18 maxlen: 18
217.105.96.0/19 maxlen: 19
62.145.224.0/19 maxlen: 19
89.220.128.0/18 maxlen: 18
89.220.128.0/17 maxlen: 17
84.106.0.0/15 maxlen: 15
82.72.0.0/15 maxlen: 15
82.72.0.0/14 maxlen: 14
82.151.160.0/20 maxlen: 20
82.151.160.0/19 maxlen: 19
82.151.176.0/20 maxlen: 20
84.24.0.0/13 maxlen: 13
217.105.64.0/19 maxlen: 19
213.51.0.0/16 maxlen: 16
84.24.0.0/14 maxlen: 14
212.204.160.0/19 maxlen: 19
217.104.64.0/18 maxlen: 18
217.63.224.0/19 maxlen: 19
94.212.0.0/14 maxlen: 14
83.84.0.0/14 maxlen: 14
217.104.0.0/18 maxlen: 18
217.104.0.0/17 maxlen: 17
84.104.0.0/15 maxlen: 15
84.104.0.0/14 maxlen: 14
217.63.192.0/19 maxlen: 19
217.63.192.0/18 maxlen: 18
82.217.128.0/17 maxlen: 17
217.102.192.0/20 maxlen: 20
217.102.192.0/19 maxlen: 19
217.102.208.0/20 maxlen: 20
217.62.128.0/17 maxlen: 17
217.63.0.0/19 maxlen: 19
217.63.0.0/18 maxlen: 18
212.204.128.0/19 maxlen: 19
212.204.128.0/18 maxlen: 18
217.63.32.0/19 maxlen: 19
80.115.160.0/19 maxlen: 19
84.28.0.0/14 maxlen: 14
80.115.128.0/18 maxlen: 18
80.115.128.0/19 maxlen: 19
217.102.160.0/19 maxlen: 19
217.62.0.0/17 maxlen: 17
217.62.0.0/16 maxlen: 16
82.217.0.0/17 maxlen: 17
82.217.0.0/16 maxlen: 16
217.102.128.0/18 maxlen: 18
217.102.128.0/19 maxlen: 19
80.114.192.0/19 maxlen: 19
80.114.192.0/18 maxlen: 18
212.54.32.0/19 maxlen: 19
212.54.32.0/20 maxlen: 20
212.54.48.0/20 maxlen: 20
80.114.224.0/19 maxlen: 19
213.34.96.0/20 maxlen: 20
213.34.96.0/19 maxlen: 19
82.101.192.0/19 maxlen: 19
82.101.192.0/18 maxlen: 18
80.115.64.0/18 maxlen: 18
213.34.112.0/20 maxlen: 20
217.122.0.0/15 maxlen: 15
82.101.224.0/19 maxlen: 19
217.101.128.0/17 maxlen: 17
80.115.0.0/18 maxlen: 18
80.115.0.0/17 maxlen: 17
2001:1c00::/23 maxlen: 23
2001:1c00::/24 maxlen: 24
2001:b88::/33 maxlen: 33
2001:1d00::/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:f6:e6:03:4d:bb:1d:f2:48:09:3c:5f:ca:f1:f9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Jun 8 12:24:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=896f2eadd26d4b42f241cbce02df4c515eabf602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:b3:1c:00:e7:78:e7:4c:a1:c0:42:f9:fd:
98:f0:2d:29:bd:bf:08:87:24:08:9c:ed:3e:e4:ea:
aa:42:e3:98:7f:fa:89:f0:3d:f2:1f:96:ab:af:06:
ff:f7:82:c3:96:1b:af:99:c9:91:e6:a7:e9:d7:87:
fd:c7:55:3f:bb:d3:18:91:be:cd:26:c1:32:fc:b7:
4e:e3:30:83:06:c0:01:31:f6:40:6b:7d:a2:9f:49:
21:31:cd:eb:b6:0c:63:06:68:00:d9:d6:10:4a:4a:
be:37:90:e3:cb:7f:ac:4a:46:90:f2:c8:2d:90:33:
7d:2c:35:54:bb:b8:5b:21:48:80:d7:ef:9b:bc:03:
90:72:e1:17:d7:ce:a1:f8:ba:70:10:58:e7:ab:e7:
d0:b1:92:ee:bf:7a:1c:f5:b3:aa:e8:39:d6:7d:1f:
a4:77:d4:62:d4:94:dc:a1:88:46:9e:86:bc:2c:6c:
8f:01:25:f5:33:8f:c6:c0:3a:83:e1:d9:a9:58:8b:
fa:40:48:b9:a4:c1:fb:b3:e4:8a:41:5b:d1:90:c7:
36:c3:81:a4:41:ed:25:82:23:de:27:93:d6:3b:73:
df:7c:ea:61:79:7c:6d:d5:c2:a8:13:cf:49:1c:e1:
60:33:67:78:e9:51:0f:93:4f:b4:8e:3d:39:c6:5e:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6F:2E:AD:D2:6D:4B:42:F2:41:CB:CE:02:DF:4C:51:5E:AB:F6:02
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/iW8urdJtS0LyQcvOAt9MUV6r9gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.145.192.0/18
80.112.0.0/17
80.114.0.0/17
80.114.192.0-80.115.191.255
82.72.0.0/14
82.101.192.0/18
82.151.160.0/19
82.217.0.0/16
83.80.0.0/13
84.24.0.0/13
84.104.0.0/14
85.147.0.0/16
89.220.128.0/17
94.208.0.0/13
212.54.32.0/19
212.120.64.0/18
212.127.128.0/17
212.204.128.0/18
213.34.96.0/19
213.51.0.0/16
213.73.128.0/17
217.62.0.0-217.63.63.255
217.63.192.0/18
217.101.0.0/16
217.102.128.0-217.102.223.255
217.104.0.0/17
217.105.64.0-217.105.191.255
217.120.0.0/14
IPv6:
2001:b88::/33
2001:1c00::/23
Signature Algorithm: sha256WithRSAEncryption
76:c1:a4:50:db:a3:7a:eb:e2:cf:c7:03:63:5c:8a:28:d5:08:
18:b4:76:aa:7b:60:a6:cb:b9:6b:13:9b:e5:d2:ee:67:74:03:
0d:9f:10:45:3c:f6:84:fe:52:c2:9e:bf:87:32:58:c7:40:7a:
a1:ea:7f:1d:45:30:72:ae:21:41:d4:38:f2:6d:18:8e:e8:0c:
40:20:b5:35:57:9b:e9:2a:8c:4c:1f:08:6b:28:fe:49:ee:e1:
6a:a7:32:2a:59:b2:1f:1b:9a:5b:6a:59:0e:af:02:fd:ea:f7:
ac:fb:d0:fb:58:d8:80:18:28:f5:25:7f:19:93:69:e1:db:35:
a0:f6:c1:f4:ed:29:52:0f:37:1e:bf:de:20:47:e2:73:a7:ba:
28:bf:de:35:3b:dd:3f:f3:63:73:0c:8c:39:eb:b9:36:73:57:
e1:20:da:53:c4:d0:4e:cf:df:50:2d:ae:93:83:69:d2:7b:4f:
e9:40:38:36:6d:c4:2d:e5:34:65:70:19:88:9c:18:11:da:5e:
15:69:90:2e:56:72:b6:52:4b:5d:e2:d5:c5:83:66:ec:34:35:
32:7e:7b:ee:69:e5:7e:70:72:d4:cf:18:2c:e9:b3:57:b5:d7:
bf:59:63:cb:44:a1:64:ca:3f:dd:c7:aa:c1:43:1b:a2:3f:1e:
a5:b3:83:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:46:09 2025 by rpki-client