Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3WElHG54PkPz-Tn2hTM0dZLe3Hw.roa
File: 3WElHG54PkPz-Tn2hTM0dZLe3Hw.roa (raw, json)
Hash identifier: eRP0Io/1fvklwTocmRWPuvZnHoVOtnkcFs2B206kskw=
Subject key identifier: DD:61:25:1C:6E:78:3E:43:F3:F9:39:F6:85:33:34:75:92:DE:DC:7C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188EEBCE663B91C7EE940901753E820CB21
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3WElHG54PkPz-Tn2hTM0dZLe3Hw.roa
Signing time: Sat 24 Jun 2023 18:48:57 +0000
ROA not before: Sat 24 Jun 2023 18:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
37.153.158.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
89.46.42.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
45.88.14.0/23 maxlen: 23
77.81.88.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ee:bc:e6:63:b9:1c:7e:e9:40:90:17:53:e8:20:cb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 24 18:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd61251c6e783e43f3f939f68533347592dedc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:2b:0d:e9:54:f9:32:da:c9:f9:06:36:0b:
83:f7:72:d9:4e:f3:b1:20:9e:7a:cf:53:21:a4:79:
44:79:0e:4f:08:c7:1a:6f:2c:7e:84:82:6d:92:91:
be:54:9b:71:80:89:13:34:e6:24:c9:d0:95:3d:2b:
c1:b6:63:80:be:33:34:76:fb:a7:e0:a9:8b:6a:4a:
3e:7d:e5:32:43:14:d0:04:cd:6e:1c:36:03:d6:d6:
d8:1e:87:6b:62:ed:62:06:f2:7b:db:c2:59:49:ba:
8b:5a:a6:2c:8d:22:89:9e:98:6b:3a:76:a1:4d:24:
9a:f9:56:15:94:80:da:27:95:c0:e8:73:97:f1:a3:
78:bc:20:07:86:b8:35:4d:9c:87:9e:a5:09:ef:e2:
af:0a:28:fd:8e:36:fe:c7:a5:56:75:a1:00:6b:eb:
78:0d:12:45:1e:a7:be:e3:1c:84:8d:07:52:dd:04:
71:83:e7:26:85:b1:3a:99:83:4a:fe:d9:b1:13:aa:
79:3d:c9:f3:34:6a:58:3e:7d:e6:27:eb:02:b9:28:
5f:15:89:57:4f:f1:be:45:41:d6:23:b6:aa:03:20:
d5:21:ac:1c:7b:6c:63:1b:2a:41:a2:52:3a:8a:2f:
91:56:60:da:28:18:99:cc:a7:19:3f:9a:9a:24:c3:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:25:1C:6E:78:3E:43:F3:F9:39:F6:85:33:34:75:92:DE:DC:7C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3WElHG54PkPz-Tn2hTM0dZLe3Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.158.0/24
45.88.13.0-45.88.15.255
77.81.65.0/24
77.81.88.0/24
86.107.51.0/24
86.107.100.0/24
89.34.106.0/24
89.35.130.0/23
89.40.215.0/24
89.45.162.0/24
89.46.42.0/24
89.47.36.0/24
89.47.55.0/24
92.114.32.0/24
93.90.74.0/24
94.198.171.0/24
176.223.188.0/24
188.213.216.0/24
188.214.107.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:33:53:bb:3c:b5:cf:69:41:98:50:16:69:82:18:4c:cc:42:
1c:6f:ed:8a:60:07:de:80:43:85:ac:76:16:b3:60:c9:ba:be:
fc:08:a3:7a:1e:af:36:a6:92:cd:90:75:c1:b2:f8:5d:01:55:
d0:d0:0a:29:99:ea:bd:75:9a:e5:c9:08:22:1f:37:10:06:ba:
f8:48:c1:39:14:63:92:7c:1a:96:e7:ae:f9:82:df:74:89:43:
f8:58:95:3e:19:41:89:4a:2a:2f:eb:90:74:5f:8a:31:2a:61:
12:25:4d:52:03:50:bb:7b:c6:4a:31:28:3f:39:c1:f6:d9:a4:
ee:fe:c7:c7:c6:5d:e4:42:49:42:3a:74:2f:85:a0:b7:df:4c:
f2:ff:6c:92:e2:cc:09:1e:64:46:c0:7b:01:08:ec:0e:cf:8d:
c2:6c:01:c5:4c:38:e6:d0:6d:a8:a4:0c:98:a3:fb:67:df:46:
8f:a6:81:64:41:29:c4:c4:fa:f2:a7:a5:7c:6f:ff:4d:bd:af:
9c:0e:ce:11:ba:7a:c8:ce:a9:c9:2f:52:80:1c:ca:f2:de:48:
97:52:ba:e0:ec:03:d9:4d:3c:79:b2:d1:3e:a5:1f:6e:e6:22:
03:c0:75:53:52:2e:d9:94:ee:39:b0:01:0d:4c:69:81:71:e9:
9e:21:54:f0
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAYjuvOZjuRx+6UCQF1PoIMshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNjI0MTg0ODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDYxMjUxYzZlNzgzZTQzZjNmOTM5ZjY4NTMzMzQ3NTkyZGVkYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nQrDelU+TLayfkGNguD93LZTvOx
IJ56z1MhpHlEeQ5PCMcabyx+hIJtkpG+VJtxgIkTNOYkydCVPSvBtmOAvjM0dvun
4KmLako+feUyQxTQBM1uHDYD1tbYHodrYu1iBvJ728JZSbqLWqYsjSKJnphrOnah
TSSa+VYVlIDaJ5XA6HOX8aN4vCAHhrg1TZyHnqUJ7+KvCij9jjb+x6VWdaEAa+t4
DRJFHqe+4xyEjQdS3QRxg+cmhbE6mYNK/tmxE6p5PcnzNGpYPn3mJ+sCuShfFYlX
T/G+RUHWI7aqAyDVIawce2xjGypBolI6ii+RVmDaKBiZzKcZP5qaJMNPRwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFN1hJRxueD5D8/k59oUzNHWS3tx8MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvM1dFbEhHNTRQa1B6LVRuMmhUTTBkWkxlM0h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAAl
mZ4wDAMEAC1YDQMEBC1YAAMEAE1RQQMEAE1RWAMEAFZrMwMEAFZrZAMEAFkiagME
AVkjggMEAFko1wMEAFktogMEAFkuKgMEAFkvJAMEAFkvNwMEAFxyIAMEAF1aSgME
AF7GqwMEALDfvAMEALzV2AMEALzWawMEALzxiTANBgkqhkiG9w0BAQsFAAOCAQEA
XzNTuzy1z2lBmFAWaYIYTMxCHG/timAH3oBDhax2FrNgybq+/Aijeh6vNqaSzZB1
wbL4XQFV0NAKKZnqvXWa5ckIIh83EAa6+EjBORRjknwalueu+YLfdIlD+FiVPhlB
iUoqL+uQdF+KMSphEiVNUgNQu3vGSjEoPznB9tmk7v7Hx8Zd5EJJQjp0L4Wgt99M
8v9skuLMCR5kRsB7AQjsDs+NwmwBxUw45tBtqKQMmKP7Z99Gj6aBZEEpxMT68qel
fG//Tb2vnA7OEbp6yM6pyS9SgBzK8t5Il1K64OwD2U08ebLRPqUfbuYiA8B1U1Iu
2ZTuObABDUxpgXHpniFU8A==
-----END CERTIFICATE-----
Generated at Thu Mar 27 17:53:22 2025 by rpki-client