Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/IJu009NyZcCP0hkMK-LkJvZBEmE.roa
File: IJu009NyZcCP0hkMK-LkJvZBEmE.roa (raw, json)
Hash identifier: P3SkPCLRvnlS2xZcypYp1bH1dBJ8oNM1Vad6IIVYMbk=
Subject key identifier: 20:9B:B4:D3:D3:72:65:C0:8F:D2:19:0C:2B:E2:E4:26:F6:41:12:61
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01856E6F9D708A1009C7D729BDBAC8291B65
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/IJu009NyZcCP0hkMK-LkJvZBEmE.roa
Signing time: Sun 01 Jan 2023 17:44:46 +0000
ROA not before: Sun 01 Jan 2023 17:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47330
IP address blocks: 188.213.69.0/24 maxlen: 24
188.213.66.0/24 maxlen: 24
188.213.67.0/24 maxlen: 24
188.213.68.0/24 maxlen: 24
188.213.65.0/24 maxlen: 24
37.156.28.0/23 maxlen: 23
92.114.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:9d:70:8a:10:09:c7:d7:29:bd:ba:c8:29:1b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 1 17:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=209bb4d3d37265c08fd2190c2be2e426f6411261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:32:62:6a:4c:ff:32:0c:6a:ad:45:d6:8a:
3c:e8:30:72:5f:ec:53:c6:e4:38:57:b3:55:53:d1:
9e:1c:70:05:72:79:c0:a2:b5:df:63:37:50:4d:69:
29:2b:95:30:8b:bf:7e:50:dd:93:a0:97:0a:05:0c:
3c:a8:53:e0:35:7e:04:6e:fd:7e:74:44:75:c1:f4:
35:37:a0:b5:22:c2:53:c5:1d:60:ab:05:01:bb:88:
ce:d6:2b:a8:b1:c1:59:0c:53:83:63:26:82:55:a7:
9b:f2:48:c2:f6:6f:7e:82:21:91:c4:df:cf:f3:40:
c5:21:5e:64:5a:0f:9e:65:1a:97:a1:82:3a:21:05:
c6:60:a6:ba:43:2f:66:99:72:4e:e5:01:9a:8d:5d:
ae:b0:4a:59:1a:7f:72:c9:19:70:c1:99:8b:2f:b1:
57:76:22:84:3d:83:c4:02:c7:ca:f7:13:78:99:08:
a2:e5:ee:ce:24:74:6f:85:34:a2:a5:8f:d3:30:65:
e9:29:51:ee:f9:0c:31:fd:5d:8f:98:34:22:39:be:
0c:17:fe:37:6e:3c:1d:76:1e:03:99:72:00:8e:5d:
00:fd:4d:36:d5:0d:fe:5f:05:8b:49:0c:f0:a3:cd:
8d:58:13:3a:c7:7f:69:78:56:f5:9a:40:2f:18:d1:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9B:B4:D3:D3:72:65:C0:8F:D2:19:0C:2B:E2:E4:26:F6:41:12:61
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/IJu009NyZcCP0hkMK-LkJvZBEmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.28.0/23
92.114.16.0/22
188.213.65.0-188.213.69.255
Signature Algorithm: sha256WithRSAEncryption
41:55:51:a4:10:26:26:aa:7e:4e:9f:5d:85:67:ca:33:f8:9b:
2d:f7:ce:8a:f4:c3:04:e3:05:46:bb:47:24:96:55:90:73:12:
0b:f8:20:78:47:91:9b:b8:dd:8c:da:84:07:9f:63:73:b6:ab:
28:53:13:96:68:67:1a:b3:a4:8a:8b:7c:91:94:70:c7:09:cd:
1c:d3:c5:bb:c7:8c:2a:47:65:1d:2e:eb:5a:78:43:3e:18:cb:
9a:69:b7:4c:1f:76:7c:2e:68:68:43:4a:db:d8:c2:7f:5b:6d:
9f:f0:53:90:28:15:f0:d6:92:c2:6c:b2:cb:ea:74:a1:58:48:
9d:3e:53:36:d8:81:70:d3:99:c4:ea:d7:94:97:8c:e0:56:b9:
da:50:c1:8e:0f:59:c0:de:3e:15:5a:55:25:d2:2a:75:fc:b7:
cb:86:a0:7e:64:a2:5c:94:3f:f4:e5:8a:76:36:ac:be:8b:86:
28:7b:c4:b7:5b:cd:2b:1f:5f:8a:43:8f:22:e0:31:fa:ed:09:
c3:94:18:85:6d:1b:9f:a8:7e:ba:13:33:30:30:51:fe:61:d1:
f2:e1:81:98:1a:a1:95:69:3d:1a:68:53:57:0b:66:bc:1d:e0:
7b:2f:0d:fb:1d:e6:ff:fc:a6:15:75:2b:37:d9:8c:f7:45:0d:
38:d8:63:0b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVub51wihAJx9cpvbrIKRtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjMwMTAxMTc0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDliYjRkM2QzNzI2NWMwOGZkMjE5MGMyYmUyZTQyNmY2NDExMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsgyYmpM/zIMaq1F1oo86DByX+xT
xuQ4V7NVU9GeHHAFcnnAorXfYzdQTWkpK5Uwi79+UN2ToJcKBQw8qFPgNX4Ebv1+
dER1wfQ1N6C1IsJTxR1gqwUBu4jO1iuoscFZDFODYyaCVaeb8kjC9m9+giGRxN/P
80DFIV5kWg+eZRqXoYI6IQXGYKa6Qy9mmXJO5QGajV2usEpZGn9yyRlwwZmLL7FX
diKEPYPEAsfK9xN4mQii5e7OJHRvhTSipY/TMGXpKVHu+Qwx/V2PmDQiOb4MF/43
bjwddh4DmXIAjl0A/U021Q3+XwWLSQzwo82NWBM6x39peFb1mkAvGNHNnQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFCCbtNPTcmXAj9IZDCvi5Cb2QRJhMB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvSUp1MDA5TnlaY0NQMGhrTUstTGtKdlpCRW1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBJZwcAwQC
XHIQMAwDBAC81UEDBAG81UQwDQYJKoZIhvcNAQELBQADggEBAEFVUaQQJiaqfk6f
XYVnyjP4my33zor0wwTjBUa7RySWVZBzEgv4IHhHkZu43YzahAefY3O2qyhTE5Zo
ZxqzpIqLfJGUcMcJzRzTxbvHjCpHZR0u61p4Qz4Yy5ppt0wfdnwuaGhDStvYwn9b
bZ/wU5AoFfDWksJsssvqdKFYSJ0+UzbYgXDTmcTq15SXjOBWudpQwY4PWcDePhVa
VSXSKnX8t8uGoH5kolyUP/TlinY2rL6Lhih7xLdbzSsfX4pDjyLgMfrtCcOUGIVt
G5+ofroTMzAwUf5h0fLhgZgaoZVpPRpoU1cLZrwd4HsvDfsd5v/8phV1KzfZjPdF
DTjYYws=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:37 2025 by rpki-client