Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/v4N_Iva2BXuePoBpO7BQZQgLWN4.roa
File: v4N_Iva2BXuePoBpO7BQZQgLWN4.roa (raw, json)
Hash identifier: kiZx+i1dybQtz77GYQ+HMWdBVGo6zwCz/HnGFryrEFY=
Subject key identifier: BF:83:7F:22:F6:B6:05:7B:9E:3E:80:69:3B:B0:50:65:08:0B:58:DE
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 018BB2F1DE3A0E08A34EE72DCC749AEA1D02
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/v4N_Iva2BXuePoBpO7BQZQgLWN4.roa
Signing time: Thu 09 Nov 2023 07:17:57 +0000
ROA not before: Thu 09 Nov 2023 07:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25255
IP address blocks: 91.141.0.0/20 maxlen: 20
91.141.0.0/17 maxlen: 17
94.245.192.0/24 maxlen: 24
178.114.96.0/20 maxlen: 20
94.245.192.0/18 maxlen: 18
213.94.64.0/21 maxlen: 21
178.114.112.0/20 maxlen: 20
213.94.64.0/18 maxlen: 18
213.94.78.0/24 maxlen: 24
213.94.76.0/24 maxlen: 24
213.94.77.0/24 maxlen: 24
178.114.128.0/21 maxlen: 21
91.141.32.0/19 maxlen: 19
91.141.64.0/20 maxlen: 20
77.119.224.0/19 maxlen: 19
77.116.128.0/17 maxlen: 17
77.119.160.0/20 maxlen: 20
178.113.0.0/17 maxlen: 17
77.119.192.0/19 maxlen: 19
77.117.0.0/17 maxlen: 17
77.118.240.0/20 maxlen: 20
46.220.0.0/16 maxlen: 16
178.115.96.0/24 maxlen: 24
178.115.98.0/24 maxlen: 24
178.112.0.0/17 maxlen: 17
194.24.128.0/19 maxlen: 19
178.112.0.0/14 maxlen: 14
178.115.128.0/20 maxlen: 20
77.118.224.0/21 maxlen: 21
77.118.232.0/21 maxlen: 21
77.116.0.0/17 maxlen: 17
77.119.112.0/22 maxlen: 22
77.116.0.0/14 maxlen: 14
77.119.128.0/20 maxlen: 20
109.126.64.0/18 maxlen: 18
178.112.128.0/17 maxlen: 17
178.115.224.0/19 maxlen: 19
77.119.80.0/21 maxlen: 21
46.57.124.0/22 maxlen: 22
178.114.192.0/21 maxlen: 21
77.118.32.0/21 maxlen: 21
77.118.48.0/21 maxlen: 21
178.114.216.0/21 maxlen: 21
178.114.224.0/20 maxlen: 20
81.3.192.0/24 maxlen: 24
81.3.192.0/18 maxlen: 18
213.94.79.0/24 maxlen: 24
213.94.80.0/22 maxlen: 22
178.114.144.0/21 maxlen: 21
46.57.80.0/21 maxlen: 21
213.94.96.0/21 maxlen: 21
178.114.152.0/21 maxlen: 21
213.94.95.0/24 maxlen: 24
46.57.88.0/21 maxlen: 21
178.114.160.0/20 maxlen: 20
46.57.96.0/21 maxlen: 21
178.114.176.0/20 maxlen: 20
77.118.14.0/24 maxlen: 24
46.57.112.0/21 maxlen: 21
77.118.136.0/21 maxlen: 21
178.165.192.0/20 maxlen: 20
178.115.64.0/20 maxlen: 20
178.114.240.0/20 maxlen: 20
81.3.204.0/23 maxlen: 23
81.3.206.0/23 maxlen: 23
81.3.201.0/24 maxlen: 24
81.3.211.0/24 maxlen: 24
81.3.210.0/24 maxlen: 24
178.165.128.0/17 maxlen: 17
178.165.128.0/20 maxlen: 20
77.118.104.0/22 maxlen: 22
77.118.108.0/22 maxlen: 22
178.165.160.0/19 maxlen: 19
178.115.32.0/19 maxlen: 19
77.118.128.0/21 maxlen: 21
2a02:2861:d::/48 maxlen: 48
2a02:2864::/30 maxlen: 30
2a02:2861::/32 maxlen: 32
2a02:2861:e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:f1:de:3a:0e:08:a3:4e:e7:2d:cc:74:9a:ea:1d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Nov 9 07:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf837f22f6b6057b9e3e80693bb05065080b58de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:18:db:6f:a6:98:6f:4a:72:35:1a:c3:1e:b2:
17:5c:9b:19:c0:f1:ab:32:fa:b5:54:f6:30:8c:1e:
67:4f:90:67:c8:9a:94:cf:13:c3:03:01:b9:d2:ec:
ad:18:a1:14:7f:80:89:9b:ce:a6:a0:df:2a:cc:5a:
49:15:f4:32:53:a9:e6:cf:08:d1:61:48:3d:40:5f:
1a:5a:3d:7c:8d:b2:f6:05:14:c9:26:cf:b7:39:5d:
7a:77:4e:bd:84:51:79:87:49:db:d5:00:8f:d6:0c:
ff:ef:82:19:d5:e2:2d:15:ad:50:ef:99:4b:65:90:
9e:49:87:7b:9d:e6:72:49:78:06:aa:c4:6e:19:65:
cf:b8:20:8f:a0:1f:a1:93:b9:65:38:d3:14:fb:7c:
5c:0c:5f:bb:31:e6:c3:57:54:01:4c:36:cf:42:7a:
e4:11:64:84:b0:a4:1d:b4:a9:50:f5:7b:c1:a9:a0:
88:4c:cf:2f:86:65:97:e9:06:cc:0d:b5:18:df:f2:
af:13:0b:75:ae:90:fe:e3:3d:72:e2:ad:06:74:97:
ab:0f:9c:66:ee:f7:72:24:9b:48:48:94:49:72:ca:
46:39:67:fa:3e:03:01:b9:7f:3a:80:bc:47:c1:37:
88:45:dc:4a:68:2f:31:c8:26:ec:50:db:89:bd:54:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:83:7F:22:F6:B6:05:7B:9E:3E:80:69:3B:B0:50:65:08:0B:58:DE
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/v4N_Iva2BXuePoBpO7BQZQgLWN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.80.0-46.57.103.255
46.57.112.0/21
46.57.124.0/22
46.220.0.0/16
77.116.0.0/14
81.3.192.0/18
91.141.0.0/17
94.245.192.0/18
109.126.64.0/18
178.112.0.0/14
178.165.128.0/17
194.24.128.0/19
213.94.64.0/18
IPv6:
2a02:2861::/32
2a02:2864::/30
Signature Algorithm: sha256WithRSAEncryption
4f:6c:c7:d9:93:19:7f:72:d3:19:46:3c:43:95:90:be:cf:50:
eb:56:1c:d0:d4:7e:5c:a3:8e:86:ff:2b:a2:ff:f0:83:6f:39:
fc:33:04:9c:d2:50:9e:88:82:5b:2c:2c:f3:b7:00:7a:cb:fb:
86:b2:05:47:d4:5f:1e:63:f5:dd:d9:54:53:59:5e:c2:4f:79:
53:d9:c5:31:ed:fc:f4:0c:10:00:a6:36:9d:b3:4c:29:eb:fd:
fb:d6:b7:60:4b:99:1c:6f:c6:d5:78:97:54:ac:7e:e2:53:13:
e5:bd:59:80:82:a6:38:52:55:27:4c:6d:65:64:ce:42:d3:6c:
e5:f2:d1:55:26:cd:56:68:22:18:24:2f:e8:04:02:c6:4d:08:
8f:66:40:8c:b8:31:aa:97:d2:4b:d5:8b:ad:33:c1:3f:e1:64:
57:2b:a5:ea:0c:ed:c2:f1:17:6f:c9:fb:21:0a:1f:5b:c6:8f:
fd:9e:5f:00:55:01:1e:3a:21:68:63:f0:9c:e8:0c:03:ed:e8:
7d:f1:8b:c1:81:f5:2a:4f:18:b8:66:fa:af:70:91:2b:cc:82:
14:51:6e:a3:c1:64:8f:52:b5:0a:c3:2d:94:61:a0:50:3c:bc:
1b:46:10:67:05:af:67:8f:8f:a9:18:ae:f0:9a:92:57:d2:30:
d8:67:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:36:02 2025 by rpki-client