Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/pmxlW9CcQJ2cBJ5WefNzdAsTyS4.roa
File: pmxlW9CcQJ2cBJ5WefNzdAsTyS4.roa (raw, json)
Hash identifier: Dgnzh4VchMG45uvV3Yt70eoCJZT5d4oNBmQUuUqYzUM=
Subject key identifier: A6:6C:65:5B:D0:9C:40:9D:9C:04:9E:56:79:F3:73:74:0B:13:C9:2E
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 018572F12BAEE875B769A021A0F5DC3A12F0
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/pmxlW9CcQJ2cBJ5WefNzdAsTyS4.roa
Signing time: Mon 02 Jan 2023 14:44:45 +0000
ROA not before: Mon 02 Jan 2023 14:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20546
IP address blocks: 5.61.80.0/21 maxlen: 24
195.135.128.0/18 maxlen: 24
195.94.64.0/19 maxlen: 24
62.40.0.0/19 maxlen: 24
80.87.160.0/20 maxlen: 24
195.227.0.0/16 maxlen: 24
185.32.32.0/22 maxlen: 24
195.82.64.0/19 maxlen: 24
212.237.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:2b:ae:e8:75:b7:69:a0:21:a0:f5:dc:3a:12:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Jan 2 14:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a66c655bd09c409d9c049e5679f373740b13c92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:90:d1:84:8b:2c:71:9c:cf:6c:08:22:9f:b1:
93:4a:19:2a:72:2b:cb:2d:b5:3e:25:b9:be:33:15:
4c:a3:82:86:45:8a:2b:a0:6c:52:b8:fb:5b:79:a0:
a5:c2:4c:98:20:5c:02:93:cb:c8:10:64:72:71:a1:
24:6e:b5:8a:dd:9a:88:e7:bb:15:33:5a:e9:f5:e9:
5a:ae:7e:9d:4c:fe:2c:3a:88:f7:2b:47:79:81:2f:
10:c3:9c:9f:00:ed:12:94:c4:41:4b:ee:e4:ec:00:
21:5f:99:14:22:95:2d:65:c1:89:d3:4c:b2:f1:ec:
6d:e9:02:54:5c:0b:09:12:57:7b:9b:0f:4e:57:84:
6d:fb:e8:46:b9:9d:2f:30:e3:9d:76:3c:f9:b0:72:
a8:dd:af:fe:59:68:05:96:bb:0d:47:59:97:8f:23:
34:f5:ec:26:ac:dc:ee:12:37:90:f6:99:0f:ca:ad:
75:89:e9:b9:f5:d2:31:d4:6b:01:c8:83:0e:13:90:
b6:60:3d:0c:56:b5:13:f5:37:92:fb:b3:65:11:7b:
6b:92:5e:41:c6:12:cc:0c:99:9c:6b:a8:ec:ad:86:
b4:f8:2f:f3:96:dc:b6:f5:47:5b:98:6f:a9:d7:17:
bd:ee:e9:89:d0:ef:ed:22:18:13:17:fe:c7:26:8d:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:65:5B:D0:9C:40:9D:9C:04:9E:56:79:F3:73:74:0B:13:C9:2E
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/pmxlW9CcQJ2cBJ5WefNzdAsTyS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.80.0/21
62.40.0.0/19
80.87.160.0/20
185.32.32.0/22
195.82.64.0/19
195.94.64.0/19
195.135.128.0/18
195.227.0.0/16
212.237.160.0/21
Signature Algorithm: sha256WithRSAEncryption
41:ab:c2:41:90:3c:eb:ca:be:98:c5:7f:0e:60:22:94:18:50:
d4:a1:40:a0:9c:28:d6:02:de:0c:00:52:61:6d:a6:ee:2d:1d:
55:bd:0e:16:83:2d:ae:85:7d:b6:24:00:f8:c7:26:71:84:09:
47:22:cd:c0:ac:d3:51:52:43:36:e1:bd:da:1a:3b:f0:1c:ce:
fe:27:03:dc:f0:46:65:87:60:e9:20:0e:52:01:21:bc:7f:9c:
9e:0f:e0:86:ac:03:48:09:af:89:7b:3c:fd:09:99:37:15:3e:
a6:d9:fb:1f:cd:be:cb:95:7d:c7:b0:30:5d:63:4a:b6:1c:c3:
34:52:50:2d:8c:3b:aa:b4:ee:99:99:5e:d7:49:69:50:25:e8:
ec:50:a2:6e:00:0b:27:78:68:89:d2:b2:14:68:d5:e6:ec:be:
67:85:34:fd:31:4a:25:f0:63:61:92:02:a1:fe:e1:0f:f2:88:
29:cb:ae:61:99:a0:ab:b1:7e:3e:1b:eb:68:d9:1e:2c:79:49:
80:be:7a:02:11:22:46:1c:16:aa:6d:d1:d8:c0:ce:01:a2:c8:
74:84:3a:36:4e:a0:61:b3:1c:5c:11:02:ec:32:62:7c:00:34:
fa:f5:cf:d0:6f:8e:8c:bb:14:fa:36:68:c4:11:2d:cf:46:8d:
f6:c7:7f:b1
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYVy8Suu6HW3aaAhoPXcOhLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTNmN2ZhMjM3Zjg5ZDAxMTIzM2JhYzczMjhjMjIxOWJh
N2Q2MmMwHhcNMjMwMTAyMTQ0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjZjNjU1YmQwOWM0MDlkOWMwNDllNTY3OWYzNzM3NDBiMTNjOTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJDRhIsscZzPbAgin7GTShkqcivL
LbU+Jbm+MxVMo4KGRYoroGxSuPtbeaClwkyYIFwCk8vIEGRycaEkbrWK3ZqI57sV
M1rp9elarn6dTP4sOoj3K0d5gS8Qw5yfAO0SlMRBS+7k7AAhX5kUIpUtZcGJ00yy
8ext6QJUXAsJEld7mw9OV4Rt++hGuZ0vMOOddjz5sHKo3a/+WWgFlrsNR1mXjyM0
9ewmrNzuEjeQ9pkPyq11iem59dIx1GsByIMOE5C2YD0MVrUT9TeS+7NlEXtrkl5B
xhLMDJmca6jsrYa0+C/zlty29UdbmG+p1xe97umJ0O/tIhgTF/7HJo3zbwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFKZsZVvQnECdnASeVnnzc3QLE8kuMB8GA1UdIwQY
MBaAFPwT9/ojf4nQESM7rHMowiGbp9YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQt
ZDA3NDY0YjliMzc4LzEvcG14bFc5Q2NRSjJjQko1V2VmTnpkQXNUeVM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQtZDA3NDY0YjliMzc4
LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1AwQDBT1QAwQF
PigAAwQEUFegAwQCuSAgAwQFw1JAAwQFw15AAwQGw4eAAwMAw+MDBAPU7aAwDQYJ
KoZIhvcNAQELBQADggEBAEGrwkGQPOvKvpjFfw5gIpQYUNShQKCcKNYC3gwAUmFt
pu4tHVW9DhaDLa6FfbYkAPjHJnGECUcizcCs01FSQzbhvdoaO/Aczv4nA9zwRmWH
YOkgDlIBIbx/nJ4P4IasA0gJr4l7PP0JmTcVPqbZ+x/NvsuVfcewMF1jSrYcwzRS
UC2MO6q07pmZXtdJaVAl6OxQom4ACyd4aInSshRo1ebsvmeFNP0xSiXwY2GSAqH+
4Q/yiCnLrmGZoKuxfj4b62jZHix5SYC+egIRIkYcFqpt0djAzgGiyHSEOjZOoGGz
HFwRAuwyYnwANPr1z9Bvjoy7FPo2aMQRLc9GjfbHf7E=
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:53 2025 by rpki-client