Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/h9p-5Zz4ojAG5cg6nfx3BfKr6zc.roa
File: h9p-5Zz4ojAG5cg6nfx3BfKr6zc.roa (raw, json)
Hash identifier: fAf5a/BwegQR0LTDV+pUdXnZ8ZfZ0cHZcwQ0CA+JcN0=
Subject key identifier: 87:DA:7E:E5:9C:F8:A2:30:06:E5:C8:3A:9D:FC:77:05:F2:AB:EB:37
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0188C3E06E6A0545238F05E3FEE4DADA5D24
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/h9p-5Zz4ojAG5cg6nfx3BfKr6zc.roa
Signing time: Fri 16 Jun 2023 11:04:05 +0000
ROA not before: Fri 16 Jun 2023 11:04:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58305
IP address blocks: 198.105.124.0/23 maxlen: 24
45.43.64.0/19 maxlen: 24
45.43.74.0/23 maxlen: 24
45.43.80.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
198.105.116.0/23 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.48.0/23 maxlen: 23
155.254.63.0/24 maxlen: 24
155.254.61.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.165.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.164.0/24 maxlen: 24
107.161.172.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.173.0/24 maxlen: 24
107.161.174.0/23 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
162.217.250.0/24 maxlen: 24
162.217.251.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9944:1111::/48 maxlen: 48
2a07:9944:2222::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a07:9944:30::/48 maxlen: 48
2a02:2ca7:2e::/48 maxlen: 48
2a07:9942:39d6::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:e0:6e:6a:05:45:23:8f:05:e3:fe:e4:da:da:5d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jun 16 11:04:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87da7ee59cf8a23006e5c83a9dfc7705f2abeb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:c1:32:3d:87:51:15:59:56:46:93:0a:19:
e7:5b:41:2f:39:ce:a3:ef:8b:12:33:f7:be:14:e4:
82:54:56:c9:5c:75:48:68:96:e4:2c:a1:ec:28:5f:
11:d7:f0:33:5f:f6:c6:91:70:77:27:d8:6d:6c:43:
1e:2b:6d:aa:5a:63:85:00:fa:38:f9:db:be:2c:15:
21:fb:10:de:c5:f5:53:1a:78:d8:02:14:95:0f:c9:
01:20:dd:b6:2a:c3:18:0c:14:1e:76:99:26:b0:fa:
7d:70:fb:66:fd:dd:43:6d:8a:1b:d5:e7:d1:2b:f5:
6c:39:3c:78:f1:da:c7:2c:a2:19:e7:6e:54:98:1c:
51:f5:eb:0c:bc:de:3b:d8:88:a5:a3:45:1e:63:6f:
37:89:9a:53:58:7d:ae:aa:52:ec:38:a3:d9:52:75:
7f:59:a5:e0:7a:6d:98:86:5c:4b:fd:a5:0b:bc:9d:
e9:20:9f:4e:b5:97:b6:5a:22:06:ea:ab:e3:4f:1a:
af:9b:60:9b:68:97:31:da:17:9e:a3:64:c3:85:05:
bc:52:40:af:76:97:43:d2:03:df:71:16:06:c8:52:
da:7e:f2:52:cd:73:c2:41:0b:5c:3e:39:9c:a3:9b:
f2:00:d1:0c:96:95:bf:06:9e:13:d1:5b:4a:58:9f:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DA:7E:E5:9C:F8:A2:30:06:E5:C8:3A:9D:FC:77:05:F2:AB:EB:37
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/h9p-5Zz4ojAG5cg6nfx3BfKr6zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0-107.161.162.255
107.161.164.0/23
107.161.168.0/21
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.248.0/22
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
33:b5:2c:03:ef:59:88:aa:31:c5:66:af:77:72:5d:6b:c2:0e:
58:58:23:d0:4d:45:67:aa:78:3a:16:7f:2b:81:a7:50:ce:25:
ee:83:d5:a1:eb:1f:7b:0e:07:bf:86:24:be:38:15:5e:5b:e0:
39:3d:65:e7:d6:be:ce:3c:92:6f:97:d9:a8:7c:1b:1d:92:c5:
c8:51:98:31:aa:a2:81:46:e2:eb:ae:bf:6e:66:be:59:45:ac:
0b:c6:0d:30:ba:22:ae:dd:22:d7:b2:f4:64:c2:ef:ac:fd:f2:
e1:b6:fc:d6:20:a6:d9:33:26:eb:0d:62:e0:8f:dc:61:92:b2:
81:a4:f6:fb:38:70:f6:99:50:37:3e:ce:a2:8b:a9:a1:88:20:
c3:14:07:cb:f6:32:c3:75:c4:7f:fd:ed:66:db:3b:92:81:03:
01:8a:f2:20:57:a9:c3:31:17:f8:a3:0e:90:21:d0:af:f1:59:
83:d1:5e:cd:32:d6:85:c0:4f:18:e9:dc:8a:89:39:74:fc:2d:
74:45:89:ed:5f:73:05:1a:34:77:da:fc:6d:83:8e:92:6d:62:
23:eb:ae:af:98:57:c9:e1:7d:35:94:f8:9c:39:54:ec:75:38:
96:91:70:31:19:3e:48:8c:34:c6:bb:72:14:da:58:2c:f0:93:
c1:0c:73:9b
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgISAYjD4G5qBUUjjwXj/uTa2l0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjMwNjE2MTEwNDA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2RhN2VlNTljZjhhMjMwMDZlNWM4M2E5ZGZjNzcwNWYyYWJlYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMnBMj2HURVZVkaTChnnW0EvOc6j
74sSM/e+FOSCVFbJXHVIaJbkLKHsKF8R1/AzX/bGkXB3J9htbEMeK22qWmOFAPo4
+du+LBUh+xDexfVTGnjYAhSVD8kBIN22KsMYDBQedpkmsPp9cPtm/d1DbYob1efR
K/VsOTx48drHLKIZ525UmBxR9esMvN472Iilo0UeY283iZpTWH2uqlLsOKPZUnV/
WaXgem2YhlxL/aULvJ3pIJ9OtZe2WiIG6qvjTxqvm2CbaJcx2heeo2TDhQW8UkCv
dpdD0gPfcRYGyFLafvJSzXPCQQtcPjmco5vyANEMlpW/Bp4T0VtKWJ8LvQIDAQAB
o4ICZDCCAmAwHQYDVR0OBBYEFIfafuWc+KIwBuXIOp38dwXyq+s3MB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvaDlwLTVaejRvakFHNWNnNm5meDNCZktyNnpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBKBAIAATBEAwQFLStAMAwD
BAVroaADBABroaIDBAFroaQDBANroagDBAVrtYADBAJxFJwDBAWb/iADBAKi2fgD
BAOi3PADBAXGaWAwGwQCAAIwFQMFAyoCLKADBQMqBZ9AAwUDKgeZQDANBgkqhkiG
9w0BAQsFAAOCAQEAM7UsA+9ZiKoxxWavd3Jda8IOWFgj0E1FZ6p4OhZ/K4GnUM4l
7oPVoesfew4Hv4YkvjgVXlvgOT1l59a+zjySb5fZqHwbHZLFyFGYMaqigUbi666/
bma+WUWsC8YNMLoirt0i17L0ZMLvrP3y4bb81iCm2TMm6w1i4I/cYZKygaT2+zhw
9plQNz7OooupoYggwxQHy/Yyw3XEf/3tZts7koEDAYryIFepwzEX+KMOkCHQr/FZ
g9FezTLWhcBPGOnciok5dPwtdEWJ7V9zBRo0d9r8bYOOkm1iI+uur5hXyeF9NZT4
nDlU7HU4lpFwMRk+SIw0xrtyFNpYLPCTwQxzmw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 19:38:19 2025 by rpki-client