Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/j2B9JCqA-cN2pR2mP2ph_CzR2sw.roa
File: j2B9JCqA-cN2pR2mP2ph_CzR2sw.roa (raw, json)
Hash identifier: xaM4l/+irXY1fGcS0PMDgX1lDRAhZ0amTTNVG9/tLt4=
Subject key identifier: 8F:60:7D:24:2A:80:F9:C3:76:A5:1D:A6:3F:6A:61:FC:2C:D1:DA:CC
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0188D21B2B5E7DC3C193CB9E8813E31150CA
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/j2B9JCqA-cN2pR2mP2ph_CzR2sw.roa
Signing time: Mon 19 Jun 2023 05:22:55 +0000
ROA not before: Mon 19 Jun 2023 05:22:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 195.180.224.0/22 maxlen: 22
195.180.232.0/22 maxlen: 22
195.180.228.0/22 maxlen: 22
194.64.89.0/24 maxlen: 24
194.163.192.0/20 maxlen: 22
194.163.96.0/20 maxlen: 24
194.163.220.0/22 maxlen: 22
195.180.196.0/22 maxlen: 22
62.138.64.0/22 maxlen: 22
195.180.204.0/22 maxlen: 22
195.180.200.0/22 maxlen: 22
194.64.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:1b:2b:5e:7d:c3:c1:93:cb:9e:88:13:e3:11:50:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jun 19 05:22:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f607d242a80f9c376a51da63f6a61fc2cd1dacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:15:51:1e:53:f6:b2:da:73:d8:40:2c:57:
44:53:28:a2:30:94:11:26:4f:3f:f8:35:1f:69:f4:
12:50:af:88:db:51:bb:26:74:25:24:f7:d7:44:9b:
78:d3:09:d2:ad:1b:de:52:2e:05:27:2a:71:61:31:
42:d0:ae:1c:a8:e8:b1:de:33:83:0c:fd:48:d8:8b:
dc:73:8e:b2:ee:3d:09:26:b4:a4:da:2d:88:8a:be:
31:c6:86:b2:3b:a8:43:79:bb:a5:02:fa:2f:de:40:
81:9e:84:58:6d:bf:f2:74:81:0c:e6:1c:70:01:bb:
be:92:bf:0d:86:de:5e:d5:6e:de:d2:5a:54:ad:16:
84:19:12:b6:d7:42:c8:91:24:49:0b:38:d2:dd:49:
1a:b0:92:f1:28:a1:2f:d8:71:24:f0:e5:e0:9e:bb:
98:4f:4e:78:e7:c5:fa:b8:61:a8:c2:dd:0f:68:1e:
56:78:77:ca:6c:4b:ef:89:43:61:56:2d:5d:b5:3a:
a0:87:5b:eb:12:c5:90:6e:46:eb:cf:a3:4d:9f:ff:
08:86:dd:9a:b9:23:f4:8b:b6:f2:a3:b6:b2:32:17:
1a:5f:cd:cf:3f:73:14:5b:fe:b0:2f:45:99:3f:30:
ab:25:3c:ee:9e:f1:ff:59:2a:b8:b4:fa:fd:47:5c:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:60:7D:24:2A:80:F9:C3:76:A5:1D:A6:3F:6A:61:FC:2C:D1:DA:CC
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/j2B9JCqA-cN2pR2mP2ph_CzR2sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
194.64.89.0/24
194.64.152.0/22
194.163.96.0/20
194.163.192.0/20
194.163.220.0/22
195.180.196.0-195.180.207.255
195.180.224.0-195.180.235.255
Signature Algorithm: sha256WithRSAEncryption
05:9a:9c:f1:d3:77:72:bd:d0:60:b9:30:8e:6f:d6:e7:00:f5:
d7:fd:e5:99:61:80:d3:23:e1:6f:4e:5a:5f:28:b1:56:3c:58:
34:5f:33:68:da:29:ee:2e:74:93:a8:b3:50:74:6a:c9:31:f7:
ca:7d:59:12:50:39:63:05:80:58:f2:c7:95:2f:a3:2a:46:a7:
e2:46:74:24:a2:21:82:b9:38:3f:e6:6d:19:3d:cf:c3:a8:26:
28:ba:bb:13:d4:c3:6b:91:b4:3b:5c:0c:42:d2:df:a4:aa:0f:
fa:b2:5c:1d:4d:a8:55:fe:00:2f:73:e9:d7:f3:4c:f8:36:d2:
72:fc:9e:6f:f8:07:ac:4f:bc:78:74:42:5e:0c:6e:7c:b5:0e:
8c:7c:24:9d:6f:28:d7:cf:d4:b4:ae:0e:07:f1:ab:aa:9c:0a:
b1:d7:f7:a5:16:a1:00:fa:8e:22:e8:de:67:e9:29:bb:f7:a7:
cc:d8:c8:bc:bf:10:0d:ac:cc:c5:bf:c2:43:94:c1:6e:19:b3:
45:77:c0:8d:15:d8:4c:7a:c0:f3:74:f5:47:d1:d7:3d:2c:8c:
9d:49:c8:d3:59:d0:7a:40:63:8f:b6:30:29:06:7d:8f:29:46:
61:05:35:c4:27:79:16:28:07:e5:a1:34:49:1a:99:91:ab:2a:
30:ba:84:29
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYjSGytefcPBk8ueiBPjEVDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjMwNjE5MDUyMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjYwN2QyNDJhODBmOWMzNzZhNTFkYTYzZjZhNjFmYzJjZDFkYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4UVUR5T9rLac9hALFdEUyiiMJQR
Jk8/+DUfafQSUK+I21G7JnQlJPfXRJt40wnSrRveUi4FJypxYTFC0K4cqOix3jOD
DP1I2Ivcc46y7j0JJrSk2i2Iir4xxoayO6hDebulAvov3kCBnoRYbb/ydIEM5hxw
Abu+kr8Nht5e1W7e0lpUrRaEGRK210LIkSRJCzjS3UkasJLxKKEv2HEk8OXgnruY
T05458X6uGGowt0PaB5WeHfKbEvviUNhVi1dtTqgh1vrEsWQbkbrz6NNn/8Iht2a
uSP0i7byo7ayMhcaX83PP3MUW/6wL0WZPzCrJTzunvH/WSq4tPr9R1wQsQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFI9gfSQqgPnDdqUdpj9qYfws0drMMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvajJCOUpDcUEtY04ycFIybVAycGhfQ3pSMnN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQCPopAAwQA
wkBZAwQCwkCYAwQEwqNgAwQEwqPAAwQCwqPcMAwDBALDtMQDBATDtMAwDAMEBcO0
4AMEAsO06DANBgkqhkiG9w0BAQsFAAOCAQEABZqc8dN3cr3QYLkwjm/W5wD11/3l
mWGA0yPhb05aXyixVjxYNF8zaNop7i50k6izUHRqyTH3yn1ZElA5YwWAWPLHlS+j
Kkan4kZ0JKIhgrk4P+ZtGT3Pw6gmKLq7E9TDa5G0O1wMQtLfpKoP+rJcHU2oVf4A
L3Pp1/NM+DbScvyeb/gHrE+8eHRCXgxufLUOjHwknW8o18/UtK4OB/GrqpwKsdf3
pRahAPqOIujeZ+kpu/enzNjIvL8QDazMxb/CQ5TBbhmzRXfAjRXYTHrA83T1R9HX
PSyMnUnI01nQekBjj7YwKQZ9jylGYQU1xCd5FigH5aE0SRqZkasqMLqEKQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:44 2025 by rpki-client