Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9M4dIS0xA3GxtRHEDEZMBHbM3Zk.roa
File: 9M4dIS0xA3GxtRHEDEZMBHbM3Zk.roa (raw, json)
Hash identifier: UpgVWeW0L3z8mzHrQgb3PkwIqRKmnRIkVO4tGvzO1IM=
Subject key identifier: F4:CE:1D:21:2D:31:03:71:B1:B5:11:C4:0C:46:4C:04:76:CC:DD:99
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01882FC931E32535597170F9BA80AF01D017
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9M4dIS0xA3GxtRHEDEZMBHbM3Zk.roa
Signing time: Thu 18 May 2023 16:54:54 +0000
ROA not before: Thu 18 May 2023 16:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.140.0/22 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:c9:31:e3:25:35:59:71:70:f9:ba:80:af:01:d0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 18 16:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4ce1d212d310371b1b511c40c464c0476ccdd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:70:12:2f:ef:8d:c7:ab:5c:62:dd:81:93:
b7:76:46:5c:82:38:48:43:72:e5:43:a9:79:c4:3e:
f6:dc:f9:0c:46:03:3e:d8:73:9b:da:28:1e:cd:41:
a2:62:f2:be:da:5e:67:c9:24:ff:18:b2:18:59:ef:
f4:b0:52:4b:18:fe:06:4b:89:0f:9d:bc:d4:01:26:
9d:71:06:34:60:ba:00:f6:a4:46:fe:16:4f:bd:5c:
59:08:7f:3d:78:89:92:43:de:9b:28:e7:15:8d:bf:
cd:3e:18:ad:70:b3:52:9d:c8:75:a7:e9:0f:02:be:
fa:e7:87:8e:82:40:72:6a:d2:63:56:0e:86:0b:02:
02:77:f2:6e:a3:eb:a7:1f:09:09:eb:40:0e:e1:fd:
57:03:79:96:2e:b2:34:ff:2e:45:30:fe:e9:19:53:
a0:ae:9f:53:a1:c1:14:15:54:43:c3:7f:3e:fd:23:
e1:ec:29:c0:7a:96:72:a4:d9:1e:0f:12:52:27:3a:
63:9b:00:8a:4d:5e:b7:46:e2:9a:aa:ab:a9:62:d6:
a2:31:21:f9:a8:d2:bc:15:40:47:dd:f0:a1:b3:13:
02:09:eb:7a:7d:e7:5e:b7:ee:62:20:f0:ec:8a:a7:
7a:fb:93:bd:f8:b1:cf:37:f2:04:f1:96:fa:51:b7:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CE:1D:21:2D:31:03:71:B1:B5:11:C4:0C:46:4C:04:76:CC:DD:99
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9M4dIS0xA3GxtRHEDEZMBHbM3Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.140.0-176.46.159.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:b6:67:91:c1:ce:13:e2:44:9b:07:1b:e0:55:8d:52:5a:0b:
a9:53:86:e9:2f:27:ad:f7:2c:be:45:19:6e:e5:78:2b:0a:66:
52:d7:b9:40:db:d8:e8:5b:39:b7:4f:c3:bb:2f:71:30:41:50:
ad:39:fe:59:f9:2f:7a:f8:74:3b:66:e2:20:4a:c0:19:9f:a1:
69:d2:7d:48:14:f4:3b:57:6a:45:7a:8e:9d:4b:51:16:42:12:
48:ba:09:00:81:2f:42:c1:57:e5:01:8b:ba:8b:df:94:41:f2:
c7:b5:1c:14:42:13:4f:02:7b:9c:da:01:d9:96:d7:04:82:43:
ae:23:f6:8c:7c:61:18:a1:79:35:7e:73:97:87:d3:49:f1:89:
9a:64:a2:8a:9b:5e:1b:7a:fe:76:ae:83:df:53:76:cc:35:e4:
6d:b1:9d:50:a3:6c:7b:b7:6f:a3:78:49:e8:f8:b9:45:bb:33:
87:cc:10:3a:a6:b9:e5:35:ac:96:4b:95:a4:5c:74:26:78:4b:
76:58:73:ce:49:b1:ee:30:7d:6c:75:b0:0f:d8:0f:dd:0f:12:
38:d2:e5:1b:91:86:64:69:e5:05:a6:65:03:f5:7e:97:58:b9:
0e:b5:f8:c1:a6:0b:a2:de:d3:4a:49:51:cd:d6:e0:c9:01:a3:
96:90:a5:58
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYgvyTHjJTVZcXD5uoCvAdAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjMwNTE4MTY1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGNlMWQyMTJkMzEwMzcxYjFiNTExYzQwYzQ2NGMwNDc2Y2NkZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimNwEi/vjcerXGLdgZO3dkZcgjhI
Q3LlQ6l5xD723PkMRgM+2HOb2igezUGiYvK+2l5nyST/GLIYWe/0sFJLGP4GS4kP
nbzUASadcQY0YLoA9qRG/hZPvVxZCH89eImSQ96bKOcVjb/NPhitcLNSnch1p+kP
Ar7654eOgkByatJjVg6GCwICd/Juo+unHwkJ60AO4f1XA3mWLrI0/y5FMP7pGVOg
rp9TocEUFVRDw38+/SPh7CnAepZypNkeDxJSJzpjmwCKTV63RuKaqqupYtaiMSH5
qNK8FUBH3fChsxMCCet6fedet+5iIPDsiqd6+5O9+LHPN/IE8Zb6UbfvyQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFPTOHSEtMQNxsbURxAxGTAR2zN2ZMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvOU00ZElTMHhBM0d4dFJIRURFWk1CSGJNM1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQEH6owAwQG
XkqAAwQFbcugMAwDBAKwLowDBAWwLoADBAK5IqAwDQYJKoZIhvcNAQELBQADggEB
AG22Z5HBzhPiRJsHG+BVjVJaC6lThukvJ633LL5FGW7leCsKZlLXuUDb2OhbObdP
w7svcTBBUK05/ln5L3r4dDtm4iBKwBmfoWnSfUgU9DtXakV6jp1LURZCEki6CQCB
L0LBV+UBi7qL35RB8se1HBRCE08Ce5zaAdmW1wSCQ64j9ox8YRiheTV+c5eH00nx
iZpkooqbXht6/naug99Tdsw15G2xnVCjbHu3b6N4Sej4uUW7M4fMEDqmueU1rJZL
laRcdCZ4S3ZYc85Jse4wfWx1sA/YD90PEjjS5RuRhmRp5QWmZQP1fpdYuQ61+MGm
C6Le00pJUc3W4MkBo5aQpVg=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:40 2025 by rpki-client