Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/8zmfzw4KBgzdeRUCKp49Zs5zO4s.roa
File: 8zmfzw4KBgzdeRUCKp49Zs5zO4s.roa (raw, json)
Hash identifier: LG6IXmRBqWeanoXbz5H1JukCViXBnMZnWDiFWIsglgU=
Subject key identifier: F3:39:9F:CF:0E:0A:06:0C:DD:79:15:02:2A:9E:3D:66:CE:73:3B:8B
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 0326FC99
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/8zmfzw4KBgzdeRUCKp49Zs5zO4s.roa
Signing time: Sat 01 Jan 2022 05:05:23 +0000
ROA not before: Sat 01 Jan 2022 05:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8953
IP address blocks: 86.106.83.0/24 maxlen: 24
37.156.224.0/24 maxlen: 24
89.37.97.0/24 maxlen: 24
93.113.56.0/24 maxlen: 24
93.122.128.0/17 maxlen: 24
37.251.208.0/20 maxlen: 24
109.166.212.0/24 maxlen: 24
92.114.82.0/24 maxlen: 24
185.53.196.0/22 maxlen: 24
92.114.38.0/24 maxlen: 24
62.217.192.0/18 maxlen: 24
89.39.71.0/24 maxlen: 24
89.39.81.0/24 maxlen: 24
93.115.244.0/23 maxlen: 24
109.166.128.0/17 maxlen: 24
2a02:a58::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52886681 (0x326fc99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Jan 1 05:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3399fcf0e0a060cdd7915022a9e3d66ce733b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:70:2a:f7:c3:12:aa:55:1e:2b:3c:20:be:
f2:54:9d:33:76:b0:85:a7:5a:92:2a:e1:f4:fe:f2:
ce:e4:28:39:5e:29:12:0c:1a:99:8a:4a:f8:98:d7:
fa:9b:40:56:c0:cf:56:2c:ee:0e:4a:14:7d:a3:44:
45:4e:c9:7d:95:b2:e1:f2:d0:00:6b:72:bf:39:f0:
76:93:a5:df:dd:d1:32:cc:52:c3:63:ac:fa:64:29:
7f:47:2f:d6:27:7f:9d:36:a3:54:fb:8d:89:71:70:
9d:6b:2c:89:f5:15:69:2b:4e:64:54:03:09:de:26:
e5:45:e5:c9:90:93:b9:03:8e:6e:f8:c3:c1:50:99:
7b:bf:dd:62:2e:8d:20:96:9b:26:87:7e:4d:11:93:
5f:d6:3a:e7:b3:7e:a9:6e:14:9a:d9:4e:b6:ba:e3:
76:44:4b:15:9d:4b:c1:f1:71:e6:47:3b:9f:dd:ca:
28:a1:62:9e:74:06:81:06:06:24:1c:97:8f:fe:98:
a8:56:04:9c:7e:96:b5:6f:d5:37:0d:f4:80:d3:74:
27:76:c0:81:cb:2e:17:67:12:00:ea:c4:55:2f:ef:
22:f3:4b:c9:1d:54:08:05:da:cd:b0:e6:67:be:2f:
fa:51:20:47:2f:d1:04:f1:3d:00:b8:32:86:60:f8:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:39:9F:CF:0E:0A:06:0C:DD:79:15:02:2A:9E:3D:66:CE:73:3B:8B
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/8zmfzw4KBgzdeRUCKp49Zs5zO4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.224.0/24
37.251.208.0/20
62.217.192.0/18
86.106.83.0/24
89.37.97.0/24
89.39.71.0/24
89.39.81.0/24
92.114.38.0/24
92.114.82.0/24
93.113.56.0/24
93.115.244.0/23
93.122.128.0/17
109.166.128.0/17
185.53.196.0/22
IPv6:
2a02:a58::/32
Signature Algorithm: sha256WithRSAEncryption
84:c3:ee:b0:14:f3:1b:40:84:7e:6d:85:e9:cf:8c:f4:46:3a:
6e:c5:f2:67:02:ff:c6:c8:05:5c:f5:c6:47:ac:d0:05:4a:d3:
21:4f:71:7a:34:58:b9:ae:d8:91:85:b9:76:d6:76:c0:74:86:
2a:a8:84:db:a4:3b:01:09:0f:ca:0d:1a:2d:8a:c3:27:95:46:
c1:14:d7:c7:87:88:01:e4:7d:52:76:e3:0d:19:cb:14:69:8e:
26:2a:54:33:7b:a6:97:02:55:fc:c4:7c:ef:4d:47:f5:4b:c4:
b2:96:08:6c:dc:dc:69:3a:04:44:64:78:75:b8:aa:51:ec:67:
1d:de:03:eb:2a:9f:52:2e:61:d5:57:83:e3:52:91:f5:a9:ab:
e9:6e:03:d4:15:fb:5e:76:1b:e3:af:da:93:a8:dc:47:09:24:
a6:a7:3d:84:19:5d:c2:a6:0f:d0:77:1e:4f:f5:cd:b6:db:c4:
10:db:08:18:96:9c:8d:fd:d3:96:b7:af:54:cd:d7:96:e8:1c:
54:c7:8f:02:ec:be:1f:1a:1c:81:04:bc:c8:b5:50:c8:5d:f0:
db:f6:97:81:13:34:b5:43:32:59:29:b4:17:41:2d:60:e9:0e:
46:ce:4b:3b:8f:dc:29:d7:7b:33:0d:f3:6a:d5:f5:6f:ec:e9:
5a:d0:84:5d
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIEAyb8mTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDI5NmQyM2RlZjRjODUyMWM2NDdkYzY4YWNiM2MxMjNmNjExZDg5MB4XDTIyMDEw
MTA1MDUyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjMzOTlmY2YwZTBh
MDYwY2RkNzkxNTAyMmE5ZTNkNjZjZTczM2I4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMm7cCr3wxKqVR4rPCC+8lSdM3awhadakirh9P7yzuQoOV4p
EgwamYpK+JjX+ptAVsDPVizuDkoUfaNERU7JfZWy4fLQAGtyvznwdpOl393RMsxS
w2Os+mQpf0cv1id/nTajVPuNiXFwnWssifUVaStOZFQDCd4m5UXlyZCTuQOObvjD
wVCZe7/dYi6NIJabJod+TRGTX9Y657N+qW4UmtlOtrrjdkRLFZ1LwfFx5kc7n93K
KKFinnQGgQYGJByXj/6YqFYEnH6WtW/VNw30gNN0J3bAgcsuF2cSAOrEVS/vIvNL
yR1UCAXazbDmZ74v+lEgRy/RBPE9ALgyhmD4SQkCAwEAAaOCAmYwggJiMB0GA1Ud
DgQWBBTzOZ/PDgoGDN15FQIqnj1mznM7izAfBgNVHSMEGDAWgBRUKW0j3vTIUhxk
fcaKyzwSP2EdiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZDbHRJOTcweUZJY1pIM0dpc3M4RWo5aEhZay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmMvNWNiNDU0LTdiZWUtNGU1ZC1iMjk1LTk0MjQ4MmY4ZDJlYS8x
Lzh6bWZ6dzRLQmd6ZGVSVUNLcDQ5WnM1ek80cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMv
NWNiNDU0LTdiZWUtNGU1ZC1iMjk1LTk0MjQ4MmY4ZDJlYS8xL1ZDbHRJOTcweUZJ
Y1pIM0dpc3M4RWo5aEhZay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB8
BggrBgEFBQcBBwEB/wRtMGswWgQCAAEwVAMEACWc4AMEBCX70AMEBj7ZwAMEAFZq
UwMEAFklYQMEAFknRwMEAFknUQMEAFxyJgMEAFxyUgMEAF1xOAMEAV1z9AMEB116
gAMEB22mgAMEArk1xDANBAIAAjAHAwUAKgIKWDANBgkqhkiG9w0BAQsFAAOCAQEA
hMPusBTzG0CEfm2F6c+M9EY6bsXyZwL/xsgFXPXGR6zQBUrTIU9xejRYua7YkYW5
dtZ2wHSGKqiE26Q7AQkPyg0aLYrDJ5VGwRTXx4eIAeR9UnbjDRnLFGmOJipUM3um
lwJV/MR8701H9UvEspYIbNzcaToERGR4dbiqUexnHd4D6yqfUi5h1VeD41KR9amr
6W4D1BX7XnYb46/ak6jcRwkkpqc9hBldwqYP0HceT/XNttvEENsIGJacjf3Tlrev
VM3XlugcVMePAuy+HxocgQS8yLVQyF3w2/aXgRM0tUMyWSm0F0EtYOkORs5LO4/c
Kdd7Mw3zatX1b+zpWtCEXQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 16:01:02 2025 by rpki-client