Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/PuwpRfURPYYNNrq3S3Z3v5nTeq8.roa
File: PuwpRfURPYYNNrq3S3Z3v5nTeq8.roa (raw, json)
Hash identifier: Eoz7nhZCmIpn3YEJBF6Xg8c9XDoWJDULw78CHjEVJ1Q=
Subject key identifier: 3E:EC:29:45:F5:11:3D:86:0D:36:BA:B7:4B:76:77:BF:99:D3:7A:AF
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 018571956BD61B940E8EA024A1B9BB38F134
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/PuwpRfURPYYNNrq3S3Z3v5nTeq8.roa
Signing time: Mon 02 Jan 2023 08:24:55 +0000
ROA not before: Mon 02 Jan 2023 08:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8542
IP address blocks: 85.200.0.0/16 maxlen: 16
62.97.192.0/18 maxlen: 18
82.134.0.0/17 maxlen: 17
213.153.0.0/19 maxlen: 19
2a00:14d8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:6b:d6:1b:94:0e:8e:a0:24:a1:b9:bb:38:f1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Jan 2 08:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eec2945f5113d860d36bab74b7677bf99d37aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:3d:9a:11:95:5b:b4:28:43:4c:e7:5c:d2:
e0:38:c0:a9:26:8a:7e:43:4b:c1:68:f9:a4:b2:d9:
70:93:27:8c:9e:04:3d:55:e1:32:20:89:f0:c3:55:
01:23:2a:49:81:03:b7:d7:f9:df:32:20:5e:a8:42:
9b:eb:fb:a5:96:53:ef:97:3f:6c:8a:bf:b0:7e:de:
1c:7c:1e:88:e9:22:6f:28:a4:45:fa:c4:9e:49:1f:
e1:82:c9:dd:47:27:b2:fe:8f:2e:ab:c9:19:c9:d9:
a2:96:e3:87:5a:77:40:b6:71:f1:9c:38:75:a4:8b:
65:19:57:7b:5f:05:36:d3:93:bb:cb:90:4a:ac:91:
10:65:19:e8:85:90:ff:ab:2e:99:5e:39:cf:a0:09:
a7:ca:ec:85:b7:dd:8b:d6:8b:d9:36:0e:37:36:9c:
ee:23:02:76:7e:ea:7c:c6:02:ea:cd:8a:06:44:9c:
0e:ce:58:09:f6:2e:ce:15:ac:60:9e:88:c7:bb:06:
47:7f:e3:a7:a3:35:78:fc:f5:07:1f:26:cf:52:60:
c1:87:bd:19:cc:be:c4:3d:69:cd:c1:f2:b0:59:51:
81:bb:e6:a8:b3:04:c8:44:c6:05:3a:6f:11:39:18:
7d:e1:cc:95:b6:7b:7a:e1:b9:d1:4d:df:63:de:ee:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:29:45:F5:11:3D:86:0D:36:BA:B7:4B:76:77:BF:99:D3:7A:AF
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/PuwpRfURPYYNNrq3S3Z3v5nTeq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.97.192.0/18
82.134.0.0/17
85.200.0.0/16
213.153.0.0/19
IPv6:
2a00:14d8::/29
Signature Algorithm: sha256WithRSAEncryption
ae:ad:40:6d:37:c3:85:05:e4:ff:5f:e9:6f:3e:fe:a9:b9:63:
f6:5e:95:46:9e:2c:5c:08:0d:dd:00:e1:36:25:b0:72:60:d2:
e4:48:30:6f:e5:c9:b5:66:85:4d:5b:aa:b9:32:09:66:53:b5:
d5:27:f2:ae:da:1f:74:3a:74:54:1b:76:4d:51:41:40:a1:5c:
d2:5f:1f:f6:9d:95:ed:74:94:83:74:37:15:61:a9:34:91:cd:
f0:24:91:98:16:93:07:2c:e4:ca:72:88:64:5d:f0:44:da:6e:
8f:74:d5:d8:05:61:79:11:96:14:e3:9f:36:df:bc:0d:2d:5a:
84:d4:c9:56:5f:5f:28:0d:6b:a7:91:84:ec:9e:01:1c:6a:e8:
cd:35:fc:91:8b:53:83:1f:3b:54:f6:2d:f5:19:22:4f:b8:c5:
7f:70:dd:4c:d4:e3:a3:28:8b:68:6a:5e:56:3f:6c:56:1c:95:
c7:74:d3:31:47:ba:e4:d9:1c:55:4f:33:58:73:d2:05:40:05:
a9:97:8f:27:86:4b:89:3d:1f:53:d3:5c:56:18:0c:29:1c:79:
e4:33:ea:ee:a5:78:bb:dc:94:f5:80:0f:03:3a:cd:37:67:12:
7a:bb:56:90:09:dd:b5:c9:35:1c:a5:d8:04:65:43:2d:3d:9d:
19:bf:47:2d
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYVxlWvWG5QOjqAkobm7OPE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2U4MWJhODQzNDQ1OThjNjE0NjI4MzNhYWRmMzIwNGVh
ZTA4N2MwHhcNMjMwMTAyMDgyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWVjMjk0NWY1MTEzZDg2MGQzNmJhYjc0Yjc2NzdiZjk5ZDM3YWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6c9mhGVW7QoQ0znXNLgOMCpJop+
Q0vBaPmkstlwkyeMngQ9VeEyIInww1UBIypJgQO31/nfMiBeqEKb6/ulllPvlz9s
ir+wft4cfB6I6SJvKKRF+sSeSR/hgsndRyey/o8uq8kZydmiluOHWndAtnHxnDh1
pItlGVd7XwU205O7y5BKrJEQZRnohZD/qy6ZXjnPoAmnyuyFt92L1ovZNg43Npzu
IwJ2fup8xgLqzYoGRJwOzlgJ9i7OFaxgnojHuwZHf+OnozV4/PUHHybPUmDBh70Z
zL7EPWnNwfKwWVGBu+aoswTIRMYFOm8RORh94cyVtnt64bnRTd9j3u4qEwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFD7sKUX1ET2GDTa6t0t2d7+Z03qvMB8GA1UdIwQY
MBaAFIh+gbqENEWYxhRigzqt8yBOrgh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQt
ZTAxNjI0MDFmZjdhLzEvUHV3cFJmVVJQWVlOTnJxM1MzWjN2NW5UZXE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQtZTAxNjI0MDFmZjdh
LzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQGPmHAAwQH
UoYAAwMAVcgDBAXVmQAwDQQCAAIwBwMFAyoAFNgwDQYJKoZIhvcNAQELBQADggEB
AK6tQG03w4UF5P9f6W8+/qm5Y/ZelUaeLFwIDd0A4TYlsHJg0uRIMG/lybVmhU1b
qrkyCWZTtdUn8q7aH3Q6dFQbdk1RQUChXNJfH/adle10lIN0NxVhqTSRzfAkkZgW
kwcs5MpyiGRd8ETabo901dgFYXkRlhTjnzbfvA0tWoTUyVZfXygNa6eRhOyeARxq
6M01/JGLU4MfO1T2LfUZIk+4xX9w3UzU46Moi2hqXlY/bFYclcd00zFHuuTZHFVP
M1hz0gVABamXjyeGS4k9H1PTXFYYDCkceeQz6u6leLvclPWADwM6zTdnEnq7VpAJ
3bXJNRyl2ARlQy09nRm/Ry0=
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:32:04 2025 by rpki-client