Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/cSeRW18cQBHpdm5oZrNGw7yMXrQ.roa
File: cSeRW18cQBHpdm5oZrNGw7yMXrQ.roa (raw, json)
Hash identifier: HGSEdQZhxVOCReTQvluyONxYenjvn2j0bQKHCxfCZgA=
Subject key identifier: 71:27:91:5B:5F:1C:40:11:E9:76:6E:68:66:B3:46:C3:BC:8C:5E:B4
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 018973373E1EE2BA2850EB3C2E25A0310FEA
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/cSeRW18cQBHpdm5oZrNGw7yMXrQ.roa
Signing time: Thu 20 Jul 2023 12:12:27 +0000
ROA not before: Thu 20 Jul 2023 12:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201565
IP address blocks: 185.11.232.0/22 maxlen: 22
185.91.150.0/23 maxlen: 24
185.91.149.0/24 maxlen: 24
185.91.148.0/24 maxlen: 24
185.91.148.0/23 maxlen: 24
94.176.185.0/24 maxlen: 24
94.176.184.0/24 maxlen: 24
185.59.96.0/22 maxlen: 22
89.35.206.0/24 maxlen: 24
89.35.207.0/24 maxlen: 24
2a03:7e40:5000::/36 maxlen: 36
2a03:7e40:4000::/36 maxlen: 36
2a03:7e40:2000::/36 maxlen: 36
2a03:7e40:3000::/36 maxlen: 36
2a03:7e40:1000::/36 maxlen: 36
2a03:7e40::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:37:3e:1e:e2:ba:28:50:eb:3c:2e:25:a0:31:0f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Jul 20 12:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7127915b5f1c4011e9766e6866b346c3bc8c5eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:ac:1f:5c:69:e7:98:b0:4c:e1:7e:ef:a1:
07:73:10:12:2a:b4:2f:6c:98:a1:d0:b5:7c:ee:cd:
99:aa:02:6a:75:77:a9:49:31:f3:b9:15:e8:0d:9c:
1f:ec:73:cb:07:41:b1:61:b8:11:6e:cb:68:31:4e:
88:e7:84:86:bb:77:56:df:fb:ec:91:82:d6:27:88:
f4:fd:5e:86:c4:7c:45:50:ef:db:9c:27:b2:ce:5e:
b5:dc:6b:e4:d9:1d:86:64:a4:1f:38:0e:63:31:27:
99:9b:76:48:79:79:3e:d6:65:a3:d7:50:6c:9b:0e:
a0:6f:86:dd:cf:5f:78:e2:59:d7:9a:6f:c6:4f:f7:
ad:6f:98:31:da:7a:7a:c4:27:e5:43:14:9a:07:45:
e8:2e:ae:05:1e:41:9d:7c:c8:43:36:dc:ac:11:6c:
77:e8:96:5e:1b:cb:c6:40:07:26:fd:6b:41:ca:dd:
08:96:f8:b0:9c:e4:70:29:7b:cc:99:df:c7:08:89:
94:61:6b:7c:86:09:4a:5d:74:59:b8:b4:a6:04:88:
8b:b3:8b:58:a8:b9:8b:56:cc:d6:57:2c:7a:37:5f:
fe:f3:be:c5:7c:ed:9b:f7:09:d4:73:e4:13:d7:47:
8b:0f:f6:86:7f:7a:59:33:43:b5:bc:52:17:23:d8:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:91:5B:5F:1C:40:11:E9:76:6E:68:66:B3:46:C3:BC:8C:5E:B4
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/cSeRW18cQBHpdm5oZrNGw7yMXrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.206.0/23
94.176.184.0/23
185.11.232.0/22
185.59.96.0/22
185.91.148.0/22
IPv6:
2a03:7e40::-2a03:7e40:5fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a8:50:da:76:a4:32:7d:fe:4b:b1:26:bd:e8:0f:ce:5d:fb:71:
e9:7f:f5:7b:22:97:c9:cb:2c:a4:bc:15:9b:6c:d3:09:d7:3e:
55:aa:3b:45:f3:7a:62:f9:9d:3b:c8:e5:61:0d:06:df:da:20:
4d:44:b2:39:a6:e6:c6:a1:32:79:26:c0:76:02:46:e0:cf:f1:
ab:eb:0a:a6:1a:5c:97:2f:a3:23:7e:65:ac:7f:22:6f:e5:c7:
8d:8a:93:e0:87:8e:0e:c4:f1:1d:c2:ea:61:27:e4:7f:fc:8a:
e5:e6:71:1b:f6:0f:b7:f9:39:d4:75:49:e6:6d:c9:2b:a1:00:
25:ac:a3:c6:c7:45:0d:4a:dc:ff:4d:66:6c:86:ce:5d:c4:17:
c4:25:d7:07:71:48:b7:82:f7:46:03:4f:40:2d:33:ec:a7:67:
1d:3d:2d:66:55:db:47:ac:1e:23:1a:2f:7b:cf:13:2c:9d:f2:
ad:91:97:ea:62:10:53:68:e5:db:96:7a:54:45:a9:d3:70:87:
15:c8:df:87:4e:02:80:0d:ce:62:cf:6b:d5:6f:62:76:65:4a:
d0:e4:b5:ff:c0:5e:c7:72:10:c0:77:2f:aa:83:7c:77:00:a5:
02:ae:e4:59:56:c1:02:71:87:45:25:9a:e9:fc:a0:86:ce:d0:
93:b7:ba:62
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYlzNz4e4rooUOs8LiWgMQ/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjMwNzIwMTIxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTI3OTE1YjVmMWM0MDExZTk3NjZlNjg2NmIzNDZjM2JjOGM1ZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQKsH1xp55iwTOF+76EHcxASKrQv
bJih0LV87s2ZqgJqdXepSTHzuRXoDZwf7HPLB0GxYbgRbstoMU6I54SGu3dW3/vs
kYLWJ4j0/V6GxHxFUO/bnCeyzl613Gvk2R2GZKQfOA5jMSeZm3ZIeXk+1mWj11Bs
mw6gb4bdz1944lnXmm/GT/etb5gx2np6xCflQxSaB0XoLq4FHkGdfMhDNtysEWx3
6JZeG8vGQAcm/WtByt0IlviwnORwKXvMmd/HCImUYWt8hglKXXRZuLSmBIiLs4tY
qLmLVszWVyx6N1/+877FfO2b9wnUc+QT10eLD/aGf3pZM0O1vFIXI9gfXwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFHEnkVtfHEAR6XZuaGazRsO8jF60MB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEvY1NlUlcxOGNRQkhwZG01b1pyTkd3N3lNWHJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAkBAIAATAeAwQBWSPOAwQB
XrC4AwQCuQvoAwQCuTtgAwQCuVuUMBcEAgACMBEwDwMFBioDfkADBgUqA35AQDAN
BgkqhkiG9w0BAQsFAAOCAQEAqFDadqQyff5LsSa96A/OXftx6X/1eyKXycsspLwV
m2zTCdc+Vao7RfN6YvmdO8jlYQ0G39ogTUSyOabmxqEyeSbAdgJG4M/xq+sKphpc
ly+jI35lrH8ib+XHjYqT4IeODsTxHcLqYSfkf/yK5eZxG/YPt/k51HVJ5m3JK6EA
JayjxsdFDUrc/01mbIbOXcQXxCXXB3FIt4L3RgNPQC0z7KdnHT0tZlXbR6weIxov
e88TLJ3yrZGX6mIQU2jl25Z6VEWp03CHFcjfh04CgA3OYs9r1W9idmVK0OS1/8Be
x3IQwHcvqoN8dwClAq7kWVbBAnGHRSWa6fyghs7Qk7e6Yg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:39 2025 by rpki-client