Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/Zrd8dqqmF5adqa1Dsb49FnQkDb0.roa
File: Zrd8dqqmF5adqa1Dsb49FnQkDb0.roa (raw, json)
Hash identifier: C1tdlL9UGrz+Lpu+GLlpdv8MK7tTMG9/FoUSInPbPOI=
Subject key identifier: 66:B7:7C:76:AA:A6:17:96:9D:A9:AD:43:B1:BE:3D:16:74:24:0D:BD
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 01856F021DFCFFE54AEA2BF88CACE3C7071B
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/Zrd8dqqmF5adqa1Dsb49FnQkDb0.roa
Signing time: Sun 01 Jan 2023 20:24:47 +0000
ROA not before: Sun 01 Jan 2023 20:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29169
IP address blocks: 46.226.104.0/21 maxlen: 32
213.167.228.0/22 maxlen: 24
217.70.176.0/20 maxlen: 32
185.26.124.0/22 maxlen: 32
213.167.240.0/20 maxlen: 24
2001:4b98::/31 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:1d:fc:ff:e5:4a:ea:2b:f8:8c:ac:e3:c7:07:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Jan 1 20:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66b77c76aaa617969da9ad43b1be3d1674240dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:1d:4e:c2:78:91:6b:d6:44:29:3d:58:89:
76:2a:1d:1c:f8:18:da:9c:8c:02:0d:3d:e3:b5:1b:
b5:6a:cd:ca:ea:88:1c:48:da:63:c9:d4:0b:76:83:
e1:3c:9c:9e:b7:c9:28:e3:b3:ff:96:64:55:77:fc:
03:f5:3f:b8:80:2a:17:d0:4d:5a:a3:8c:9c:df:fe:
b8:79:cb:95:1d:8c:2b:a6:98:0b:d6:7e:2e:b5:23:
8b:56:c9:e4:97:b7:00:ce:bd:b1:48:6b:fe:5a:c5:
24:b5:14:e6:e1:e4:26:ed:33:24:49:2d:2b:df:9f:
87:4c:c0:0f:a6:71:83:9f:62:9d:e8:4e:8e:c9:c3:
3e:d8:4e:e9:03:2b:91:4f:32:80:18:b5:fc:ff:34:
88:65:e1:07:ec:0b:26:69:b7:93:20:6b:ed:b6:d8:
9a:bc:88:7e:de:d1:8b:98:6d:0d:b4:d4:4a:d0:42:
ac:bc:bf:2b:b1:21:fc:63:9e:a4:bc:58:69:93:20:
aa:e2:75:90:8f:78:59:3f:92:c4:d8:c6:ce:d5:38:
31:ca:c0:af:bd:25:fc:a1:82:dc:14:de:1e:db:38:
13:06:1b:79:28:b5:b2:6f:0c:7a:1f:e7:a1:ed:b1:
2c:c3:c3:39:57:e1:43:fe:b3:81:28:b5:92:58:69:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B7:7C:76:AA:A6:17:96:9D:A9:AD:43:B1:BE:3D:16:74:24:0D:BD
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/Zrd8dqqmF5adqa1Dsb49FnQkDb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.104.0/21
185.26.124.0/22
213.167.228.0/22
213.167.240.0/20
217.70.176.0/20
IPv6:
2001:4b98::/31
Signature Algorithm: sha256WithRSAEncryption
60:83:f0:b6:cd:0b:66:81:13:8d:a4:9d:a9:85:f0:41:7f:71:
5f:bc:1b:24:5c:f3:33:b6:89:29:f6:bd:b9:52:3b:54:9a:b6:
3a:06:43:7e:f6:2d:ec:49:bc:1f:aa:2a:a0:83:36:dd:48:d9:
85:b6:c3:fb:a9:03:61:38:a6:e5:7c:04:87:56:91:2e:a0:e3:
d0:7f:1b:a3:6e:17:41:6c:74:c9:2d:e9:2c:1d:33:97:7e:d7:
24:6a:66:b3:a8:28:68:2c:8e:93:aa:46:ed:93:ed:c9:d9:03:
8f:f3:3b:cf:25:4c:70:0a:b0:32:75:3b:06:ec:4b:b0:9b:3c:
7c:12:3d:e8:05:6a:72:91:d0:1d:7e:fe:9a:38:5e:0d:35:15:
67:ed:4f:40:b8:25:74:f5:ab:4a:cc:b6:d2:77:dd:3d:dc:11:
68:bd:35:c2:40:44:a1:3b:2a:af:b0:25:39:bf:2b:47:c4:1a:
8f:df:6e:5d:e6:8a:03:a5:04:1a:62:b8:d4:49:bd:c3:c0:03:
c1:ed:77:51:fe:2f:3c:2a:21:34:47:e0:c6:9a:e6:20:14:6c:
0a:65:fb:99:17:b5:a9:50:01:92:81:a9:34:47:42:09:4e:eb:
dc:26:fe:73:fd:14:f0:85:37:fe:d3:b3:72:39:2f:df:e6:08:
42:7a:a9:33
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVvAh38/+VK6iv4jKzjxwcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTBlYzU5NTY0MzI0MjM3NDIwZDUwNmI5YjQ5OGQ3NTJl
ZTIxNjgwHhcNMjMwMTAxMjAyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmI3N2M3NmFhYTYxNzk2OWRhOWFkNDNiMWJlM2QxNjc0MjQwZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6QdTsJ4kWvWRCk9WIl2Kh0c+Bja
nIwCDT3jtRu1as3K6ogcSNpjydQLdoPhPJyet8ko47P/lmRVd/wD9T+4gCoX0E1a
o4yc3/64ecuVHYwrppgL1n4utSOLVsnkl7cAzr2xSGv+WsUktRTm4eQm7TMkSS0r
35+HTMAPpnGDn2Kd6E6OycM+2E7pAyuRTzKAGLX8/zSIZeEH7AsmabeTIGvtttia
vIh+3tGLmG0NtNRK0EKsvL8rsSH8Y56kvFhpkyCq4nWQj3hZP5LE2MbO1TgxysCv
vSX8oYLcFN4e2zgTBht5KLWybwx6H+eh7bEsw8M5V+FD/rOBKLWSWGkDSQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFGa3fHaqpheWnamtQ7G+PRZ0JA29MB8GA1UdIwQY
MBaAFLyg7FlWQyQjdCDVBrm0mNdS7iFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMt
N2M1NDlmMWVkMTZjLzEvWnJkOGRxcW1GNWFkcWExRHNiNDlGblFrRGIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMtN2M1NDlmMWVkMTZj
LzEvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDLuJoAwQC
uRp8AwQC1afkAwQE1afwAwQE2UawMA0EAgACMAcDBQEgAUuYMA0GCSqGSIb3DQEB
CwUAA4IBAQBgg/C2zQtmgRONpJ2phfBBf3FfvBskXPMztokp9r25UjtUmrY6BkN+
9i3sSbwfqiqggzbdSNmFtsP7qQNhOKblfASHVpEuoOPQfxujbhdBbHTJLeksHTOX
ftckamazqChoLI6Tqkbtk+3J2QOP8zvPJUxwCrAydTsG7Euwmzx8Ej3oBWpykdAd
fv6aOF4NNRVn7U9AuCV09atKzLbSd9093BFovTXCQEShOyqvsCU5vytHxBqP325d
5ooDpQQaYrjUSb3DwAPB7XdR/i88KiE0R+DGmuYgFGwKZfuZF7WpUAGSgak0R0IJ
TuvcJv5z/RTwhTf+07NyOS/f5ghCeqkz
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:14:38 2025 by rpki-client