Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/gs9HHmlzdaWW1HyrlZARTTaAbtM.roa
File: gs9HHmlzdaWW1HyrlZARTTaAbtM.roa (raw, json)
Hash identifier: IrLQO0z+tTT52nyYw2Q6Xxzp2ZQQYs2bRMcCnZUN7cU=
Subject key identifier: 82:CF:47:1E:69:73:75:A5:96:D4:7C:AB:95:90:11:4D:36:80:6E:D3
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 37A94E11
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/gs9HHmlzdaWW1HyrlZARTTaAbtM.roa
Signing time: Sat 01 Jan 2022 09:04:13 +0000
ROA not before: Sat 01 Jan 2022 09:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12779
IP address blocks: 89.31.200.0/21 maxlen: 24
212.110.32.0/19 maxlen: 24
213.212.128.0/18 maxlen: 24
185.59.80.0/22 maxlen: 24
213.254.0.0/19 maxlen: 24
2001:1418::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933842449 (0x37a94e11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Jan 1 09:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82cf471e697375a596d47cab9590114d36806ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:49:e4:b8:11:6e:e2:ca:b1:b5:f1:27:20:
c2:5c:eb:6d:9f:21:98:a0:f9:c1:51:76:9e:e8:fa:
9c:42:7e:ff:b4:3a:0f:61:f1:f7:67:82:e6:72:3f:
01:fe:1d:db:9c:7a:ae:a2:24:18:32:83:47:dc:66:
55:ac:64:37:95:e0:b7:34:4e:54:d8:c3:21:37:de:
ad:54:e5:83:e7:bb:7f:13:09:61:e2:1d:ad:dd:4d:
74:6f:e0:41:e1:35:af:a2:27:be:b7:47:e3:81:da:
d1:fb:bb:9e:c6:8f:c3:7d:a0:46:fe:08:e9:08:77:
e6:21:a5:fc:9d:e5:75:ba:38:a3:62:87:64:45:c7:
1d:12:78:9f:d5:91:9c:d5:0b:8f:68:bf:13:69:bb:
3e:32:c3:43:3d:ef:b2:db:63:58:c6:ca:0a:54:30:
3d:da:de:c5:e4:af:6d:b9:71:e5:d1:0d:80:98:e8:
0e:d0:e6:9f:b8:cc:1b:1d:39:f9:98:9a:67:93:25:
3b:d1:9a:78:12:3e:08:27:9a:6f:3e:f1:5d:5e:09:
9a:4c:e1:9d:5b:64:9d:ed:4a:1a:84:37:c1:c6:6a:
00:2e:58:6c:52:b1:04:aa:77:c0:ed:06:6e:e4:3e:
b2:62:4f:1a:12:62:5c:8f:3e:c8:8d:d3:c8:75:e4:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CF:47:1E:69:73:75:A5:96:D4:7C:AB:95:90:11:4D:36:80:6E:D3
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/gs9HHmlzdaWW1HyrlZARTTaAbtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.200.0/21
185.59.80.0/22
212.110.32.0/19
213.212.128.0/18
213.254.0.0/19
IPv6:
2001:1418::/29
Signature Algorithm: sha256WithRSAEncryption
21:10:bc:86:e1:ec:0c:88:ba:94:68:d4:ed:7a:42:a7:ac:da:
ca:dc:74:32:75:cf:7a:8e:29:28:73:7f:e9:a7:1f:89:13:71:
7b:d9:3e:03:9d:2a:69:a7:83:bd:f7:cf:7a:7b:4f:86:c2:50:
b1:c8:18:44:34:23:53:55:4e:97:85:5c:ad:05:66:ee:2d:39:
24:30:54:2f:97:31:bc:f5:1c:10:a5:50:e7:e4:c8:13:22:71:
81:59:8c:32:cb:ae:83:15:7e:a4:93:1a:bd:da:4a:1e:e1:a8:
6d:f7:70:fb:d0:b8:ba:52:e1:3d:ba:c2:1b:92:6f:af:1e:09:
c4:3d:37:b9:b6:8b:f9:11:33:b8:0d:ba:12:20:80:88:94:15:
3d:a5:41:86:71:e0:da:e1:16:89:0b:ac:24:a4:a5:e0:d3:d6:
3f:08:14:4f:be:77:82:15:8a:cc:38:95:28:d9:23:6b:46:f0:
cd:e1:92:0e:75:8f:ba:fc:16:f2:aa:48:e7:7a:bf:3b:1a:f3:
f7:44:a2:4b:b5:8a:4a:4f:99:6d:1a:e4:6d:68:b6:e9:bb:bb:
f4:9d:19:c1:02:23:f0:85:f7:2c:7c:f7:5d:d8:c0:64:d4:9d:
22:5d:b7:6d:58:4a:93:ee:f2:96:bb:c2:a1:17:2c:5b:9a:d6:
9e:5a:a9:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEN6lOETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YmNlMDgzNDAwY2FmNjE2ZjM1MDIwMzI5YzhkNzZmM2M0YjgzOWE1MB4XDTIyMDEw
MTA5MDQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODJjZjQ3MWU2OTcz
NzVhNTk2ZDQ3Y2FiOTU5MDExNGQzNjgwNmVkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMyKSeS4EW7iyrG18ScgwlzrbZ8hmKD5wVF2nuj6nEJ+/7Q6
D2Hx92eC5nI/Af4d25x6rqIkGDKDR9xmVaxkN5XgtzROVNjDITferVTlg+e7fxMJ
YeIdrd1NdG/gQeE1r6InvrdH44Ha0fu7nsaPw32gRv4I6Qh35iGl/J3ldbo4o2KH
ZEXHHRJ4n9WRnNULj2i/E2m7PjLDQz3vsttjWMbKClQwPdrexeSvbblx5dENgJjo
DtDmn7jMGx05+ZiaZ5MlO9GaeBI+CCeabz7xXV4JmkzhnVtkne1KGoQ3wcZqAC5Y
bFKxBKp3wO0GbuQ+smJPGhJiXI8+yI3TyHXkKZ8CAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBSCz0ceaXN1pZbUfKuVkBFNNoBu0zAfBgNVHSMEGDAWgBRLzgg0AMr2FvNQ
IDKcjXbzxLg5pTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1M4NElOQURLOWhielVDQXluSTEyODhTNE9hVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNzdmZjJhLWRkNmItNDBjYS05OTdjLTgwYTdlYmE2ZjhlOS8x
L2dzOUhIbWx6ZGFXVzFIeXJsWkFSVFRhQWJ0TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NzdmZjJhLWRkNmItNDBjYS05OTdjLTgwYTdlYmE2ZjhlOS8xL1M4NElOQURLOWhi
elVDQXluSTEyODhTNE9hVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEA1kfyAMEArk7UAMEBdRuIAMEBtXU
gAMEBdX+ADANBAIAAjAHAwUDIAEUGDANBgkqhkiG9w0BAQsFAAOCAQEAIRC8huHs
DIi6lGjU7XpCp6zaytx0MnXPeo4pKHN/6acfiRNxe9k+A50qaaeDvffPentPhsJQ
scgYRDQjU1VOl4VcrQVm7i05JDBUL5cxvPUcEKVQ5+TIEyJxgVmMMsuugxV+pJMa
vdpKHuGobfdw+9C4ulLhPbrCG5Jvrx4JxD03ubaL+REzuA26EiCAiJQVPaVBhnHg
2uEWiQusJKSl4NPWPwgUT753ghWKzDiVKNkja0bwzeGSDnWPuvwW8qpI53q/Oxrz
90SiS7WKSk+ZbRrkbWi26bu79J0ZwQIj8IX3LHz3XdjAZNSdIl23bVhKk+7ylrvC
oRcsW5rWnlqp7Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:03 2025 by rpki-client