Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/1L0MvcZAovQltQYr29HA-mCcdcg.roa
File: 1L0MvcZAovQltQYr29HA-mCcdcg.roa (raw, json)
Hash identifier: pkNa1BSNMTBkUblkeEVFhxf7NWVKHURqUxNqpKLr4Hw=
Subject key identifier: D4:BD:0C:BD:C6:40:A2:F4:25:B5:06:2B:DB:D1:C0:FA:60:9C:75:C8
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AD682218C88DB2FFEFA5B957FA4A431B6
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/1L0MvcZAovQltQYr29HA-mCcdcg.roa
Signing time: Wed 27 Sep 2023 11:59:27 +0000
ROA not before: Wed 27 Sep 2023 11:59:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43519
IP address blocks: 213.248.216.0/24 maxlen: 24
213.248.219.0/24 maxlen: 24
213.248.218.0/24 maxlen: 24
213.248.217.0/24 maxlen: 24
213.248.254.0/24 maxlen: 24
2a01:618:405::/48 maxlen: 48
2a01:618:400::/48 maxlen: 48
2a01:618:403::/48 maxlen: 48
2a01:618:404::/48 maxlen: 48
2a01:618:407::/48 maxlen: 48
2a01:618:402::/48 maxlen: 48
2a01:618:406::/48 maxlen: 48
2a01:618:401::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:82:21:8c:88:db:2f:fe:fa:5b:95:7f:a4:a4:31:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 27 11:59:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4bd0cbdc640a2f425b5062bdbd1c0fa609c75c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3e:d3:61:97:94:cb:46:e8:83:f0:98:81:6a:
c2:e2:b8:cf:3a:ef:82:e0:63:89:3b:86:c6:d3:0a:
f9:85:3f:60:6e:16:25:b0:5b:a1:3d:f0:2b:bc:4e:
d3:d0:4b:09:66:e3:80:1a:e3:01:c0:20:b6:f0:7c:
11:52:89:d5:f2:8f:bd:bd:6f:7f:db:7e:28:07:b3:
b8:eb:c8:58:34:93:a8:86:1b:e1:1f:c9:b0:f3:b7:
46:82:0a:7b:88:70:a6:a8:73:bc:b4:23:fb:25:d2:
00:23:8f:bc:42:1e:ca:55:ff:ed:6f:b7:cc:13:db:
76:3d:83:cb:3c:21:bf:75:00:3d:15:f3:77:e9:1d:
74:c7:8d:38:94:be:ab:34:ef:21:64:f4:c6:e6:04:
6a:5f:5c:a1:8b:15:f5:aa:09:e9:7d:1b:65:53:70:
6b:68:d7:0c:37:86:e6:6a:5c:a2:b0:f8:8c:99:83:
81:4c:fa:41:52:5c:ee:25:de:5b:49:30:18:db:9b:
0d:0b:ef:60:5b:51:28:bc:c8:9b:2c:75:b2:a4:06:
65:d1:08:70:cc:e2:18:37:91:19:6d:0e:b7:10:93:
0f:55:93:fc:3d:e5:eb:ba:b2:07:18:bd:c7:cc:12:
a7:bf:5f:cb:46:14:d0:49:2b:a3:7c:ba:22:26:19:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BD:0C:BD:C6:40:A2:F4:25:B5:06:2B:DB:D1:C0:FA:60:9C:75:C8
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/1L0MvcZAovQltQYr29HA-mCcdcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.216.0/22
213.248.254.0/24
IPv6:
2a01:618:400::/45
Signature Algorithm: sha256WithRSAEncryption
31:e0:c1:3a:35:e7:8c:15:25:52:34:1f:2b:3e:ef:47:6b:e2:
09:f3:f7:a6:93:71:f6:9d:e9:d2:c7:57:d7:fa:af:f7:92:ed:
34:f2:2b:3e:ce:d4:50:76:70:e7:fd:81:95:f3:12:40:d6:14:
b2:3d:12:16:53:3f:31:67:6e:af:66:ab:3f:a4:5c:51:ff:be:
c5:dc:17:45:01:7b:37:55:c9:74:13:ae:f3:62:d8:d0:08:db:
e5:da:88:9c:b0:bf:32:2e:47:e1:cf:d9:67:b6:64:fc:e0:83:
21:1e:21:3a:c4:7e:f1:8f:67:51:de:9e:bd:9b:ec:00:08:fa:
24:d5:33:73:dd:8d:a3:7e:16:70:37:cc:db:9b:7f:06:02:fd:
c4:31:47:96:41:ab:fa:6c:73:92:c7:0b:e1:29:1a:8c:5c:2c:
86:22:09:04:fa:41:13:db:2e:43:62:d3:9f:c9:61:24:7c:9f:
84:27:70:2f:66:69:36:fc:46:68:51:58:75:bb:9f:15:21:bc:
75:4d:5b:42:24:2d:29:67:10:61:de:62:9d:d8:0f:83:42:2c:
0f:62:7d:ac:ef:3d:81:0a:34:52:0d:19:7a:6c:ac:8d:ea:a0:
bc:a2:b1:e1:38:b7:70:44:c3:3e:ab:48:aa:7e:ea:6e:75:94:
1d:d3:0e:e4
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYrWgiGMiNsv/vpblX+kpDG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj
ZGQ1NGYwHhcNMjMwOTI3MTE1OTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGJkMGNiZGM2NDBhMmY0MjViNTA2MmJkYmQxYzBmYTYwOWM3NWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD7TYZeUy0bog/CYgWrC4rjPOu+C
4GOJO4bG0wr5hT9gbhYlsFuhPfArvE7T0EsJZuOAGuMBwCC28HwRUonV8o+9vW9/
234oB7O468hYNJOohhvhH8mw87dGggp7iHCmqHO8tCP7JdIAI4+8Qh7KVf/tb7fM
E9t2PYPLPCG/dQA9FfN36R10x404lL6rNO8hZPTG5gRqX1yhixX1qgnpfRtlU3Br
aNcMN4bmalyisPiMmYOBTPpBUlzuJd5bSTAY25sNC+9gW1EovMibLHWypAZl0Qhw
zOIYN5EZbQ63EJMPVZP8PeXrurIHGL3HzBKnv1/LRhTQSSujfLoiJhmarQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFNS9DL3GQKL0JbUGK9vRwPpgnHXIMB8GA1UdIwQY
MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt
MzQ2MzY4ODI3ZTY4LzEvMUwwTXZjWkFvdlFsdFFZcjI5SEEtbUNjZGNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4
LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQC1fjYAwQA
1fj+MA8EAgACMAkDBwMqAQYYBAAwDQYJKoZIhvcNAQELBQADggEBADHgwTo154wV
JVI0Hys+70dr4gnz96aTcfad6dLHV9f6r/eS7TTyKz7O1FB2cOf9gZXzEkDWFLI9
EhZTPzFnbq9mqz+kXFH/vsXcF0UBezdVyXQTrvNi2NAI2+XaiJywvzIuR+HP2We2
ZPzggyEeITrEfvGPZ1Henr2b7AAI+iTVM3PdjaN+FnA3zNubfwYC/cQxR5ZBq/ps
c5LHC+EpGoxcLIYiCQT6QRPbLkNi05/JYSR8n4QncC9maTb8RmhRWHW7nxUhvHVN
W0IkLSlnEGHeYp3YD4NCLA9ifazvPYEKNFINGXpsrI3qoLyiseE4t3BEwz6rSKp+
6m51lB3TDuQ=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:02 2025 by rpki-client