Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/ijHguvHu6zhMLzjqzRO2PrLXh_8.roa
File: ijHguvHu6zhMLzjqzRO2PrLXh_8.roa (raw, json)
Hash identifier: ykfF2gaB2hsRx3WMzgZcYthnNx/MI94aElDnYRAVs/Q=
Subject key identifier: 8A:31:E0:BA:F1:EE:EB:38:4C:2F:38:EA:CD:13:B6:3E:B2:D7:87:FF
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 080CC81A
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/ijHguvHu6zhMLzjqzRO2PrLXh_8.roa
Signing time: Sat 01 Jan 2022 10:05:28 +0000
ROA not before: Sat 01 Jan 2022 10:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44219
IP address blocks: 194.39.144.0/23 maxlen: 23
194.39.146.0/23 maxlen: 23
94.247.184.0/23 maxlen: 23
94.247.186.0/23 maxlen: 23
178.249.218.0/23 maxlen: 23
94.247.188.0/22 maxlen: 22
178.249.216.0/23 maxlen: 23
178.249.220.0/22 maxlen: 22
2a00:1cb0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135055386 (0x80cc81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: Jan 1 10:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a31e0baf1eeeb384c2f38eacd13b63eb2d787ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:c4:d2:c0:08:f2:c4:02:c7:dc:d5:b3:c1:
41:a6:0d:15:95:3c:70:ce:7f:7f:3d:d1:09:cc:4d:
5e:f2:63:49:0c:8a:19:f3:ec:78:33:0c:02:a2:d7:
3a:36:8b:46:b1:42:10:dd:f7:62:21:b7:44:39:ab:
b8:59:92:b7:d3:44:73:b2:2e:da:7a:d1:02:84:ef:
33:be:e9:dd:1a:f5:2a:5f:cf:98:72:86:98:33:b9:
c4:0e:db:04:7e:cd:d6:a1:af:c7:23:4a:53:9d:4c:
9a:cd:93:6d:89:4d:f8:55:84:41:e8:25:5f:1a:07:
77:98:fc:c4:d9:b4:f8:67:ab:fa:bf:37:43:28:eb:
d8:4e:9c:90:17:19:67:23:54:7f:e6:69:fa:b3:c7:
54:b6:eb:12:7a:75:df:2d:be:36:0f:e8:4b:7d:eb:
df:48:cc:df:53:db:c9:4f:bc:50:f9:93:1d:5b:08:
c2:88:7c:28:92:cb:0e:fa:e8:35:9b:27:e0:4b:b0:
c0:c6:0b:f1:57:46:9f:e4:00:e2:5d:f9:58:a8:c5:
e6:ac:be:b8:01:61:0e:41:a7:f0:85:4a:00:ad:88:
ef:8a:50:1f:62:32:72:a2:95:7e:1d:18:59:f0:a7:
b6:2a:ea:57:51:e9:56:8c:04:12:c9:aa:cc:66:16:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:E0:BA:F1:EE:EB:38:4C:2F:38:EA:CD:13:B6:3E:B2:D7:87:FF
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/ijHguvHu6zhMLzjqzRO2PrLXh_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.184.0/21
178.249.216.0/21
194.39.144.0/22
IPv6:
2a00:1cb0::/32
Signature Algorithm: sha256WithRSAEncryption
b9:c6:e0:f0:89:7a:f3:b6:4b:2c:0b:b1:6c:35:40:1c:bb:17:
85:0d:84:7c:77:27:7f:0f:c4:32:c1:2d:3d:1f:cb:d6:a4:bf:
0f:ed:4c:bd:ef:6b:bc:96:57:dc:97:b3:20:89:dc:ac:68:f0:
2d:23:b4:db:e0:53:84:76:1b:e3:c4:54:89:34:c7:92:1b:bf:
94:09:81:23:df:16:b3:cf:be:9c:fb:74:4b:cd:ce:48:cd:90:
f8:59:55:39:e2:ae:b9:af:d2:50:6b:29:50:62:1d:2f:10:a0:
16:51:61:73:3b:0d:53:4c:43:e1:2e:ed:1b:1b:41:03:18:44:
f8:b0:32:f2:5a:20:73:ec:18:b9:67:15:e8:e7:68:02:5d:bc:
e3:74:ba:4d:6c:25:9f:b5:7d:60:ce:13:74:eb:62:8a:fa:e8:
45:2b:1d:31:cc:2f:a9:82:36:8e:98:19:b5:8a:06:6e:2c:42:
2c:b8:ce:9e:74:8e:0a:4c:84:6f:c3:56:92:09:ef:d1:65:45:
99:38:6c:0f:ed:9f:af:7b:d3:10:20:66:87:a4:33:64:34:d7:
21:e0:1c:68:51:3d:c5:3e:be:80:07:9f:7d:17:fe:00:d1:78:
a1:41:a0:18:36:e4:1b:89:c8:39:71:e6:a7:83:17:9b:b0:a6:
82:f6:bd:ba
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIECAzIGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YTg2N2QyYzFhMjkwNWQ1NDMyMWYwMWE3MTBiMjFlZDdhYmQ4NTdkMB4XDTIyMDEw
MTEwMDUyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGEzMWUwYmFmMWVl
ZWIzODRjMmYzOGVhY2QxM2I2M2ViMmQ3ODdmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMX+xNLACPLEAsfc1bPBQaYNFZU8cM5/fz3RCcxNXvJjSQyK
GfPseDMMAqLXOjaLRrFCEN33YiG3RDmruFmSt9NEc7Iu2nrRAoTvM77p3Rr1Kl/P
mHKGmDO5xA7bBH7N1qGvxyNKU51Mms2TbYlN+FWEQeglXxoHd5j8xNm0+Ger+r83
Qyjr2E6ckBcZZyNUf+Zp+rPHVLbrEnp13y2+Ng/oS33r30jM31PbyU+8UPmTHVsI
woh8KJLLDvroNZsn4EuwwMYL8VdGn+QA4l35WKjF5qy+uAFhDkGn8IVKAK2I74pQ
H2IycqKVfh0YWfCntirqV1HpVowEEsmqzGYWOIcCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSKMeC68e7rOEwvOOrNE7Y+steH/zAfBgNVHSMEGDAWgBR6hn0sGikF1UMh
8BpxCyHter2FfTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VvWjlMQm9wQmRWRElmQWFjUXNoN1hxOWhYMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvMmE3NzNiLWVmYTAtNGI0MC05ODYxLTZkNmY1NThhN2Q2NS8x
L2lqSGd1dkh1NnpoTUx6anF6Uk8yUHJMWGhfOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
MmE3NzNiLWVmYTAtNGI0MC05ODYxLTZkNmY1NThhN2Q2NS8xL2VvWjlMQm9wQmRW
RElmQWFjUXNoN1hxOWhYMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEA173uAMEA7L52AMEAsInkDANBAIA
AjAHAwUAKgAcsDANBgkqhkiG9w0BAQsFAAOCAQEAucbg8Il687ZLLAuxbDVAHLsX
hQ2EfHcnfw/EMsEtPR/L1qS/D+1Mve9rvJZX3JezIIncrGjwLSO02+BThHYb48RU
iTTHkhu/lAmBI98Ws8++nPt0S83OSM2Q+FlVOeKuua/SUGspUGIdLxCgFlFhczsN
U0xD4S7tGxtBAxhE+LAy8logc+wYuWcV6OdoAl2843S6TWwln7V9YM4TdOtiivro
RSsdMcwvqYI2jpgZtYoGbixCLLjOnnSOCkyEb8NWkgnv0WVFmThsD+2fr3vTECBm
h6QzZDTXIeAcaFE9xT6+gAeffRf+ANF4oUGgGDbkG4nIOXHmp4MXm7Cmgva9ug==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:24:18 2025 by rpki-client