Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/plh5lSRC9T8LsNxoeeLPOzOyLRU.roa
File: plh5lSRC9T8LsNxoeeLPOzOyLRU.roa (raw, json)
Hash identifier: So1VM7bIqlAPLcPjuFkD0ZsKNl+GpWervP4nM7L/hI0=
Subject key identifier: A6:58:79:95:24:42:F5:3F:0B:B0:DC:68:79:E2:CF:3B:33:B2:2D:15
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01879FB6102CDEDB020E8E1EA068DFC8B754
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/plh5lSRC9T8LsNxoeeLPOzOyLRU.roa
Signing time: Thu 20 Apr 2023 17:28:41 +0000
ROA not before: Thu 20 Apr 2023 17:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 80.124.0.0/16 maxlen: 16
80.70.32.0/20 maxlen: 20
217.19.192.0/20 maxlen: 20
88.141.0.0/16 maxlen: 16
212.198.0.0/16 maxlen: 16
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 20
79.80.0.0/12 maxlen: 12
185.147.204.0/22 maxlen: 22
77.144.0.0/12 maxlen: 12
79.174.192.0/18 maxlen: 18
195.3.0.0/18 maxlen: 18
77.137.196.0/22 maxlen: 22
85.168.0.0/14 maxlen: 14
77.137.200.0/21 maxlen: 21
77.137.208.0/20 maxlen: 20
79.174.232.0/21 maxlen: 21
81.185.0.0/16 maxlen: 24
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 19
84.96.0.0/13 maxlen: 13
77.136.172.0/24 maxlen: 24
88.140.0.0/16 maxlen: 16
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 16
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 14
89.2.0.0/15 maxlen: 15
62.106.128.0/17 maxlen: 17
217.112.224.0/20 maxlen: 20
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 21
212.39.128.0/19 maxlen: 19
213.245.0.0/16 maxlen: 16
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 18
81.220.0.0/16 maxlen: 16
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 14
213.169.160.0/19 maxlen: 19
93.0.0.0/11 maxlen: 11
109.0.0.0/11 maxlen: 11
81.1.0.0/18 maxlen: 18
81.65.0.0/16 maxlen: 16
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 19
78.112.0.0/12 maxlen: 12
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 16
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 14
37.64.0.0/13 maxlen: 13
77.128.0.0/13 maxlen: 13
80.236.0.0/17 maxlen: 17
212.94.160.0/19 maxlen: 19
81.185.160.0/21 maxlen: 21
81.185.160.0/20 maxlen: 20
80.125.0.0/16 maxlen: 16
81.185.168.0/21 maxlen: 21
83.141.128.0/17 maxlen: 17
84.205.128.0/19 maxlen: 19
77.134.204.0/24 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 14
213.128.32.0/19 maxlen: 19
80.118.0.0/15 maxlen: 15
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 13
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 16
85.68.0.0/15 maxlen: 15
195.98.96.0/19 maxlen: 19
213.223.0.0/16 maxlen: 16
91.68.0.0/14 maxlen: 14
84.4.0.0/14 maxlen: 14
77.192.0.0/12 maxlen: 12
86.64.0.0/12 maxlen: 12
82.216.0.0/16 maxlen: 16
195.115.0.0/16 maxlen: 16
78.155.128.0/19 maxlen: 19
88.142.0.0/16 maxlen: 16
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a00:7180::/32 maxlen: 32
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a02:8400::/25 maxlen: 25
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:b6:10:2c:de:db:02:0e:8e:1e:a0:68:df:c8:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Apr 20 17:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a65879952442f53f0bb0dc6879e2cf3b33b22d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b0:42:ba:a0:3d:53:6e:1e:bf:54:c6:dc:0e:
5d:cb:ef:4e:c6:b6:e5:f6:56:8e:2f:65:12:c2:41:
3f:d4:7d:6b:47:f0:ee:2c:b9:40:20:12:72:26:84:
38:10:86:9d:8d:e5:c8:6d:7b:58:4c:a8:1a:f7:61:
ab:a0:c5:fa:b0:e7:e8:40:ef:bf:c4:7b:b8:20:7f:
6a:ed:b5:09:00:25:51:7c:12:a6:9e:d8:a4:bf:47:
2c:a7:2f:36:e5:6e:8c:ab:fd:7b:c5:c6:d4:c8:2a:
55:4f:92:1c:7e:5b:60:e1:55:fc:ce:27:da:c2:5c:
a4:1d:b5:ec:79:72:37:d2:c3:d3:7c:d9:39:c1:e0:
3d:18:83:5f:fe:61:90:70:e6:90:ee:78:db:0d:21:
2c:65:99:15:48:92:6a:7c:12:96:cd:b0:6a:df:c9:
0e:35:13:c0:79:b3:b0:07:93:52:a6:a7:65:51:4b:
91:a7:76:aa:f1:c4:33:12:39:02:61:c0:28:af:40:
76:99:af:d4:bc:ea:c6:76:28:06:93:9a:bb:b6:0b:
0c:ea:81:5f:45:5a:b7:6a:c4:ea:7c:11:96:b6:77:
e4:9a:e5:13:e6:c9:c4:7a:8a:3c:b4:3f:9f:d5:7c:
26:61:1b:d0:0e:a8:43:0d:49:cb:4d:0b:c6:ba:5d:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:58:79:95:24:42:F5:3F:0B:B0:DC:68:79:E2:CF:3B:33:B2:2D:15
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/plh5lSRC9T8LsNxoeeLPOzOyLRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
41:c0:1f:15:5c:27:a1:fd:f1:20:5e:15:32:e4:0a:d6:be:b8:
5f:f4:3f:71:4d:ef:c6:7c:80:56:52:04:4f:1b:bb:19:7a:30:
ad:5e:37:10:af:35:5a:e8:9c:8b:ba:a5:7e:9e:9b:7f:e3:d4:
cb:37:27:22:1a:b6:56:e3:5f:be:60:ac:a6:7e:80:c5:1a:fc:
0d:b2:bc:70:26:82:4c:08:a4:4f:bd:5e:15:c7:dd:3f:84:ff:
39:c4:38:d7:87:a1:99:00:93:b0:6c:6a:3b:1a:41:f4:dd:b8:
23:e2:3d:9b:73:ca:ac:7f:f6:eb:99:eb:63:c1:4d:5d:02:12:
e7:ca:ed:89:b7:38:83:c3:d4:d8:c5:0e:93:df:95:73:29:ac:
f8:b7:2d:5f:1c:30:a2:ca:2b:e2:04:86:82:98:16:39:51:af:
fb:bf:7d:82:29:ba:4b:2f:8d:c2:1f:d3:b3:50:6e:ed:5b:64:
a9:e4:49:a3:99:6f:16:8a:c4:07:f0:5a:ff:59:41:5f:e5:92:
98:6b:29:cb:74:cd:a4:a5:c6:bc:4a:54:5f:fc:66:d6:61:35:
ad:56:73:e3:66:f4:00:07:11:77:e4:d3:26:f7:88:eb:f6:60:
cf:5b:07:56:21:bf:b9:ae:eb:c6:30:46:cf:98:2d:4d:b6:1c:
4f:fd:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:01:16 2025 by rpki-client