Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/KzJwXikjYDQ31qqS3RnZOB5shV8.roa
File: KzJwXikjYDQ31qqS3RnZOB5shV8.roa (raw, json)
Hash identifier: XxWbUtXVckSbj4mSL7XYPi+LIdqOoFwp2VlNj5wHBMw=
Subject key identifier: 2B:32:70:5E:29:23:60:34:37:D6:AA:92:DD:19:D9:38:1E:6C:85:5F
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018200EA481C4F4D4B3526FE0686CD8E84BB
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/KzJwXikjYDQ31qqS3RnZOB5shV8.roa
Signing time: Fri 15 Jul 2022 08:12:10 +0000
ROA not before: Fri 15 Jul 2022 08:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47206
IP address blocks: 188.224.0.0/17 maxlen: 17
93.182.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:ea:48:1c:4f:4d:4b:35:26:fe:06:86:cd:8e:84:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 08:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b32705e2923603437d6aa92dd19d9381e6c855f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:13:44:44:85:9c:f1:79:37:cf:8a:3e:57:
3b:d6:b1:25:f9:a9:1e:8f:62:bf:f8:0b:57:ec:39:
54:a3:17:5d:bd:34:bf:39:9b:df:11:f6:ad:55:46:
4a:7a:bd:e2:36:d8:c8:93:44:53:bd:22:4e:21:35:
ca:0e:c6:06:82:d3:b3:2f:e6:42:ce:9d:58:f4:95:
94:0d:74:4b:f6:31:87:7b:b1:48:36:56:ce:cc:43:
70:90:c2:3f:b8:54:ae:6d:36:9a:94:68:7b:4b:a6:
24:6f:5f:bf:aa:10:a9:08:44:8d:b7:31:d9:92:50:
5c:a5:04:e5:03:bf:9c:1d:71:28:f2:dc:30:f5:ed:
86:5c:34:0e:c8:41:78:66:47:9b:94:b3:76:60:6c:
61:cf:d5:ef:dc:2d:3f:c9:61:76:71:1e:28:9e:79:
1a:93:17:b5:02:4e:da:59:40:dc:16:9d:16:a9:f5:
a3:fb:32:8d:12:91:fe:01:3c:6e:9b:46:6f:d6:10:
45:dc:17:38:c6:e8:d1:bb:83:b6:80:c6:1a:e7:fd:
cf:e0:49:5a:72:02:28:37:33:e6:2f:35:18:30:01:
a1:cd:f1:ba:94:42:a4:23:c7:e7:b8:1f:49:83:98:
42:6d:b9:6e:64:1a:ba:bf:03:3f:c2:6a:e0:6f:b2:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:32:70:5E:29:23:60:34:37:D6:AA:92:DD:19:D9:38:1E:6C:85:5F
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/KzJwXikjYDQ31qqS3RnZOB5shV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.182.192.0/18
188.224.0.0/17
Signature Algorithm: sha256WithRSAEncryption
88:12:13:48:d9:52:e8:10:49:7b:71:d3:f8:4f:60:41:e9:29:
f4:d9:55:36:72:f8:3d:52:f4:f6:a9:c3:d5:69:1d:e7:6c:a3:
e7:31:8d:13:52:23:5c:af:f9:ab:16:15:76:8e:39:b9:49:99:
cb:97:a9:e5:b4:cb:70:6a:8c:06:8a:e1:a4:71:a7:b3:f7:57:
e9:3f:30:8e:06:14:a5:29:ed:35:3b:c9:65:47:cf:a7:e4:71:
33:dc:68:13:51:b5:d4:3b:e7:69:cb:fe:ed:a5:54:f8:2c:ab:
60:eb:4b:3c:3d:35:7c:99:33:a6:77:a8:d1:17:9b:b7:5a:97:
81:fe:12:8b:10:37:55:47:38:a2:b1:bc:03:86:53:54:5c:56:
b1:1e:ee:8f:ea:81:4c:c4:be:c0:36:b1:b0:e8:75:29:9d:f0:
b7:fa:56:95:9d:0c:d5:88:aa:ab:c3:ee:08:a2:31:d0:3d:c1:
dd:49:5b:a0:ce:f7:89:af:09:0f:49:25:73:3a:bd:a6:42:5a:
27:e2:de:99:8c:8e:ac:ca:bd:a8:c6:8f:79:57:de:1f:0d:15:
d1:b8:1b:43:f3:58:ca:16:e8:d7:20:16:b6:3b:25:c7:f1:a5:
21:60:80:3a:cf:83:dc:e7:1f:cb:b8:d3:f7:8e:a0:cd:65:ff:
a0:a1:26:03
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYIA6kgcT01LNSb+BobNjoS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjIwNzE1MDgxMjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjMyNzA1ZTI5MjM2MDM0MzdkNmFhOTJkZDE5ZDkzODFlNmM4NTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNsTRESFnPF5N8+KPlc71rEl+ake
j2K/+AtX7DlUoxddvTS/OZvfEfatVUZKer3iNtjIk0RTvSJOITXKDsYGgtOzL+ZC
zp1Y9JWUDXRL9jGHe7FINlbOzENwkMI/uFSubTaalGh7S6Ykb1+/qhCpCESNtzHZ
klBcpQTlA7+cHXEo8tww9e2GXDQOyEF4ZkeblLN2YGxhz9Xv3C0/yWF2cR4onnka
kxe1Ak7aWUDcFp0WqfWj+zKNEpH+ATxum0Zv1hBF3Bc4xujRu4O2gMYa5/3P4Ela
cgIoNzPmLzUYMAGhzfG6lEKkI8fnuB9Jg5hCbbluZBq6vwM/wmrgb7I3GwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCsycF4pI2A0N9aqkt0Z2TgebIVfMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvS3pKd1hpa2pZRFEzMXFxUzNSblpPQjVzaFY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGXbbAAwQH
vOAAMA0GCSqGSIb3DQEBCwUAA4IBAQCIEhNI2VLoEEl7cdP4T2BB6Sn02VU2cvg9
UvT2qcPVaR3nbKPnMY0TUiNcr/mrFhV2jjm5SZnLl6nltMtwaowGiuGkcaez91fp
PzCOBhSlKe01O8llR8+n5HEz3GgTUbXUO+dpy/7tpVT4LKtg60s8PTV8mTOmd6jR
F5u3WpeB/hKLEDdVRziisbwDhlNUXFaxHu6P6oFMxL7ANrGw6HUpnfC3+laVnQzV
iKqrw+4IojHQPcHdSVugzveJrwkPSSVzOr2mQlon4t6ZjI6syr2oxo95V94fDRXR
uBtD81jKFujXIBa2OyXH8aUhYIA6z4Pc5x/LuNP3jqDNZf+goSYD
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:43:00 2025 by rpki-client