Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6UfU7rql9i0F4bLFeUeq6YjNjnc.roa
File: 6UfU7rql9i0F4bLFeUeq6YjNjnc.roa (raw, json)
Hash identifier: oiZmdj1Hmpum3jxm5/YbQOY9MyZXxIxgjUU3DjOkiBU=
Subject key identifier: E9:47:D4:EE:BA:A5:F6:2D:05:E1:B2:C5:79:47:AA:E9:88:CD:8E:77
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018921C11985E5A617B6CBB6E9283A1A594D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6UfU7rql9i0F4bLFeUeq6YjNjnc.roa
Signing time: Tue 04 Jul 2023 16:34:10 +0000
ROA not before: Tue 04 Jul 2023 16:34:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 89.213.140.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.241.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:c1:19:85:e5:a6:17:b6:cb:b6:e9:28:3a:1a:59:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 4 16:34:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e947d4eebaa5f62d05e1b2c57947aae988cd8e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:bb:21:fa:9a:56:b3:50:af:ba:a8:15:7e:
bd:c2:7c:86:76:98:a5:80:11:e9:61:a9:9b:eb:d7:
8b:03:e9:41:28:c0:25:97:3e:83:a2:81:3c:84:3e:
a4:bb:9d:5e:eb:f0:fe:17:16:5b:91:77:7e:ac:dc:
67:33:da:48:bd:1a:4a:3c:a3:5d:c6:b7:0d:78:27:
79:02:1d:3d:cc:59:10:c4:97:fd:5b:d0:16:78:36:
77:5f:04:9c:58:36:d6:d3:1a:ee:d9:52:3a:fb:c5:
53:eb:cd:72:39:c7:8c:f1:4d:e8:9a:f2:7a:d2:bf:
a1:80:bc:e1:3c:ec:15:d9:c4:41:e6:bf:f2:1e:49:
25:97:72:bf:48:e4:99:38:34:dd:6e:a4:ed:31:c8:
24:78:be:6c:33:d6:2d:d8:42:22:2b:f8:c1:1b:fb:
d0:18:47:a8:8b:f3:f9:e2:ad:8d:db:9e:83:9f:c1:
2d:62:4a:49:e0:f6:36:9d:68:33:93:75:24:5d:4b:
c2:af:04:c4:73:dd:bd:1c:93:c2:9b:3b:d3:0c:08:
bd:6b:5d:50:ac:07:cd:ec:27:23:71:9a:b9:56:59:
0a:07:04:fc:0d:93:48:a4:f2:b3:84:31:d8:e3:bb:
a7:75:6f:28:e9:84:a1:f9:ed:dc:c4:e4:76:4b:9b:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:47:D4:EE:BA:A5:F6:2D:05:E1:B2:C5:79:47:AA:E9:88:CD:8E:77
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6UfU7rql9i0F4bLFeUeq6YjNjnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.140.0/24
109.176.240.0-109.176.242.255
109.176.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b8:6c:38:78:d0:a8:bb:82:48:6e:da:80:48:e5:97:b2:ae:
c9:ef:31:dc:35:72:3a:c7:80:d7:17:97:e7:df:b6:aa:8d:fb:
53:db:89:4d:df:cc:b6:14:5b:22:ed:79:30:0f:e5:70:7b:ba:
ca:27:d3:14:76:3a:48:05:48:d8:19:be:08:01:c5:7e:71:e1:
61:d4:90:8c:e4:3f:05:15:c5:c8:aa:a8:83:86:71:52:4c:e0:
f5:97:21:51:8f:66:ef:47:7e:55:af:c4:a2:70:b7:9d:7e:69:
16:c8:1b:a8:76:b8:cd:53:6a:a6:36:fd:cb:83:d4:5e:ac:7a:
bc:df:97:7a:32:71:8d:bc:ff:60:14:5d:03:8e:a5:cc:6b:50:
1d:11:60:b3:43:4c:1e:4b:8b:3d:e6:ce:f6:a8:9d:be:d2:25:
12:39:35:e4:c3:05:c1:36:e8:06:be:0d:7f:ae:c0:b4:93:0a:
18:e9:c3:af:e0:1f:f8:a2:88:33:2d:1d:7b:f4:83:e7:f0:3e:
9b:77:f1:0a:68:23:f1:2d:06:4c:3e:cc:5d:b3:d9:f4:22:fa:
54:25:3b:be:6e:44:dd:e9:57:f3:fa:75:3e:db:20:15:6e:92:
ec:58:a2:bc:03:f9:e7:b6:c6:79:c7:03:80:85:9a:04:03:5f:
fe:22:4a:28
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYkhwRmF5aYXtsu26Sg6GllNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwNzA0MTYzNDEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTQ3ZDRlZWJhYTVmNjJkMDVlMWIyYzU3OTQ3YWFlOTg4Y2Q4ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSS7IfqaVrNQr7qoFX69wnyGdpil
gBHpYamb69eLA+lBKMAllz6DooE8hD6ku51e6/D+FxZbkXd+rNxnM9pIvRpKPKNd
xrcNeCd5Ah09zFkQxJf9W9AWeDZ3XwScWDbW0xru2VI6+8VT681yOceM8U3omvJ6
0r+hgLzhPOwV2cRB5r/yHkkll3K/SOSZODTdbqTtMcgkeL5sM9Yt2EIiK/jBG/vQ
GEeoi/P54q2N256Dn8EtYkpJ4PY2nWgzk3UkXUvCrwTEc929HJPCmzvTDAi9a11Q
rAfN7CcjcZq5VlkKBwT8DZNIpPKzhDHY47undW8o6YSh+e3cxOR2S5ttSQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFOlH1O66pfYtBeGyxXlHqumIzY53MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNlVmVTdycWw5aTBGNGJMRmVVZXE2WWpOam5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWdWMMAwD
BARtsPADBABtsPIDBABtsPowDQYJKoZIhvcNAQELBQADggEBAAu4bDh40Ki7gkhu
2oBI5ZeyrsnvMdw1cjrHgNcXl+fftqqN+1PbiU3fzLYUWyLteTAP5XB7uson0xR2
OkgFSNgZvggBxX5x4WHUkIzkPwUVxciqqIOGcVJM4PWXIVGPZu9HflWvxKJwt51+
aRbIG6h2uM1TaqY2/cuD1F6serzfl3oycY28/2AUXQOOpcxrUB0RYLNDTB5Liz3m
zvaonb7SJRI5NeTDBcE26Aa+DX+uwLSTChjpw6/gH/iiiDMtHXv0g+fwPpt38Qpo
I/EtBkw+zF2z2fQi+lQlO75uRN3pV/P6dT7bIBVukuxYorwD+ee2xnnHA4CFmgQD
X/4iSig=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:17:46 2025 by rpki-client