Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/TEBWgVwWdtYKW7zijokcYaOrmdE.roa
File: TEBWgVwWdtYKW7zijokcYaOrmdE.roa (raw, json)
Hash identifier: FqdvOILHtCYYpmShhIAuEDUdtEWhnniXKIXH4wu4KIA=
Subject key identifier: 4C:40:56:81:5C:16:76:D6:0A:5B:BC:E2:8E:89:1C:61:A3:AB:99:D1
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0188B3F90D75C44D64DC2BEE45FDE346DD6C
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/TEBWgVwWdtYKW7zijokcYaOrmdE.roa
Signing time: Tue 13 Jun 2023 08:57:03 +0000
ROA not before: Tue 13 Jun 2023 08:57:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202468
IP address blocks: 185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.220.227.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.0.0/22 maxlen: 22
37.32.0.0/19 maxlen: 24
37.32.8.0/22 maxlen: 22
37.32.17.0/24 maxlen: 24
37.32.16.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
193.176.240.0/22 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
185.143.232.0/22 maxlen: 24
37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 24
188.121.124.0/23 maxlen: 23
188.121.120.0/21 maxlen: 24
185.239.104.0/22 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
188.121.127.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.226.116.0/22 maxlen: 24
2a0c:a7c0:3::/48 maxlen: 48
2a07:3900::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:f9:0d:75:c4:4d:64:dc:2b:ee:45:fd:e3:46:dd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jun 13 08:57:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c4056815c1676d60a5bbce28e891c61a3ab99d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:f2:4e:50:0c:80:6a:f6:5c:03:dc:c3:d4:
e5:93:2c:0d:1b:06:84:de:8a:2a:db:79:fa:31:85:
a0:94:b5:6a:a7:90:a2:45:4c:b0:3e:66:26:d6:10:
fc:c8:90:35:3f:5a:3d:49:e9:7a:cf:e2:52:1c:79:
bd:62:4e:f5:59:b8:b7:ce:23:ba:96:8d:ca:09:26:
fb:af:28:fa:02:26:47:71:a5:df:e9:b9:5e:e3:07:
cb:af:82:7f:88:bf:54:88:17:ce:b3:c5:52:44:07:
9c:e0:e4:cb:24:82:8e:20:54:44:78:a1:ec:ae:4e:
cf:6b:a0:b2:4b:ce:61:f4:0f:b6:bc:20:08:2a:e4:
10:a7:d3:0a:fb:23:04:83:3f:fb:1c:af:07:49:59:
2a:df:ae:f4:91:32:aa:58:24:0c:41:6d:66:d1:ca:
0a:fe:da:78:8f:a8:20:4c:6c:6a:d6:78:60:d6:b1:
99:90:27:4e:f7:d4:84:be:ad:6e:ed:97:3b:18:da:
4a:ee:fb:22:e9:be:d1:5d:e9:c4:d5:2c:42:33:ad:
6a:bd:66:11:92:2d:8e:d2:e6:4b:a9:e1:e7:f5:dd:
6f:9f:cf:b2:ec:43:71:24:31:66:93:cc:11:2e:b1:
bb:d4:bc:18:bf:81:1a:a5:f1:28:27:2f:ad:c5:f0:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:40:56:81:5C:16:76:D6:0A:5B:BC:E2:8E:89:1C:61:A3:AB:99:D1
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/TEBWgVwWdtYKW7zijokcYaOrmdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
06:7a:92:29:63:50:b3:de:ba:7b:35:99:64:b0:00:73:09:5e:
28:e2:38:8e:ab:dd:c1:8f:37:b1:09:db:8c:dc:a0:50:f0:f9:
d5:5a:bb:e5:23:f2:73:d6:03:82:12:70:bc:73:ef:bd:11:6f:
45:e7:77:1e:bc:72:04:81:0e:be:7e:79:16:96:9c:3c:de:50:
9a:2f:e9:07:cf:bf:3b:a9:7e:b8:67:00:45:b9:f4:4a:8c:59:
41:55:70:37:6c:41:7d:1a:d9:6c:dd:89:a2:a2:09:e3:9e:d3:
b0:3f:b4:e5:ee:e1:c9:90:11:84:bd:75:9e:50:79:b1:50:ff:
a4:c8:7e:69:49:6b:2d:dc:1c:d4:a1:10:46:85:a8:50:10:37:
8e:9b:fc:d4:79:30:94:33:83:09:01:5e:0a:75:cc:fc:81:46:
3e:27:44:7e:71:dc:82:6a:98:7c:2b:b9:75:ef:af:e0:dd:51:
52:15:d2:6b:e6:63:b0:17:ba:65:36:72:53:85:41:2a:c7:08:
f0:a8:b5:72:72:61:ea:e9:7b:1f:46:da:f0:17:5b:8b:5e:56:
d0:c7:b2:b0:bc:31:2a:02:30:f3:90:b3:a9:c5:7a:fe:36:c3:
44:d4:c2:6d:15:02:f6:29:f3:95:b6:a3:77:09:6f:68:33:14:
b0:10:5c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:15:27 2025 by rpki-client