Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/0u8t6Ux_BHEiLt8MIdnb__W0M74.roa
File: 0u8t6Ux_BHEiLt8MIdnb__W0M74.roa (raw, json)
Hash identifier: 8+EcsG0oyjJPtfQ6EifRsPiO+9gXalWQ/GtCBcmvESY=
Subject key identifier: D2:EF:2D:E9:4C:7F:04:71:22:2E:DF:0C:21:D9:DB:FF:F5:B4:33:BE
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 37BB8E47
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/0u8t6Ux_BHEiLt8MIdnb__W0M74.roa
Signing time: Sat 01 Jan 2022 12:01:23 +0000
ROA not before: Sat 01 Jan 2022 12:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196655
IP address blocks: 109.68.128.0/21 maxlen: 24
185.40.200.0/22 maxlen: 24
178.22.16.0/21 maxlen: 21
193.142.23.0/24 maxlen: 24
2a00:1f50::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935038535 (0x37bb8e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Jan 1 12:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2ef2de94c7f0471222edf0c21d9dbfff5b433be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:35:2e:6a:fc:1c:a0:cd:b4:65:f8:ec:c1:
d7:37:80:26:b5:c5:da:da:bd:7e:0d:dd:b9:b8:b5:
12:d5:ca:02:c3:1c:56:aa:84:5b:97:d1:ad:96:51:
27:29:86:80:69:08:35:10:10:e6:f9:4a:28:bd:6f:
ec:88:f7:24:d8:90:30:2b:51:76:fb:39:05:ef:b4:
b7:a4:9b:bd:bc:b6:d4:2e:88:eb:ce:2c:f8:14:87:
11:75:1b:fa:76:40:5b:83:d8:de:87:a4:1e:8f:d6:
84:3b:b2:72:df:d1:ce:2e:58:57:bb:4c:82:b2:54:
66:48:25:a8:46:c8:4c:98:11:9c:31:c4:5c:a6:66:
a0:b1:9c:a7:a8:a8:90:e4:54:48:98:43:cc:2c:c4:
31:e7:ec:1f:9e:31:ba:ba:ee:2c:ec:91:c5:77:89:
0a:17:47:95:e8:a7:02:81:2f:47:a0:bc:34:1b:a8:
0a:ae:02:f0:4a:54:4c:9a:9a:aa:68:75:ce:5d:33:
f5:49:f7:a9:3f:dd:8e:f3:10:96:b2:55:12:55:e3:
0b:5e:89:b6:ac:fc:e3:ec:2a:13:a1:e8:ac:c0:31:
a4:c9:09:de:4a:34:57:44:c0:0f:56:9e:67:b1:cc:
28:5c:3c:a9:2a:b6:e9:6b:e5:c4:86:c1:cd:3d:63:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:2D:E9:4C:7F:04:71:22:2E:DF:0C:21:D9:DB:FF:F5:B4:33:BE
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/0u8t6Ux_BHEiLt8MIdnb__W0M74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.128.0/21
178.22.16.0/21
185.40.200.0/22
193.142.23.0/24
IPv6:
2a00:1f50::/32
Signature Algorithm: sha256WithRSAEncryption
98:8a:e3:76:97:0d:ef:02:d9:a8:d1:1e:f7:70:d3:98:48:6e:
51:f6:fd:d9:d9:e1:fb:96:3c:e7:63:66:6c:c2:58:b9:b1:84:
96:8d:41:94:07:97:87:79:3f:0d:99:6e:42:12:8b:f8:75:3a:
95:26:5c:ac:af:e8:47:a6:c4:37:34:ea:34:1d:3e:dd:f8:c9:
ef:5f:66:c9:f6:d7:e0:97:59:73:96:12:b8:cb:ad:db:9b:9f:
e3:6f:32:b0:81:d3:60:6b:3d:5c:ff:79:08:b9:58:d8:29:26:
cb:9e:a7:68:26:09:e6:de:55:d9:8c:e0:06:fa:0c:fd:4d:07:
d1:d6:57:05:45:db:d5:30:62:69:78:b0:ab:4c:0b:16:e0:6c:
19:90:3d:a9:11:2b:35:12:ef:05:29:22:74:d4:a8:ad:a6:79:
ee:b7:76:6a:e7:7b:7a:ac:3a:6e:e0:42:e8:4c:82:20:9c:61:
03:f7:ae:d1:6d:87:88:f0:6c:ca:9d:dd:02:c5:0e:22:44:2f:
2e:69:0f:ab:70:54:ed:63:50:2a:94:7f:6c:3e:18:fa:5f:b4:
c2:d6:eb:32:d2:ef:0a:0c:94:af:8c:51:fc:cf:66:0f:ae:3a:
b9:3e:98:c3:42:86:a8:e4:a0:c9:7e:db:e0:23:32:fe:e5:76:
dd:b5:48:90
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEN7uORzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OWE5ZTg5MWUwNmQ0MjI3N2RjNGZiNWZiZDY5ZTlhYmQ4ZTI5ODgzMB4XDTIyMDEw
MTEyMDEyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDJlZjJkZTk0Yzdm
MDQ3MTIyMmVkZjBjMjFkOWRiZmZmNWI0MzNiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMAxNS5q/BygzbRl+OzB1zeAJrXF2tq9fg3dubi1EtXKAsMc
VqqEW5fRrZZRJymGgGkINRAQ5vlKKL1v7Ij3JNiQMCtRdvs5Be+0t6Sbvby21C6I
684s+BSHEXUb+nZAW4PY3oekHo/WhDuyct/Rzi5YV7tMgrJUZkglqEbITJgRnDHE
XKZmoLGcp6iokORUSJhDzCzEMefsH54xurruLOyRxXeJChdHleinAoEvR6C8NBuo
Cq4C8EpUTJqaqmh1zl0z9Un3qT/djvMQlrJVElXjC16Jtqz84+wqE6HorMAxpMkJ
3ko0V0TAD1aeZ7HMKFw8qSq26WvlxIbBzT1j1tUCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBTS7y3pTH8EcSIu3wwh2dv/9bQzvjAfBgNVHSMEGDAWgBRJqeiR4G1CJ33E
+1+9aemr2OKYgzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Nhbm9rZUJ0UWlkOXhQdGZ2V25wcTlqaW1JTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvNTM2OTZmLWY5NzMtNDdmYi04ZDc5LWFkZGM2ZDRiYjJlNy8x
LzB1OHQ2VXhfQkhFaUx0OE1JZG5iX19XME03NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
NTM2OTZmLWY5NzMtNDdmYi04ZDc5LWFkZGM2ZDRiYjJlNy8xL1Nhbm9rZUJ0UWlk
OXhQdGZ2V25wcTlqaW1JTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEA21EgAMEA7IWEAMEArkoyAMEAMGO
FzANBAIAAjAHAwUAKgAfUDANBgkqhkiG9w0BAQsFAAOCAQEAmIrjdpcN7wLZqNEe
93DTmEhuUfb92dnh+5Y852NmbMJYubGElo1BlAeXh3k/DZluQhKL+HU6lSZcrK/o
R6bENzTqNB0+3fjJ719myfbX4JdZc5YSuMut25uf428ysIHTYGs9XP95CLlY2Ckm
y56naCYJ5t5V2YzgBvoM/U0H0dZXBUXb1TBiaXiwq0wLFuBsGZA9qRErNRLvBSki
dNSoraZ57rd2aud7eqw6buBC6EyCIJxhA/eu0W2HiPBsyp3dAsUOIkQvLmkPq3BU
7WNQKpR/bD4Y+l+0wtbrMtLvCgyUr4xR/M9mD646uT6Yw0KGqOSgyX7b4CMy/uV2
3bVIkA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:17 2025 by rpki-client