Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/Z3dqP8M_2kN4-Pi0qIKuarEAxKY.roa
File: Z3dqP8M_2kN4-Pi0qIKuarEAxKY.roa (raw, json)
Hash identifier: XwytX4pTAqFJ6WINEP3d22WYa+pS6ArOdxLNCb9vogo=
Subject key identifier: 67:77:6A:3F:C3:3F:DA:43:78:F8:F8:B4:A8:82:AE:6A:B1:00:C4:A6
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 353892B8
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/Z3dqP8M_2kN4-Pi0qIKuarEAxKY.roa
Signing time: Sat 18 Jun 2022 17:04:47 +0000
ROA not before: Sat 18 Jun 2022 17:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25160
IP address blocks: 185.120.204.0/22 maxlen: 22
158.41.64.0/18 maxlen: 18
193.221.128.0/19 maxlen: 24
165.65.0.0/16 maxlen: 16
206.245.208.0/20 maxlen: 20
206.245.224.0/19 maxlen: 24
91.238.221.0/24 maxlen: 24
185.237.48.0/22 maxlen: 24
185.28.240.0/22 maxlen: 24
144.98.0.0/16 maxlen: 24
82.163.192.0/19 maxlen: 24
193.0.176.0/23 maxlen: 24
5.10.144.0/20 maxlen: 24
194.8.254.0/23 maxlen: 24
2a00:e346::/32 maxlen: 32
2a00:e347::/32 maxlen: 32
2a00:e345::/32 maxlen: 32
2a00:e340::/29 maxlen: 29
2a00:e342::/32 maxlen: 32
2a00:e340:3::/48 maxlen: 48
2a00:e341::/32 maxlen: 32
2a00:e344::/32 maxlen: 32
2a00:e344:3f00::/48 maxlen: 48
2a00:e340::/32 maxlen: 32
2a00:e343::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892900024 (0x353892b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jun 18 17:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67776a3fc33fda4378f8f8b4a882ae6ab100c4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:f6:92:b0:76:ab:bc:f6:37:b8:83:55:89:
ee:9c:f1:3d:bc:38:9e:06:3a:e6:8b:52:c1:6e:12:
2d:3f:d9:fd:36:1d:cb:f4:69:d3:4c:b5:e3:30:7c:
fa:1e:47:89:c9:ff:1f:1c:07:0c:a0:9a:f6:7f:a0:
2b:8a:58:19:87:ab:61:3b:b5:7b:3f:af:d8:41:89:
8b:b5:d0:c1:dc:6c:27:62:82:e1:d9:1a:5c:9a:31:
30:d4:ce:d9:bc:a9:dc:b4:0b:77:a6:95:19:68:63:
16:cc:51:e0:31:32:df:ed:07:44:2a:7a:64:e0:86:
0f:db:94:cd:fa:41:9d:f6:82:fe:31:db:59:3f:48:
26:4c:af:50:14:b7:c3:32:00:31:8e:bc:5b:1d:68:
d2:e1:65:f5:60:76:0e:a3:9c:d6:26:46:c3:22:19:
1c:91:4b:6d:13:07:a2:32:a0:1c:03:df:3f:83:c8:
f8:65:ce:c2:88:cb:a5:4c:8b:c7:88:73:e7:e0:b4:
32:4c:e8:af:24:f1:b3:4f:57:b3:d9:f7:e2:e7:d6:
59:34:07:2d:59:a8:5c:d1:6b:e9:b5:4f:67:79:3a:
28:ba:2b:77:d3:55:16:55:dc:07:de:78:3e:17:77:
80:4e:8b:1e:10:a7:c9:f9:4b:2c:7c:5a:e9:ce:ad:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:6A:3F:C3:3F:DA:43:78:F8:F8:B4:A8:82:AE:6A:B1:00:C4:A6
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/Z3dqP8M_2kN4-Pi0qIKuarEAxKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.144.0/20
82.163.192.0/19
91.238.221.0/24
144.98.0.0/16
158.41.64.0/18
165.65.0.0/16
185.28.240.0/22
185.120.204.0/22
185.237.48.0/22
193.0.176.0/23
193.221.128.0/19
194.8.254.0/23
206.245.208.0-206.245.255.255
IPv6:
2a00:e340::/29
Signature Algorithm: sha256WithRSAEncryption
0c:25:48:1c:0d:7a:17:7a:1e:39:b7:a3:7a:d8:2b:0d:81:1c:
92:f4:a2:a6:6c:eb:40:39:69:d3:c2:c6:3a:28:f0:ae:8f:7a:
c6:88:6f:b2:9f:75:6a:cf:44:75:f3:4c:41:e1:61:1f:ec:9a:
65:0c:a9:89:bb:a9:c3:54:78:82:99:1e:98:dc:50:5a:9f:7d:
3e:e0:49:c5:4a:b4:18:68:e0:97:79:38:d1:57:20:54:23:84:
ff:0a:75:a2:f3:9b:98:36:c0:64:e5:8c:cb:51:43:0e:b1:15:
12:d4:25:1f:f6:94:bc:e9:ca:89:a0:a4:f2:27:6f:a7:c7:2c:
76:a9:74:64:f2:47:3c:ac:3a:45:26:46:58:16:f4:7a:0b:2b:
b4:a4:f8:33:fd:0a:76:31:b3:af:7e:7e:2d:03:a6:ed:e5:0a:
b3:c3:34:fc:ee:1d:7a:21:c1:f2:f5:ef:b8:71:d6:ea:90:a4:
78:1d:49:94:44:99:d5:fa:4e:f4:61:2b:8e:b9:cf:12:f1:2e:
b2:10:a4:57:d8:40:57:ba:c0:94:8d:90:d7:e6:27:21:9a:18:
26:72:14:9f:55:4a:c4:b9:6b:65:c7:c2:de:f9:ff:a3:c8:a2:
8f:2f:1e:c9:11:79:2f:15:9e:d1:31:26:da:15:b6:ee:b2:95:
5a:25:82:33
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIENTiSuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZWU4NDNhODVkZDY2NGU5ZGMwMzEwODkyYmQ3ZGQ5Y2U1MjU5MWM3MB4XDTIyMDYx
ODE3MDQ0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjc3NzZhM2ZjMzNm
ZGE0Mzc4ZjhmOGI0YTg4MmFlNmFiMTAwYzRhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALE39pKwdqu89je4g1WJ7pzxPbw4ngY65otSwW4SLT/Z/TYd
y/Rp00y14zB8+h5Hicn/HxwHDKCa9n+gK4pYGYerYTu1ez+v2EGJi7XQwdxsJ2KC
4dkaXJoxMNTO2byp3LQLd6aVGWhjFsxR4DEy3+0HRCp6ZOCGD9uUzfpBnfaC/jHb
WT9IJkyvUBS3wzIAMY68Wx1o0uFl9WB2DqOc1iZGwyIZHJFLbRMHojKgHAPfP4PI
+GXOwojLpUyLx4hz5+C0MkzoryTxs09Xs9n34ufWWTQHLVmoXNFr6bVPZ3k6KLor
d9NVFlXcB954Phd3gE6LHhCnyflLLHxa6c6tNS8CAwEAAaOCAmUwggJhMB0GA1Ud
DgQWBBRnd2o/wz/aQ3j4+LSogq5qsQDEpjAfBgNVHSMEGDAWgBRO6EOoXdZk6dwD
EIkr192c5SWRxzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1R1aERxRjNXWk9uY0F4Q0pLOWZkbk9VbGtjYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvYWRhZDIwLWM1MTItNGZiMC1hMTI3LTQ4Y2Y0MTJiMzg3Yi8x
L1ozZHFQOE1fMmtONC1QaTBxSUt1YXJFQXhLWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
YWRhZDIwLWM1MTItNGZiMC1hMTI3LTQ4Y2Y0MTJiMzg3Yi8xL1R1aERxRjNXWk9u
Y0F4Q0pLOWZkbk9VbGtjYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB7
BggrBgEFBQcBBwEB/wRsMGowWQQCAAEwUwMEBAUKkAMEBVKjwAMEAFvu3QMDAJBi
AwQGnilAAwMApUEDBAK5HPADBAK5eMwDBAK57TADBAHBALADBAXB3YADBAHCCP4w
CwMEBM710AMDAc70MA0EAgACMAcDBQMqAONAMA0GCSqGSIb3DQEBCwUAA4IBAQAM
JUgcDXoXeh45t6N62CsNgRyS9KKmbOtAOWnTwsY6KPCuj3rGiG+yn3Vqz0R180xB
4WEf7JplDKmJu6nDVHiCmR6Y3FBan30+4EnFSrQYaOCXeTjRVyBUI4T/CnWi85uY
NsBk5YzLUUMOsRUS1CUf9pS86cqJoKTyJ2+nxyx2qXRk8kc8rDpFJkZYFvR6Cyu0
pPgz/Qp2MbOvfn4tA6bt5QqzwzT87h16IcHy9e+4cdbqkKR4HUmURJnV+k70YSuO
uc8S8S6yEKRX2EBXusCUjZDX5ichmhgmchSfVUrEuWtlx8Le+f+jyKKPLx7JEXkv
FZ7RMSbaFbbuspVaJYIz
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:53 2025 by rpki-client