Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/jns0Bx1h-ktO9v5lAdjAPiQ9qmE.roa
File: jns0Bx1h-ktO9v5lAdjAPiQ9qmE.roa (raw, json)
Hash identifier: U/CCPwn2klOs3xpMJQ2e8Ra5+DaGtjXUuUfeo3CkQcc=
Subject key identifier: 8E:7B:34:07:1D:61:FA:4B:4E:F6:FE:65:01:D8:C0:3E:24:3D:AA:61
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 018BA43BABDF460DB0C374722698D2F42377
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/jns0Bx1h-ktO9v5lAdjAPiQ9qmE.roa
Signing time: Mon 06 Nov 2023 10:44:15 +0000
ROA not before: Mon 06 Nov 2023 10:44:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35434
IP address blocks: 195.82.188.0/22 maxlen: 22
83.230.32.0/20 maxlen: 20
83.230.48.0/22 maxlen: 22
213.227.72.0/22 maxlen: 22
212.106.138.0/23 maxlen: 23
83.230.0.0/19 maxlen: 19
212.106.160.0/21 maxlen: 21
195.82.160.0/21 maxlen: 21
195.82.172.0/23 maxlen: 23
195.82.168.0/22 maxlen: 22
195.82.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:3b:ab:df:46:0d:b0:c3:74:72:26:98:d2:f4:23:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Nov 6 10:44:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e7b34071d61fa4b4ef6fe6501d8c03e243daa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:68:43:38:0c:29:32:d4:37:6b:ad:f1:d7:
41:a6:f7:4d:9f:8a:41:5a:47:cc:e5:00:d7:b8:48:
44:3f:64:8a:39:5a:83:bc:4a:66:17:44:a9:aa:26:
08:9b:5d:4e:a4:9e:a6:ca:fa:05:6e:dc:94:25:e2:
40:d8:0f:14:ce:4d:8a:d8:8e:65:6f:cf:a3:8d:90:
4d:03:4f:27:9a:44:c0:7d:0c:16:db:65:68:59:0a:
4e:9c:09:ca:67:01:83:f2:ac:81:e0:53:b6:21:3c:
fa:32:f2:35:e5:a5:7b:fb:f4:a6:a7:a5:89:fa:9e:
ed:9e:76:7a:9b:16:19:59:38:4e:8b:e4:5f:56:49:
89:2a:4b:06:57:72:90:21:46:0d:38:d2:8b:f3:d2:
a8:72:31:6c:2d:6b:87:e4:19:4e:f8:27:67:ff:c6:
ad:5b:70:ec:4b:70:8f:e7:bf:d0:3d:74:f1:9b:00:
6b:60:85:e5:6e:15:71:38:21:4b:48:27:53:0e:31:
90:a1:f9:97:a2:a3:92:2a:54:1b:2f:d3:4e:2d:68:
86:40:d9:34:4c:24:5c:ff:9a:7d:8b:cf:91:b2:c2:
a7:1e:f6:26:44:7a:cd:6f:9e:f7:aa:5b:28:0a:07:
bd:7a:12:f0:30:0c:fb:d2:9f:fc:20:93:d4:34:85:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7B:34:07:1D:61:FA:4B:4E:F6:FE:65:01:D8:C0:3E:24:3D:AA:61
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/jns0Bx1h-ktO9v5lAdjAPiQ9qmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.0.0-83.230.51.255
195.82.160.0-195.82.173.255
195.82.176.0/21
195.82.188.0/22
212.106.138.0/23
212.106.160.0/21
213.227.72.0/22
Signature Algorithm: sha256WithRSAEncryption
70:bb:ed:7a:b3:ba:c0:a3:69:de:02:0d:ff:96:55:db:bc:a7:
0b:e4:39:cb:6a:72:7a:52:12:95:6f:ad:d7:82:40:01:90:bf:
19:30:5b:3b:26:c6:16:b2:b3:26:4c:4e:d6:a8:89:c9:db:b2:
8b:c9:73:74:83:47:92:01:cf:d0:c4:67:18:cd:a3:83:22:1b:
a5:ad:cc:0f:7f:99:da:d7:59:b9:95:3b:4b:a2:19:e4:ab:d4:
d5:dc:5b:80:42:c5:4a:1f:51:9a:00:70:45:9e:a9:9f:e8:75:
a3:41:27:cc:cc:64:bc:ad:47:4f:9a:3c:09:72:7c:cf:1d:c5:
9f:d1:73:27:d4:6f:1a:32:a4:29:b7:87:8b:a0:19:4e:8b:bc:
c2:1e:58:bc:3a:34:73:63:d4:0e:8c:65:6a:22:f1:b7:2d:0c:
58:bd:04:60:a1:73:7d:35:b9:59:46:b6:24:55:53:13:7b:c6:
eb:d7:77:c2:d9:77:ae:d1:bd:1d:3a:ae:fb:ec:76:3b:7d:9a:
f3:81:a5:12:16:ff:08:df:5e:8d:ad:01:a1:6b:ec:1b:36:9a:
19:33:e3:8f:b1:fd:71:f9:31:c5:18:68:40:ee:dc:87:26:d1:
e7:74:6b:cf:c7:40:29:ff:24:41:06:19:f6:7b:71:72:9f:cf:
0f:7e:51:50
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYukO6vfRg2ww3RyJpjS9CN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5
NmYzMmIwHhcNMjMxMTA2MTA0NDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTdiMzQwNzFkNjFmYTRiNGVmNmZlNjUwMWQ4YzAzZTI0M2RhYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr71oQzgMKTLUN2ut8ddBpvdNn4pB
WkfM5QDXuEhEP2SKOVqDvEpmF0SpqiYIm11OpJ6myvoFbtyUJeJA2A8Uzk2K2I5l
b8+jjZBNA08nmkTAfQwW22VoWQpOnAnKZwGD8qyB4FO2ITz6MvI15aV7+/Smp6WJ
+p7tnnZ6mxYZWThOi+RfVkmJKksGV3KQIUYNONKL89KocjFsLWuH5BlO+Cdn/8at
W3DsS3CP57/QPXTxmwBrYIXlbhVxOCFLSCdTDjGQofmXoqOSKlQbL9NOLWiGQNk0
TCRc/5p9i8+RssKnHvYmRHrNb573qlsoCge9ehLwMAz70p/8IJPUNIXWrwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFI57NAcdYfpLTvb+ZQHYwD4kPaphMB8GA1UdIwQY
MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt
ZDg3YWZmYjhiYzYxLzEvam5zMEJ4MWgta3RPOXY1bEFkakFQaVE5cW1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx
LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAATA5MAsDAwFT5gME
AlPmMDAMAwQFw1KgAwQBw1KsAwQDw1KwAwQCw1K8AwQB1GqKAwQD1GqgAwQC1eNI
MA0GCSqGSIb3DQEBCwUAA4IBAQBwu+16s7rAo2neAg3/llXbvKcL5DnLanJ6UhKV
b63XgkABkL8ZMFs7JsYWsrMmTE7WqInJ27KLyXN0g0eSAc/QxGcYzaODIhulrcwP
f5na11m5lTtLohnkq9TV3FuAQsVKH1GaAHBFnqmf6HWjQSfMzGS8rUdPmjwJcnzP
HcWf0XMn1G8aMqQpt4eLoBlOi7zCHli8OjRzY9QOjGVqIvG3LQxYvQRgoXN9NblZ
RrYkVVMTe8br13fC2Xeu0b0dOq777HY7fZrzgaUSFv8I316NrQGha+wbNpoZM+OP
sf1x+THFGGhA7tyHJtHndGvPx0Ap/yRBBhn2e3Fyn88PflFQ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:32 2025 by rpki-client