Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/kYXdRbaj0UT-xGHKzfgT33D1EKE.roa
File: kYXdRbaj0UT-xGHKzfgT33D1EKE.roa (raw, json)
Hash identifier: B5t5RvdQZ74OUCrbSyEJuABQTsTR1tY1mfpLmDt/yFk=
Subject key identifier: 91:85:DD:45:B6:A3:D1:44:FE:C4:61:CA:CD:F8:13:DF:70:F5:10:A1
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 0189CFA7831FFFE67BE05D17A080FA19DCF6
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/kYXdRbaj0UT-xGHKzfgT33D1EKE.roa
Signing time: Mon 07 Aug 2023 11:00:09 +0000
ROA not before: Mon 07 Aug 2023 11:00:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201565
IP address blocks: 185.11.232.0/22 maxlen: 22
185.91.151.0/24 maxlen: 24
185.91.150.0/23 maxlen: 24
185.91.150.0/24 maxlen: 24
185.91.149.0/24 maxlen: 24
185.91.148.0/24 maxlen: 24
94.176.185.0/24 maxlen: 24
94.176.184.0/24 maxlen: 24
185.59.96.0/22 maxlen: 22
89.35.206.0/24 maxlen: 24
89.35.207.0/24 maxlen: 24
2a03:7e40:5000::/36 maxlen: 36
2a03:7e40:4000::/36 maxlen: 36
2a03:7e40:2000::/36 maxlen: 36
2a03:7e40:3000::/36 maxlen: 36
2a03:7e40:1000::/36 maxlen: 36
2a03:7e40::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:a7:83:1f:ff:e6:7b:e0:5d:17:a0:80:fa:19:dc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Aug 7 11:00:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9185dd45b6a3d144fec461cacdf813df70f510a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:de:e6:6d:07:82:1a:02:23:7f:42:1f:48:
7e:1f:09:f1:b6:a3:6f:2c:67:a1:83:fe:e4:16:a9:
8a:81:7e:68:84:f5:62:eb:6d:b8:7f:4c:2f:93:17:
8b:61:2e:52:72:9d:6c:88:19:03:69:3d:11:12:6b:
06:3d:f4:cb:38:91:a6:b6:54:dd:77:6c:12:27:6a:
05:fe:56:8c:9a:00:f1:24:9e:fd:2b:67:e9:1b:14:
56:ed:e3:de:f5:3e:4e:32:16:3a:82:7e:7f:32:b7:
98:84:1f:9e:3f:9d:7e:22:fb:3a:5d:92:8e:cb:00:
17:06:47:a7:c0:72:0f:56:a2:55:53:3d:f8:b4:3e:
79:f5:ee:b3:11:95:47:de:f2:da:78:ce:41:e3:0f:
81:88:f0:d4:a8:53:3c:fe:99:94:e5:bb:63:a1:96:
b8:eb:24:68:0d:80:c7:1d:82:85:df:15:78:2f:d9:
c7:76:6b:93:25:27:da:bd:a0:b8:eb:1f:16:57:14:
0d:c0:b0:b1:9e:98:35:de:d2:90:57:b4:55:16:9a:
df:e6:93:9a:5f:e1:9d:ce:e7:7c:06:e1:9f:f2:ff:
fd:62:95:c8:e1:fc:ae:b1:4e:1b:eb:51:60:4b:e9:
54:68:3f:aa:6a:48:3c:f2:ed:f8:f3:d8:01:32:96:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:DD:45:B6:A3:D1:44:FE:C4:61:CA:CD:F8:13:DF:70:F5:10:A1
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/kYXdRbaj0UT-xGHKzfgT33D1EKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.206.0/23
94.176.184.0/23
185.11.232.0/22
185.59.96.0/22
185.91.148.0/22
IPv6:
2a03:7e40::-2a03:7e40:5fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:ff:69:af:19:04:28:b4:f2:89:07:5a:e8:f9:94:dd:fa:a6:
dd:68:6b:87:1d:2d:15:f4:37:95:0a:8f:07:12:1a:cf:c8:c6:
2e:e5:a3:9b:53:be:19:56:19:52:90:df:71:1d:0d:da:b2:6a:
5d:da:0a:9c:00:97:66:c2:52:f0:9e:ae:7c:ef:57:9d:cc:2f:
bf:3e:eb:65:93:71:59:32:2e:ea:48:dc:8d:07:17:2b:85:ed:
d7:fe:40:27:ae:c1:9c:ba:be:26:5c:d1:41:ec:70:e6:b2:0e:
5a:78:76:7d:05:f0:31:1f:ff:42:1e:2e:14:fe:dc:b0:29:13:
6e:c5:2c:40:6a:eb:d3:bf:3f:ae:4f:c4:69:b9:02:29:66:3c:
43:ac:69:18:23:20:e9:d3:79:12:17:00:75:8c:69:2c:8c:73:
ff:6a:4d:fb:34:34:1f:9e:9e:bb:59:cb:a5:d7:4a:23:65:9f:
b5:af:c9:e4:bd:a3:fc:36:6b:ae:96:cf:fc:25:00:9f:02:bf:
38:33:f0:ba:c3:67:c8:49:83:de:48:ae:d9:79:f4:ed:67:72:
36:51:ae:81:64:a0:08:89:49:e9:90:b8:aa:8f:c2:35:6a:f3:
98:60:c9:4b:4f:8a:23:c1:11:f3:b6:dd:95:1d:3e:31:a8:3a:
d6:ab:10:fd
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYnPp4Mf/+Z74F0XoID6Gdz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjMwODA3MTEwMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTg1ZGQ0NWI2YTNkMTQ0ZmVjNDYxY2FjZGY4MTNkZjcwZjUxMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qDe5m0HghoCI39CH0h+HwnxtqNv
LGehg/7kFqmKgX5ohPVi6224f0wvkxeLYS5Scp1siBkDaT0REmsGPfTLOJGmtlTd
d2wSJ2oF/laMmgDxJJ79K2fpGxRW7ePe9T5OMhY6gn5/MreYhB+eP51+Ivs6XZKO
ywAXBkenwHIPVqJVUz34tD559e6zEZVH3vLaeM5B4w+BiPDUqFM8/pmU5btjoZa4
6yRoDYDHHYKF3xV4L9nHdmuTJSfavaC46x8WVxQNwLCxnpg13tKQV7RVFprf5pOa
X+Gdzud8BuGf8v/9YpXI4fyusU4b61FgS+lUaD+qakg88u3489gBMpaR8QIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFJGF3UW2o9FE/sRhys34E99w9RChMB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEva1lYZFJiYWowVVQteEdIS3pmZ1QzM0QxRUtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAkBAIAATAeAwQBWSPOAwQB
XrC4AwQCuQvoAwQCuTtgAwQCuVuUMBcEAgACMBEwDwMFBioDfkADBgUqA35AQDAN
BgkqhkiG9w0BAQsFAAOCAQEAif9prxkEKLTyiQda6PmU3fqm3Whrhx0tFfQ3lQqP
BxIaz8jGLuWjm1O+GVYZUpDfcR0N2rJqXdoKnACXZsJS8J6ufO9Xncwvvz7rZZNx
WTIu6kjcjQcXK4Xt1/5AJ67BnLq+JlzRQexw5rIOWnh2fQXwMR//Qh4uFP7csCkT
bsUsQGrr078/rk/EabkCKWY8Q6xpGCMg6dN5EhcAdYxpLIxz/2pN+zQ0H56eu1nL
pddKI2Wfta/J5L2j/DZrrpbP/CUAnwK/ODPwusNnyEmD3kiu2Xn07WdyNlGugWSg
CIlJ6ZC4qo/CNWrzmGDJS0+KI8ER87bdlR0+Mag61qsQ/Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:52 2025 by rpki-client