Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/0zMgguNPiO8TnsLhDpzS7KvViMA.roa
File: 0zMgguNPiO8TnsLhDpzS7KvViMA.roa (raw, json)
Hash identifier: 8CF1984WNcCyHqDLi48cQW5JZerhAs5iLsqnoU8dxUU=
Subject key identifier: D3:33:20:82:E3:4F:88:EF:13:9E:C2:E1:0E:9C:D2:EC:AB:D5:88:C0
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 018878E680538197F5B4E85DBEBC6ECC795A
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/0zMgguNPiO8TnsLhDpzS7KvViMA.roa
Signing time: Thu 01 Jun 2023 21:39:12 +0000
ROA not before: Thu 01 Jun 2023 21:39:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 185.219.84.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
185.254.96.0/22 maxlen: 22
185.94.29.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
45.157.232.0/22 maxlen: 22
176.96.136.0/22 maxlen: 24
2.59.132.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
62.192.153.0/24 maxlen: 24
2a0d:5940::/29 maxlen: 29
2a0c:4ac0:1100::/40 maxlen: 40
2a0c:4ac0:1200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:e6:80:53:81:97:f5:b4:e8:5d:be:bc:6e:cc:79:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Jun 1 21:39:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3332082e34f88ef139ec2e10e9cd2ecabd588c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:a7:1c:ad:95:a7:c3:ff:90:a0:88:f6:29:
f8:80:f4:26:fa:b0:9c:4f:15:ad:51:2a:49:5c:95:
32:9f:9b:56:13:8e:91:17:cf:a8:72:b8:96:6b:cd:
11:8c:45:b3:3d:75:a5:cd:63:68:3c:e3:20:ac:ba:
17:e5:5b:48:a3:91:a5:ff:ff:6a:ea:45:ab:eb:9d:
e5:d1:89:6a:0d:bb:03:1a:0c:70:09:02:c5:fd:7d:
b7:35:b6:68:a7:25:d7:aa:54:28:7b:fa:e9:2d:6e:
e7:eb:4e:1f:e1:55:b4:d3:5e:2b:63:bf:45:3b:8c:
f9:ef:39:64:24:44:28:40:9d:37:f1:04:eb:7e:3b:
73:c3:e2:bc:70:a9:40:eb:a9:9e:eb:a1:e4:9e:79:
7d:83:69:65:f5:9b:75:d8:99:1a:26:d2:e2:6e:0c:
42:36:e3:51:67:58:cc:65:59:89:0d:b5:7c:f7:2b:
cf:03:d5:3d:da:ec:75:a5:08:6e:63:a8:20:19:89:
a5:5c:99:1b:80:e6:3e:56:bc:40:2c:9a:ac:41:24:
be:ff:3c:c9:2f:c5:7a:f2:ac:ac:60:6f:d5:5f:40:
37:74:99:3a:c4:ed:7f:1e:b0:8c:8b:d3:b8:3e:65:
a5:f3:ff:74:1f:99:52:3e:60:59:0f:53:45:e8:3c:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:20:82:E3:4F:88:EF:13:9E:C2:E1:0E:9C:D2:EC:AB:D5:88:C0
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/0zMgguNPiO8TnsLhDpzS7KvViMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.157.232.0/22
62.192.153.0/24
94.143.231.0/24
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
194.48.217.0/24
IPv6:
2a0c:4ac0:1100::-2a0c:4ac0:12ff:ffff:ffff:ffff:ffff:ffff
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
b7:01:8f:63:b7:73:5a:d1:c9:a9:fb:b1:b0:28:bb:77:bf:ca:
8e:0f:fa:1a:8d:d6:b5:9f:5a:14:13:bc:59:18:63:d9:c8:fa:
5e:c1:28:db:fc:68:31:d2:9b:71:06:af:9d:e5:63:d5:00:13:
9d:1a:b9:9e:61:2d:35:ab:38:3c:ac:e2:cb:05:94:54:33:2a:
2e:d7:8c:ef:f3:3a:6e:a2:f6:76:f0:66:95:13:8d:d3:79:84:
b4:1b:47:2f:66:94:43:1f:c0:4a:57:2c:54:50:e5:a7:7e:9c:
2f:ff:96:65:c8:c3:e5:cb:26:9d:8f:80:1e:20:8e:e2:56:8d:
ca:fc:9b:8d:8e:a4:fe:5b:67:0d:4f:ac:49:30:9c:86:0f:3b:
20:8a:52:c3:2e:3d:ec:45:a3:ec:0b:86:0e:19:8a:ec:8f:02:
28:c3:21:ad:01:24:b2:ec:d7:59:96:73:c6:fa:67:1d:1b:46:
70:f1:e0:a6:d9:57:ce:94:6f:35:df:79:36:7d:88:1b:32:7c:
33:75:6e:f9:99:c6:37:c8:21:51:9c:25:24:25:90:a5:e3:b0:
c8:b0:4d:d5:44:a9:23:a6:e0:f8:80:6b:54:35:2c:40:39:72:
36:b6:d4:55:9b:ce:52:61:06:97:01:98:81:e8:54:67:04:f5:
96:42:e4:44
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgISAYh45oBTgZf1tOhdvrxuzHlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiY2EzZjI1ZDU0NjIwYjUwZWY4NTIwNjU3NjM0ZDNiMDk2
YmFjNTcwHhcNMjMwNjAxMjEzOTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzMzMjA4MmUzNGY4OGVmMTM5ZWMyZTEwZTljZDJlY2FiZDU4OGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKSnHK2Vp8P/kKCI9in4gPQm+rCc
TxWtUSpJXJUyn5tWE46RF8+ocriWa80RjEWzPXWlzWNoPOMgrLoX5VtIo5Gl//9q
6kWr653l0YlqDbsDGgxwCQLF/X23NbZopyXXqlQoe/rpLW7n604f4VW0014rY79F
O4z57zlkJEQoQJ038QTrfjtzw+K8cKlA66me66Hknnl9g2ll9Zt12JkaJtLibgxC
NuNRZ1jMZVmJDbV89yvPA9U92ux1pQhuY6ggGYmlXJkbgOY+VrxALJqsQSS+/zzJ
L8V68qysYG/VX0A3dJk6xO1/HrCMi9O4PmWl8/90H5lSPmBZD1NF6Dyd8QIDAQAB
o4ICdTCCAnEwHQYDVR0OBBYEFNMzIILjT4jvE57C4Q6c0uyr1YjAMB8GA1UdIwQY
MBaAFLvKPyXVRiC1DvhSBldjTTsJa6xXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NjFkMjQtZTkyMS00ZWM4LWE2MTEt
NGRjMjBjNWI2MjY4LzEvMHpNZ2d1TlBpTzhUbnNMaERwelM3S3ZWaU1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi81NjFkMjQtZTkyMS00ZWM4LWE2MTEtNGRjMjBjNWI2MjY4
LzEvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwVgQCAAEwUAMEAgI7hAME
Ai2d6AMEAD7AmQMEAF6P5wMEArBgiAMEALleHQMEALnbVAMEArn+YAMEAMEp4gME
AMEp7TAMAwQAwSoLAwQAwSoMAwQAwjDZMB8EAgACMBkwEAMGACoMSsARAwYAKgxK
wBIDBQMqDVlAMA0GCSqGSIb3DQEBCwUAA4IBAQC3AY9jt3Na0cmp+7GwKLt3v8qO
D/oajda1n1oUE7xZGGPZyPpewSjb/Ggx0ptxBq+d5WPVABOdGrmeYS01qzg8rOLL
BZRUMyou14zv8zpuovZ28GaVE43TeYS0G0cvZpRDH8BKVyxUUOWnfpwv/5ZlyMPl
yyadj4AeII7iVo3K/JuNjqT+W2cNT6xJMJyGDzsgilLDLj3sRaPsC4YOGYrsjwIo
wyGtASSy7NdZlnPG+mcdG0Zw8eCm2VfOlG8133k2fYgbMnwzdW75mcY3yCFRnCUk
JZCl47DIsE3VRKkjpuD4gGtUNSxAOXI2ttRVm85SYQaXAZiB6FRnBPWWQuRE
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:26 2025 by rpki-client