Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/F1pyo7vUyE0Yt_ELl-FlGbJx07Y.roa
File: F1pyo7vUyE0Yt_ELl-FlGbJx07Y.roa (raw, json)
Hash identifier: QWAVPwG9s0FmGU4+AXZFCDh9EWH41pNtuXVRsHxkDK0=
Subject key identifier: 17:5A:72:A3:BB:D4:C8:4D:18:B7:F1:0B:97:E1:65:19:B2:71:D3:B6
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 018A51346B8D0C1707182B79042A7427E3EF
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/F1pyo7vUyE0Yt_ELl-FlGbJx07Y.roa
Signing time: Fri 01 Sep 2023 14:45:04 +0000
ROA not before: Fri 01 Sep 2023 14:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25255
IP address blocks: 91.141.0.0/20 maxlen: 20
91.141.0.0/17 maxlen: 17
94.245.192.0/24 maxlen: 24
178.114.92.0/22 maxlen: 22
94.245.192.0/18 maxlen: 18
213.94.64.0/21 maxlen: 21
213.94.64.0/18 maxlen: 18
213.94.78.0/24 maxlen: 24
213.94.76.0/24 maxlen: 24
213.94.77.0/24 maxlen: 24
178.114.128.0/21 maxlen: 21
91.141.32.0/19 maxlen: 19
91.141.64.0/20 maxlen: 20
77.119.224.0/19 maxlen: 19
77.116.128.0/17 maxlen: 17
77.119.160.0/20 maxlen: 20
178.113.0.0/17 maxlen: 17
77.119.192.0/19 maxlen: 19
77.117.0.0/17 maxlen: 17
77.118.240.0/20 maxlen: 20
46.220.0.0/16 maxlen: 16
178.115.96.0/24 maxlen: 24
178.112.0.0/17 maxlen: 17
77.118.192.0/20 maxlen: 20
77.118.208.0/20 maxlen: 20
194.24.128.0/19 maxlen: 19
178.112.0.0/14 maxlen: 14
178.115.128.0/20 maxlen: 20
77.118.224.0/21 maxlen: 21
77.118.232.0/21 maxlen: 21
77.116.0.0/17 maxlen: 17
77.119.96.0/22 maxlen: 22
77.119.112.0/22 maxlen: 22
77.116.0.0/14 maxlen: 14
77.119.128.0/20 maxlen: 20
109.126.64.0/18 maxlen: 18
178.112.128.0/17 maxlen: 17
178.115.224.0/19 maxlen: 19
77.119.80.0/21 maxlen: 21
77.119.88.0/21 maxlen: 21
46.57.124.0/22 maxlen: 22
46.57.120.0/22 maxlen: 22
77.118.32.0/21 maxlen: 21
77.118.48.0/21 maxlen: 21
178.114.208.0/21 maxlen: 21
77.118.56.0/21 maxlen: 21
178.114.224.0/20 maxlen: 20
81.3.192.0/24 maxlen: 24
81.3.192.0/18 maxlen: 18
213.94.79.0/24 maxlen: 24
213.94.80.0/22 maxlen: 22
178.114.144.0/21 maxlen: 21
46.57.80.0/21 maxlen: 21
213.94.96.0/21 maxlen: 21
178.114.152.0/21 maxlen: 21
213.94.95.0/24 maxlen: 24
46.57.88.0/21 maxlen: 21
178.114.160.0/20 maxlen: 20
46.57.96.0/21 maxlen: 21
46.57.104.0/22 maxlen: 22
178.114.176.0/20 maxlen: 20
77.118.17.0/24 maxlen: 24
77.118.14.0/24 maxlen: 24
46.57.112.0/21 maxlen: 21
77.118.136.0/21 maxlen: 21
178.165.192.0/20 maxlen: 20
178.115.64.0/20 maxlen: 20
77.118.160.0/20 maxlen: 20
77.118.176.0/20 maxlen: 20
178.114.240.0/20 maxlen: 20
81.3.204.0/23 maxlen: 23
81.3.206.0/23 maxlen: 23
81.3.201.0/24 maxlen: 24
81.3.211.0/24 maxlen: 24
81.3.210.0/24 maxlen: 24
178.165.128.0/17 maxlen: 17
178.165.128.0/20 maxlen: 20
77.118.108.0/22 maxlen: 22
77.118.112.0/20 maxlen: 20
178.165.160.0/19 maxlen: 19
178.115.32.0/19 maxlen: 19
77.118.128.0/21 maxlen: 21
2a02:2861:d::/48 maxlen: 48
2a02:2864::/30 maxlen: 30
2a02:2861::/32 maxlen: 32
2a02:2861:e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:51:34:6b:8d:0c:17:07:18:2b:79:04:2a:74:27:e3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Sep 1 14:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=175a72a3bbd4c84d18b7f10b97e16519b271d3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:ad:6b:8e:39:3f:e2:42:3b:18:34:fe:bf:
ef:a1:96:44:1b:e0:28:0a:b5:3a:d7:a4:b9:52:53:
74:60:7a:db:60:32:a0:b4:ff:83:a9:41:20:0f:54:
40:82:a7:cd:bb:96:d3:01:a6:d5:d2:17:94:a4:b3:
28:4f:ee:d8:0c:da:cf:60:29:ef:99:5c:f9:33:83:
c5:e9:09:55:86:74:5e:40:d8:6e:01:f0:e7:59:5d:
86:cb:6e:4c:ff:c0:e5:4f:98:8e:07:0b:9e:01:58:
38:c8:72:2d:0f:3d:46:23:5a:a4:88:cb:91:6e:5e:
e4:f0:18:80:b2:d8:c0:54:ac:7e:a0:9a:0d:ec:3d:
37:d7:db:44:ce:bb:19:53:09:bf:1a:b6:63:47:39:
a5:bc:f2:4e:1e:e3:0d:3b:bd:6d:34:8f:de:06:cd:
ad:36:79:63:26:28:87:a3:24:cd:2a:25:e7:35:9d:
97:d7:db:ab:32:20:e0:f8:a1:1e:37:fc:c9:d1:17:
38:34:61:64:49:17:0c:a7:d5:ce:0b:b2:6a:66:77:
32:90:f2:a4:d4:e3:d1:98:0e:50:2f:3c:ba:86:c1:
45:3b:90:e6:76:e6:41:39:f1:24:e8:4f:36:d1:ae:
fd:7b:11:56:20:39:f7:aa:2b:cf:a5:98:7e:8d:39:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:72:A3:BB:D4:C8:4D:18:B7:F1:0B:97:E1:65:19:B2:71:D3:B6
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/F1pyo7vUyE0Yt_ELl-FlGbJx07Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.80.0-46.57.107.255
46.57.112.0/20
46.220.0.0/16
77.116.0.0/14
81.3.192.0/18
91.141.0.0/17
94.245.192.0/18
109.126.64.0/18
178.112.0.0/14
178.165.128.0/17
194.24.128.0/19
213.94.64.0/18
IPv6:
2a02:2861::/32
2a02:2864::/30
Signature Algorithm: sha256WithRSAEncryption
95:2f:77:d6:62:30:69:50:07:eb:d8:4d:86:8f:fd:48:3e:1d:
5a:5e:9a:66:7a:7a:56:ed:b9:08:75:17:ed:1f:85:f1:49:a4:
a1:26:38:b1:e3:fd:4d:2f:d6:95:51:44:c6:e6:33:0b:31:98:
27:36:92:49:5b:b0:ac:c4:3e:9e:57:a5:5d:0a:7f:14:30:61:
75:e6:74:53:0e:46:88:3b:15:db:94:99:43:65:f3:4d:c5:39:
fd:5b:70:a8:bb:2a:5f:c7:c8:6a:55:d4:e6:c7:47:bd:1b:b4:
6b:b3:2b:77:44:a1:7b:4c:60:41:8e:46:e5:36:a3:ad:a6:dc:
27:f6:2f:74:d5:89:b1:e8:fa:ee:83:4c:87:ba:40:d8:01:31:
a1:0e:01:98:c7:b6:07:f2:0b:b5:cd:65:47:e4:80:a0:11:95:
cf:59:3b:69:10:5c:01:a0:74:23:fe:a7:c5:df:68:ae:05:8c:
9b:90:4c:59:bd:42:92:b9:76:f0:e2:d0:c5:96:da:18:1f:80:
03:84:9a:78:bd:43:ad:97:7c:ee:d6:5d:a5:ee:f4:43:53:05:
a0:13:f5:d0:c8:f0:63:36:36:55:7c:37:70:ac:d0:f3:c7:ea:
bf:60:73:12:a3:c2:d0:74:f6:e6:13:5d:b0:3c:ef:fd:e2:c8:
1f:d9:12:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:47:08 2025 by rpki-client