Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/1-FMZuVmcZe4Ir-SBNAebEcMarU8.roa
File: 1-FMZuVmcZe4Ir-SBNAebEcMarU8.roa (raw, json)
Hash identifier: uFiABKtudB4zGjkJFY8E011Kir4toAGNeo4yKk6PSME=
Subject key identifier: F8:53:19:B9:59:9C:65:EE:08:AF:E4:81:34:07:9B:11:C3:1A:AD:4F
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 01856D38737FA8075C99627D90BFB8F584D1
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/1-FMZuVmcZe4Ir-SBNAebEcMarU8.roa
Signing time: Sun 01 Jan 2023 12:04:54 +0000
ROA not before: Sun 01 Jan 2023 12:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15945
IP address blocks: 213.206.160.0/19 maxlen: 19
77.72.216.0/21 maxlen: 22
193.31.52.0/22 maxlen: 24
213.183.64.0/19 maxlen: 24
2a02:24d8:ffff::/48 maxlen: 48
2a02:24d8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:73:7f:a8:07:5c:99:62:7d:90:bf:b8:f5:84:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 1 12:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f85319b9599c65ee08afe48134079b11c31aad4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d0:27:a0:7c:ac:55:84:82:cd:06:2e:81:5e:
e2:7a:2b:d5:ca:2c:e4:35:fc:93:fd:b2:f0:7d:d3:
9a:17:17:f2:30:82:86:1c:e4:5c:ec:82:05:b4:fd:
79:a3:f4:f2:83:a6:8f:92:76:55:87:66:2e:36:81:
1b:5e:b9:ef:db:a5:00:d6:cc:9d:09:78:c3:fc:8b:
ff:82:6c:94:5b:92:28:97:2a:e1:b4:e3:7f:89:fe:
de:1e:d5:11:89:27:4c:97:64:b2:08:63:2e:ea:9c:
29:e7:24:e8:38:e3:9c:c6:c3:32:cc:a0:b7:2d:78:
d2:a4:d7:08:b5:a2:a6:77:28:df:f3:30:e9:ae:af:
ac:17:f6:a2:89:f6:32:ef:64:d0:e9:d3:bf:60:cf:
25:4d:a9:15:1c:30:9d:50:39:e9:ed:e2:d0:b6:02:
4d:75:72:0b:b3:2b:0f:de:8a:8c:d6:6f:90:70:0a:
3e:1d:e3:e2:96:86:d5:3d:f6:60:6a:13:e8:2c:40:
4b:ba:b5:5f:27:9c:bb:9a:5b:2e:c0:4e:86:ce:ac:
4e:6c:dd:18:b0:d5:d5:6b:93:26:55:7d:00:2b:71:
23:de:42:a3:a7:c4:8c:25:49:99:7a:d2:7c:36:00:
eb:2b:e8:7a:be:57:92:1e:9b:0e:b0:2c:cf:18:21:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:19:B9:59:9C:65:EE:08:AF:E4:81:34:07:9B:11:C3:1A:AD:4F
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/1-FMZuVmcZe4Ir-SBNAebEcMarU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.216.0/21
193.31.52.0/22
213.183.64.0/19
213.206.160.0/19
IPv6:
2a02:24d8::/32
Signature Algorithm: sha256WithRSAEncryption
aa:2d:36:12:e0:34:6a:46:6b:24:9a:cf:19:25:21:0c:5c:24:
f0:c1:18:bb:dd:b3:91:40:da:7f:71:86:f7:fd:f1:b8:bc:d9:
64:49:aa:04:13:8e:dc:60:e2:68:18:c1:68:e9:1a:98:ed:4b:
b9:66:8b:ca:e5:59:0f:b7:86:cf:15:f7:4f:0e:4f:f7:9d:4a:
71:0c:d4:81:df:03:45:39:c9:25:05:f0:0c:37:a6:c6:65:6c:
75:26:86:eb:71:7c:e4:11:0f:49:f8:e2:e9:31:7d:c2:99:be:
79:93:30:17:92:29:8a:51:41:d8:29:ed:f8:95:0f:dd:ac:2e:
a3:38:f8:55:78:ae:9d:e5:d6:a9:0b:4d:46:79:e7:31:f4:82:
67:6b:33:0a:b6:e9:2e:10:6a:58:d8:b9:44:2c:5a:b3:8d:67:
a0:7b:8a:f7:e6:7a:71:9f:ce:df:cc:20:6a:d5:5a:2b:d0:b1:
ef:65:a8:35:20:77:26:20:20:81:d0:59:d6:36:55:4c:62:59:
a5:c1:80:99:fb:60:c2:a8:98:11:bd:d6:db:59:89:d6:92:39:
7e:2f:0f:6c:98:12:37:29:28:54:3f:db:c4:37:0e:99:98:9d:
e5:2f:a8:9b:31:85:bd:2f:22:63:02:71:80:2a:6b:fd:d0:70:
ed:bb:a8:e8
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYVtOHN/qAdcmWJ9kL+49YTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZDgwMWRlOWZlOGE2NjgwNzU4ODE3ODIzYWUzNmJhMDY1
YzYxMGQwHhcNMjMwMTAxMTIwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODUzMTliOTU5OWM2NWVlMDhhZmU0ODEzNDA3OWIxMWMzMWFhZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9AnoHysVYSCzQYugV7ieivVyizk
NfyT/bLwfdOaFxfyMIKGHORc7IIFtP15o/Tyg6aPknZVh2YuNoEbXrnv26UA1syd
CXjD/Iv/gmyUW5IolyrhtON/if7eHtURiSdMl2SyCGMu6pwp5yToOOOcxsMyzKC3
LXjSpNcItaKmdyjf8zDprq+sF/aiifYy72TQ6dO/YM8lTakVHDCdUDnp7eLQtgJN
dXILsysP3oqM1m+QcAo+HePilobVPfZgahPoLEBLurVfJ5y7mlsuwE6GzqxObN0Y
sNXVa5MmVX0AK3Ej3kKjp8SMJUmZetJ8NgDrK+h6vleSHpsOsCzPGCFlNwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFPhTGblZnGXuCK/kgTQHmxHDGq1PMB8GA1UdIwQY
MBaAFBjYAd6f6KZoB1iBeCOuNroGXGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTkt
NjU1MDNhOTMwNmEwLzEvMS1GTVp1Vm1jWmU0SXItU0JOQWViRWNNYXJVOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzUvOTVjM2M4LTZhYjEtNDk1MS04ZjU5LTY1NTAzYTkzMDZh
MC8xL0dOZ0IzcF9vcG1nSFdJRjRJNjQydWdaY1lRMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEA01I2AME
AsEfNAMEBdW3QAMEBdXOoDANBAIAAjAHAwUAKgIk2DANBgkqhkiG9w0BAQsFAAOC
AQEAqi02EuA0akZrJJrPGSUhDFwk8MEYu92zkUDaf3GG9/3xuLzZZEmqBBOO3GDi
aBjBaOkamO1LuWaLyuVZD7eGzxX3Tw5P951KcQzUgd8DRTnJJQXwDDemxmVsdSaG
63F85BEPSfji6TF9wpm+eZMwF5IpilFB2Cnt+JUP3awuozj4VXiuneXWqQtNRnnn
MfSCZ2szCrbpLhBqWNi5RCxas41noHuK9+Z6cZ/O38wgatVaK9Cx72WoNSB3JiAg
gdBZ1jZVTGJZpcGAmftgwqiYEb3W21mJ1pI5fi8PbJgSNykoVD/bxDcOmZid5S+o
mzGFvS8iYwJxgCpr/dBw7buo6A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:36 2025 by rpki-client