Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Qo8vRjh1W2Aofufj8dIZ9dsyu9M.roa
File: Qo8vRjh1W2Aofufj8dIZ9dsyu9M.roa (raw, json)
Hash identifier: S8Za7C+kXOjuofd52zTn5rsq8O/sQHNNLAvXwu90rm8=
Subject key identifier: 42:8F:2F:46:38:75:5B:60:28:7E:E7:E3:F1:D2:19:F5:DB:32:BB:D3
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0187C61FC0BB8FD489E667015EAB244F79EB
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Qo8vRjh1W2Aofufj8dIZ9dsyu9M.roa
Signing time: Fri 28 Apr 2023 04:29:41 +0000
ROA not before: Fri 28 Apr 2023 04:29:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31363
IP address blocks: 86.62.84.0/24 maxlen: 24
86.62.96.0/24 maxlen: 24
86.62.92.0/24 maxlen: 24
86.62.125.0/24 maxlen: 24
195.91.254.0/24 maxlen: 24
195.91.255.0/24 maxlen: 24
195.91.208.0/24 maxlen: 24
195.91.209.0/24 maxlen: 24
195.91.210.0/24 maxlen: 24
195.91.211.0/24 maxlen: 24
195.91.213.0/24 maxlen: 24
195.91.215.0/24 maxlen: 24
195.91.217.0/24 maxlen: 24
195.91.218.0/24 maxlen: 24
195.91.219.0/24 maxlen: 24
195.91.222.0/24 maxlen: 24
195.91.223.0/24 maxlen: 24
195.91.224.0/24 maxlen: 24
195.91.220.0/24 maxlen: 24
195.91.221.0/24 maxlen: 24
195.91.225.0/24 maxlen: 24
195.91.226.0/24 maxlen: 24
195.91.232.0/24 maxlen: 24
195.91.233.0/24 maxlen: 24
195.91.229.0/24 maxlen: 24
195.91.230.0/24 maxlen: 24
195.91.231.0/24 maxlen: 24
195.91.228.0/24 maxlen: 24
195.91.236.0/24 maxlen: 24
195.91.237.0/24 maxlen: 24
195.91.238.0/24 maxlen: 24
195.91.234.0/24 maxlen: 24
195.91.235.0/24 maxlen: 24
195.91.239.0/24 maxlen: 24
195.91.240.0/24 maxlen: 24
195.91.246.0/24 maxlen: 24
195.91.243.0/24 maxlen: 24
195.91.244.0/24 maxlen: 24
195.91.245.0/24 maxlen: 24
195.91.241.0/24 maxlen: 24
195.91.242.0/24 maxlen: 24
195.91.247.0/24 maxlen: 24
195.91.149.0/24 maxlen: 24
195.91.160.0/24 maxlen: 24
195.91.168.0/24 maxlen: 24
195.91.169.0/24 maxlen: 24
195.91.170.0/24 maxlen: 24
195.91.171.0/24 maxlen: 24
195.91.172.0/24 maxlen: 24
195.91.173.0/24 maxlen: 24
195.91.174.0/24 maxlen: 24
195.91.175.0/24 maxlen: 24
195.91.184.0/24 maxlen: 24
195.91.133.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:1f:c0:bb:8f:d4:89:e6:67:01:5e:ab:24:4f:79:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Apr 28 04:29:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=428f2f4638755b60287ee7e3f1d219f5db32bbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:aa:65:4a:0b:ef:fe:b5:40:8a:d7:40:00:e6:
a6:16:44:13:b7:9f:74:24:89:8c:da:47:b6:7b:e0:
95:ca:af:d1:3c:2a:fc:b1:61:df:ee:9d:8f:a4:17:
5d:d5:46:de:35:0e:f7:91:97:61:a2:3e:fb:be:53:
81:60:fc:45:23:f5:e8:44:5f:3a:7a:bc:bf:6c:db:
c7:e0:e8:f0:6d:39:24:6e:37:c2:16:4b:8d:4e:5b:
6a:fc:ee:b3:c5:69:0c:69:1f:53:28:7f:e8:ce:d1:
92:a9:77:cd:ed:16:78:3f:eb:c2:b8:92:c0:02:18:
d8:1f:cf:7d:41:39:be:00:c4:a6:16:94:2f:eb:f3:
50:a8:46:89:94:25:0c:ba:33:72:11:78:1b:e1:07:
0a:6c:f9:e4:c2:86:0c:b9:b7:c8:6f:73:98:1e:25:
3b:a3:10:55:69:7f:42:95:c8:5c:c3:f3:98:45:18:
01:0a:e1:03:32:0d:68:a1:3a:f8:93:b8:53:40:ff:
36:69:ea:72:a9:7d:6b:81:b3:27:fa:6e:4f:7e:dc:
cb:38:02:46:87:93:9b:6d:ae:3e:da:b9:3f:a1:b0:
0e:59:75:97:05:73:73:e4:1c:b4:7a:7f:85:cb:f6:
94:1c:9e:78:93:28:57:21:4d:6c:05:4e:61:33:05:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8F:2F:46:38:75:5B:60:28:7E:E7:E3:F1:D2:19:F5:DB:32:BB:D3
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Qo8vRjh1W2Aofufj8dIZ9dsyu9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.84.0/24
86.62.92.0/24
86.62.96.0/24
86.62.125.0/24
195.91.133.0/24
195.91.149.0/24
195.91.160.0/24
195.91.168.0/21
195.91.184.0/24
195.91.208.0/22
195.91.213.0/24
195.91.215.0/24
195.91.217.0-195.91.226.255
195.91.228.0-195.91.247.255
195.91.254.0/23
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
48:d5:ad:2e:18:60:aa:0e:5a:01:59:56:3c:7b:13:87:fc:72:
ef:bc:2d:a7:0b:ef:28:ad:58:50:d6:35:0a:46:e3:1b:8a:08:
05:87:da:e8:71:d4:da:04:ee:d2:b8:5d:58:86:18:8c:75:66:
e4:a6:07:d2:fe:c8:06:ad:fd:d6:d7:8c:eb:90:90:b2:9a:4e:
96:57:6c:8e:85:61:60:b0:aa:d9:9a:27:04:29:89:cb:0c:1f:
14:e0:05:5a:b2:8f:88:48:68:67:a2:87:1e:c9:40:65:04:77:
d3:51:f1:12:e1:f5:ec:30:98:d2:8b:fd:0b:7b:63:8c:de:28:
32:e1:79:23:ed:ec:74:f9:e2:5b:74:bb:6c:b2:ef:6c:f2:69:
57:30:5d:bf:86:41:24:3f:ee:76:de:41:c8:11:ea:3f:d3:4f:
a3:85:1d:75:52:db:d7:da:28:3d:a0:ae:0c:f8:a2:53:ff:04:
48:38:2f:f4:6d:d6:dc:c0:e3:23:42:88:3c:05:ac:63:9e:7c:
55:36:42:3e:e8:f2:40:4f:03:78:ad:76:72:7a:a8:1c:63:ec:
27:ee:c2:58:b6:c9:3a:df:d6:54:2b:a9:cf:ee:a8:64:92:7b:
68:c9:85:15:44:76:d0:20:65:95:d7:9a:2c:0f:7e:45:60:71:
26:22:a7:1c
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAYfGH8C7j9SJ5mcBXqskT3nrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjMwNDI4MDQyOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjhmMmY0NjM4NzU1YjYwMjg3ZWU3ZTNmMWQyMTlmNWRiMzJiYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKplSgvv/rVAitdAAOamFkQTt590
JImM2ke2e+CVyq/RPCr8sWHf7p2PpBdd1UbeNQ73kZdhoj77vlOBYPxFI/XoRF86
ery/bNvH4OjwbTkkbjfCFkuNTltq/O6zxWkMaR9TKH/oztGSqXfN7RZ4P+vCuJLA
AhjYH899QTm+AMSmFpQv6/NQqEaJlCUMujNyEXgb4QcKbPnkwoYMubfIb3OYHiU7
oxBVaX9Clchcw/OYRRgBCuEDMg1ooTr4k7hTQP82aepyqX1rgbMn+m5PftzLOAJG
h5Obba4+2rk/obAOWXWXBXNz5By0en+Fy/aUHJ54kyhXIU1sBU5hMwV8nwIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFEKPL0Y4dVtgKH7n4/HSGfXbMrvTMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvUW84dlJqaDFXMkFvZnVmajhkSVo5ZHN5dTlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGVBggrBgEFBQcBBwEB/wSBhTCBgjBwBAIAATBqAwQAVj5U
AwQAVj5cAwQAVj5gAwQAVj59AwQAw1uFAwQAw1uVAwQAw1ugAwQDw1uoAwQAw1u4
AwQCw1vQAwQAw1vVAwQAw1vXMAwDBADDW9kDBADDW+IwDAMEAsNb5AMEA8Nb8AME
AcNb/jAOBAIAAjAIAwYCKgImmJgwDQYJKoZIhvcNAQELBQADggEBAEjVrS4YYKoO
WgFZVjx7E4f8cu+8LacL7yitWFDWNQpG4xuKCAWH2uhx1NoE7tK4XViGGIx1ZuSm
B9L+yAat/dbXjOuQkLKaTpZXbI6FYWCwqtmaJwQpicsMHxTgBVqyj4hIaGeihx7J
QGUEd9NR8RLh9ewwmNKL/Qt7Y4zeKDLheSPt7HT54lt0u2yy72zyaVcwXb+GQSQ/
7nbeQcgR6j/TT6OFHXVS29faKD2grgz4olP/BEg4L/Rt1tzA4yNCiDwFrGOefFU2
Qj7o8kBPA3itdnJ6qBxj7Cfuwli2yTrf1lQrqc/uqGSSe2jJhRVEdtAgZZXXmiwP
fkVgcSYipxw=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:06 2025 by rpki-client