Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/yT4UBJ1hQhTskb_wk5j8AuWcTgs.roa
File: yT4UBJ1hQhTskb_wk5j8AuWcTgs.roa (raw, json)
Hash identifier: 78cU6ky8H41kDKTaxXZ9j4CqCz0KB4WafIXhsJDhR9k=
Subject key identifier: C9:3E:14:04:9D:61:42:14:EC:91:BF:F0:93:98:FC:02:E5:9C:4E:0B
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018786190D54F3334C2DF47D0EC7414091C8
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/yT4UBJ1hQhTskb_wk5j8AuWcTgs.roa
Signing time: Sat 15 Apr 2023 18:06:41 +0000
ROA not before: Sat 15 Apr 2023 18:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 2.188.225.0/24 maxlen: 24
2.188.224.0/20 maxlen: 20
2.188.232.0/23 maxlen: 23
2.188.234.0/24 maxlen: 24
2.188.236.0/23 maxlen: 23
2.188.240.0/20 maxlen: 20
2.188.164.0/22 maxlen: 22
2.188.160.0/22 maxlen: 22
2.188.165.0/24 maxlen: 24
2.188.161.0/24 maxlen: 24
2.188.176.0/23 maxlen: 23
2.188.192.0/19 maxlen: 19
2.188.212.0/23 maxlen: 23
2.188.60.0/22 maxlen: 22
2.188.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:86:19:0d:54:f3:33:4c:2d:f4:7d:0e:c7:41:40:91:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 15 18:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c93e14049d614214ec91bff09398fc02e59c4e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c3:d6:db:9a:b7:8f:41:0b:79:06:2b:26:d4:
8f:e5:a4:83:5e:ee:0d:8d:9e:72:01:39:28:e8:44:
48:cf:ef:f4:7b:55:7b:7c:9f:75:c5:65:17:c4:93:
08:a2:d6:95:92:79:bd:9e:f6:45:f3:f2:aa:60:f1:
80:42:77:f2:5c:a8:13:0c:c1:b6:be:50:f2:63:02:
4d:70:eb:05:0d:f2:60:1a:c1:36:e6:8a:1f:d7:9e:
3c:2a:93:ff:0b:9f:5f:6f:10:f4:8e:21:af:9a:b4:
f6:d2:87:61:5b:df:46:be:b7:86:0d:e9:21:51:df:
28:cf:c1:42:5a:af:13:5d:58:75:19:fe:e2:0c:b8:
8b:36:3f:16:d6:f3:63:e8:6e:d4:4e:4e:db:c1:48:
90:5c:84:01:2b:7c:83:e8:65:6e:02:7e:43:19:a4:
d3:2a:15:f0:13:4f:a7:6c:08:a0:fd:e9:ee:0a:a3:
05:23:99:a0:13:ff:88:1d:8d:1d:b9:11:9f:4f:56:
1d:5d:36:f9:de:80:bf:da:32:74:2e:3f:68:74:37:
9e:12:ec:59:be:86:79:27:7c:2c:4c:17:f8:ee:76:
4f:eb:20:67:74:f1:a8:d6:c9:fb:2e:40:d5:8d:7c:
bc:de:35:50:aa:fc:e3:5a:cc:d4:53:5a:42:ef:29:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3E:14:04:9D:61:42:14:EC:91:BF:F0:93:98:FC:02:E5:9C:4E:0B
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/yT4UBJ1hQhTskb_wk5j8AuWcTgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.60.0/22
2.188.72.0/22
2.188.160.0/21
2.188.176.0/23
2.188.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5b:1a:00:b7:ad:86:2b:03:be:7b:0c:e7:cd:70:8f:c0:fe:c7:
75:58:1c:50:57:4b:8f:7f:e8:9e:6f:f2:78:7b:8a:86:7f:5a:
eb:88:67:52:5d:d8:ab:4d:07:c2:e2:fa:4f:48:28:a0:a0:54:
03:13:50:e6:34:19:91:df:18:54:22:bf:b7:80:dd:47:71:51:
59:0d:b3:41:76:b9:93:71:f5:4b:30:74:d2:8d:cb:75:4e:46:
88:46:7f:f0:65:08:96:79:af:8a:a7:14:be:d1:b8:24:2c:d8:
e0:8e:05:9b:7e:0a:e2:c3:99:8b:48:33:1a:29:33:4f:ca:8d:
19:9d:a3:3a:59:34:12:49:8c:a3:7f:d6:f4:5e:97:09:17:06:
65:2a:82:3e:50:d6:87:1c:8e:b7:40:dd:3e:f0:23:81:28:64:
67:e3:27:35:c6:34:44:b8:d5:b4:bc:b3:21:e1:4b:e4:86:ff:
17:bb:74:3b:4c:81:4d:c9:0d:67:dc:15:d8:76:42:4f:80:09:
7e:fa:fb:c3:6e:54:00:ae:27:b9:3a:c9:4b:4a:49:fe:a9:45:
d7:ae:6a:50:c2:27:fc:43:b2:0a:dd:24:89:0f:cb:5d:2b:c3:
9c:2c:9e:ac:89:41:65:9d:34:23:f0:5b:34:17:a2:ab:47:26:
7b:c6:ea:7c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYeGGQ1U8zNMLfR9DsdBQJHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMwNDE1MTgwNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTNlMTQwNDlkNjE0MjE0ZWM5MWJmZjA5Mzk4ZmMwMmU1OWM0ZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsPW25q3j0ELeQYrJtSP5aSDXu4N
jZ5yATko6ERIz+/0e1V7fJ91xWUXxJMIotaVknm9nvZF8/KqYPGAQnfyXKgTDMG2
vlDyYwJNcOsFDfJgGsE25oof1548KpP/C59fbxD0jiGvmrT20odhW99GvreGDekh
Ud8oz8FCWq8TXVh1Gf7iDLiLNj8W1vNj6G7UTk7bwUiQXIQBK3yD6GVuAn5DGaTT
KhXwE0+nbAig/enuCqMFI5mgE/+IHY0duRGfT1YdXTb53oC/2jJ0Lj9odDeeEuxZ
voZ5J3wsTBf47nZP6yBndPGo1sn7LkDVjXy83jVQqvzjWszUU1pC7ylblQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMk+FASdYUIU7JG/8JOY/ALlnE4LMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEveVQ0VUJKMWhRaFRza2Jfd2s1ajhBdVdjVGdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCArw8AwQC
ArxIAwQDArygAwQBArywAwQGArzAMA0GCSqGSIb3DQEBCwUAA4IBAQBbGgC3rYYr
A757DOfNcI/A/sd1WBxQV0uPf+ieb/J4e4qGf1rriGdSXdirTQfC4vpPSCigoFQD
E1DmNBmR3xhUIr+3gN1HcVFZDbNBdrmTcfVLMHTSjct1TkaIRn/wZQiWea+KpxS+
0bgkLNjgjgWbfgriw5mLSDMaKTNPyo0ZnaM6WTQSSYyjf9b0XpcJFwZlKoI+UNaH
HI63QN0+8COBKGRn4yc1xjREuNW0vLMh4Uvkhv8Xu3Q7TIFNyQ1n3BXYdkJPgAl+
+vvDblQArie5OslLSkn+qUXXrmpQwif8Q7IK3SSJD8tdK8OcLJ6siUFlnTQj8Fs0
F6KrRyZ7xup8
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:50:10 2025 by rpki-client