Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/mgiDq-hmnD_WeN0Nn68MIgyaI1M.roa
File: mgiDq-hmnD_WeN0Nn68MIgyaI1M.roa (raw, json)
Hash identifier: 5sX1SUaGjijeaOzjJNTbp6Nk9h0F/b5I3G/Au5+gr0U=
Subject key identifier: 9A:08:83:AB:E8:66:9C:3F:D6:78:DD:0D:9F:AF:0C:22:0C:9A:23:53
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0187A475D9FBB23483F8A9F5F495789681BE
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/mgiDq-hmnD_WeN0Nn68MIgyaI1M.roa
Signing time: Fri 21 Apr 2023 15:36:39 +0000
ROA not before: Fri 21 Apr 2023 15:36:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 80.70.32.0/20 maxlen: 20
80.124.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 20
88.141.0.0/16 maxlen: 24
212.198.0.0/16 maxlen: 16
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 20
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 22
77.144.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 18
195.3.0.0/18 maxlen: 18
77.137.196.0/22 maxlen: 24
85.168.0.0/14 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
79.174.232.0/21 maxlen: 21
81.185.0.0/16 maxlen: 24
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 19
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
88.140.0.0/16 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
89.2.0.0/15 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 20
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 21
212.39.128.0/19 maxlen: 19
213.245.0.0/16 maxlen: 16
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 19
109.0.0.0/11 maxlen: 11
93.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
81.65.0.0/16 maxlen: 16
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 24
37.64.0.0/13 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 19
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
83.141.128.0/17 maxlen: 24
84.205.128.0/19 maxlen: 24
77.134.204.0/24 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
213.128.32.0/19 maxlen: 19
80.118.0.0/15 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 16
85.68.0.0/15 maxlen: 24
195.98.96.0/19 maxlen: 19
213.223.0.0/16 maxlen: 16
91.68.0.0/14 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 16
88.142.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 19
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a00:7180::/32 maxlen: 32
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a02:8400::/25 maxlen: 25
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:75:d9:fb:b2:34:83:f8:a9:f5:f4:95:78:96:81:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Apr 21 15:36:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a0883abe8669c3fd678dd0d9faf0c220c9a2353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:60:0a:7a:27:47:69:cd:ff:18:c9:f5:2f:
35:9b:1a:78:7f:ae:9f:c1:56:a9:a8:15:4c:e3:b8:
db:33:ad:55:85:1b:e6:12:34:ec:b9:bf:a0:09:e1:
85:cf:12:fc:ae:8b:3c:ba:8c:0e:4a:71:43:1d:51:
92:f2:38:35:6e:15:bc:b9:97:8e:35:2f:19:f9:56:
1b:91:4d:e2:ff:2f:cb:78:ae:86:e7:bd:93:bd:28:
f3:88:51:86:24:17:de:95:92:09:20:35:50:1c:0d:
40:86:d3:98:f1:28:15:50:0c:55:15:f3:b4:2f:b4:
ea:c3:2e:60:6e:d7:33:55:aa:83:f5:6f:ec:a9:90:
d5:2a:2b:27:b0:c1:a3:ec:1d:7c:64:3d:58:8b:eb:
72:27:08:1d:7d:fa:0c:b2:88:2f:e6:ea:3c:ad:30:
29:71:ef:6d:ef:84:46:47:cd:37:d0:dd:7d:c3:42:
66:01:50:a7:52:e5:cd:13:9b:ad:6f:91:9b:63:28:
65:0a:67:9d:41:56:59:b8:8d:0b:7a:db:28:2c:b1:
ee:6f:b0:78:6e:7f:83:94:e0:10:0e:7b:67:13:5d:
0b:0c:1c:a5:81:3f:6f:5e:2f:5a:8c:0e:66:6e:16:
41:9f:df:4f:73:1e:7b:e5:76:36:38:02:ea:c0:44:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:08:83:AB:E8:66:9C:3F:D6:78:DD:0D:9F:AF:0C:22:0C:9A:23:53
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/mgiDq-hmnD_WeN0Nn68MIgyaI1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
80:07:5e:b7:5a:69:fe:ca:12:0e:b5:06:a6:48:ad:7e:64:cf:
41:00:fa:78:c4:40:46:0f:9e:ff:18:c5:b4:cc:2b:e4:15:8e:
19:0c:8c:3f:7e:a1:9b:3a:e4:c2:9d:70:51:05:19:ff:f5:52:
71:d1:26:06:b1:89:cb:bd:f8:4a:55:7b:b6:96:9e:a5:41:c6:
10:dc:a8:b3:9d:af:b5:2c:b5:24:04:aa:20:bc:6a:11:8c:7e:
0f:41:33:17:22:a4:5d:f1:d6:d9:cc:52:96:2d:59:d7:83:34:
02:c4:ad:14:bb:f8:d7:3f:56:d0:eb:9e:18:14:c8:ea:c7:7a:
ba:f3:d2:fc:e6:69:6b:cb:0e:e5:f7:b8:30:74:f7:42:c8:e4:
2c:b2:fa:07:ea:f2:5f:52:04:3d:58:dc:bf:2a:6a:71:f3:e4:
2e:76:c8:3b:d4:81:ce:eb:d5:ef:f2:5a:60:52:c6:cc:7f:1f:
7b:63:ca:c6:8b:cf:e3:0c:f9:04:cb:d4:ea:4f:be:c0:ba:b3:
2c:7f:a5:34:ec:95:fa:6c:92:fe:6c:b7:58:00:dd:11:75:b2:
53:b6:77:c8:50:2f:5d:bb:97:65:65:c6:10:81:e2:72:84:65:
f0:c3:d6:db:c0:43:88:71:41:c0:61:29:1b:a8:63:2a:6d:63:
cb:46:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:41:29 2025 by rpki-client