Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/sy_8IRDut9r9JlHDojK_nH52tu8.roa
File: sy_8IRDut9r9JlHDojK_nH52tu8.roa (raw, json)
Hash identifier: HXwlnuCQDeGtbzD+TM3NjNN5K7V/plVC7ysNtsIUjdc=
Subject key identifier: B3:2F:FC:21:10:EE:B7:DA:FD:26:51:C3:A2:32:BF:9C:7E:76:B6:EF
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018C554E8F75058D1EA80A026A69DACDC7C0
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/sy_8IRDut9r9JlHDojK_nH52tu8.roa
Signing time: Sun 10 Dec 2023 19:57:40 +0000
ROA not before: Sun 10 Dec 2023 19:57:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203963
IP address blocks: 176.46.144.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
37.49.148.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
37.49.150.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:55:4e:8f:75:05:8d:1e:a8:0a:02:6a:69:da:cd:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Dec 10 19:57:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b32ffc2110eeb7dafd2651c3a232bf9c7e76b6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:d3:1f:4a:4b:06:1f:09:b0:25:6f:c9:e9:
ab:b2:93:90:15:b4:3b:ba:3a:cc:86:26:0d:66:f6:
d4:09:8f:08:63:16:07:d5:c8:f7:29:99:f7:0d:f3:
f9:b3:ab:99:2d:43:48:5c:5c:d4:82:e8:28:4f:1e:
20:06:63:87:80:6a:7e:51:9f:18:57:5d:47:dd:e9:
f0:b8:25:c1:61:62:ea:5b:49:1b:90:05:61:34:0b:
d2:90:0d:6d:01:a2:12:96:01:29:1e:20:ee:67:27:
96:b2:d8:27:9c:52:b7:40:f4:6e:cf:c4:ee:c3:5c:
5e:4c:9f:54:2d:a2:ef:ca:76:72:18:fd:58:9d:a7:
5e:bb:9f:38:12:65:bf:5a:90:4d:a7:ac:ff:f1:fd:
a6:f2:71:c7:dd:b1:77:78:f1:10:94:29:57:e0:4e:
a5:74:8c:e4:c9:5b:96:da:07:ac:d2:8b:4b:c6:44:
ac:cc:3d:e7:7c:a2:5e:58:83:9c:11:b8:fe:ee:7e:
b4:13:d4:96:58:24:db:5f:bf:f9:30:9c:2c:72:b0:
07:d8:10:0f:1e:30:8e:c6:6b:6a:8d:13:8d:98:82:
64:50:fb:a2:12:b9:cb:ea:86:4b:ca:07:7a:d3:03:
06:56:7c:19:88:6f:6e:89:8d:ab:0b:7a:ef:38:9b:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2F:FC:21:10:EE:B7:DA:FD:26:51:C3:A2:32:BF:9C:7E:76:B6:EF
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/sy_8IRDut9r9JlHDojK_nH52tu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
37.49.148.0-37.49.150.255
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.158.0/23
94.74.164.0/24
94.74.169.0/24
94.74.171.0/24
94.74.182.0/24
94.74.187.0/24
94.74.191.0/24
109.203.163.0/24
176.46.144.0/24
176.46.149.0/24
176.46.152.0/24
Signature Algorithm: sha256WithRSAEncryption
35:fe:a7:56:83:fc:3a:8a:e1:84:6d:9e:df:38:fe:6a:34:60:
fe:e5:51:11:15:29:a0:8f:c7:a5:89:20:e0:66:6b:d8:fa:96:
57:e4:33:1f:f1:db:98:c7:37:2f:17:32:59:c8:11:72:6d:d7:
55:10:1a:37:e2:2e:eb:59:3e:f4:7d:c6:ee:65:72:60:bd:6b:
50:6f:17:10:e8:4a:7b:ab:76:1f:36:b8:ff:3f:3b:93:29:8a:
0c:3b:9d:90:16:ad:a7:38:77:c8:9e:9b:2a:62:52:92:2f:6e:
90:66:91:7e:f4:29:12:10:7d:b5:d7:77:55:7e:a8:2a:ac:f7:
a2:62:59:7e:69:c5:c9:e9:86:d6:b4:55:76:0b:81:b6:51:f7:
eb:50:8c:18:50:3f:86:97:6d:61:85:9b:51:d2:7c:25:e8:d3:
cc:6a:23:bf:b8:a8:0b:00:aa:ce:b3:71:6a:f6:c1:6b:f4:69:
d3:54:0c:49:39:04:58:94:9f:f7:3a:ae:eb:1a:63:fc:f0:a1:
0e:48:78:99:78:70:9e:e7:8d:ff:ce:d7:e4:9d:b0:08:5d:5f:
4b:6a:20:09:87:41:5c:d0:b0:14:4e:66:a2:73:c5:e7:f2:34:
c9:5f:a9:bb:24:a0:0e:11:f6:ae:ac:90:22:ed:1b:65:62:ed:
5f:85:ea:4a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAYxVTo91BY0eqAoCamnazcfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjMxMjEwMTk1NzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzJmZmMyMTEwZWViN2RhZmQyNjUxYzNhMjMyYmY5YzdlNzZiNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06vTH0pLBh8JsCVvyemrspOQFbQ7
ujrMhiYNZvbUCY8IYxYH1cj3KZn3DfP5s6uZLUNIXFzUgugoTx4gBmOHgGp+UZ8Y
V11H3enwuCXBYWLqW0kbkAVhNAvSkA1tAaISlgEpHiDuZyeWstgnnFK3QPRuz8Tu
w1xeTJ9ULaLvynZyGP1Ynadeu584EmW/WpBNp6z/8f2m8nHH3bF3ePEQlClX4E6l
dIzkyVuW2ges0otLxkSszD3nfKJeWIOcEbj+7n60E9SWWCTbX7/5MJwscrAH2BAP
HjCOxmtqjRONmIJkUPuiErnL6oZLygd60wMGVnwZiG9uiY2rC3rvOJswawIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFLMv/CEQ7rfa/SZRw6Iyv5x+drbvMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvc3lfOElSRHV0OXI5SmxIRG9qS19uSDUydHU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEACUxkDAM
AwQCJTGUAwQAJTGWAwQAXkqJAwQAXkqMAwQAXkqTAwQBXkqeAwQAXkqkAwQAXkqp
AwQAXkqrAwQAXkq2AwQAXkq7AwQAXkq/AwQAbcujAwQAsC6QAwQAsC6VAwQAsC6Y
MA0GCSqGSIb3DQEBCwUAA4IBAQA1/qdWg/w6iuGEbZ7fOP5qNGD+5VERFSmgj8el
iSDgZmvY+pZX5DMf8duYxzcvFzJZyBFybddVEBo34i7rWT70fcbuZXJgvWtQbxcQ
6Ep7q3YfNrj/PzuTKYoMO52QFq2nOHfInpsqYlKSL26QZpF+9CkSEH2113dVfqgq
rPeiYll+acXJ6YbWtFV2C4G2UffrUIwYUD+Gl21hhZtR0nwl6NPMaiO/uKgLAKrO
s3Fq9sFr9GnTVAxJOQRYlJ/3Oq7rGmP88KEOSHiZeHCe543/ztfknbAIXV9LaiAJ
h0Fc0LAUTmaic8Xn8jTJX6m7JKAOEfaurJAi7RtlYu1fhepK
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:52 2025 by rpki-client