Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_H1kP_0kkTxbSpCVNPGr92_UDho.roa
File: _H1kP_0kkTxbSpCVNPGr92_UDho.roa (raw, json)
Hash identifier: 090mYM8tBv4lU85o/FRdIyhY0YAhUPVgEmoBJFs/Ri4=
Subject key identifier: FC:7D:64:3F:FD:24:91:3C:5B:4A:90:95:34:F1:AB:F7:6F:D4:0E:1A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B5B8357F7E1C735676F3B7B05F9DA2954
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_H1kP_0kkTxbSpCVNPGr92_UDho.roa
Signing time: Mon 23 Oct 2023 07:50:16 +0000
ROA not before: Mon 23 Oct 2023 07:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.213.176.0/22 maxlen: 24
89.213.180.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.136.0/22 maxlen: 22
82.152.108.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
109.176.248.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:83:57:f7:e1:c7:35:67:6f:3b:7b:05:f9:da:29:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 23 07:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc7d643ffd24913c5b4a909534f1abf76fd40e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:a5:ef:bd:a6:93:52:5b:2c:0b:cf:7c:3f:
22:36:84:be:0b:d4:bc:c0:1c:4d:2a:d0:dd:6b:00:
42:22:0b:ed:57:48:5d:41:ab:98:bb:1f:52:59:38:
c1:72:59:da:43:80:66:7d:a7:89:40:5c:d8:0d:0b:
2f:e2:ec:ce:e1:c1:2d:cb:d1:70:05:7c:f8:0c:f8:
fc:3a:8a:8f:17:e1:55:29:a5:29:72:74:73:c9:71:
4a:9c:ba:23:97:e8:ba:5b:4b:1a:72:08:8c:0f:81:
d4:a4:ca:e1:34:05:64:23:d4:6f:af:a6:9a:22:b3:
fc:98:e6:9c:70:8f:3e:25:90:5a:35:13:ff:28:d7:
9d:5a:55:1e:41:b5:7e:ab:65:fc:8e:2e:0b:73:f8:
67:4e:40:5b:00:1c:cc:6e:a2:32:db:4b:3a:79:c9:
46:d1:e9:25:f1:54:b6:4d:3d:26:67:a9:e0:8f:26:
c6:2e:a1:1c:e8:97:a2:4f:71:50:c0:64:28:01:31:
15:3c:6d:99:39:89:c0:97:fd:88:43:d5:f6:55:b7:
87:73:6e:5c:ef:b7:59:f6:60:fd:13:0e:01:3b:3e:
db:d2:3e:a4:f1:71:fb:13:7f:a3:dc:c7:8a:25:8a:
2e:e3:a8:1a:6a:b0:5d:b2:84:be:08:f8:fc:e5:c0:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:64:3F:FD:24:91:3C:5B:4A:90:95:34:F1:AB:F7:6F:D4:0E:1A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_H1kP_0kkTxbSpCVNPGr92_UDho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.123.0/24
82.152.108.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.176.0/21
109.176.248.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:3d:7a:6e:98:c6:4b:62:28:27:ef:94:ae:63:bb:8e:b2:86:
46:d4:c2:d9:0d:91:53:0b:fd:66:75:e3:b1:cf:d9:37:1c:23:
c9:b3:12:4d:a0:e4:95:18:2c:ef:40:34:78:6c:30:fe:71:a2:
44:d5:e9:08:f9:ec:c4:3b:f4:18:ef:fb:7a:40:cc:5f:85:b8:
06:3e:2e:4a:04:89:c6:1d:20:1a:54:3c:8c:fa:ea:5c:da:d4:
ec:f8:cb:9f:cd:3e:8f:ac:05:44:a6:6e:bf:31:18:8b:b1:3c:
db:37:c7:d2:9a:58:52:cd:7f:0d:8c:c7:f3:75:ec:e4:67:e3:
0e:56:77:bc:3b:9c:40:94:51:c0:5f:fa:42:69:93:1d:42:8c:
15:a3:5c:6f:1f:29:0d:b1:cb:c6:3e:cc:69:be:f2:b3:9b:7a:
e5:2d:40:61:a1:b6:7a:1b:a0:f1:1a:a5:a4:59:dc:12:20:99:
61:83:1c:71:6c:d8:45:f3:9f:b9:34:09:11:44:b3:97:7b:21:
04:b4:f3:4d:7b:74:c8:e8:f0:19:e4:97:86:1d:89:d1:58:b6:
f0:97:23:08:64:6f:0d:5c:df:cd:68:8d:17:02:8c:0d:36:96:
d4:f1:6d:70:76:03:a5:cf:1a:94:c9:40:c9:1f:21:1c:63:a0:
4d:63:a9:a5
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYtbg1f34cc1Z287ewX52ilUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMxMDIzMDc1MDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzdkNjQzZmZkMjQ5MTNjNWI0YTkwOTUzNGYxYWJmNzZmZDQwZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbul772mk1JbLAvPfD8iNoS+C9S8
wBxNKtDdawBCIgvtV0hdQauYux9SWTjBclnaQ4BmfaeJQFzYDQsv4uzO4cEty9Fw
BXz4DPj8OoqPF+FVKaUpcnRzyXFKnLojl+i6W0sacgiMD4HUpMrhNAVkI9Rvr6aa
IrP8mOaccI8+JZBaNRP/KNedWlUeQbV+q2X8ji4Lc/hnTkBbABzMbqIy20s6eclG
0ekl8VS2TT0mZ6ngjybGLqEc6JeiT3FQwGQoATEVPG2ZOYnAl/2IQ9X2VbeHc25c
77dZ9mD9Ew4BOz7b0j6k8XH7E3+j3MeKJYou46gaarBdsoS+CPj85cA2DwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFPx9ZD/9JJE8W0qQlTTxq/dv1A4aMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvX0gxa1BfMGtrVHhiU3BDVk5QR3I5Ml9VRGhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAUah3AwQA
Uah7AwQAUphsAwQCUpmIMAwDBAJZ1ZQDBAVZ1YADBANZ1bADBABtsPgDBAG5MX4D
BADVmCowDQYJKoZIhvcNAQELBQADggEBAI49em6YxktiKCfvlK5ju46yhkbUwtkN
kVML/WZ147HP2TccI8mzEk2g5JUYLO9ANHhsMP5xokTV6Qj57MQ79Bjv+3pAzF+F
uAY+LkoEicYdIBpUPIz66lza1Oz4y5/NPo+sBUSmbr8xGIuxPNs3x9KaWFLNfw2M
x/N17ORn4w5Wd7w7nECUUcBf+kJpkx1CjBWjXG8fKQ2xy8Y+zGm+8rObeuUtQGGh
tnoboPEapaRZ3BIgmWGDHHFs2EXzn7k0CRFEs5d7IQS08017dMjo8Bnkl4YdidFY
tvCXIwhkbw1c381ojRcCjA02ltTxbXB2A6XPGpTJQMkfIRxjoE1jqaU=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:29:34 2025 by rpki-client