Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/_ZU9Ube6Jt2KkwvWVcvhbb0SLeU.roa
File: _ZU9Ube6Jt2KkwvWVcvhbb0SLeU.roa (raw, json)
Hash identifier: S2Wix3P1jRBx4mXecX0c5CeTuwqyECdld1LVeUIWbDA=
Subject key identifier: FD:95:3D:51:B7:BA:26:DD:8A:93:0B:D6:55:CB:E1:6D:BD:12:2D:E5
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 018596A4C530344CC6760A885E7500B04870
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/_ZU9Ube6Jt2KkwvWVcvhbb0SLeU.roa
Signing time: Mon 09 Jan 2023 13:07:38 +0000
ROA not before: Mon 09 Jan 2023 13:07:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48504
IP address blocks: 193.243.151.0/24 maxlen: 24
45.134.192.0/22 maxlen: 24
46.247.160.0/19 maxlen: 24
94.247.160.0/21 maxlen: 24
94.143.80.0/21 maxlen: 24
185.48.48.0/22 maxlen: 24
194.105.58.0/23 maxlen: 24
194.105.62.0/23 maxlen: 24
176.53.128.0/22 maxlen: 24
185.12.96.0/22 maxlen: 24
193.239.190.0/23 maxlen: 24
37.26.176.0/21 maxlen: 24
185.50.76.0/22 maxlen: 24
2a03:bd00::/32 maxlen: 48
2a01:aa60::/32 maxlen: 48
2a01:9720::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:a4:c5:30:34:4c:c6:76:0a:88:5e:75:00:b0:48:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jan 9 13:07:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd953d51b7ba26dd8a930bd655cbe16dbd122de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:76:94:8b:84:8c:79:75:07:27:cf:e5:cf:6e:
19:8c:ac:69:0c:72:51:2c:c2:db:db:04:c9:97:22:
c7:08:df:53:84:8d:ef:3e:75:d4:c6:20:9a:ac:c4:
c1:5e:83:b1:8e:6c:00:a0:8e:7b:1a:f3:7e:f4:2b:
6a:f3:d0:f6:65:49:c8:8f:3f:72:85:14:f6:b0:09:
7c:52:bc:8b:cd:08:8e:57:d0:9f:be:88:b1:f6:d7:
d5:b8:58:ff:5d:30:d9:98:0a:c5:2c:d7:44:01:b3:
b5:89:5b:42:8b:d5:e7:67:99:2e:db:db:28:a5:ff:
06:2b:3c:9d:5e:c0:ea:fa:6e:b2:71:65:09:3a:a9:
64:5d:8a:0e:f0:70:e6:25:22:5c:17:c1:76:9d:4f:
0d:17:42:fa:38:54:bd:a1:f1:5c:69:75:b5:97:a2:
4d:55:50:42:1c:9f:56:4a:31:13:f6:e7:75:da:57:
b4:b0:4f:86:10:43:3e:52:17:12:15:65:7c:1c:5b:
0f:8b:94:b2:f6:f4:57:3e:1b:06:2a:40:41:03:a8:
a4:67:78:ce:89:8e:17:95:cd:af:fe:c3:25:93:7a:
a8:ff:eb:af:d0:04:13:94:b8:a0:b8:22:9d:d7:e7:
58:8a:95:40:aa:ac:c4:21:df:e4:7a:8c:95:68:80:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:95:3D:51:B7:BA:26:DD:8A:93:0B:D6:55:CB:E1:6D:BD:12:2D:E5
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/_ZU9Ube6Jt2KkwvWVcvhbb0SLeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.176.0/21
45.134.192.0/22
46.247.160.0/19
94.143.80.0/21
94.247.160.0/21
176.53.128.0/22
185.12.96.0/22
185.48.48.0/22
185.50.76.0/22
193.239.190.0/23
193.243.151.0/24
194.105.58.0/23
194.105.62.0/23
IPv6:
2a01:9720::/32
2a01:aa60::/32
2a03:bd00::/32
Signature Algorithm: sha256WithRSAEncryption
89:16:80:c8:77:b4:41:b3:07:9c:9d:a8:ef:23:ea:6e:2e:3a:
65:4f:bd:f6:93:26:ba:92:90:10:3f:38:7b:e0:9f:16:90:fe:
b4:a1:34:83:b4:75:fb:a5:91:b5:4e:a6:8a:9c:c7:95:9d:8c:
8a:6a:16:62:02:4c:83:b7:9e:eb:35:e4:79:2f:4f:83:47:d9:
b2:eb:f9:e1:d9:22:a5:95:79:a9:ec:e7:ea:10:8d:0b:6e:6f:
bb:71:d6:5a:91:9c:17:d6:61:f3:cf:7a:51:31:87:6d:b3:2a:
c4:6d:4f:37:b3:7c:42:28:44:c3:6b:14:c4:69:d5:9a:5d:fd:
57:93:7f:1b:41:b7:07:17:6b:4c:60:7b:eb:74:87:2a:aa:f0:
30:8e:29:4c:84:4f:62:54:4c:13:30:dd:ad:a1:83:06:b0:e1:
23:ce:98:9f:5b:1e:30:be:c1:8f:b7:65:13:77:33:91:ed:ef:
ba:58:2f:27:0d:f4:56:83:8e:11:0c:2e:f3:0a:2b:d7:a4:db:
44:68:ab:3c:1e:61:72:8b:4e:26:cf:73:29:e8:25:21:ec:ee:
ce:b6:07:cd:0d:c2:e4:b8:ee:b5:aa:71:0d:ad:43:38:a4:d6:
41:cf:78:2a:91:e6:5c:31:9c:d6:0e:f2:4d:ce:44:72:5b:70:
7e:28:0c:ed
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAYWWpMUwNEzGdgqIXnUAsEhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi
MDg1ZWYwHhcNMjMwMTA5MTMwNzM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDk1M2Q1MWI3YmEyNmRkOGE5MzBiZDY1NWNiZTE2ZGJkMTIyZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnaUi4SMeXUHJ8/lz24ZjKxpDHJR
LMLb2wTJlyLHCN9ThI3vPnXUxiCarMTBXoOxjmwAoI57GvN+9Ctq89D2ZUnIjz9y
hRT2sAl8UryLzQiOV9Cfvoix9tfVuFj/XTDZmArFLNdEAbO1iVtCi9XnZ5ku29so
pf8GKzydXsDq+m6ycWUJOqlkXYoO8HDmJSJcF8F2nU8NF0L6OFS9ofFcaXW1l6JN
VVBCHJ9WSjET9ud12le0sE+GEEM+UhcSFWV8HFsPi5Sy9vRXPhsGKkBBA6ikZ3jO
iY4Xlc2v/sMlk3qo/+uv0AQTlLiguCKd1+dYipVAqqzEId/keoyVaIDifQIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFP2VPVG3uibdipML1lXL4W29Ei3lMB8GA1UdIwQY
MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt
OWQ1NjU3NTEzZTIwLzEvX1pVOVViZTZKdDJLa3d2V1ZjdmhiYjBTTGVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw
LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwVAQCAAEwTgMEAyUasAME
Ai2GwAMEBS73oAMEA16PUAMEA173oAMEArA1gAMEArkMYAMEArkwMAMEArkyTAME
AcHvvgMEAMHzlwMEAcJpOgMEAcJpPjAbBAIAAjAVAwUAKgGXIAMFACoBqmADBQAq
A70AMA0GCSqGSIb3DQEBCwUAA4IBAQCJFoDId7RBswecnajvI+puLjplT732kya6
kpAQPzh74J8WkP60oTSDtHX7pZG1TqaKnMeVnYyKahZiAkyDt57rNeR5L0+DR9my
6/nh2SKllXmp7OfqEI0Lbm+7cdZakZwX1mHzz3pRMYdtsyrEbU83s3xCKETDaxTE
adWaXf1Xk38bQbcHF2tMYHvrdIcqqvAwjilMhE9iVEwTMN2toYMGsOEjzpifWx4w
vsGPt2UTdzOR7e+6WC8nDfRWg44RDC7zCivXpNtEaKs8HmFyi04mz3Mp6CUh7O7O
tgfNDcLkuO61qnENrUM4pNZBz3gqkeZcMZzWDvJNzkRyW3B+KAzt
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:44 2025 by rpki-client