Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/JcrK7hgWTjrPl193jntJxzXdrfc.roa
File: JcrK7hgWTjrPl193jntJxzXdrfc.roa (raw, json)
Hash identifier: Bpz5cshqHXIzQ/cn15YsbBggsR22JeOXENyybxI+cCg=
Subject key identifier: 25:CA:CA:EE:18:16:4E:3A:CF:97:5F:77:8E:7B:49:C7:35:DD:AD:F7
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 01856C4A52DE5F55ED4CA2EC774787A9C381
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/JcrK7hgWTjrPl193jntJxzXdrfc.roa
Signing time: Sun 01 Jan 2023 07:44:48 +0000
ROA not before: Sun 01 Jan 2023 07:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35645
IP address blocks: 95.66.192.0/22 maxlen: 22
95.66.196.0/23 maxlen: 23
95.66.202.0/23 maxlen: 23
95.66.200.0/23 maxlen: 23
95.66.206.0/23 maxlen: 23
95.66.204.0/23 maxlen: 23
95.66.208.0/22 maxlen: 22
95.66.212.0/22 maxlen: 22
95.66.216.0/22 maxlen: 22
95.66.222.0/23 maxlen: 23
95.66.224.0/23 maxlen: 23
95.66.220.0/23 maxlen: 23
95.66.227.0/24 maxlen: 24
95.66.230.0/23 maxlen: 23
95.66.228.0/23 maxlen: 23
95.66.237.0/24 maxlen: 24
95.66.240.0/22 maxlen: 22
95.66.238.0/23 maxlen: 23
95.66.160.0/19 maxlen: 19
95.66.244.0/24 maxlen: 24
95.66.246.0/24 maxlen: 24
95.66.245.0/24 maxlen: 24
95.66.250.0/23 maxlen: 23
95.66.252.0/23 maxlen: 23
95.66.248.0/23 maxlen: 23
95.66.247.0/24 maxlen: 24
95.66.254.0/23 maxlen: 23
95.66.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:52:de:5f:55:ed:4c:a2:ec:77:47:87:a9:c3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Jan 1 07:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25cacaee18164e3acf975f778e7b49c735ddadf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:eb:3a:9c:d4:72:f9:3c:46:7c:ec:bd:77:
f7:14:39:6a:f9:47:32:66:f2:5c:07:52:59:10:90:
ac:7f:db:64:a5:4f:52:89:a6:ba:b0:e9:29:c4:8b:
51:bb:82:8e:98:e6:f7:03:44:3d:b5:f1:80:c4:9d:
68:3c:f0:63:93:5e:41:df:9a:ad:5a:b9:cf:32:89:
08:ed:60:f5:40:a2:86:de:04:0b:a4:84:f6:e6:d8:
ed:c0:c9:ec:d1:67:14:f0:ff:81:10:d5:e9:62:43:
c2:e0:ab:14:fc:51:16:09:dc:fd:07:a1:30:77:c5:
5e:ff:5d:38:06:ed:f2:f7:80:7b:7d:fa:06:4c:a5:
58:bb:c6:d9:13:82:c5:65:12:4d:75:a2:12:0a:38:
39:49:56:47:f4:24:69:df:fc:e6:be:4b:54:15:d7:
5f:29:4b:ce:da:28:01:85:a2:98:08:37:51:1d:bb:
ae:37:98:cb:15:aa:1a:72:a9:35:3c:20:6b:b2:01:
1b:87:67:22:ed:fe:db:d1:3e:d3:33:b4:7a:ca:85:
14:9c:f0:62:a0:d1:0b:7d:4f:3c:34:53:29:4e:ea:
2a:84:40:73:25:80:8f:c0:70:10:d8:a3:34:38:48:
6f:89:3d:a5:90:13:f5:06:e5:9b:a9:95:f4:54:74:
7c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CA:CA:EE:18:16:4E:3A:CF:97:5F:77:8E:7B:49:C7:35:DD:AD:F7
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/JcrK7hgWTjrPl193jntJxzXdrfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.128.0-95.66.197.255
95.66.200.0-95.66.225.255
95.66.227.0-95.66.231.255
95.66.237.0-95.66.255.255
Signature Algorithm: sha256WithRSAEncryption
89:6f:b8:71:55:3e:d5:18:b7:55:45:f7:a6:5e:a4:42:04:85:
cc:33:9c:4d:78:5f:48:60:f7:b9:dc:78:10:7b:25:cc:dd:f1:
7b:f8:db:6c:4d:a3:1f:49:7c:ac:7b:af:9b:e6:5d:3e:f5:b5:
1f:6f:48:90:e2:14:70:37:99:47:f4:b8:39:f6:0f:3f:27:91:
4d:1c:d0:ec:91:cc:fd:17:53:f0:5a:44:d8:34:81:c2:92:10:
8b:03:f0:e0:e9:21:3d:b8:9e:fd:5d:07:db:70:4b:60:ee:ed:
a9:7d:14:6f:c1:17:4a:12:dc:89:28:37:67:df:10:f7:54:73:
9e:eb:f0:1a:7f:6b:57:2b:cc:19:5e:0b:59:28:d8:c1:58:91:
c9:83:05:18:b2:ce:fc:73:75:63:48:2d:76:60:50:8b:5c:fe:
cd:32:99:10:64:9d:67:95:91:b3:7b:b9:bf:9b:f6:f1:85:b8:
dc:77:ec:8b:19:30:33:43:6b:56:36:52:e8:fb:f2:79:c7:20:
0d:a0:ed:66:18:4c:73:86:2e:a3:0e:9f:f9:4c:69:f1:61:73:
19:cd:25:c8:9c:26:90:7f:a0:35:f2:47:e0:32:bc:71:b8:2a:
d7:55:80:75:df:e0:6d:d5:a8:c8:dd:5d:cd:63:de:91:d2:47:
17:3e:5d:ba
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYVsSlLeX1XtTKLsd0eHqcOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNWM3MmVlNDIyYzYxNjY3ZTMwNTZkZTZiM2ZmY2UwMzQz
MDUxNzUwHhcNMjMwMTAxMDc0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWNhY2FlZTE4MTY0ZTNhY2Y5NzVmNzc4ZTdiNDljNzM1ZGRhZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EDrOpzUcvk8RnzsvXf3FDlq+Ucy
ZvJcB1JZEJCsf9tkpU9Siaa6sOkpxItRu4KOmOb3A0Q9tfGAxJ1oPPBjk15B35qt
WrnPMokI7WD1QKKG3gQLpIT25tjtwMns0WcU8P+BENXpYkPC4KsU/FEWCdz9B6Ew
d8Ve/104Bu3y94B7ffoGTKVYu8bZE4LFZRJNdaISCjg5SVZH9CRp3/zmvktUFddf
KUvO2igBhaKYCDdRHbuuN5jLFaoacqk1PCBrsgEbh2ci7f7b0T7TM7R6yoUUnPBi
oNELfU88NFMpTuoqhEBzJYCPwHAQ2KM0OEhviT2lkBP1BuWbqZX0VHR8qQIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFCXKyu4YFk46z5dfd457Scc13a33MB8GA1UdIwQY
MBaAFBxccu5CLGFmfjBW3ms//OA0MFF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGIt
MTI3OGE0MmUwOTJhLzEvSmNySzdoZ1dUanJQbDE5M2pudEp4elhkcmZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGItMTI3OGE0MmUwOTJh
LzEvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAATA3MAwDBAdfQoAD
BAFfQsQwDAMEA19CyAMEAV9C4DAMAwQAX0LjAwQDX0LgMAsDBABfQu0DAwBfQjAN
BgkqhkiG9w0BAQsFAAOCAQEAiW+4cVU+1Ri3VUX3pl6kQgSFzDOcTXhfSGD3udx4
EHslzN3xe/jbbE2jH0l8rHuvm+ZdPvW1H29IkOIUcDeZR/S4OfYPPyeRTRzQ7JHM
/RdT8FpE2DSBwpIQiwPw4OkhPbie/V0H23BLYO7tqX0Ub8EXShLciSg3Z98Q91Rz
nuvwGn9rVyvMGV4LWSjYwViRyYMFGLLO/HN1Y0gtdmBQi1z+zTKZEGSdZ5WRs3u5
v5v28YW43HfsixkwM0NrVjZS6PvyeccgDaDtZhhMc4Yuow6f+Uxp8WFzGc0lyJwm
kH+gNfJH4DK8cbgq11WAdd/gbdWoyN1dzWPekdJHFz5dug==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:58 2025 by rpki-client