Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/lTfV22gfPW4MI4uRxiixuQrodUw.roa
File: lTfV22gfPW4MI4uRxiixuQrodUw.roa (raw, json)
Hash identifier: HZoulDSrj1ZzZp/ON7ejZaSAB1qJ93q1zWjF4b0gk9w=
Subject key identifier: 95:37:D5:DB:68:1F:3D:6E:0C:23:8B:91:C6:28:B1:B9:0A:E8:75:4C
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 018B81E2F2935E27E934E6C10F136EFD1EF4
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/lTfV22gfPW4MI4uRxiixuQrodUw.roa
Signing time: Mon 30 Oct 2023 18:40:15 +0000
ROA not before: Mon 30 Oct 2023 18:40:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 62.106.81.0/24 maxlen: 24
185.230.246.0/24 maxlen: 24
91.246.36.0/24 maxlen: 24
176.116.10.0/24 maxlen: 24
188.244.125.0/24 maxlen: 24
193.243.186.0/24 maxlen: 24
194.150.79.0/24 maxlen: 24
213.173.38.0/24 maxlen: 24
77.75.229.0/24 maxlen: 24
79.110.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:e2:f2:93:5e:27:e9:34:e6:c1:0f:13:6e:fd:1e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Oct 30 18:40:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9537d5db681f3d6e0c238b91c628b1b90ae8754c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:9d:a9:3a:1f:5b:88:2f:0c:fa:ae:17:c0:
16:6f:72:88:97:1c:2e:21:19:d9:e4:ec:1d:39:43:
f6:7b:9c:a2:d4:57:54:61:6a:79:41:97:64:99:34:
d8:d1:88:85:02:af:f1:0e:f3:49:e2:31:9d:8d:21:
b5:88:39:2f:35:5f:f9:6e:bc:27:34:76:99:89:4c:
0f:75:0f:83:5e:ab:8f:55:a1:f5:10:41:5f:fa:e9:
65:96:f0:b9:4d:68:2f:94:6b:60:e9:81:fc:58:80:
0a:85:3e:b1:6d:fc:10:ae:e5:75:53:55:46:1d:cf:
7f:7a:43:d3:40:7b:c8:d0:77:47:25:51:df:99:20:
6c:2b:5a:6a:e9:62:fc:08:5c:bc:ff:42:95:23:4a:
1c:b5:62:9d:51:1b:9b:48:56:3b:fe:e6:6d:09:a4:
38:25:5e:0c:02:19:21:2b:f0:21:2d:7c:9e:de:6c:
9b:99:fc:24:21:41:4c:aa:b4:8c:b0:0f:a9:ad:5a:
e1:08:a2:4b:96:54:70:e0:05:6b:c9:63:a7:e4:c6:
69:23:2b:a7:4c:09:c5:c3:79:34:db:c4:63:8f:6f:
ed:e8:38:f9:48:e7:cc:ce:64:ea:21:af:ac:e2:11:
bf:db:3f:7d:af:28:56:c3:33:c6:4a:04:ae:69:78:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:37:D5:DB:68:1F:3D:6E:0C:23:8B:91:C6:28:B1:B9:0A:E8:75:4C
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/lTfV22gfPW4MI4uRxiixuQrodUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.81.0/24
77.75.229.0/24
79.110.224.0/24
91.246.36.0/24
176.116.10.0/24
185.230.246.0/24
188.244.125.0/24
193.243.186.0/24
194.150.79.0/24
213.173.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4f:c2:9f:f6:1a:46:f6:47:c4:ad:04:d9:aa:3b:48:ef:aa:
29:33:3c:9d:66:5c:56:40:b3:11:74:d2:e7:ca:e3:5d:f0:2f:
e7:1f:a2:4c:a2:d5:77:44:11:6c:06:e9:3d:1d:97:c1:36:96:
00:c7:9b:23:78:65:fe:91:9f:6b:83:6e:07:bf:1d:df:6e:32:
4e:49:a1:e5:fa:7d:13:39:f2:9b:25:1e:2d:b4:12:ed:7d:90:
57:98:fc:85:65:0c:c9:d4:4d:d7:e2:07:13:3a:aa:5e:02:53:
95:2d:d2:d4:1e:1d:7c:31:45:6e:0a:06:fd:da:d4:ad:f6:5a:
2b:aa:20:cd:87:1b:b2:94:31:ce:f1:51:1e:4c:9d:10:86:8e:
c0:3a:68:4c:ae:66:c9:71:3a:e5:cf:7b:2d:0f:1b:a2:b7:2a:
7b:80:5c:ca:ce:96:17:89:77:2e:67:00:d7:c6:6d:d2:ef:2d:
28:77:67:c5:0b:a0:3e:fe:12:0e:72:83:80:f4:3d:df:34:ae:
55:18:f7:88:39:df:e6:3e:a5:f9:c3:c1:e1:9e:6e:38:ae:a8:
5b:60:40:23:97:d2:7a:aa:4d:02:7e:b4:59:a0:87:73:db:36:
ee:ff:71:68:8d:6e:3d:d0:f2:b1:f9:bb:02:6c:e7:03:23:4d:
70:02:72:18
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYuB4vKTXifpNObBDxNu/R70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx
MTFkNTEwHhcNMjMxMDMwMTg0MDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTM3ZDVkYjY4MWYzZDZlMGMyMzhiOTFjNjI4YjFiOTBhZTg3NTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthCdqTofW4gvDPquF8AWb3KIlxwu
IRnZ5OwdOUP2e5yi1FdUYWp5QZdkmTTY0YiFAq/xDvNJ4jGdjSG1iDkvNV/5brwn
NHaZiUwPdQ+DXquPVaH1EEFf+ulllvC5TWgvlGtg6YH8WIAKhT6xbfwQruV1U1VG
Hc9/ekPTQHvI0HdHJVHfmSBsK1pq6WL8CFy8/0KVI0octWKdURubSFY7/uZtCaQ4
JV4MAhkhK/AhLXye3mybmfwkIUFMqrSMsA+prVrhCKJLllRw4AVryWOn5MZpIyun
TAnFw3k028Rjj2/t6Dj5SOfMzmTqIa+s4hG/2z99ryhWwzPGSgSuaXh0XQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFJU31dtoHz1uDCOLkcYosbkK6HVMMB8GA1UdIwQY
MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt
YTQyMTNjOTNmMWY3LzEvbFRmVjIyZ2ZQVzRNSTR1UnhpaXh1UXJvZFV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3
LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAPmpRAwQA
TUvlAwQAT27gAwQAW/YkAwQAsHQKAwQAueb2AwQAvPR9AwQAwfO6AwQAwpZPAwQA
1a0mMA0GCSqGSIb3DQEBCwUAA4IBAQB6T8Kf9hpG9kfErQTZqjtI76opMzydZlxW
QLMRdNLnyuNd8C/nH6JMotV3RBFsBuk9HZfBNpYAx5sjeGX+kZ9rg24Hvx3fbjJO
SaHl+n0TOfKbJR4ttBLtfZBXmPyFZQzJ1E3X4gcTOqpeAlOVLdLUHh18MUVuCgb9
2tSt9lorqiDNhxuylDHO8VEeTJ0Qho7AOmhMrmbJcTrlz3stDxuityp7gFzKzpYX
iXcuZwDXxm3S7y0od2fFC6A+/hIOcoOA9D3fNK5VGPeIOd/mPqX5w8Hhnm44rqhb
YEAjl9J6qk0CfrRZoIdz2zbu/3FojW490PKx+bsCbOcDI01wAnIY
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:24 2025 by rpki-client