Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/9V5EleMvMSYNhYM1BPyKyU0-0ak.roa
File: 9V5EleMvMSYNhYM1BPyKyU0-0ak.roa (raw, json)
Hash identifier: rBsek8O0m0tzi7pInfeVlGVyj3/kUwJll1UYO1ViSGM=
Subject key identifier: F5:5E:44:95:E3:2F:31:26:0D:85:83:35:04:FC:8A:C9:4D:3E:D1:A9
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 0185F368C643843ADAA1300C9FC1AF634827
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/9V5EleMvMSYNhYM1BPyKyU0-0ak.roa
Signing time: Fri 27 Jan 2023 13:26:47 +0000
ROA not before: Fri 27 Jan 2023 13:26:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 195.12.224.0/19 maxlen: 19
80.239.128.0/19 maxlen: 19
195.12.248.0/23 maxlen: 23
62.115.128.0/22 maxlen: 22
80.91.240.0/20 maxlen: 20
80.91.248.0/21 maxlen: 21
213.248.64.0/18 maxlen: 18
80.239.224.0/19 maxlen: 19
2.255.248.0/21 maxlen: 21
80.239.160.0/19 maxlen: 19
62.115.0.0/16 maxlen: 16
213.155.128.0/19 maxlen: 19
80.239.192.0/19 maxlen: 19
2.255.192.0/18 maxlen: 18
2001:2030::/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:68:c6:43:84:3a:da:a1:30:0c:9f:c1:af:63:48:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: Jan 27 13:26:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f55e4495e32f31260d85833504fc8ac94d3ed1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:1e:c2:7b:99:a8:ca:dd:57:7f:5e:dd:9c:
78:98:a3:00:ca:f4:40:18:ea:ce:08:9e:fc:0f:20:
2d:bf:ea:1d:f7:c9:52:b4:de:d4:3a:9a:23:8e:8c:
04:ce:10:c4:f4:9b:49:9f:62:af:8d:bd:95:24:91:
69:47:3d:93:c4:ba:dd:6a:52:74:ba:77:e9:27:2e:
65:c3:66:cb:9c:16:05:b7:50:4b:40:63:67:b1:27:
0a:61:4b:18:65:e2:2e:64:45:70:fd:3f:0d:58:82:
5d:5e:9f:85:5a:5d:b5:88:f1:79:d5:b1:0d:52:40:
16:52:d4:c1:2d:b4:45:2f:89:65:6c:53:47:12:1d:
2e:cb:4e:dc:d1:e8:6b:cd:aa:1e:9d:9b:55:d1:09:
21:30:ae:eb:29:0f:14:1b:80:e7:4b:c6:a5:9b:5f:
d8:b6:a7:b3:5d:2b:a7:95:27:aa:0c:17:20:87:ba:
fe:62:f8:32:80:86:93:00:39:88:1a:42:27:8d:99:
72:67:42:e2:11:26:b9:c4:e2:f7:1d:c7:5f:d9:3d:
a4:24:86:d5:72:0e:01:95:eb:b6:77:bf:15:70:79:
c7:05:9a:6d:d5:54:bf:70:41:65:69:85:da:4d:f7:
c8:cd:c7:59:ac:90:90:b7:2a:be:f6:5f:14:7f:3a:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5E:44:95:E3:2F:31:26:0D:85:83:35:04:FC:8A:C9:4D:3E:D1:A9
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/9V5EleMvMSYNhYM1BPyKyU0-0ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.255.192.0/18
62.115.0.0/16
80.91.240.0/20
80.239.128.0/17
195.12.224.0/19
213.155.128.0/19
213.248.64.0/18
IPv6:
2001:2030::/28
Signature Algorithm: sha256WithRSAEncryption
31:bb:58:ba:c1:f5:37:01:32:64:32:e0:17:4a:54:ef:89:a9:
0b:eb:3f:5b:ee:66:5d:30:98:80:0e:13:26:5e:85:8f:e5:c3:
4c:00:9c:fb:99:6c:2e:fe:92:cc:df:14:c7:b6:1b:77:0f:f2:
b1:59:ee:a3:ae:a7:20:e6:fa:28:91:13:48:f4:85:9a:86:d3:
1a:18:17:c6:8a:2d:df:15:1c:88:e7:eb:28:bf:17:fe:47:6d:
fc:9f:99:6b:c7:f0:34:18:0b:7b:77:61:eb:09:9b:62:51:58:
5e:ac:09:00:5a:b0:65:22:1d:66:79:36:0a:ff:e9:78:9a:06:
9f:27:1d:de:66:8b:ad:36:16:c0:4e:76:38:b0:9d:f5:32:76:
dd:66:8e:b0:32:1d:07:a2:51:51:53:bb:c3:b2:66:4a:12:ca:
4c:41:f8:60:47:6d:78:e3:b8:ce:9c:34:7d:12:4f:ca:0c:e8:
8d:39:5c:32:89:f9:82:c8:50:13:82:46:e1:f0:ff:06:9f:e5:
e7:c1:d0:0f:8d:a7:d9:0f:92:ee:59:6c:3e:57:b4:56:d9:7d:
ee:ba:dd:ea:d2:ee:d3:9a:73:99:aa:bd:32:b0:bc:2c:4a:16:
f4:b9:ae:7b:6e:76:d1:a4:c6:62:de:73:2e:1a:ff:28:26:1d:
db:2b:35:27
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYXzaMZDhDraoTAMn8GvY0gnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTBlZDkyZWM5NDMyMWRjYjIxOWQzN2YzOGQ5MDdlMTgz
MjQ0YmQwHhcNMjMwMTI3MTMyNjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTVlNDQ5NWUzMmYzMTI2MGQ4NTgzMzUwNGZjOGFjOTRkM2VkMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVUewnuZqMrdV39e3Zx4mKMAyvRA
GOrOCJ78DyAtv+od98lStN7UOpojjowEzhDE9JtJn2Kvjb2VJJFpRz2TxLrdalJ0
unfpJy5lw2bLnBYFt1BLQGNnsScKYUsYZeIuZEVw/T8NWIJdXp+FWl21iPF51bEN
UkAWUtTBLbRFL4llbFNHEh0uy07c0ehrzaoenZtV0QkhMK7rKQ8UG4DnS8alm1/Y
tqezXSunlSeqDBcgh7r+YvgygIaTADmIGkInjZlyZ0LiESa5xOL3Hcdf2T2kJIbV
cg4Bleu2d78VcHnHBZpt1VS/cEFlaYXaTffIzcdZrJCQtyq+9l8UfzppywIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFPVeRJXjLzEmDYWDNQT8islNPtGpMB8GA1UdIwQY
MBaAFPug7ZLslDIdyyGdN/ONkH4YMkS9MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02RHRrdXlVTWgzTElaMDM4NDJRZmhneVJMMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNTkzNDgyLWQ3NjItNDQwOS1iODUw
LTIwYzQ0YTgxZjk3Ny8xLzlWNUVsZU12TVNZTmhZTTFCUHlLeVUwLTBhay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvNTkzNDgyLWQ3NjItNDQwOS1iODUwLTIwYzQ0YTgxZjk3
Ny8xLzEtNkR0a3V5VU1oM0xJWjAzODQyUWZoZ3lSTDAuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwUQYIKwYBBQUHAQcBAf8EQjBAMC8EAgABMCkDBAYC/8AD
AwA+cwMEBFBb8AMEB1DvgAMEBcMM4AMEBdWbgAMEBtX4QDANBAIAAjAHAwUEIAEg
MDANBgkqhkiG9w0BAQsFAAOCAQEAMbtYusH1NwEyZDLgF0pU74mpC+s/W+5mXTCY
gA4TJl6Fj+XDTACc+5lsLv6SzN8Ux7Ybdw/ysVnuo66nIOb6KJETSPSFmobTGhgX
xoot3xUciOfrKL8X/kdt/J+Za8fwNBgLe3dh6wmbYlFYXqwJAFqwZSIdZnk2Cv/p
eJoGnycd3maLrTYWwE52OLCd9TJ23WaOsDIdB6JRUVO7w7JmShLKTEH4YEdteOO4
zpw0fRJPygzojTlcMon5gshQE4JG4fD/Bp/l58HQD42n2Q+S7llsPle0Vtl97rrd
6tLu05pzmaq9MrC8LEoW9Lmue2520aTGYt5zLhr/KCYd2ys1Jw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:44 2025 by rpki-client