Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8cFlOc1F2S8VCE3wcAq1A7HgbDI.roa
File: 8cFlOc1F2S8VCE3wcAq1A7HgbDI.roa (raw, json)
Hash identifier: z8dsXT2/+5XLzOW8nGARBk0/2S4AjVmcSjOqOxEuljU=
Subject key identifier: F1:C1:65:39:CD:45:D9:2F:15:08:4D:F0:70:0A:B5:03:B1:E0:6C:32
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28CD4257
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8cFlOc1F2S8VCE3wcAq1A7HgbDI.roa
Signing time: Tue 08 Feb 2022 11:15:20 +0000
ROA not before: Tue 08 Feb 2022 11:15:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197520
IP address blocks: 93.170.114.0/23 maxlen: 24
93.171.78.0/23 maxlen: 24
95.47.164.0/24 maxlen: 24
95.46.11.0/24 maxlen: 24
93.170.77.0/24 maxlen: 24
92.38.22.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684540503 (0x28cd4257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 8 11:15:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1c16539cd45d92f15084df0700ab503b1e06c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:09:bd:ed:f8:5f:6c:39:9a:89:69:b1:e5:
f2:ab:27:7e:dc:b6:52:49:41:d6:12:3c:85:91:5f:
17:cc:3b:20:0b:ad:d5:01:40:c6:98:91:d8:ce:57:
ce:ba:72:f8:78:75:8b:14:a9:b7:92:91:70:49:c9:
50:a4:cc:cd:75:28:aa:df:74:13:20:65:48:bb:ae:
c9:43:74:11:f8:e6:8f:ad:e0:48:7b:c1:e6:32:34:
6b:7d:13:e5:86:22:b4:f5:fc:f2:26:6e:52:ce:a3:
23:84:40:90:10:e8:49:dd:c1:b2:c0:90:65:e5:29:
1d:0e:6e:8a:29:c5:b9:6c:ae:27:b4:fd:d1:25:80:
7b:d0:46:77:f8:1b:8e:37:a0:b5:ae:ff:2b:3f:13:
a7:4f:fe:b7:2b:22:34:ac:f3:fd:5d:0f:85:bd:5c:
ff:2e:8e:87:4b:84:b6:9e:70:06:e3:27:65:b1:44:
dc:d7:b6:f8:30:6a:c6:5a:5c:e6:e6:98:8c:53:36:
0f:f1:90:1a:e3:69:a8:69:3d:8c:a8:c8:c5:d8:f6:
ba:7f:6e:67:60:dd:e8:c9:42:e2:6a:80:4f:d7:62:
dc:4a:a7:7d:f4:bc:05:15:63:34:d5:f1:03:72:d9:
d2:b6:1d:27:6e:a9:e0:00:43:23:97:aa:00:c2:73:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C1:65:39:CD:45:D9:2F:15:08:4D:F0:70:0A:B5:03:B1:E0:6C:32
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8cFlOc1F2S8VCE3wcAq1A7HgbDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.22.0/23
93.170.77.0/24
93.170.114.0/23
93.171.78.0/23
95.46.11.0/24
95.47.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2d:c6:a6:22:73:e6:81:70:bd:b2:d6:80:7f:d8:95:74:8e:
d9:ee:0d:94:d1:e9:96:7f:25:6e:23:a4:f7:07:e6:33:17:32:
52:af:a2:30:05:cf:7a:62:d1:f1:7e:37:a4:98:2e:20:20:4e:
45:04:45:92:19:26:35:e5:39:54:c9:92:ed:91:09:5b:49:3e:
ba:e9:62:3a:59:c8:9b:8c:ea:50:2f:c7:3f:0d:1d:7f:a4:d1:
18:01:e4:3b:cb:24:8f:db:67:b2:01:92:6c:e9:bb:9e:80:83:
00:c0:54:f8:17:6f:d9:3c:a4:08:0a:fe:8a:d2:df:40:b0:d7:
59:2d:b9:1c:bf:b2:f9:44:99:e1:9e:57:c2:22:22:6b:52:e4:
ef:08:59:ab:81:8f:62:32:fe:1e:05:e6:c4:01:3c:a2:b8:e4:
8e:ed:85:df:42:0c:46:36:19:48:06:4c:bf:d2:96:c3:31:49:
16:d0:64:95:fd:a3:38:e4:ae:6e:9f:66:4c:0b:15:dd:14:a6:
f3:dd:94:50:a4:9d:43:e6:c1:f6:3a:1a:44:1f:83:7d:fa:00:
96:94:8d:2f:c7:fe:18:8d:c1:49:34:37:ca:f8:6c:d9:06:5b:
d0:89:a3:58:c5:66:0f:c8:0b:48:dc:53:7a:2b:8d:85:6a:dc:
56:77:56:f2
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEKM1CVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDIw
ODExMTUyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjFjMTY1MzljZDQ1
ZDkyZjE1MDg0ZGYwNzAwYWI1MDNiMWUwNmMzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMT3Cb3t+F9sOZqJabHl8qsnfty2UklB1hI8hZFfF8w7IAut
1QFAxpiR2M5Xzrpy+Hh1ixSpt5KRcEnJUKTMzXUoqt90EyBlSLuuyUN0Efjmj63g
SHvB5jI0a30T5YYitPX88iZuUs6jI4RAkBDoSd3BssCQZeUpHQ5uiinFuWyuJ7T9
0SWAe9BGd/gbjjegta7/Kz8Tp0/+tysiNKzz/V0Phb1c/y6Oh0uEtp5wBuMnZbFE
3Ne2+DBqxlpc5uaYjFM2D/GQGuNpqGk9jKjIxdj2un9uZ2Dd6MlC4mqAT9di3Eqn
ffS8BRVjNNXxA3LZ0rYdJ26p4ABDI5eqAMJzSQkCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBTxwWU5zUXZLxUITfBwCrUDseBsMjAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
LzhjRmxPYzFGMlM4VkNFM3djQXExQTdIZ2JESS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAVwmFgMEAF2qTQMEAV2qcgMEAV2r
TgMEAF8uCwMEAF8vpDANBgkqhkiG9w0BAQsFAAOCAQEAbC3GpiJz5oFwvbLWgH/Y
lXSO2e4NlNHpln8lbiOk9wfmMxcyUq+iMAXPemLR8X43pJguICBORQRFkhkmNeU5
VMmS7ZEJW0k+uuliOlnIm4zqUC/HPw0df6TRGAHkO8skj9tnsgGSbOm7noCDAMBU
+Bdv2TykCAr+itLfQLDXWS25HL+y+USZ4Z5XwiIia1Lk7whZq4GPYjL+HgXmxAE8
orjkju2F30IMRjYZSAZMv9KWwzFJFtBklf2jOOSubp9mTAsV3RSm892UUKSdQ+bB
9joaRB+DffoAlpSNL8f+GI3BSTQ3yvhs2QZb0ImjWMVmD8gLSNxTeiuNhWrcVndW
8g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:12 2025 by rpki-client