Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9ibvFXTsw8mPkPiBSNJZTsAOddw.roa
File: 9ibvFXTsw8mPkPiBSNJZTsAOddw.roa (raw, json)
Hash identifier: f8OIt2Pf23BWvpXZCOLQxV1pz+MQt70tNU3NuPmVfV8=
Subject key identifier: F6:26:EF:15:74:EC:C3:C9:8F:90:F8:81:48:D2:59:4E:C0:0E:75:DC
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018B00BB1A9D26EEEF7903A12F2DD486E35E
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9ibvFXTsw8mPkPiBSNJZTsAOddw.roa
Signing time: Thu 05 Oct 2023 16:45:43 +0000
ROA not before: Thu 05 Oct 2023 16:45:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 95.164.128.0/20 maxlen: 24
94.131.176.0/22 maxlen: 22
94.131.180.0/22 maxlen: 24
94.131.184.0/22 maxlen: 24
94.131.188.0/22 maxlen: 24
95.164.70.0/24 maxlen: 24
95.164.77.0/24 maxlen: 24
95.164.78.0/23 maxlen: 24
94.131.48.0/20 maxlen: 24
94.131.64.0/20 maxlen: 24
95.164.240.0/21 maxlen: 21
95.164.252.0/22 maxlen: 24
95.164.44.0/22 maxlen: 22
95.164.168.0/23 maxlen: 24
95.164.192.0/22 maxlen: 24
94.131.24.0/22 maxlen: 24
95.164.196.0/22 maxlen: 24
95.164.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:bb:1a:9d:26:ee:ef:79:03:a1:2f:2d:d4:86:e3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Oct 5 16:45:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f626ef1574ecc3c98f90f88148d2594ec00e75dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:48:24:c1:c8:66:58:8b:94:f2:51:25:75:
da:af:de:43:cf:33:e7:1e:1c:7e:b5:ff:5f:0d:4f:
f8:2e:7f:7a:c1:83:d9:8a:3b:1f:dc:42:a6:76:5a:
e4:33:50:38:95:bd:2e:11:aa:a2:5d:fb:e0:af:29:
61:a9:aa:d4:f3:17:bb:96:6b:a4:8a:cc:63:41:3c:
07:e4:93:34:17:1f:66:1e:23:93:03:14:72:00:12:
ef:d7:c5:d4:52:a9:6c:9d:a6:ef:07:a2:03:88:fd:
0a:3b:01:15:3f:22:85:22:df:bb:9e:6a:2a:73:00:
d9:1a:f0:5d:42:71:b4:26:d1:b2:45:08:5f:d8:b3:
b8:d8:5f:8b:4f:8b:df:14:72:52:73:67:12:4b:52:
96:8b:79:7d:b3:9f:74:ea:bc:88:cc:b5:db:14:a2:
56:6f:b9:6d:61:de:46:4b:01:ee:44:96:dc:09:c5:
92:0b:74:a9:12:59:dc:44:77:77:98:19:c3:05:f2:
2a:2e:b5:22:07:16:e3:d9:56:d2:7f:f5:22:eb:22:
a3:33:86:c8:87:c9:1a:be:ab:72:7a:91:b3:12:ab:
7a:61:33:3a:5b:8c:2a:d1:81:c4:67:82:0f:9f:f7:
15:b8:86:ce:32:3d:9f:c2:66:a5:9e:8b:4a:6a:b0:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:EF:15:74:EC:C3:C9:8F:90:F8:81:48:D2:59:4E:C0:0E:75:DC
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9ibvFXTsw8mPkPiBSNJZTsAOddw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.24.0/22
94.131.48.0-94.131.79.255
94.131.176.0/20
95.164.44.0/22
95.164.70.0/24
95.164.77.0-95.164.79.255
95.164.128.0/20
95.164.168.0/23
95.164.192.0/20
95.164.240.0/21
95.164.252.0/22
Signature Algorithm: sha256WithRSAEncryption
66:5a:4f:8e:75:05:e2:3b:57:ca:4f:fc:ae:8c:b3:9c:f7:99:
5b:9c:31:7e:b4:19:13:83:bb:ca:7b:6e:11:85:51:80:cb:45:
6c:74:79:9e:53:56:80:a7:d7:fb:43:2d:e8:ed:de:9f:31:3c:
70:91:69:1d:68:fe:1d:b4:7c:80:20:c7:83:34:ef:a7:ed:6b:
95:61:35:09:fa:04:87:fb:65:0b:ed:d6:dc:2b:22:6f:ca:ac:
b3:d1:a2:37:3b:f3:90:85:8e:b6:c1:31:f4:23:44:a5:1d:1f:
d5:67:10:73:90:b4:0b:65:a6:86:cf:5a:83:44:81:f2:57:47:
ee:11:2e:89:ec:6d:10:85:21:1b:0c:1b:a2:59:ec:5c:cd:9c:
c7:b9:17:cb:55:d8:bd:74:ed:ca:74:16:20:07:bb:5e:f8:54:
61:d9:a1:60:f8:37:55:3b:24:b1:99:73:c4:53:84:43:4f:c0:
7f:c0:bc:f9:55:fd:11:79:4f:08:d6:28:1a:08:a6:74:19:b7:
87:57:46:bd:ca:7f:c4:f9:3e:22:d1:82:6d:5a:54:c4:34:27:
02:bf:75:8d:4c:ee:c5:ff:c9:9e:fc:ce:08:29:6d:7c:1f:20:
9e:bb:38:9c:71:64:d0:eb:fb:57:76:0c:11:f5:7e:8b:f4:ad:
0c:3a:74:e1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAYsAuxqdJu7veQOhLy3UhuNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjMxMDA1MTY0NTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjI2ZWYxNTc0ZWNjM2M5OGY5MGY4ODE0OGQyNTk0ZWMwMGU3NWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+tIJMHIZliLlPJRJXXar95DzzPn
Hhx+tf9fDU/4Ln96wYPZijsf3EKmdlrkM1A4lb0uEaqiXfvgrylhqarU8xe7lmuk
isxjQTwH5JM0Fx9mHiOTAxRyABLv18XUUqlsnabvB6IDiP0KOwEVPyKFIt+7nmoq
cwDZGvBdQnG0JtGyRQhf2LO42F+LT4vfFHJSc2cSS1KWi3l9s5906ryIzLXbFKJW
b7ltYd5GSwHuRJbcCcWSC3SpElncRHd3mBnDBfIqLrUiBxbj2VbSf/Ui6yKjM4bI
h8kavqtyepGzEqt6YTM6W4wq0YHEZ4IPn/cVuIbOMj2fwmalnotKarBWewIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFPYm7xV07MPJj5D4gUjSWU7ADnXcMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvOWlidkZYVHN3OG1Qa1BpQlNOSlpUc0FPZGR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQCXoMYMAwD
BARegzADBAReg0ADBAReg7ADBAJfpCwDBABfpEYwDAMEAF+kTQMEBF+kQAMEBF+k
gAMEAV+kqAMEBF+kwAMEA1+k8AMEAl+k/DANBgkqhkiG9w0BAQsFAAOCAQEAZlpP
jnUF4jtXyk/8royznPeZW5wxfrQZE4O7yntuEYVRgMtFbHR5nlNWgKfX+0Mt6O3e
nzE8cJFpHWj+HbR8gCDHgzTvp+1rlWE1CfoEh/tlC+3W3Csib8qss9GiNzvzkIWO
tsEx9CNEpR0f1WcQc5C0C2Wmhs9ag0SB8ldH7hEuiextEIUhGwwbolnsXM2cx7kX
y1XYvXTtynQWIAe7XvhUYdmhYPg3VTsksZlzxFOEQ0/Af8C8+VX9EXlPCNYoGgim
dBm3h1dGvcp/xPk+ItGCbVpUxDQnAr91jUzuxf/JnvzOCCltfB8gnrs4nHFk0Ov7
V3YMEfV+i/StDDp04Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:21 2025 by rpki-client