Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zTqRjp7qE93obn3t-Id0VQSf_MI.roa
File: zTqRjp7qE93obn3t-Id0VQSf_MI.roa (raw, json)
Hash identifier: PIXB6NL0YmeBFX0Gj09yO0yakcEVaqAnkMdB+HCY4nc=
Subject key identifier: CD:3A:91:8E:9E:EA:13:DD:E8:6E:7D:ED:F8:87:74:55:04:9F:FC:C2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0187BC9348E09B68A6F9D619C31D267623F0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zTqRjp7qE93obn3t-Id0VQSf_MI.roa
Signing time: Wed 26 Apr 2023 07:59:41 +0000
ROA not before: Wed 26 Apr 2023 07:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 82.153.240.0/24 maxlen: 24
81.5.189.0/24 maxlen: 24
82.152.178.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:93:48:e0:9b:68:a6:f9:d6:19:c3:1d:26:76:23:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 26 07:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd3a918e9eea13dde86e7dedf8877455049ffcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:bc:82:e9:81:3d:dc:f0:c6:cb:ba:04:83:
cc:3c:40:19:e8:60:91:47:41:2e:13:06:74:b7:51:
21:5f:17:24:5d:1c:a8:5b:d2:ee:7d:c6:99:ec:11:
24:72:2c:37:a8:fd:75:00:c0:e0:31:58:48:63:74:
ee:39:97:75:63:67:fb:b5:b0:9a:ec:e0:31:86:bd:
85:f2:ea:cf:9d:dd:3e:c4:62:e0:b9:79:9a:aa:3b:
b9:49:0c:1d:70:d9:e5:a8:4f:90:e6:31:e6:41:45:
75:17:a2:57:16:f9:51:0b:bb:a8:2b:54:bf:e1:27:
f7:20:98:10:8e:45:3e:e4:ab:a3:8e:4c:c8:07:3f:
2f:b9:2a:9e:56:1d:56:3d:02:4f:7f:8b:35:4a:c1:
3d:89:51:11:3e:3f:83:3e:8e:cf:9d:8c:e7:55:cb:
ae:ab:70:36:62:08:98:2a:88:da:18:89:d8:fe:4d:
9e:c2:80:ca:64:42:5b:d8:d9:ed:84:9f:ba:64:03:
60:5a:a6:6a:63:48:79:c1:f6:bc:1c:03:7d:76:a0:
ea:f3:27:c2:3a:00:7a:63:78:30:4e:bb:5d:87:c8:
a3:c8:43:b8:ba:5e:4b:d2:f8:dd:10:4c:de:c1:9d:
b2:57:a2:33:12:d6:54:5e:f2:58:22:fe:3b:04:0b:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:91:8E:9E:EA:13:DD:E8:6E:7D:ED:F8:87:74:55:04:9F:FC:C2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zTqRjp7qE93obn3t-Id0VQSf_MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.152.178.0/24
82.153.69.0/24
82.153.240.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b0:7a:79:6a:f9:5c:91:02:40:60:77:8e:16:1f:c7:d2:ec:
5f:eb:47:ba:2d:7a:62:d4:74:40:bd:99:03:39:c9:aa:9b:6b:
d2:b5:2b:df:6f:a3:0f:04:2d:8d:cb:a3:b4:a6:c2:27:16:8a:
2c:b5:f4:08:1e:f0:39:ae:96:d5:97:70:48:1a:96:e0:8a:1e:
1a:ac:15:03:fa:78:ae:5e:06:e9:d7:50:93:8e:f9:e3:86:81:
73:8b:24:e4:ce:1a:9d:bd:05:86:1a:93:e2:00:e8:2b:3e:a7:
4c:fb:de:cf:2c:ff:e2:a8:b0:81:fa:b5:4b:e8:be:80:db:ff:
aa:c0:87:e1:ce:2e:a5:8f:8f:61:80:91:a7:4d:d3:a1:b0:21:
99:bd:47:51:38:6a:62:eb:a6:72:30:3f:82:ee:aa:dc:be:a0:
0a:a2:96:12:53:ed:f9:a4:35:59:c9:e7:2d:2e:74:a3:6d:81:
fd:fb:15:ee:31:f6:fd:0a:57:ec:a5:36:39:8c:94:aa:cb:0c:
7c:1d:36:b4:16:b5:f9:58:ea:2e:f1:22:a2:be:e5:2d:ad:28:
f0:cf:2d:4d:20:88:fb:09:a9:bd:cf:a3:26:32:9d:f7:d1:e9:
71:58:9f:d0:a9:4e:9f:57:82:dc:e5:0e:c3:e7:31:d7:63:93:
ae:07:6b:dc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYe8k0jgm2im+dYZwx0mdiPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwNDI2MDc1OTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDNhOTE4ZTllZWExM2RkZTg2ZTdkZWRmODg3NzQ1NTA0OWZmY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcq8gumBPdzwxsu6BIPMPEAZ6GCR
R0EuEwZ0t1EhXxckXRyoW9LufcaZ7BEkciw3qP11AMDgMVhIY3TuOZd1Y2f7tbCa
7OAxhr2F8urPnd0+xGLguXmaqju5SQwdcNnlqE+Q5jHmQUV1F6JXFvlRC7uoK1S/
4Sf3IJgQjkU+5KujjkzIBz8vuSqeVh1WPQJPf4s1SsE9iVERPj+DPo7PnYznVcuu
q3A2YgiYKojaGInY/k2ewoDKZEJb2NnthJ+6ZANgWqZqY0h5wfa8HAN9dqDq8yfC
OgB6Y3gwTrtdh8ijyEO4ul5L0vjdEEzewZ2yV6IzEtZUXvJYIv47BAsC2QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFM06kY6e6hPd6G597fiHdFUEn/zCMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvelRxUmpwN3FFOTNvYm4zdC1JZDBWUVNmX01JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUQW9AwQA
UpiyAwQAUplFAwQAUpnwMA0GCSqGSIb3DQEBCwUAA4IBAQBFsHp5avlckQJAYHeO
Fh/H0uxf60e6LXpi1HRAvZkDOcmqm2vStSvfb6MPBC2Ny6O0psInFoostfQIHvA5
rpbVl3BIGpbgih4arBUD+niuXgbp11CTjvnjhoFziyTkzhqdvQWGGpPiAOgrPqdM
+97PLP/iqLCB+rVL6L6A2/+qwIfhzi6lj49hgJGnTdOhsCGZvUdROGpi66ZyMD+C
7qrcvqAKopYSU+35pDVZyectLnSjbYH9+xXuMfb9ClfspTY5jJSqywx8HTa0FrX5
WOou8SKivuUtrSjwzy1NIIj7Cam9z6MmMp330elxWJ/QqU6fV4Lc5Q7D5zHXY5Ou
B2vc
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:24:29 2025 by rpki-client