Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nFxXg6jOI-DklkQ3r0CykWFOmM4.roa
File: nFxXg6jOI-DklkQ3r0CykWFOmM4.roa (raw, json)
Hash identifier: jAGWNkHgx2zqYrgkY2xyYZtUZq/DmCLuvMVghG+VWes=
Subject key identifier: 9C:5C:57:83:A8:CE:23:E0:E4:96:44:37:AF:40:B2:91:61:4E:98:CE
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018890038DA4313817A6F1174E52B6EB5CDC
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nFxXg6jOI-DklkQ3r0CykWFOmM4.roa
Signing time: Tue 06 Jun 2023 09:22:11 +0000
ROA not before: Tue 06 Jun 2023 09:22:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.49.0/24 maxlen: 24
185.243.48.0/22 maxlen: 22
185.215.230.0/24 maxlen: 24
185.124.172.0/22 maxlen: 24
178.239.159.0/24 maxlen: 24
178.239.154.0/23 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:03:8d:a4:31:38:17:a6:f1:17:4e:52:b6:eb:5c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 6 09:22:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c5c5783a8ce23e0e4964437af40b291614e98ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:9e:40:80:ce:ab:a5:93:64:2a:fe:53:37:
e2:4e:53:30:43:87:58:40:02:8e:a8:43:79:44:c0:
24:a9:c0:11:a0:8e:6e:57:6d:b8:6c:ce:0b:37:e3:
c0:2c:7d:cb:36:2b:26:e1:e5:b3:dc:70:3b:c9:38:
25:bf:77:cb:0d:32:d9:13:33:d4:35:09:6c:4a:2e:
c7:00:fe:60:29:40:3f:93:ee:62:8f:02:47:69:87:
42:f4:43:a7:84:5a:0b:f7:9b:70:5d:8d:00:d2:f9:
85:2b:b3:d5:81:dc:88:39:ba:0b:44:8c:23:84:a5:
8c:c1:48:0d:63:72:f7:1f:c4:3d:2f:fe:80:c0:e9:
1a:74:68:08:10:0e:f5:d0:60:4f:59:88:84:a6:73:
56:a2:e3:a8:68:f5:be:72:c2:fd:7d:59:e4:6a:19:
b2:cb:d8:36:ed:2f:c4:a8:e5:21:79:0b:f3:e3:89:
4b:8f:8c:f4:e4:26:08:37:92:ee:e8:4b:44:2e:2c:
c4:c8:be:8f:ba:a8:9e:f0:2b:e2:8e:47:38:4f:f9:
df:2e:d4:2f:33:79:04:6a:51:19:eb:70:77:e3:a5:
59:11:17:99:53:8e:33:51:32:22:d1:f7:91:e3:ae:
0e:50:6d:82:a6:81:b8:da:44:30:30:98:8c:f2:27:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5C:57:83:A8:CE:23:E0:E4:96:44:37:AF:40:B2:91:61:4E:98:CE
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nFxXg6jOI-DklkQ3r0CykWFOmM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.154.0/23
178.239.159.0/24
185.26.34.0/23
185.124.172.0/22
185.215.230.0/24
185.243.48.0/22
Signature Algorithm: sha256WithRSAEncryption
67:cb:35:37:92:d3:51:61:ad:74:07:02:20:84:2e:3c:48:16:
fa:28:bd:0e:ce:f6:ca:79:6e:3c:bd:e6:9c:7c:30:76:0f:d8:
7b:e6:cb:f1:00:6c:fb:1d:de:bf:07:50:69:2e:54:f0:f4:ca:
a9:2d:18:e2:8f:d8:26:68:7b:be:5e:19:1f:07:01:88:3d:3d:
21:d9:1a:f5:d3:08:3f:b1:1d:cf:36:4c:42:02:3e:61:53:e1:
72:c2:90:37:cc:51:e5:24:f3:8b:1c:59:46:c4:08:93:9e:b4:
7d:33:44:5c:b7:d5:ad:cf:65:ae:57:58:af:eb:88:a9:e2:87:
00:2f:3e:11:39:91:8a:e7:30:ba:46:49:7d:45:80:77:c6:f5:
64:0e:4e:e5:80:ea:21:74:b3:1d:1e:5b:5f:f3:cd:2c:03:25:
c8:94:02:db:de:d3:fc:9c:c7:e5:b8:74:99:c2:4e:2d:00:a4:
6b:2d:6c:68:b7:4a:2e:b3:93:13:44:6f:9f:e9:5f:20:3c:ff:
c5:97:8f:9f:f1:5d:5a:89:4a:4b:31:4b:f7:34:71:be:76:20:
11:d3:13:a1:fa:7d:be:ca:4a:66:17:8a:63:97:c3:e1:70:eb:
93:8e:de:26:78:b8:76:6b:3c:14:84:44:5e:47:1b:32:da:0e:
cb:ef:1f:fb
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYiQA42kMTgXpvEXTlK261zcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMwNjA2MDkyMjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzVjNTc4M2E4Y2UyM2UwZTQ5NjQ0MzdhZjQwYjI5MTYxNGU5OGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZWeQIDOq6WTZCr+UzfiTlMwQ4dY
QAKOqEN5RMAkqcARoI5uV224bM4LN+PALH3LNism4eWz3HA7yTglv3fLDTLZEzPU
NQlsSi7HAP5gKUA/k+5ijwJHaYdC9EOnhFoL95twXY0A0vmFK7PVgdyIOboLRIwj
hKWMwUgNY3L3H8Q9L/6AwOkadGgIEA710GBPWYiEpnNWouOoaPW+csL9fVnkahmy
y9g27S/EqOUheQvz44lLj4z05CYIN5Lu6EtELizEyL6Puqie8Cvijkc4T/nfLtQv
M3kEalEZ63B346VZEReZU44zUTIi0feR464OUG2CpoG42kQwMJiM8ichAwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJxcV4OoziPg5JZEN69AspFhTpjOMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvbkZ4WGc2ak9JLURrbGtRM3IwQ3lrV0ZPbU00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBsu+aAwQA
su+fAwQBuRoiAwQCuXysAwQAudfmAwQCufMwMA0GCSqGSIb3DQEBCwUAA4IBAQBn
yzU3ktNRYa10BwIghC48SBb6KL0OzvbKeW48veacfDB2D9h75svxAGz7Hd6/B1Bp
LlTw9MqpLRjij9gmaHu+XhkfBwGIPT0h2Rr10wg/sR3PNkxCAj5hU+FywpA3zFHl
JPOLHFlGxAiTnrR9M0Rct9Wtz2WuV1iv64ip4ocALz4ROZGK5zC6Rkl9RYB3xvVk
Dk7lgOohdLMdHltf880sAyXIlALb3tP8nMfluHSZwk4tAKRrLWxot0ous5MTRG+f
6V8gPP/Fl4+f8V1aiUpLMUv3NHG+diAR0xOh+n2+ykpmF4pjl8PhcOuTjt4meLh2
azwUhEReRxsy2g7L7x/7
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:27 2025 by rpki-client