Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/T4_i2fV20vVfSOEhE-bqEspYtYA.roa
File: T4_i2fV20vVfSOEhE-bqEspYtYA.roa (raw, json)
Hash identifier: TDBUg5bEpQDZO6LNSFU6oXlKLUoUxBpq31ZeMvs7rl0=
Subject key identifier: 4F:8F:E2:D9:F5:76:D2:F5:5F:48:E1:21:13:E6:EA:12:CA:58:B5:80
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 01838F134610D999D9D85168450732B92ABF
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/T4_i2fV20vVfSOEhE-bqEspYtYA.roa
Signing time: Fri 30 Sep 2022 15:45:48 +0000
ROA not before: Fri 30 Sep 2022 15:45:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47890
IP address blocks: 2.57.122.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
45.134.50.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
193.32.160.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
193.29.14.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8f:13:46:10:d9:99:d9:d8:51:68:45:07:32:b9:2a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Sep 30 15:45:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f8fe2d9f576d2f55f48e12113e6ea12ca58b580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:69:e3:0a:28:ed:81:4d:0d:bb:54:f9:68:
d9:47:77:5d:67:34:d0:0f:e8:26:1e:0b:9f:e4:ae:
e4:fd:d3:63:50:27:e8:a6:6f:03:e0:0e:d6:cd:86:
68:9c:8d:c3:42:43:f3:76:72:52:26:48:7e:62:4a:
6c:ce:59:0f:fe:b6:79:2d:63:bb:0b:91:e0:b4:7c:
26:eb:d9:00:a2:4c:54:01:8f:2c:c7:d4:e7:5b:a6:
f8:fb:ba:6e:46:21:59:04:ea:1b:85:d8:c6:d1:00:
34:8d:b4:7f:0f:0d:64:a5:66:26:7e:3e:ff:5f:a4:
7f:52:82:4b:18:32:0a:78:02:9a:27:f2:fc:f0:5f:
f1:07:a4:12:a0:c7:9f:fa:7d:f7:69:a0:62:a4:c5:
45:93:2e:b8:87:31:5f:d4:6a:ed:3f:10:d9:5d:a0:
77:3c:78:31:75:e7:06:0f:5e:13:98:46:ca:05:df:
a3:b1:0a:c9:b1:91:00:47:14:a3:bb:64:42:b3:8f:
46:4c:8b:bd:ad:0b:15:25:37:c0:3b:0b:09:9c:89:
71:9c:c8:d1:60:57:5e:68:a7:9a:9f:56:a5:cb:93:
88:cd:68:50:93:ad:8b:37:80:aa:ac:d0:c0:d3:48:
af:f4:a4:72:36:b3:60:b1:c2:70:a2:df:35:11:78:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8F:E2:D9:F5:76:D2:F5:5F:48:E1:21:13:E6:EA:12:CA:58:B5:80
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/T4_i2fV20vVfSOEhE-bqEspYtYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.134.50.0/24
80.94.92.0/24
92.118.39.0/24
185.232.64.0/24
185.232.66.0/24
193.29.14.0/24
193.32.160.0/24
193.32.163.0/24
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
Signature Algorithm: sha256WithRSAEncryption
04:23:2b:1f:cd:9e:3a:10:b6:be:ba:fd:8b:ff:36:1d:d5:49:
d0:f1:5a:c1:4e:bc:f4:dd:6d:c5:36:97:64:cb:cd:7a:c0:62:
2b:88:59:63:5c:31:4c:ee:2e:03:b1:60:a4:b7:0d:a8:c9:29:
56:c0:f8:8c:0d:db:b6:8e:1c:43:89:9f:dd:5b:44:b5:9e:6a:
8f:06:75:6a:0d:df:9e:b4:bb:87:8f:e7:00:2c:6a:06:10:81:
b3:a3:ee:a2:40:86:83:ed:34:e9:29:bf:c5:c1:90:5e:48:a8:
3c:75:3e:29:25:11:76:24:bb:14:6a:f1:82:a1:ad:7f:30:52:
81:fc:9b:3b:d4:67:92:cd:f9:af:82:a7:9e:ee:66:d7:b0:f2:
9d:ba:33:0a:0f:f0:69:4f:d9:b7:e7:76:8e:12:d6:8b:8d:b2:
1c:13:9a:19:40:20:1f:77:82:b8:5f:76:6f:66:aa:32:75:5d:
71:df:43:76:e3:ee:10:29:6d:e1:f4:3b:c3:89:8c:93:65:37:
0b:5e:7d:89:7a:fc:e5:e5:18:7d:33:ea:5e:a4:af:a8:a6:40:
bf:4d:ae:18:af:3a:bd:2e:79:4c:f4:88:b7:2b:7e:ca:37:d4:
1a:66:08:74:cf:16:f4:99:d2:8a:db:0e:34:02:5c:73:89:3a:
c1:4c:80:e4
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAYOPE0YQ2ZnZ2FFoRQcyuSq/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk
NTJiYmYwHhcNMjIwOTMwMTU0NTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjhmZTJkOWY1NzZkMmY1NWY0OGUxMjExM2U2ZWExMmNhNThiNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+lp4woo7YFNDbtU+WjZR3ddZzTQ
D+gmHguf5K7k/dNjUCfopm8D4A7WzYZonI3DQkPzdnJSJkh+YkpszlkP/rZ5LWO7
C5HgtHwm69kAokxUAY8sx9TnW6b4+7puRiFZBOobhdjG0QA0jbR/Dw1kpWYmfj7/
X6R/UoJLGDIKeAKaJ/L88F/xB6QSoMef+n33aaBipMVFky64hzFf1GrtPxDZXaB3
PHgxdecGD14TmEbKBd+jsQrJsZEARxSju2RCs49GTIu9rQsVJTfAOwsJnIlxnMjR
YFdeaKean1aly5OIzWhQk62LN4CqrNDA00iv9KRyNrNgscJwot81EXiPXQIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFE+P4tn1dtL1X0jhIRPm6hLKWLWAMB8GA1UdIwQY
MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt
NDZlZTU3OGEwYmZlLzEvVDRfaTJmVjIwdlZmU09FaEUtYnFFc3BZdFlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl
LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBIBAIAATBCAwQAAjl6AwQA
LYYyAwQAUF5cAwQAXHYnAwQAuehAAwQAuehCAwQAwR0OAwQAwSCgAwQAwSCjAwQB
wS7+AwQAwS9FMA8EAgACMAkDBwAqDJ8AAAAwDQYJKoZIhvcNAQELBQADggEBAAQj
Kx/NnjoQtr66/Yv/Nh3VSdDxWsFOvPTdbcU2l2TLzXrAYiuIWWNcMUzuLgOxYKS3
DajJKVbA+IwN27aOHEOJn91bRLWeao8GdWoN3560u4eP5wAsagYQgbOj7qJAhoPt
NOkpv8XBkF5IqDx1PiklEXYkuxRq8YKhrX8wUoH8mzvUZ5LN+a+Cp57uZtew8p26
MwoP8GlP2bfndo4S1ouNshwTmhlAIB93grhfdm9mqjJ1XXHfQ3bj7hApbeH0O8OJ
jJNlNwtefYl6/OXlGH0z6l6kr6imQL9NrhivOr0ueUz0iLcrfso31BpmCHTPFvSZ
0orbDjQCXHOJOsFMgOQ=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:00 2025 by rpki-client