Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/4ye8E6w3qcWcHXew0S9PURk7kEY.roa
File: 4ye8E6w3qcWcHXew0S9PURk7kEY.roa (raw, json)
Hash identifier: NSDiEtNKzAZ8RHdjjVqEf7YG6JjVbgsPYXCgfJOqYEY=
Subject key identifier: E3:27:BC:13:AC:37:A9:C5:9C:1D:77:B0:D1:2F:4F:51:19:3B:90:46
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0189BAE2E05AA8297B59D52C8A5200EAC505
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/4ye8E6w3qcWcHXew0S9PURk7kEY.roa
Signing time: Thu 03 Aug 2023 10:12:58 +0000
ROA not before: Thu 03 Aug 2023 10:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200598
IP address blocks: 91.210.80.0/22 maxlen: 24
128.0.60.0/22 maxlen: 24
50.20.224.0/20 maxlen: 24
162.250.216.0/22 maxlen: 24
188.215.12.0/22 maxlen: 24
79.110.184.0/22 maxlen: 24
95.215.144.0/22 maxlen: 24
217.144.108.0/22 maxlen: 24
121.127.48.0/20 maxlen: 24
173.214.200.0/22 maxlen: 24
66.9.96.0/20 maxlen: 24
141.193.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:e2:e0:5a:a8:29:7b:59:d5:2c:8a:52:00:ea:c5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 3 10:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e327bc13ac37a9c59c1d77b0d12f4f51193b9046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:e4:ae:d8:ca:1a:e0:a4:11:82:11:43:15:
32:3a:ab:c7:f1:2d:92:22:15:e9:b4:f2:4d:1c:df:
c0:1b:c4:96:dc:fe:04:a0:70:1f:32:e7:e6:66:5b:
aa:b5:0f:36:31:b2:eb:b0:8a:c3:de:7b:23:74:84:
53:95:19:c4:eb:6a:bd:be:87:e3:1b:e2:81:54:be:
88:a4:87:53:dd:e7:6d:9d:92:cb:56:e7:56:21:3c:
58:2b:0c:82:1a:ac:2c:81:4c:aa:21:e6:5a:4c:fd:
6b:9b:46:26:b8:cd:b9:6b:0e:b0:02:f4:63:08:01:
05:89:0a:62:f7:6c:b4:da:7d:8e:97:d9:93:09:40:
12:72:1b:92:03:89:3e:53:04:f6:f5:e0:88:5c:4d:
5d:26:50:4e:9c:ad:a8:0f:d7:f7:52:51:e7:4a:5a:
76:4a:f7:b4:ab:a7:3d:f5:49:9e:0a:dc:d1:01:dc:
bf:33:ca:bf:1d:01:e0:17:c4:7e:b6:79:91:b9:c0:
e1:b4:54:8a:6a:e5:33:be:ae:4c:0e:eb:33:b8:f3:
bf:0a:fa:f5:fb:be:46:dd:60:b8:e4:87:be:2a:78:
59:84:63:34:31:d5:c7:43:66:f7:e6:ad:c3:a7:b4:
f0:d4:af:16:54:42:9a:4c:d3:58:dc:a0:fa:47:ae:
70:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:27:BC:13:AC:37:A9:C5:9C:1D:77:B0:D1:2F:4F:51:19:3B:90:46
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/4ye8E6w3qcWcHXew0S9PURk7kEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.20.224.0/20
66.9.96.0/20
79.110.184.0/22
91.210.80.0/22
95.215.144.0/22
121.127.48.0/20
128.0.60.0/22
141.193.108.0/22
162.250.216.0/22
173.214.200.0/22
188.215.12.0/22
217.144.108.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:25:17:18:d9:ea:22:cb:76:00:d2:db:52:9a:2e:6e:4f:1d:
ee:10:fe:6a:cf:09:09:82:97:3c:80:e1:c9:8a:31:d9:c5:ad:
e4:95:54:3a:f7:fc:4c:6b:76:59:4f:c4:77:34:eb:21:6f:28:
12:85:31:cd:1c:8e:4a:bd:10:24:22:9e:47:00:ad:8f:eb:16:
dc:86:d9:48:33:15:46:76:0b:7f:49:6c:76:14:81:d3:a9:b1:
0c:62:9e:65:d6:c5:3a:d9:15:56:40:ac:10:d6:10:24:09:cc:
e6:cb:4f:84:45:a0:67:a4:5c:85:01:4e:91:9a:11:46:54:10:
d3:6f:71:23:f5:de:6a:bc:98:81:aa:08:ae:1f:43:fd:d9:b6:
76:91:85:e4:4c:91:8e:54:00:b0:60:95:30:60:ff:e5:4d:32:
01:11:1b:e6:0b:ea:86:57:8f:34:19:bf:3d:c9:d8:5d:b0:fc:
40:ff:60:89:f7:10:c5:ce:27:ac:32:ae:6b:1f:99:d6:2f:de:
42:09:f8:eb:73:80:55:e6:5f:a4:9d:78:3c:81:4e:27:5b:b9:
9c:5e:69:38:c0:c9:31:b4:85:1d:4f:cb:83:17:87:a5:16:8c:
30:8d:0f:28:b0:8d:e2:71:16:b6:35:62:82:ed:4e:d4:9b:42:
91:b7:a6:13
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYm64uBaqCl7WdUsilIA6sUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjMwODAzMTAxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzI3YmMxM2FjMzdhOWM1OWMxZDc3YjBkMTJmNGY1MTE5M2I5MDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu27krtjKGuCkEYIRQxUyOqvH8S2S
IhXptPJNHN/AG8SW3P4EoHAfMufmZluqtQ82MbLrsIrD3nsjdIRTlRnE62q9vofj
G+KBVL6IpIdT3edtnZLLVudWITxYKwyCGqwsgUyqIeZaTP1rm0YmuM25aw6wAvRj
CAEFiQpi92y02n2Ol9mTCUASchuSA4k+UwT29eCIXE1dJlBOnK2oD9f3UlHnSlp2
Sve0q6c99UmeCtzRAdy/M8q/HQHgF8R+tnmRucDhtFSKauUzvq5MDuszuPO/Cvr1
+75G3WC45Ie+KnhZhGM0MdXHQ2b35q3Dp7Tw1K8WVEKaTNNY3KD6R65wwwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFOMnvBOsN6nFnB13sNEvT1EZO5BGMB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvNHllOEU2dzNxY1djSFhldzBTOVBVUms3a0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQEMhTgAwQE
QglgAwQCT264AwQCW9JQAwQCX9eQAwQEeX8wAwQCgAA8AwQCjcFsAwQCovrYAwQC
rdbIAwQCvNcMAwQC2ZBsMA0GCSqGSIb3DQEBCwUAA4IBAQCMJRcY2eoiy3YA0ttS
mi5uTx3uEP5qzwkJgpc8gOHJijHZxa3klVQ69/xMa3ZZT8R3NOshbygShTHNHI5K
vRAkIp5HAK2P6xbchtlIMxVGdgt/SWx2FIHTqbEMYp5l1sU62RVWQKwQ1hAkCczm
y0+ERaBnpFyFAU6RmhFGVBDTb3Ej9d5qvJiBqgiuH0P92bZ2kYXkTJGOVACwYJUw
YP/lTTIBERvmC+qGV480Gb89ydhdsPxA/2CJ9xDFziesMq5rH5nWL95CCfjrc4BV
5l+knXg8gU4nW7mcXmk4wMkxtIUdT8uDF4elFowwjQ8osI3icRa2NWKC7U7Um0KR
t6YT
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:56 2025 by rpki-client