Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/VZI5MB1Zp5-zcpfRobHbGotWG6g.roa
File: VZI5MB1Zp5-zcpfRobHbGotWG6g.roa (raw, json)
Hash identifier: bh0AGIK3pg7pNJQvRD8WDD1E3it4FFNTzNsfa37RWC0=
Subject key identifier: 55:92:39:30:1D:59:A7:9F:B3:72:97:D1:A1:B1:DB:1A:8B:56:1B:A8
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 0F91A791
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/VZI5MB1Zp5-zcpfRobHbGotWG6g.roa
Signing time: Sat 01 Jan 2022 13:05:58 +0000
ROA not before: Sat 01 Jan 2022 13:05:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201565
IP address blocks: 185.91.148.0/23 maxlen: 23
185.91.150.0/23 maxlen: 23
94.176.184.0/23 maxlen: 23
89.35.206.0/23 maxlen: 23
185.59.96.0/22 maxlen: 22
185.11.232.0/22 maxlen: 22
2a03:7e40:4000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261203857 (0xf91a791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Jan 1 13:05:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=559239301d59a79fb37297d1a1b1db1a8b561ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:c5:09:a9:72:a0:24:e3:c2:a9:c2:4c:fc:
67:0a:db:12:ea:31:40:a2:66:6f:72:f1:08:36:b0:
e0:9a:fd:12:91:46:e4:fa:80:f9:3b:ef:49:95:aa:
ca:57:be:8a:7c:11:4a:55:97:0a:c7:b8:56:0a:c6:
bc:6f:d1:6b:1e:07:41:23:38:9b:1b:41:9e:f2:43:
06:f4:c6:47:5a:1c:15:06:84:6c:3d:9b:09:b9:ee:
05:d7:60:fa:26:1e:8e:b7:41:de:7b:74:89:08:01:
6e:2c:0b:89:c2:d2:db:2e:9c:01:6a:21:66:13:60:
65:51:49:f7:38:66:aa:8b:87:32:2f:59:61:f5:a2:
7b:f8:23:cd:a5:74:9b:82:00:59:5b:7d:8a:f2:1a:
34:14:6c:c1:da:ee:8d:95:d7:06:27:4f:d8:24:a7:
89:a8:c7:09:4d:70:d1:6b:12:83:7a:29:b6:67:3c:
52:32:81:97:43:2f:98:3f:ef:98:b0:7d:07:c8:8b:
be:e9:f5:75:f4:14:92:32:7a:da:c9:5f:a6:27:d8:
59:64:44:ba:2f:20:9e:fe:52:48:1c:74:63:03:67:
ab:0b:22:c6:7d:70:69:d1:9f:d6:06:88:c0:d7:41:
cc:a2:a3:81:ed:0b:cf:42:93:6e:51:79:78:fe:c7:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:92:39:30:1D:59:A7:9F:B3:72:97:D1:A1:B1:DB:1A:8B:56:1B:A8
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/VZI5MB1Zp5-zcpfRobHbGotWG6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.206.0/23
94.176.184.0/23
185.11.232.0/22
185.59.96.0/22
185.91.148.0/22
IPv6:
2a03:7e40:4000::/36
Signature Algorithm: sha256WithRSAEncryption
7f:1c:7a:0c:88:92:1e:97:dc:57:04:72:02:4b:83:ba:0f:fe:
a5:d2:62:00:f7:fa:89:3c:22:bd:78:2c:cc:cf:32:86:d3:b9:
38:a1:32:16:9a:60:8e:d8:9a:69:5a:f8:11:99:92:2a:5f:9c:
8e:22:a3:63:74:3c:c4:b7:11:b1:cd:05:71:c9:3a:11:c8:40:
20:e3:1d:04:99:b9:7c:dd:21:9a:f5:58:cf:97:22:6d:2f:89:
e9:75:32:0a:24:7b:ab:ca:f6:59:5f:d2:34:86:1d:83:b6:50:
62:a3:65:6f:9d:52:81:c2:ed:da:69:db:f8:91:82:cb:30:6a:
26:c9:a8:c1:e4:36:67:57:0e:51:8f:c6:1d:6b:7e:ab:28:12:
bf:4e:6d:e5:ba:ac:1c:a4:2b:8b:d6:81:41:48:d1:c7:02:c4:
d5:06:c6:2e:d6:ae:24:30:58:5a:a1:e7:bf:48:68:c4:71:54:
cb:31:0d:6e:18:0c:00:21:ef:cb:cd:d8:9b:9b:f7:f3:33:d9:
33:cf:a6:d4:7e:74:b1:c8:85:5c:5b:98:12:93:f3:ca:c4:66:
da:66:5d:ea:06:ca:81:ac:ea:b5:ed:29:b6:9c:48:fe:8a:93:
74:32:fe:7b:6f:57:a0:5d:59:6f:33:3f:5a:36:2d:99:e3:fe:
47:a2:cf:cd
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIED5GnkTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZjM2OGZlYjllNTUzYmRkMTMxNTYyNTg0YTMzNTNiMWQ3NTU1YzUwMB4XDTIyMDEw
MTEzMDU1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTU5MjM5MzAxZDU5
YTc5ZmIzNzI5N2QxYTFiMWRiMWE4YjU2MWJhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCsxQmpcqAk48Kpwkz8ZwrbEuoxQKJmb3LxCDaw4Jr9EpFG
5PqA+TvvSZWqyle+inwRSlWXCse4VgrGvG/Rax4HQSM4mxtBnvJDBvTGR1ocFQaE
bD2bCbnuBddg+iYejrdB3nt0iQgBbiwLicLS2y6cAWohZhNgZVFJ9zhmqouHMi9Z
YfWie/gjzaV0m4IAWVt9ivIaNBRswdrujZXXBidP2CSniajHCU1w0WsSg3optmc8
UjKBl0MvmD/vmLB9B8iLvun1dfQUkjJ62slfpifYWWREui8gnv5SSBx0YwNnqwsi
xn1wadGf1gaIwNdBzKKjge0Lz0KTblF5eP7HGeMCAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBRVkjkwHVmnn7Nyl9Ghsdsai1YbqDAfBgNVHSMEGDAWgBSPNo/rnlU73RMV
YlhKM1Ox11VcUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2p6YVA2NTVWTzkwVEZXSllTak5Uc2RkVlhGQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvMDU0N2NiLWM1ZGMtNGUyZi1hZmY3LTNlY2E3ZGYyYWU1Ny8x
L1ZaSTVNQjFacDUtemNwZlJvYkhiR290V0c2Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
MDU0N2NiLWM1ZGMtNGUyZi1hZmY3LTNlY2E3ZGYyYWU1Ny8xL2p6YVA2NTVWTzkw
VEZXSllTak5Uc2RkVlhGQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwJAQCAAEwHgMEAVkjzgMEAV6wuAMEArkL6AMEArk7
YAMEArlblDAOBAIAAjAIAwYEKgN+QEAwDQYJKoZIhvcNAQELBQADggEBAH8cegyI
kh6X3FcEcgJLg7oP/qXSYgD3+ok8Ir14LMzPMobTuTihMhaaYI7Ymmla+BGZkipf
nI4io2N0PMS3EbHNBXHJOhHIQCDjHQSZuXzdIZr1WM+XIm0viel1Mgoke6vK9llf
0jSGHYO2UGKjZW+dUoHC7dpp2/iRgsswaibJqMHkNmdXDlGPxh1rfqsoEr9ObeW6
rBykK4vWgUFI0ccCxNUGxi7WriQwWFqh579IaMRxVMsxDW4YDAAh78vN2Jub9/Mz
2TPPptR+dLHIhVxbmBKT88rEZtpmXeoGyoGs6rXtKbacSP6Kk3Qy/ntvV6BdWW8z
P1o2LZnj/keiz80=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:05 2025 by rpki-client