Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OHPYdqgG3zdULN3NuWa8FmOV48g.roa
File: OHPYdqgG3zdULN3NuWa8FmOV48g.roa (raw, json)
Hash identifier: DFY6MmsM1iGs6U+2sRU68oExxh1Yi/Zu/PD3ANvbf3k=
Subject key identifier: 38:73:D8:76:A8:06:DF:37:54:2C:DD:CD:B9:66:BC:16:63:95:E3:C8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0187D674F3393141859271ED58089CC75E15
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OHPYdqgG3zdULN3NuWa8FmOV48g.roa
Signing time: Mon 01 May 2023 08:36:41 +0000
ROA not before: Mon 01 May 2023 08:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.208.105.0/24 maxlen: 24
45.66.152.0/24 maxlen: 24
45.66.154.0/24 maxlen: 24
45.66.155.0/24 maxlen: 24
5.180.32.0/22 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.48.0/24 maxlen: 24
5.180.50.0/24 maxlen: 24
85.208.112.0/22 maxlen: 24
45.8.184.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.198.0/24 maxlen: 24
45.8.197.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
193.168.208.0/22 maxlen: 24
5.180.82.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
5.180.232.0/22 maxlen: 24
85.209.162.0/24 maxlen: 24
85.209.161.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
5.253.36.0/22 maxlen: 24
5.253.44.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
5.253.46.0/24 maxlen: 24
5.253.47.0/24 maxlen: 24
5.253.45.0/24 maxlen: 24
45.9.3.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d6:74:f3:39:31:41:85:92:71:ed:58:08:9c:c7:5e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 1 08:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3873d876a806df37542cddcdb966bc166395e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:8b:9a:2a:2f:63:20:49:86:b2:5b:eb:1a:
fb:2c:6f:29:13:2b:74:5c:36:ba:44:25:e2:9c:71:
fb:3e:24:49:27:c8:cd:66:5c:95:b4:0b:a0:4d:fc:
6f:25:db:89:c9:cb:cf:c1:0f:94:b7:a3:02:a3:5e:
ef:f9:9b:e3:3b:21:76:73:a5:2d:e9:b7:3b:f1:79:
04:cd:d7:d6:92:5e:bd:d3:42:d5:3f:86:eb:5b:fa:
8a:10:cf:86:e4:1d:ca:c5:c9:de:23:79:16:cb:dd:
11:90:ef:7f:3c:70:5d:73:f3:3c:ee:6e:17:52:48:
51:f7:8b:2b:0c:15:a1:2d:a1:e6:76:96:d2:36:90:
1a:ba:d4:b8:31:9e:e6:31:35:d2:d6:a9:a8:33:5c:
80:2f:c1:4b:97:c8:8f:fb:29:2f:e5:ea:0a:d3:71:
71:ef:ac:46:19:6b:d3:98:fa:59:6e:68:ac:98:fc:
70:74:d1:8c:a4:36:2b:d8:7d:72:74:c1:4f:dd:09:
46:7d:27:b4:df:76:56:ce:59:a8:c9:51:7a:2d:47:
3b:99:1c:c0:99:93:67:d5:da:ad:2c:4a:14:43:43:
62:6a:53:a2:fb:f7:24:44:f4:d3:3f:b3:4f:74:8b:
5c:07:7e:f1:1a:16:a8:84:8b:dc:d1:93:02:15:f5:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:73:D8:76:A8:06:DF:37:54:2C:DD:CD:B9:66:BC:16:63:95:E3:C8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OHPYdqgG3zdULN3NuWa8FmOV48g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.48.0/24
5.180.50.0/23
5.180.80.0/24
5.180.82.0/24
5.180.232.0/22
5.253.36.0/22
5.253.44.0/22
45.8.184.0-45.8.195.255
45.8.197.0-45.8.199.255
45.8.203.0/24
45.8.252.0/23
45.8.255.0-45.9.1.255
45.9.3.0/24
45.66.152.0/24
45.66.154.0/23
85.208.105.0/24
85.208.112.0/22
85.209.160.0-85.209.162.255
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
05:15:f1:f7:75:d4:82:93:0c:29:11:b2:e9:00:1c:ac:4e:af:
4d:35:84:01:bf:c6:ea:bf:9f:c9:ff:db:2c:99:78:5d:50:20:
d3:ba:0c:2b:24:4b:79:f4:63:4f:08:25:4b:5c:16:c4:81:93:
11:b1:1f:68:43:23:42:32:e6:41:e0:ab:f5:8a:f7:c6:02:57:
d7:bb:e5:1b:02:c7:5a:f9:ff:37:01:39:a6:a5:b4:91:88:a4:
4c:98:da:75:f3:27:18:89:4d:10:e0:48:24:30:b7:24:7f:56:
19:44:1e:d7:6f:12:9b:fa:55:4a:bd:54:0c:5a:ef:ad:6e:14:
74:a9:b2:bf:88:27:30:b2:ea:51:0b:0a:19:6c:64:7f:cc:e2:
cb:3d:66:b6:a6:15:ad:23:bd:92:55:d9:5a:36:f3:cd:37:14:
11:d0:9a:6d:40:a0:69:bb:f8:3b:95:e7:51:70:25:da:9b:50:
66:78:24:93:6b:c3:bc:cd:4b:65:61:3d:e7:f1:89:21:a8:7e:
22:f1:b0:c9:ad:6b:49:29:40:eb:61:0f:bc:01:80:1b:c9:1b:
54:60:89:81:61:8b:ab:95:b3:f0:7a:3a:b8:87:a5:6f:9b:ad:
64:4b:37:74:50:15:68:09:a1:cf:75:63:45:17:f8:ec:64:a5:
e7:32:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:54:36 2025 by rpki-client