Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/JuAFaPqMm8gssBYDNwfj5wJujYc.roa
File: JuAFaPqMm8gssBYDNwfj5wJujYc.roa (raw, json)
Hash identifier: xd9kGiRXQKLwo7gWH9OiFi+RkgxzKKQBqilxUt8l09E=
Subject key identifier: 26:E0:05:68:FA:8C:9B:C8:2C:B0:16:03:37:07:E3:E7:02:6E:8D:87
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01864F90BD0BDB977E48DBDE1B56F770970F
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/JuAFaPqMm8gssBYDNwfj5wJujYc.roa
Signing time: Tue 14 Feb 2023 10:55:30 +0000
ROA not before: Tue 14 Feb 2023 10:55:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 81.16.64.0/20 maxlen: 20
194.252.0.0/16 maxlen: 24
194.215.0.0/16 maxlen: 24
86.114.0.0/16 maxlen: 21
192.83.96.0/22 maxlen: 24
212.83.96.0/19 maxlen: 24
213.140.160.0/19 maxlen: 19
192.83.100.0/24 maxlen: 24
141.208.0.0/16 maxlen: 16
193.208.0.0/14 maxlen: 24
194.111.0.0/16 maxlen: 24
195.165.0.0/16 maxlen: 24
192.89.123.0/24 maxlen: 24
192.194.0.0/16 maxlen: 24
192.130.0.0/16 maxlen: 24
213.173.128.0/19 maxlen: 19
194.251.0.0/16 maxlen: 24
131.177.0.0/16 maxlen: 16
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.112.0/22 maxlen: 24
62.73.32.0/19 maxlen: 19
217.140.128.0/17 maxlen: 17
192.83.64.0/19 maxlen: 24
192.103.116.0/24 maxlen: 24
192.83.0.0/18 maxlen: 24
84.248.0.0/14 maxlen: 21
188.238.0.0/16 maxlen: 24
192.103.85.0/24 maxlen: 24
194.137.0.0/16 maxlen: 24
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
88.86.128.0/19 maxlen: 19
212.149.64.0/18 maxlen: 18
192.58.80.0/21 maxlen: 24
192.58.88.0/23 maxlen: 24
213.28.0.0/16 maxlen: 24
195.156.0.0/16 maxlen: 24
80.220.0.0/14 maxlen: 21
109.240.0.0/16 maxlen: 16
212.182.192.0/18 maxlen: 24
192.58.42.0/23 maxlen: 24
192.58.44.0/22 maxlen: 24
192.58.48.0/20 maxlen: 24
192.58.64.0/20 maxlen: 24
93.106.0.0/16 maxlen: 16
194.197.0.0/16 maxlen: 24
176.72.0.0/16 maxlen: 16
192.89.0.0/16 maxlen: 24
194.89.0.0/16 maxlen: 24
62.71.0.0/16 maxlen: 16
84.34.0.0/16 maxlen: 16
193.178.133.0/24 maxlen: 24
88.192.0.0/14 maxlen: 21
80.74.192.0/19 maxlen: 19
46.132.0.0/16 maxlen: 16
212.213.0.0/16 maxlen: 24
86.115.0.0/16 maxlen: 16
194.142.0.0/16 maxlen: 24
2001:8b8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:90:bd:0b:db:97:7e:48:db:de:1b:56:f7:70:97:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Feb 14 10:55:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26e00568fa8c9bc82cb016033707e3e7026e8d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8c:f7:cb:bc:0b:eb:13:9e:29:76:bc:50:2a:
63:b4:90:03:d6:fa:69:31:f9:d3:d5:cd:f2:3b:9c:
4e:f8:ed:b9:8f:8c:59:7c:c2:78:72:19:45:63:b6:
e2:f2:c8:20:12:50:fd:8f:b2:ac:16:94:ad:35:be:
a7:10:b9:c5:c7:6c:dc:20:b0:ed:f5:9c:85:07:da:
9f:62:31:a2:31:b9:70:83:b4:5c:95:94:ea:cc:bf:
2a:b3:33:18:63:c7:e2:c6:0e:aa:1f:2f:a6:44:b1:
9f:11:08:db:4b:41:59:3f:b0:04:f6:80:88:3e:fb:
33:cb:2c:9a:cb:86:0d:6e:d2:c6:fe:5f:f0:63:54:
0a:43:35:39:bd:aa:2b:17:f0:ce:6a:ac:7a:4c:f7:
78:f8:5f:e7:31:d2:d0:b4:2f:9a:2d:9d:81:62:c9:
2c:cf:2d:bd:39:93:93:7c:4c:46:a4:4f:4b:e6:6c:
c7:26:ef:0f:8a:92:4c:9e:28:ba:0e:15:40:e6:0a:
7b:d9:a7:0f:24:4e:21:76:43:e0:30:5d:af:76:45:
90:fb:83:5c:bf:ee:96:d1:cd:18:ee:a7:85:90:ad:
93:fa:fd:8f:01:50:a1:f9:14:99:6e:62:1d:9d:d4:
7f:24:6e:41:58:01:08:fd:68:ac:fe:2b:90:ed:6f:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E0:05:68:FA:8C:9B:C8:2C:B0:16:03:37:07:E3:E7:02:6E:8D:87
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/JuAFaPqMm8gssBYDNwfj5wJujYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.132.0.0/16
62.71.0.0/16
62.73.32.0/19
80.74.192.0/19
80.220.0.0/14
81.16.64.0/20
84.34.0.0/16
84.248.0.0/14
86.114.0.0/15
88.86.128.0/19
88.192.0.0/14
93.106.0.0/16
109.240.0.0/16
131.177.0.0/16
141.208.0.0/16
176.72.0.0/16
188.238.0.0/16
192.58.42.0-192.58.89.255
192.83.0.0-192.83.100.255
192.89.0.0/16
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.112.0-192.103.116.255
192.130.0.0/16
192.194.0.0/16
193.178.133.0/24
193.208.0.0/14
194.89.0.0/16
194.111.0.0/16
194.137.0.0/16
194.142.0.0/16
194.197.0.0/16
194.215.0.0/16
194.251.0.0-194.252.255.255
195.156.0.0/16
195.165.0.0/16
212.83.96.0/19
212.149.64.0/18
212.182.192.0/18
212.213.0.0/16
213.28.0.0/16
213.140.160.0/19
213.173.128.0/19
217.140.128.0/17
IPv6:
2001:8b8::/29
Signature Algorithm: sha256WithRSAEncryption
56:04:c2:7e:fe:10:31:36:34:26:fb:8e:a2:15:68:cc:f3:41:
db:e2:14:b9:84:1d:6f:a6:d1:b1:d8:bf:51:2c:be:5d:00:ee:
9e:92:41:03:25:48:ac:90:bd:68:7b:3c:71:41:91:65:b0:c4:
1b:28:f9:dd:d6:cc:ac:59:0e:95:09:cd:1d:7c:57:18:2f:98:
b9:cd:24:37:8e:c3:86:44:63:c4:58:4a:18:68:89:3d:d1:d9:
e4:7d:12:74:d9:b6:31:62:83:03:a2:40:86:e1:b8:d9:5c:b7:
0c:61:76:7e:c2:c9:f8:54:53:0e:fe:75:77:39:99:eb:d6:e4:
58:89:72:c7:4f:60:f1:52:c7:18:10:02:f6:13:a4:f8:6b:a7:
d0:ab:5c:fb:03:eb:23:8c:37:60:31:67:4c:a7:9c:d4:a4:f2:
9b:a3:b2:99:16:39:bb:aa:af:55:36:cc:2b:b0:07:55:ae:06:
06:71:c4:84:92:db:f2:18:43:61:fc:e5:dc:9d:3c:3a:ef:71:
9b:f3:c6:71:1c:0b:cb:8f:00:53:68:f9:03:86:a3:c5:54:f5:
a6:d5:f7:f2:f4:b6:81:89:2b:b8:44:fd:2a:a4:12:c5:07:a6:
36:2c:f8:ab:64:48:4a:6b:43:3f:83:b1:04:6c:26:1b:e0:44:
73:6c:a4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:29:48 2025 by rpki-client