Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/p2uxojuS8a9eW6ISm3pNvhATIlU.roa
File: p2uxojuS8a9eW6ISm3pNvhATIlU.roa (raw, json)
Hash identifier: 2LmuFl3YwtQtzgyzHh5TghFgdUROd2nQdcsdYlExS8E=
Subject key identifier: A7:6B:B1:A2:3B:92:F1:AF:5E:5B:A2:12:9B:7A:4D:BE:10:13:22:55
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 018A45FC693F2B7DE89D25C17867DEBF6BAA
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/p2uxojuS8a9eW6ISm3pNvhATIlU.roa
Signing time: Wed 30 Aug 2023 10:28:04 +0000
ROA not before: Wed 30 Aug 2023 10:28:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5377
IP address blocks: 77.70.240.0/20 maxlen: 20
193.220.0.0/16 maxlen: 16
193.220.220.0/22 maxlen: 22
193.220.224.0/20 maxlen: 20
77.70.254.0/24 maxlen: 24
77.70.255.0/24 maxlen: 24
193.220.240.0/20 maxlen: 24
77.70.192.0/19 maxlen: 19
193.220.165.0/24 maxlen: 24
77.70.207.0/24 maxlen: 24
77.70.144.0/20 maxlen: 20
77.70.160.0/20 maxlen: 20
77.70.176.0/22 maxlen: 22
77.70.184.0/21 maxlen: 21
193.219.196.0/24 maxlen: 24
193.219.192.0/18 maxlen: 18
77.70.181.0/24 maxlen: 24
193.220.88.0/21 maxlen: 21
77.70.128.0/19 maxlen: 19
77.70.128.0/17 maxlen: 17
2a02:6600:f001::/48 maxlen: 48
2a02:6600::/29 maxlen: 32
2a02:6600:f000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:fc:69:3f:2b:7d:e8:9d:25:c1:78:67:de:bf:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Aug 30 10:28:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a76bb1a23b92f1af5e5ba2129b7a4dbe10132255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:55:05:2d:9a:89:ef:d0:a7:89:23:0a:f0:ad:
58:cd:d1:58:2a:88:22:aa:93:ee:2e:fb:8e:47:84:
4a:c1:e5:d6:49:a7:9d:72:0e:bb:bf:d0:58:fb:d1:
36:62:51:17:dd:68:69:81:d1:3c:9f:da:2b:3b:be:
2a:ff:8a:ee:48:52:99:49:45:98:c8:28:a8:47:ed:
34:ed:80:63:ea:da:31:7f:f8:8d:02:a2:36:06:16:
80:43:5e:e3:de:f3:c7:c0:d9:09:6e:67:bd:e9:f2:
5e:6d:45:1e:1e:0b:cd:8a:c3:b1:e9:d9:97:9a:fb:
f4:59:96:f5:eb:99:8e:d7:34:83:db:92:71:a0:1b:
75:78:04:ed:cc:50:d8:0d:89:8e:d4:01:e4:6e:ec:
2d:5e:31:5e:20:92:59:5d:c2:58:a3:9e:ff:f1:29:
68:bc:d5:5f:f4:54:95:78:03:7d:5a:16:42:e7:a3:
f0:6a:7b:1c:9d:87:88:da:7e:61:d1:09:cc:27:a9:
16:7d:cc:33:a6:73:88:1b:58:e1:e2:50:81:cd:a8:
ff:17:ad:b7:05:3e:57:80:83:f3:64:0d:11:60:4a:
08:51:0f:11:05:53:53:64:27:fc:d4:f4:53:42:1d:
ca:78:30:e1:e2:11:4c:21:e4:11:ea:81:8f:f7:3f:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6B:B1:A2:3B:92:F1:AF:5E:5B:A2:12:9B:7A:4D:BE:10:13:22:55
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/p2uxojuS8a9eW6ISm3pNvhATIlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.70.128.0/17
193.219.192.0-193.220.255.255
IPv6:
2a02:6600::/29
Signature Algorithm: sha256WithRSAEncryption
00:6d:29:28:cb:24:cd:bb:b8:8f:33:47:e7:09:7f:41:2d:d0:
a3:57:bc:da:9f:8e:7d:99:37:74:7e:f9:5b:d1:a5:b2:8a:4d:
0d:bb:d4:c4:82:28:c1:15:9a:dc:7d:09:5e:b6:9d:56:c9:2d:
8b:d6:06:05:ca:ca:c4:22:eb:8a:2b:d6:ea:0c:9e:33:4c:ff:
f7:0e:c4:cf:cf:8a:ca:62:cc:07:4a:f3:41:f8:86:af:54:8a:
22:3c:40:2d:57:b7:89:8c:d5:69:c1:9c:c1:c1:11:3b:26:0f:
fb:8a:23:ca:21:98:6b:1d:91:81:bf:9a:9d:ec:84:a7:dd:a1:
8c:f4:d9:c3:3f:1a:be:82:52:57:d6:e3:b4:6d:b8:1d:2a:48:
18:e3:19:a2:14:28:98:fb:36:0b:58:4c:4b:c4:82:33:12:dd:
d6:b6:8e:5e:45:d8:d1:a2:5e:5b:80:27:b7:89:85:d9:18:f5:
2d:e9:a4:59:20:26:b2:ad:30:c5:81:73:ae:42:72:c7:63:36:
3a:46:c5:b2:57:6e:d7:68:00:f7:60:e8:a5:4c:56:fc:1b:fb:
65:fd:82:b0:86:22:28:c2:9a:ea:c6:d5:6b:1a:98:9c:86:e9:
f4:c7:13:1c:5f:27:0c:b7:bb:dc:0f:72:be:71:6c:3a:3f:19:
8d:a7:be:d0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYpF/Gk/K33onSXBeGfev2uqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy
NWMxMDgwHhcNMjMwODMwMTAyODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzZiYjFhMjNiOTJmMWFmNWU1YmEyMTI5YjdhNGRiZTEwMTMyMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFUFLZqJ79CniSMK8K1YzdFYKogi
qpPuLvuOR4RKweXWSaedcg67v9BY+9E2YlEX3WhpgdE8n9orO74q/4ruSFKZSUWY
yCioR+007YBj6toxf/iNAqI2BhaAQ17j3vPHwNkJbme96fJebUUeHgvNisOx6dmX
mvv0WZb165mO1zSD25JxoBt1eATtzFDYDYmO1AHkbuwtXjFeIJJZXcJYo57/8Slo
vNVf9FSVeAN9WhZC56PwanscnYeI2n5h0QnMJ6kWfcwzpnOIG1jh4lCBzaj/F623
BT5XgIPzZA0RYEoIUQ8RBVNTZCf81PRTQh3KeDDh4hFMIeQR6oGP9z+AiQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKdrsaI7kvGvXluiEpt6Tb4QEyJVMB8GA1UdIwQY
MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt
MDQwMTI3MTAyMjA5LzEvcDJ1eG9qdVM4YTllVzZJU20zcE52aEFUSWxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5
LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAZBAIAATATAwQHTUaAMAsD
BAbB28ADAwDB3DANBAIAAjAHAwUDKgJmADANBgkqhkiG9w0BAQsFAAOCAQEAAG0p
KMskzbu4jzNH5wl/QS3Qo1e82p+OfZk3dH75W9GlsopNDbvUxIIowRWa3H0JXrad
Vskti9YGBcrKxCLriivW6gyeM0z/9w7Ez8+KymLMB0rzQfiGr1SKIjxALVe3iYzV
acGcwcEROyYP+4ojyiGYax2Rgb+aneyEp92hjPTZwz8avoJSV9bjtG24HSpIGOMZ
ohQomPs2C1hMS8SCMxLd1raOXkXY0aJeW4Ant4mF2Rj1LemkWSAmsq0wxYFzrkJy
x2M2OkbFsldu12gA92DopUxW/Bv7Zf2CsIYiKMKa6sbVaxqYnIbp9McTHF8nDLe7
3A9yvnFsOj8Zjae+0A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:35:25 2025 by rpki-client