Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/KzWPrsgblqy6_WLUaPFoL1jZwBQ.roa
File: KzWPrsgblqy6_WLUaPFoL1jZwBQ.roa (raw, json)
Hash identifier: P/MZyWJwe988Jp9Nn4RN5D6dNb+WY47S1EmQjE8Jmnw=
Subject key identifier: 2B:35:8F:AE:C8:1B:96:AC:BA:FD:62:D4:68:F1:68:2F:58:D9:C0:14
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 05D03C8A
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/KzWPrsgblqy6_WLUaPFoL1jZwBQ.roa
Signing time: Sat 01 Jan 2022 05:53:58 +0000
ROA not before: Sat 01 Jan 2022 05:53:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200064
IP address blocks: 79.98.217.0/24 maxlen: 24
79.98.216.0/24 maxlen: 24
79.98.219.0/24 maxlen: 24
79.98.218.0/24 maxlen: 24
79.98.221.0/24 maxlen: 24
79.98.220.0/24 maxlen: 24
79.98.223.0/24 maxlen: 24
79.98.222.0/24 maxlen: 24
141.105.98.0/24 maxlen: 24
141.105.97.0/24 maxlen: 24
141.105.96.0/24 maxlen: 24
141.105.105.0/24 maxlen: 24
141.105.104.0/24 maxlen: 24
141.105.103.0/24 maxlen: 24
141.105.102.0/24 maxlen: 24
141.105.101.0/24 maxlen: 24
141.105.100.0/24 maxlen: 24
141.105.99.0/24 maxlen: 24
141.105.108.0/24 maxlen: 24
141.105.107.0/24 maxlen: 24
141.105.106.0/24 maxlen: 24
141.105.111.0/24 maxlen: 24
141.105.110.0/24 maxlen: 24
141.105.109.0/24 maxlen: 24
185.28.140.0/24 maxlen: 24
185.28.143.0/24 maxlen: 24
185.28.142.0/24 maxlen: 24
185.28.141.0/24 maxlen: 24
2a02:2f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97533066 (0x5d03c8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Jan 1 05:53:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b358faec81b96acbafd62d468f1682f58d9c014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:40:9a:1b:81:f9:a5:9e:e1:88:0f:d0:44:
a8:ae:50:3c:da:ee:15:45:8c:a3:5e:f5:a1:60:5d:
93:6c:9f:74:ba:bc:68:56:d3:b7:45:41:8c:82:48:
44:d9:57:70:4f:d9:cc:1b:33:0c:14:f0:d5:f4:f4:
26:30:cc:4c:8f:f5:7b:fe:5a:5a:54:b0:35:ee:9f:
d4:72:10:ec:df:e9:0f:62:9a:d7:7f:71:30:6c:95:
c7:4f:58:d6:bd:33:c7:ed:28:f9:d3:f7:02:b7:66:
90:af:2a:21:a7:a7:f4:16:e9:d0:42:be:b1:4e:db:
4d:90:f9:47:ec:59:c3:5a:32:5a:0f:8e:e6:ee:3c:
76:37:a9:f6:35:b1:d0:1a:5f:84:19:30:a4:e6:59:
a6:fb:b4:d3:7a:61:a9:59:9b:6a:4f:4a:de:23:49:
95:7f:ae:8d:92:eb:19:2a:6c:3c:3e:3b:8d:8c:c1:
e7:5e:86:95:16:4b:38:30:73:df:25:22:00:ed:15:
64:ed:29:e2:2c:1a:11:c1:06:8a:aa:62:b6:32:26:
27:5f:88:75:6f:19:6b:c6:33:df:e7:7c:7e:5f:12:
89:d8:04:3a:1b:79:71:76:c9:77:24:e9:86:57:54:
01:bc:c4:37:4e:43:0c:02:16:ff:4d:e8:30:ba:c5:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:35:8F:AE:C8:1B:96:AC:BA:FD:62:D4:68:F1:68:2F:58:D9:C0:14
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/KzWPrsgblqy6_WLUaPFoL1jZwBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.216.0/21
141.105.96.0/20
185.28.140.0/22
IPv6:
2a02:2f80::/29
Signature Algorithm: sha256WithRSAEncryption
83:f0:87:6b:98:34:ce:73:d4:a9:b8:91:0a:1f:00:82:57:21:
0b:2d:30:81:08:25:61:bb:d1:13:c6:28:39:67:9c:64:74:f4:
1e:e3:d2:50:85:23:04:2c:3f:92:a2:0a:42:6f:e7:4c:5f:d6:
5b:13:c1:3d:08:43:c5:9f:79:e7:98:92:02:87:1a:7c:6c:5f:
a4:46:30:22:88:83:00:67:82:66:06:03:fe:f3:27:41:4a:f4:
0e:f5:d8:74:46:ce:c9:8c:6f:09:57:05:78:06:d5:2f:a7:6b:
49:a4:b6:80:cb:9a:c0:49:6a:28:f6:9f:5d:f7:bf:15:d1:1e:
53:8e:25:30:8a:52:6d:41:0e:16:64:15:5d:bb:86:97:55:a6:
30:c5:1d:3d:64:b1:ec:12:57:f1:cc:82:68:a7:9f:dd:3e:94:
dd:8c:1f:c6:1f:d5:7f:05:14:b6:3a:77:8f:09:3a:9e:d2:b6:
c1:ad:b6:fa:37:5e:84:92:f0:fb:f9:a6:b6:95:2d:44:09:5b:
1c:87:28:d8:78:f0:cb:70:a0:db:ca:5b:ae:75:b3:f5:71:1e:
69:60:4c:28:7f:01:4e:dc:22:18:6e:c1:04:b1:45:85:72:5d:
c0:be:b0:17:5f:99:4d:c8:58:61:75:01:e7:9d:85:87:ed:3e:
ee:6c:c0:88
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEBdA8ijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTM2MTE3MTM1ZjZiODZkMGE5ZTFmYTY3ZTA0YmFmNWJjZDg2MTY5MB4XDTIyMDEw
MTA1NTM1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmIzNThmYWVjODFi
OTZhY2JhZmQ2MmQ0NjhmMTY4MmY1OGQ5YzAxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxnQJobgfmlnuGID9BEqK5QPNruFUWMo171oWBdk2yfdLq8
aFbTt0VBjIJIRNlXcE/ZzBszDBTw1fT0JjDMTI/1e/5aWlSwNe6f1HIQ7N/pD2Ka
139xMGyVx09Y1r0zx+0o+dP3ArdmkK8qIaen9Bbp0EK+sU7bTZD5R+xZw1oyWg+O
5u48djep9jWx0BpfhBkwpOZZpvu003phqVmbak9K3iNJlX+ujZLrGSpsPD47jYzB
516GlRZLODBz3yUiAO0VZO0p4iwaEcEGiqpitjImJ1+IdW8Za8Yz3+d8fl8SidgE
Oht5cXbJdyTphldUAbzEN05DDAIW/03oMLrFUJsCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBQrNY+uyBuWrLr9YtRo8WgvWNnAFDAfBgNVHSMEGDAWgBSONhFxNfa4bQqe
H6Z+BLr1vNhhaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pqWVJjVFgydUcwS25oLW1mZ1M2OWJ6WVlXay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWUvZWRiNGQzLTMzYzgtNDVkYy1hNDBlLWM4NWI2MGZkOGM4Yi8x
L0t6V1Byc2dibHF5Nl9XTFVhUEZvTDFqWndCUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUv
ZWRiNGQzLTMzYzgtNDVkYy1hNDBlLWM4NWI2MGZkOGM4Yi8xL2pqWVJjVFgydUcw
S25oLW1mZ1M2OWJ6WVlXay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEA09i2AMEBI1pYAMEArkcjDANBAIA
AjAHAwUDKgIvgDANBgkqhkiG9w0BAQsFAAOCAQEAg/CHa5g0znPUqbiRCh8Aglch
Cy0wgQglYbvRE8YoOWecZHT0HuPSUIUjBCw/kqIKQm/nTF/WWxPBPQhDxZ9555iS
AocafGxfpEYwIoiDAGeCZgYD/vMnQUr0DvXYdEbOyYxvCVcFeAbVL6drSaS2gMua
wElqKPafXfe/FdEeU44lMIpSbUEOFmQVXbuGl1WmMMUdPWSx7BJX8cyCaKef3T6U
3Ywfxh/VfwUUtjp3jwk6ntK2wa22+jdehJLw+/mmtpUtRAlbHIco2Hjwy3Cg28pb
rnWz9XEeaWBMKH8BTtwiGG7BBLFFhXJdwL6wF1+ZTchYYXUB552Fh+0+7mzAiA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:04 2023 by rpki-client on console-fra.rpki-client.org