Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/A_GNu6IRp95lnmw-EzyPLZqYRF8.roa
File: A_GNu6IRp95lnmw-EzyPLZqYRF8.roa (raw, json)
Hash identifier: v2tR/k/xETHbyQvKcsCaB6FbaIeNrsZgL32LIehMHp8=
Subject key identifier: 03:F1:8D:BB:A2:11:A7:DE:65:9E:6C:3E:13:3C:8F:2D:9A:98:44:5F
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 018BC8DE0EBA74A986512F108741C038E0DB
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/A_GNu6IRp95lnmw-EzyPLZqYRF8.roa
Signing time: Mon 13 Nov 2023 13:27:57 +0000
ROA not before: Mon 13 Nov 2023 13:27:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8473
IP address blocks: 109.228.128.0/18 maxlen: 18
213.80.96.0/19 maxlen: 19
5.150.192.0/18 maxlen: 18
85.24.128.0/17 maxlen: 17
82.196.96.0/19 maxlen: 19
178.174.128.0/17 maxlen: 17
212.85.64.0/19 maxlen: 19
79.136.0.0/17 maxlen: 17
217.31.160.0/19 maxlen: 19
94.254.0.0/17 maxlen: 17
213.164.192.0/19 maxlen: 19
213.136.32.0/19 maxlen: 19
185.57.4.0/22 maxlen: 22
185.90.176.0/22 maxlen: 22
62.63.192.0/18 maxlen: 18
176.10.128.0/17 maxlen: 17
81.170.128.0/17 maxlen: 17
98.128.0.0/16 maxlen: 16
212.116.64.0/19 maxlen: 19
46.59.0.0/17 maxlen: 17
195.178.160.0/19 maxlen: 19
217.27.160.0/19 maxlen: 19
37.123.128.0/18 maxlen: 18
2001:9b2::/34 maxlen: 34
2a02:508::/29 maxlen: 29
2001:9b0::/32 maxlen: 32
2001:9b0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:de:0e:ba:74:a9:86:51:2f:10:87:41:c0:38:e0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Nov 13 13:27:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03f18dbba211a7de659e6c3e133c8f2d9a98445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:49:03:ee:9b:06:8d:c3:a1:32:fc:4e:17:
c3:b1:cd:14:ac:cb:98:c1:1e:4c:54:4e:af:7c:43:
37:c7:3f:62:42:94:aa:7f:c3:7e:63:21:9d:20:bf:
c9:65:d0:78:e3:7b:f5:73:32:b7:21:53:96:24:0c:
01:6f:29:7f:79:5d:d4:1d:9e:97:d2:0f:98:70:17:
94:e2:2d:b9:4c:33:d2:6a:a8:7f:9a:97:cd:79:8b:
9e:87:ff:47:4f:b0:a5:bb:17:98:a7:58:f2:b0:c7:
a1:cf:3e:dd:33:d1:73:e8:7b:fc:d1:e5:6b:fd:4a:
d6:b7:fd:a2:c9:41:f4:43:49:3b:90:29:30:1d:33:
be:70:59:10:3e:69:ce:fc:8d:9f:37:7e:5b:b9:8f:
c0:f2:7c:dc:4d:b3:47:91:32:ce:a4:e2:0f:5a:f9:
79:a6:aa:81:b4:c4:de:19:c8:27:ca:b4:7f:f4:44:
2e:7c:49:f6:f3:03:1a:25:2e:3a:30:1e:6c:c4:4d:
d4:8c:a4:b8:77:33:de:70:3c:ea:3b:41:f1:cc:8a:
33:59:45:2e:f5:2d:51:93:d4:13:25:d9:86:b9:a8:
b2:1f:4e:3f:0f:8f:34:ec:34:78:c2:00:10:21:f3:
8d:50:7e:fa:02:b8:cb:e4:e9:1e:1b:cb:f4:97:ac:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:8D:BB:A2:11:A7:DE:65:9E:6C:3E:13:3C:8F:2D:9A:98:44:5F
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/A_GNu6IRp95lnmw-EzyPLZqYRF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.192.0/18
37.123.128.0/18
46.59.0.0/17
62.63.192.0/18
79.136.0.0/17
81.170.128.0/17
82.196.96.0/19
85.24.128.0/17
94.254.0.0/17
98.128.0.0/16
109.228.128.0/18
176.10.128.0/17
178.174.128.0/17
185.57.4.0/22
185.90.176.0/22
195.178.160.0/19
212.85.64.0/19
212.116.64.0/19
213.80.96.0/19
213.136.32.0/19
213.164.192.0/19
217.27.160.0/19
217.31.160.0/19
IPv6:
2001:9b0::/29
2a02:508::/29
Signature Algorithm: sha256WithRSAEncryption
c0:fc:3a:77:63:a4:71:0a:58:5f:32:c3:80:df:3d:66:65:8a:
b1:7e:af:ac:c8:54:bf:ab:29:a8:12:47:7d:96:bb:3f:f2:8a:
ca:2d:3e:e4:fd:2a:50:d9:ce:67:bc:c9:d0:ff:92:6a:d3:ee:
a0:9d:71:b5:98:e6:cf:18:36:63:97:c8:70:61:ae:25:cc:a0:
50:93:33:d5:65:69:09:f8:57:77:14:7e:45:87:e2:51:85:a2:
d4:e8:39:e9:7f:24:bc:8f:93:0e:d8:26:82:cf:19:5b:4e:16:
00:c6:7d:c1:f1:f4:9f:03:6f:01:d5:7d:3a:79:0b:42:2b:47:
b2:1e:40:36:a6:cc:6b:2c:b7:64:f7:75:09:28:ae:e4:7f:3d:
ac:d3:54:4c:eb:59:ec:27:2e:b3:b2:9a:45:c2:aa:8b:52:67:
69:d8:e1:14:ff:b2:65:30:0d:9f:f5:28:66:8b:6d:52:57:6f:
39:4a:f4:17:3a:b1:e1:89:4a:c1:fc:69:ae:c6:c0:8b:24:b2:
11:80:a5:72:cd:89:78:dc:4b:7f:dd:64:e3:8d:1b:bd:c8:ff:
cc:1a:49:73:73:5d:0a:47:d1:67:7c:56:cb:88:e3:13:62:25:
55:1e:42:d4:cc:5e:ea:24:67:fc:0c:50:60:19:dd:85:4c:9c:
88:af:eb:b2
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgISAYvI3g66dKmGUS8Qh0HAOODbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMjJmMjI5ZWRjMmYzMTRhMmZhNWVmMGQ3YWYxZGRkYjQ5
OWVhMzEwHhcNMjMxMTEzMTMyNzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2YxOGRiYmEyMTFhN2RlNjU5ZTZjM2UxMzNjOGYyZDlhOTg0NDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHdJA+6bBo3DoTL8ThfDsc0UrMuY
wR5MVE6vfEM3xz9iQpSqf8N+YyGdIL/JZdB443v1czK3IVOWJAwBbyl/eV3UHZ6X
0g+YcBeU4i25TDPSaqh/mpfNeYueh/9HT7CluxeYp1jysMehzz7dM9Fz6Hv80eVr
/UrWt/2iyUH0Q0k7kCkwHTO+cFkQPmnO/I2fN35buY/A8nzcTbNHkTLOpOIPWvl5
pqqBtMTeGcgnyrR/9EQufEn28wMaJS46MB5sxE3UjKS4dzPecDzqO0HxzIozWUUu
9S1Rk9QTJdmGuaiyH04/D4807DR4wgAQIfONUH76ArjL5OkeG8v0l6zG6wIDAQAB
o4ICpzCCAqMwHQYDVR0OBBYEFAPxjbuiEafeZZ5sPhM8jy2amERfMB8GA1UdIwQY
MBaAFKMi8intwvMUovpe8NevHd20meoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgt
NjVmODI0N2ZmYTkxLzEvQV9HTnU2SVJwOTVsbm13LUV6eVBMWnFZUkY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgtNjVmODI0N2ZmYTkx
LzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTCBkAQCAAEwgYkDBAYF
lsADBAYle4ADBAcuOwADBAY+P8ADBAdPiAADBAdRqoADBAVSxGADBAdVGIADBAde
/gADAwBigAMEBm3kgAMEB7AKgAMEB7KugAMEArk5BAMEArlasAMEBcOyoAMEBdRV
QAMEBdR0QAMEBdVQYAMEBdWIIAMEBdWkwAMEBdkboAMEBdkfoDAUBAIAAjAOAwUD
IAEJsAMFAyoCBQgwDQYJKoZIhvcNAQELBQADggEBAMD8OndjpHEKWF8yw4DfPWZl
irF+r6zIVL+rKagSR32Wuz/yisotPuT9KlDZzme8ydD/kmrT7qCdcbWY5s8YNmOX
yHBhriXMoFCTM9VlaQn4V3cUfkWH4lGFotToOel/JLyPkw7YJoLPGVtOFgDGfcHx
9J8DbwHVfTp5C0IrR7IeQDamzGsst2T3dQkoruR/PazTVEzrWewnLrOymkXCqotS
Z2nY4RT/smUwDZ/1KGaLbVJXbzlK9Bc6seGJSsH8aa7GwIskshGApXLNiXjcS3/d
ZOONG73I/8waSXNzXQpH0Wd8VsuI4xNiJVUeQtTMXuokZ/wMUGAZ3YVMnIiv67I=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:25 2025 by rpki-client