Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/zUl6S5VC_N3Thfsl6k39w3TuKHA.roa
File: zUl6S5VC_N3Thfsl6k39w3TuKHA.roa (raw, json)
Hash identifier: A77RIUcq2jzYpZSgg2O/qjPxI6DRR/TczGW1ed1y/pY=
Subject key identifier: CD:49:7A:4B:95:42:FC:DD:D3:85:FB:25:EA:4D:FD:C3:74:EE:28:70
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 36A402B5
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/zUl6S5VC_N3Thfsl6k39w3TuKHA.roa
Signing time: Mon 17 Jan 2022 15:48:50 +0000
ROA not before: Mon 17 Jan 2022 15:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44515
IP address blocks: 82.221.0.0/21 maxlen: 21
82.221.0.0/17 maxlen: 17
82.221.165.0/24 maxlen: 24
82.221.166.0/24 maxlen: 24
212.30.242.0/24 maxlen: 24
82.221.68.0/22 maxlen: 22
82.221.80.0/24 maxlen: 24
82.221.81.0/24 maxlen: 24
82.221.80.0/21 maxlen: 21
82.221.84.0/24 maxlen: 24
82.221.92.0/22 maxlen: 22
82.221.22.0/24 maxlen: 24
82.221.28.0/24 maxlen: 24
212.30.224.0/19 maxlen: 19
82.221.46.0/23 maxlen: 23
212.30.229.0/24 maxlen: 24
82.221.64.0/22 maxlen: 22
2a02:f48:2105::/48 maxlen: 48
2a02:f48::/40 maxlen: 40
2a02:f48:2100::/40 maxlen: 40
2a02:f48:2104::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916718261 (0x36a402b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Jan 17 15:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd497a4b9542fcddd385fb25ea4dfdc374ee2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:c9:dd:fe:ce:0e:20:74:3f:7d:e8:da:22:
1b:2f:0e:41:7c:64:1c:0d:13:86:b8:3b:d4:bb:d0:
a4:2c:42:4c:8b:d1:69:bc:83:ae:33:90:63:74:10:
30:27:25:d1:2d:4a:00:0a:20:1d:24:9e:86:d7:02:
85:32:05:37:88:2d:3a:a2:7d:b1:f9:33:ad:f6:c8:
fc:88:ad:f0:de:ab:d0:d8:3b:01:7f:b1:26:45:9d:
34:87:24:ff:7d:d9:9c:89:80:78:ca:db:d8:89:64:
c9:a3:cf:bc:ff:c2:b6:90:c1:eb:b4:a2:41:15:5d:
91:a1:b3:c2:e3:a3:e2:10:ce:d1:d8:17:35:a7:19:
91:2b:16:f2:42:c0:36:48:de:aa:6c:37:77:6b:a3:
f8:b4:9c:76:ae:cc:e3:9b:75:42:b7:b1:30:cb:be:
5b:03:03:88:0b:e5:df:14:64:3a:3b:01:90:6c:e1:
de:a6:b3:85:71:c8:78:90:88:70:03:ce:38:27:0e:
67:5c:36:1b:b0:0a:c9:28:df:c7:22:1d:7a:44:03:
2b:df:c4:a9:22:e4:51:b1:ab:9c:64:e5:90:c7:26:
02:f6:70:a4:a2:59:f1:02:c9:84:6c:15:04:36:a7:
f5:08:40:b2:ed:bd:54:af:52:6a:3c:fa:67:47:9e:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:7A:4B:95:42:FC:DD:D3:85:FB:25:EA:4D:FD:C3:74:EE:28:70
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/zUl6S5VC_N3Thfsl6k39w3TuKHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.221.0.0/17
82.221.165.0-82.221.166.255
212.30.224.0/19
IPv6:
2a02:f48::/40
2a02:f48:2100::/40
Signature Algorithm: sha256WithRSAEncryption
7a:62:4a:4a:8d:f3:03:90:5c:7b:df:71:64:03:37:22:60:88:
83:aa:3f:73:0a:7e:c3:d8:5f:c4:b6:59:92:f2:ba:39:43:cd:
54:c2:15:99:66:64:05:57:27:95:06:81:fd:ff:c4:b0:97:8d:
2b:0c:8c:5d:76:a9:e8:95:e8:f8:45:4c:66:50:c4:04:aa:eb:
5d:f4:af:00:2b:87:b3:42:e1:cd:24:c4:80:05:a9:12:6b:f0:
a9:e0:40:3a:51:4d:1e:22:ec:43:4c:72:de:ba:f1:30:ca:d1:
cf:03:d1:d5:ad:88:80:39:80:87:db:c6:8f:7d:92:e9:e3:cc:
ce:2f:fb:cf:cd:cc:99:60:a1:d8:de:38:ed:77:fd:43:9c:04:
f7:94:57:1a:13:35:9a:98:3f:61:d4:89:ee:9d:00:2a:d4:5c:
ba:25:85:ee:84:75:a2:3d:e6:4c:fe:e4:00:e4:d0:41:bc:55:
f8:de:b5:a4:8e:c1:61:7e:d3:a5:99:ac:9b:2e:31:7f:f4:5c:
92:29:82:c9:88:67:f9:48:63:17:63:84:9e:ad:bc:e2:78:49:
c9:dc:4d:3f:fa:ba:df:3d:b7:e0:59:e1:5e:9c:64:bc:45:85:
ac:c8:90:f2:1e:fb:79:2c:31:b8:d1:ac:1f:c0:32:d6:cc:1c:
6d:5b:fa:0a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIENqQCtTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDgwMjVjN2RlMDQwMGUwZjNjODhkNGExMjJhMzE3ZTMyYzVlMjFjMB4XDTIyMDEx
NzE1NDg1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2Q0OTdhNGI5NTQy
ZmNkZGQzODVmYjI1ZWE0ZGZkYzM3NGVlMjg3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALrDyd3+zg4gdD996NoiGy8OQXxkHA0Thrg71LvQpCxCTIvR
abyDrjOQY3QQMCcl0S1KAAogHSSehtcChTIFN4gtOqJ9sfkzrfbI/Iit8N6r0Ng7
AX+xJkWdNIck/33ZnImAeMrb2IlkyaPPvP/CtpDB67SiQRVdkaGzwuOj4hDO0dgX
NacZkSsW8kLANkjeqmw3d2uj+LScdq7M45t1QrexMMu+WwMDiAvl3xRkOjsBkGzh
3qazhXHIeJCIcAPOOCcOZ1w2G7AKySjfxyIdekQDK9/EqSLkUbGrnGTlkMcmAvZw
pKJZ8QLJhGwVBDan9QhAsu29VK9Sajz6Z0eeFtECAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBTNSXpLlUL83dOF+yXqTf3DdO4ocDAfBgNVHSMEGDAWgBRAgCXH3gQA4PPI
jUoSKjF+MsXiHDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FJQWx4OTRFQU9EenlJMUtFaW94ZmpMRjRody5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGMvNTkzMDNkLTc0OGEtNDc5Ny04MTFlLWZlZTJlOGQ0MDg0Zi8x
L3pVbDZTNVZDX04zVGhmc2w2azM5dzNUdUtIQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMv
NTkzMDNkLTc0OGEtNDc5Ny04MTFlLWZlZTJlOGQ0MDg0Zi8xL1FJQWx4OTRFQU9E
enlJMUtFaW94ZmpMRjRody5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowIAQCAAEwGgMEB1LdADAMAwQAUt2lAwQAUt2mAwQF
1B7gMBYEAgACMBADBgAqAg9IAAMGACoCD0ghMA0GCSqGSIb3DQEBCwUAA4IBAQB6
YkpKjfMDkFx733FkAzciYIiDqj9zCn7D2F/EtlmS8ro5Q81UwhWZZmQFVyeVBoH9
/8Swl40rDIxddqnolej4RUxmUMQEqutd9K8AK4ezQuHNJMSABakSa/Cp4EA6UU0e
IuxDTHLeuvEwytHPA9HVrYiAOYCH28aPfZLp48zOL/vPzcyZYKHY3jjtd/1DnAT3
lFcaEzWamD9h1InunQAq1Fy6JYXuhHWiPeZM/uQA5NBBvFX43rWkjsFhftOlmayb
LjF/9FySKYLJiGf5SGMXY4SerbzieEnJ3E0/+rrfPbfgWeFenGS8RYWsyJDyHvt5
LDG40awfwDLWzBxtW/oK
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:48 2025 by rpki-client