Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/81HnObSmaUzoZi6MFp7X05EH_SE.roa
File: 81HnObSmaUzoZi6MFp7X05EH_SE.roa (raw, json)
Hash identifier: nD2D8dYVlSacyxfBsM42lWjHUV2lZtrbTfX+XXUb5qE=
Subject key identifier: F3:51:E7:39:B4:A6:69:4C:E8:66:2E:8C:16:9E:D7:D3:91:07:FD:21
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 0181D39900C66D0932357808EA31531F2C55
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/81HnObSmaUzoZi6MFp7X05EH_SE.roa
Signing time: Wed 06 Jul 2022 13:00:28 +0000
ROA not before: Wed 06 Jul 2022 13:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57395
IP address blocks: 176.98.165.0/24 maxlen: 24
176.98.166.0/24 maxlen: 24
176.98.160.0/24 maxlen: 24
176.98.161.0/24 maxlen: 24
176.98.162.0/24 maxlen: 24
176.98.163.0/24 maxlen: 24
176.98.164.0/24 maxlen: 24
176.98.167.0/24 maxlen: 24
185.181.170.0/24 maxlen: 24
185.181.171.0/24 maxlen: 24
185.181.168.0/24 maxlen: 24
2a0b:33c0:50::/48 maxlen: 48
2a0b:33c0:10::/48 maxlen: 48
2a0b:33c0:6::/48 maxlen: 48
2a0b:33c0:114::/48 maxlen: 48
2a0b:33c0:118::/48 maxlen: 48
2a0b:33c0:3::/48 maxlen: 48
2a0b:33c0:113::/48 maxlen: 48
2a0b:33c0:1::/48 maxlen: 48
2a0b:33c0:51::/48 maxlen: 48
2a0b:33c0:117::/48 maxlen: 48
2a0b:33c0:107::/48 maxlen: 48
2a0b:33c0:112::/48 maxlen: 48
2a0b:33c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d3:99:00:c6:6d:09:32:35:78:08:ea:31:53:1f:2c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Jul 6 13:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f351e739b4a6694ce8662e8c169ed7d39107fd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:d9:0c:3f:87:20:b5:33:e8:73:6a:b7:77:
34:57:aa:89:33:79:1a:5a:bd:8b:cc:a9:8b:e4:ed:
78:b1:40:39:59:5a:f6:ff:ff:f5:2e:fe:0c:03:1c:
28:2e:6c:aa:9c:70:26:f5:8c:8d:2a:d6:05:43:8a:
6a:26:9c:5f:4d:3b:12:86:19:af:42:06:1c:83:8e:
1a:34:19:78:c2:1e:12:13:7a:8a:e6:9a:80:66:78:
b7:b9:c0:15:ca:35:d4:29:ad:00:09:af:6e:78:4d:
56:3f:d2:7d:cf:3e:78:90:95:dd:d5:27:75:4f:d9:
4b:fc:a2:be:02:6e:65:35:ce:76:13:40:0d:8e:f8:
17:05:18:53:da:7b:d4:ed:50:3c:99:b6:4a:db:11:
2b:06:85:0a:d1:e6:1f:30:56:48:a7:00:86:06:c0:
da:80:c6:34:0d:26:a6:46:a0:02:e4:15:ab:67:a9:
70:92:85:cc:b5:94:82:ea:eb:ce:9e:f2:bc:21:72:
1e:69:a9:97:cc:9e:27:63:92:bb:a1:32:22:87:17:
ab:3b:e5:53:51:56:a3:5c:ed:c6:3a:dc:c0:f0:05:
bf:df:60:42:24:22:6a:2a:e3:59:a6:91:49:ab:63:
0c:8b:71:1a:00:46:5f:e3:ac:80:15:46:56:f0:4f:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:E7:39:B4:A6:69:4C:E8:66:2E:8C:16:9E:D7:D3:91:07:FD:21
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/81HnObSmaUzoZi6MFp7X05EH_SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.160.0/21
185.181.168.0/24
185.181.170.0/23
IPv6:
2a0b:33c0:1::-2a0b:33c0:3:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:6::/48
2a0b:33c0:10::/48
2a0b:33c0:50::/47
2a0b:33c0:107::/48
2a0b:33c0:112::-2a0b:33c0:114:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:117::-2a0b:33c0:118:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
87:ca:d6:31:07:6d:01:74:96:ca:32:98:32:5d:a7:1a:83:1d:
e8:11:7d:a6:36:fc:5b:ea:39:49:aa:df:ca:4a:93:85:ea:93:
78:76:95:d1:7b:79:8e:71:26:9e:09:c2:0a:bf:34:9d:b4:fd:
dd:fe:d5:a0:c2:bf:8e:78:76:4d:16:7f:ad:55:3b:d2:5b:b7:
53:30:b9:03:21:fc:a6:2a:ad:63:aa:99:f7:30:d8:38:eb:21:
89:cf:0f:0f:71:f2:31:69:66:be:a3:34:25:ec:2c:2e:ae:92:
c0:1a:57:48:1c:eb:86:03:f6:ed:33:c0:9d:49:24:64:5a:ed:
4f:c0:43:d4:66:da:cf:29:42:37:3e:31:d1:3a:cf:e2:b3:4a:
3f:75:9f:e4:ba:73:86:1f:ac:06:9a:28:e5:94:38:ab:7a:3e:
f9:bd:f2:7e:8d:8f:f3:04:1a:fd:8d:bd:23:ca:6d:1e:de:7d:
cd:e3:06:e6:a2:a6:c1:e6:94:98:d5:45:dd:a8:b5:cb:a1:b9:
52:b9:19:b7:49:3f:9b:86:55:1c:62:99:55:06:b9:12:88:84:
56:dc:39:50:c9:51:cd:f9:6f:8f:aa:bd:6f:9b:48:bf:b8:e2:
a3:81:91:c2:1a:ad:60:c0:66:e6:77:77:9b:01:9e:d5:55:d2:
18:1a:68:22
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAYHTmQDGbQkyNXgI6jFTHyxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMWE2NDg3MjVlZTI2YTQ2MGNiOWIxY2JjZDljOWM4MzJj
NDQ5YWYwHhcNMjIwNzA2MTMwMDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzUxZTczOWI0YTY2OTRjZTg2NjJlOGMxNjllZDdkMzkxMDdmZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlHZDD+HILUz6HNqt3c0V6qJM3ka
Wr2LzKmL5O14sUA5WVr2///1Lv4MAxwoLmyqnHAm9YyNKtYFQ4pqJpxfTTsShhmv
QgYcg44aNBl4wh4SE3qK5pqAZni3ucAVyjXUKa0ACa9ueE1WP9J9zz54kJXd1Sd1
T9lL/KK+Am5lNc52E0ANjvgXBRhT2nvU7VA8mbZK2xErBoUK0eYfMFZIpwCGBsDa
gMY0DSamRqAC5BWrZ6lwkoXMtZSC6uvOnvK8IXIeaamXzJ4nY5K7oTIihxerO+VT
UVajXO3GOtzA8AW/32BCJCJqKuNZppFJq2MMi3EaAEZf46yAFUZW8E+hIQIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPNR5zm0pmlM6GYujBae19ORB/0hMB8GA1UdIwQY
MBaAFDAaZIcl7iakYMubHLzZycgyxEmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzIt
YTViMmQwOWUwNWNmLzEvODFIbk9iU21hVXpvWmk2TUZwN1gwNUVIX1NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzItYTViMmQwOWUwNWNm
LzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGVBggrBgEFBQcBBwEB/wSBhTCBgjAYBAIAATASAwQDsGKg
AwQAubWoAwQBubWqMGYEAgACMGAwEgMHACoLM8AAAQMHAioLM8AAAAMHACoLM8AA
BgMHACoLM8AAEAMHASoLM8AAUAMHACoLM8ABBzASAwcBKgszwAESAwcAKgszwAEU
MBIDBwAqCzPAARcDBwAqCzPAARgwDQYJKoZIhvcNAQELBQADggEBAIfK1jEHbQF0
lsoymDJdpxqDHegRfaY2/FvqOUmq38pKk4Xqk3h2ldF7eY5xJp4Jwgq/NJ20/d3+
1aDCv454dk0Wf61VO9Jbt1MwuQMh/KYqrWOqmfcw2DjrIYnPDw9x8jFpZr6jNCXs
LC6uksAaV0gc64YD9u0zwJ1JJGRa7U/AQ9Rm2s8pQjc+MdE6z+KzSj91n+S6c4Yf
rAaaKOWUOKt6Pvm98n6Nj/MEGv2NvSPKbR7efc3jBuaipsHmlJjVRd2otcuhuVK5
GbdJP5uGVRximVUGuRKIhFbcOVDJUc35b4+qvW+bSL+44qOBkcIarWDAZuZ3d5sB
ntVV0hgaaCI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:18 2025 by rpki-client