Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/kXVm7ZQmpMTyPftXgDTxV_YMKqM.roa
File: kXVm7ZQmpMTyPftXgDTxV_YMKqM.roa (raw, json)
Hash identifier: ODFG70A0IRHafajRrBjpXuHPGW4Ft8Vtbo8SPEn5tnU=
Subject key identifier: 91:75:66:ED:94:26:A4:C4:F2:3D:FB:57:80:34:F1:57:F6:0C:2A:A3
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 01880FD1BE1FD371EE7D54B9800B6B78B50B
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/kXVm7ZQmpMTyPftXgDTxV_YMKqM.roa
Signing time: Fri 12 May 2023 11:56:23 +0000
ROA not before: Fri 12 May 2023 11:56:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28952
IP address blocks: 151.236.224.0/20 maxlen: 20
37.58.0.0/20 maxlen: 20
46.34.224.0/19 maxlen: 19
37.152.96.0/19 maxlen: 19
31.3.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:d1:be:1f:d3:71:ee:7d:54:b9:80:0b:6b:78:b5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: May 12 11:56:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=917566ed9426a4c4f23dfb578034f157f60c2aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:44:45:d9:b1:4f:a6:96:6b:ef:d2:5e:de:
a7:7b:0c:e6:5a:ab:cf:37:07:e3:23:0d:60:a8:50:
26:76:16:d8:86:a1:df:b5:c6:a6:46:ca:79:c5:ac:
ce:d4:a7:76:8f:ce:85:9d:a3:a1:96:3b:82:2a:71:
dc:25:9c:72:45:35:98:2e:42:71:0c:49:71:6f:39:
69:f9:09:67:13:ce:84:c5:dd:3e:17:28:d1:1d:8a:
57:f8:7b:39:a4:0a:d4:95:04:eb:c1:aa:94:f9:b5:
00:18:9f:04:b1:fc:16:1c:ad:b3:f8:81:b9:c3:36:
89:ee:06:23:e6:a5:54:dc:41:7d:9e:e0:9c:0a:f2:
41:1e:15:de:c8:49:60:49:e0:57:72:6f:67:d8:b6:
98:b9:83:30:16:db:76:03:fd:a4:6c:6e:c2:49:a0:
bf:7b:36:c6:4e:99:a3:ec:39:71:ab:fc:52:8a:d6:
7c:0c:e1:f9:07:30:cb:0c:3b:c6:ce:b8:d6:be:79:
6e:49:6a:f9:92:e7:53:ef:06:0d:50:1e:63:51:c9:
c7:e3:f1:a0:4a:fa:85:af:f7:22:dd:cd:3b:9e:1a:
07:c1:38:1f:e6:e0:dc:eb:3d:3d:41:14:d9:26:75:
0f:64:76:a8:fd:d7:1a:54:99:29:2e:f9:09:81:40:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:75:66:ED:94:26:A4:C4:F2:3D:FB:57:80:34:F1:57:F6:0C:2A:A3
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/kXVm7ZQmpMTyPftXgDTxV_YMKqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.32.0/19
37.58.0.0/20
37.152.96.0/19
46.34.224.0/19
151.236.224.0/20
Signature Algorithm: sha256WithRSAEncryption
30:b4:cb:2f:42:42:31:13:d2:94:c2:09:90:60:fb:d6:e8:68:
2b:57:7f:34:27:ff:8a:58:b4:70:f0:7e:1d:97:f6:be:df:b7:
f1:89:b7:a6:8e:d1:85:17:62:3f:01:28:d8:c4:49:c1:9f:37:
15:43:e7:64:9c:40:88:87:0c:9d:7d:b3:4d:12:3a:55:cc:c7:
19:8a:6b:72:51:bc:9c:1c:bd:fb:80:c5:b4:ac:08:d7:b7:b6:
4c:58:c8:cd:fd:3f:fa:fc:7d:cf:7e:e3:43:0d:5f:aa:4a:38:
55:1e:a2:91:78:08:36:48:38:33:f2:f1:90:8f:0c:f9:94:5c:
48:f2:ef:74:c3:cf:1e:41:bb:38:e4:7a:b0:f2:69:ff:19:08:
8d:e9:ff:26:99:e8:4d:60:b0:2d:1e:8a:bd:f8:45:c6:d0:b4:
e9:47:6c:43:74:25:3c:53:29:39:00:33:bd:6d:bc:34:23:6a:
e8:ce:be:f1:bd:4c:13:18:2f:67:1b:6c:ee:11:d3:bf:45:33:
49:8c:bc:81:0b:00:27:0f:6f:c6:60:30:6e:fc:0b:69:29:3b:
b0:b4:19:bd:69:ff:51:f1:dc:26:fa:98:10:88:73:ea:f0:88:
71:39:1f:a9:b0:6a:6e:14:5b:c9:04:7d:d1:80:0b:44:5e:93:
a4:f1:65:f9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYgP0b4f03HufVS5gAtreLULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2Q0Y2ZlNjBmOGEzMGE0ZDBmZjk0Yjk0ZWJhZGZjODhj
OWFjMTEwHhcNMjMwNTEyMTE1NjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTc1NjZlZDk0MjZhNGM0ZjIzZGZiNTc4MDM0ZjE1N2Y2MGMyYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTBERdmxT6aWa+/SXt6newzmWqvP
NwfjIw1gqFAmdhbYhqHftcamRsp5xazO1Kd2j86FnaOhljuCKnHcJZxyRTWYLkJx
DElxbzlp+QlnE86Exd0+FyjRHYpX+Hs5pArUlQTrwaqU+bUAGJ8EsfwWHK2z+IG5
wzaJ7gYj5qVU3EF9nuCcCvJBHhXeyElgSeBXcm9n2LaYuYMwFtt2A/2kbG7CSaC/
ezbGTpmj7Dlxq/xSitZ8DOH5BzDLDDvGzrjWvnluSWr5kudT7wYNUB5jUcnH4/Gg
SvqFr/ci3c07nhoHwTgf5uDc6z09QRTZJnUPZHao/dcaVJkpLvkJgUDQ2wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJF1Zu2UJqTE8j37V4A08Vf2DCqjMB8GA1UdIwQY
MBaAFKV9TP5g+KMKTQ/5S5TrrfyIyawRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgt
ZTgwZjMyMDczZjNkLzEva1hWbTdaUW1wTVR5UGZ0WGdEVHhWX1lNS3FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgtZTgwZjMyMDczZjNk
LzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFHwMgAwQE
JToAAwQFJZhgAwQFLiLgAwQEl+zgMA0GCSqGSIb3DQEBCwUAA4IBAQAwtMsvQkIx
E9KUwgmQYPvW6GgrV380J/+KWLRw8H4dl/a+37fxibemjtGFF2I/ASjYxEnBnzcV
Q+dknECIhwydfbNNEjpVzMcZimtyUbycHL37gMW0rAjXt7ZMWMjN/T/6/H3PfuND
DV+qSjhVHqKReAg2SDgz8vGQjwz5lFxI8u90w88eQbs45Hqw8mn/GQiN6f8mmehN
YLAtHoq9+EXG0LTpR2xDdCU8Uyk5ADO9bbw0I2rozr7xvUwTGC9nG2zuEdO/RTNJ
jLyBCwAnD2/GYDBu/AtpKTuwtBm9af9R8dwm+pgQiHPq8IhxOR+psGpuFFvJBH3R
gAtEXpOk8WX5
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:45 2025 by rpki-client