Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/pdz7_aFPNTlYu9M9udgoiP42TAc.roa
File: pdz7_aFPNTlYu9M9udgoiP42TAc.roa (raw, json)
Hash identifier: +dXzBF80O2StYrjpx33ArHDVoGzj3UPpu6jybIL2uw4=
Subject key identifier: A5:DC:FB:FD:A1:4F:35:39:58:BB:D3:3D:B9:D8:28:88:FE:36:4C:07
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 018C450477EEA15C59295A9A657BAF666017
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/pdz7_aFPNTlYu9M9udgoiP42TAc.roa
Signing time: Thu 07 Dec 2023 16:02:49 +0000
ROA not before: Thu 07 Dec 2023 16:02:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 178.22.57.0/24 maxlen: 24
178.22.56.0/21 maxlen: 21
178.22.58.0/24 maxlen: 24
178.22.56.0/24 maxlen: 24
178.22.62.0/24 maxlen: 24
178.22.63.0/24 maxlen: 24
178.22.60.0/24 maxlen: 24
178.22.61.0/24 maxlen: 24
178.22.59.0/24 maxlen: 24
45.153.17.0/24 maxlen: 24
45.153.16.0/24 maxlen: 24
45.153.16.0/23 maxlen: 23
185.31.246.0/24 maxlen: 24
185.31.244.0/22 maxlen: 22
185.31.244.0/24 maxlen: 24
185.31.245.0/24 maxlen: 24
185.31.247.0/24 maxlen: 24
2a00:1e28::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:04:77:ee:a1:5c:59:29:5a:9a:65:7b:af:66:60:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Dec 7 16:02:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5dcfbfda14f353958bbd33db9d82888fe364c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:e6:07:3b:6b:04:22:a2:a0:69:46:e8:01:
03:c3:1c:3f:d8:69:aa:9d:34:47:ab:a6:e8:e1:b5:
e7:02:e2:1a:46:11:05:2e:78:27:e9:bb:65:72:b9:
56:8c:10:61:c8:96:2c:cd:7b:25:78:da:b2:18:9d:
a6:6e:d7:73:12:cf:56:07:70:52:4d:64:b2:0d:40:
a0:06:0d:1f:01:20:10:ee:bd:53:b5:cf:90:f2:34:
32:50:4a:42:d6:16:aa:fa:ca:b1:55:a1:b2:4f:00:
6d:3d:a5:b0:83:27:0d:83:45:7b:45:f9:0f:fd:96:
39:b9:e2:bc:c8:ed:a5:07:e9:b1:53:a2:76:33:0f:
6e:c6:0b:6a:77:f2:bb:49:3c:9b:ae:0c:11:ad:19:
55:ce:70:d0:be:83:91:5d:8a:1a:15:8e:5b:35:46:
72:f0:63:bb:6f:19:68:bd:e0:f3:60:70:39:7e:fa:
db:23:f9:73:d1:b2:9f:83:bd:4d:a8:d8:8a:38:30:
88:bb:a7:79:af:79:44:00:e1:0b:df:1b:5e:0e:4e:
99:4b:ad:b6:7c:fa:4e:12:4c:2e:c0:bf:bf:e3:0c:
a7:17:63:a8:da:09:ec:22:a2:3f:48:64:6f:11:c7:
68:5e:e5:fa:c8:ea:e1:28:12:ba:31:cc:d9:26:e7:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DC:FB:FD:A1:4F:35:39:58:BB:D3:3D:B9:D8:28:88:FE:36:4C:07
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/pdz7_aFPNTlYu9M9udgoiP42TAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.16.0/23
178.22.56.0/21
185.31.244.0/22
IPv6:
2a00:1e28::/32
Signature Algorithm: sha256WithRSAEncryption
5b:39:94:02:4c:14:ce:0a:8d:4b:cc:50:8a:04:4c:b4:20:4e:
0a:26:aa:61:1f:04:1f:8a:a7:8c:dd:4d:e8:cf:01:ef:5e:79:
dc:f0:72:71:cf:93:4e:46:46:1a:f9:36:07:0a:e3:e5:9a:69:
13:0c:30:cb:2d:79:da:9d:cb:67:5e:87:53:9c:a9:fd:ca:d3:
7a:10:85:b3:67:54:1e:b7:ef:f0:8e:ab:34:4f:40:dd:81:0b:
dc:3b:51:ae:f2:61:d2:ce:65:15:c8:36:9f:c5:af:e6:bc:ba:
81:8d:80:22:db:3f:59:56:e4:66:d7:76:d0:47:e9:ef:87:66:
82:10:b5:73:c1:4c:c9:90:88:5a:23:0e:a4:bc:93:06:ab:31:
63:91:f1:43:48:34:8c:75:03:0e:02:f3:26:3f:2e:ae:7c:02:
ae:77:48:a1:1c:4b:23:ad:98:ed:d6:d6:9f:4a:f7:c9:60:22:
51:86:70:d6:db:7a:ff:79:72:bc:b9:4c:14:d3:ce:9d:99:b6:
17:5e:0e:71:ea:1c:83:7f:8c:3b:01:b8:2e:2b:36:86:18:ff:
24:8f:6c:a9:9b:06:02:03:a3:d6:70:b1:e3:31:3d:32:f6:ce:
da:0f:38:6f:71:8a:19:75:44:86:09:b5:55:ee:44:23:7d:78:
6d:3e:a5:56
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYxFBHfuoVxZKVqaZXuvZmAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZTQ5YjE4NDRmZTQ0MjJhZmJlMTBjZGQyODE5Yzc0NDgy
NzdlNjUwHhcNMjMxMjA3MTYwMjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWRjZmJmZGExNGYzNTM5NThiYmQzM2RiOWQ4Mjg4OGZlMzY0YzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQLmBztrBCKioGlG6AEDwxw/2Gmq
nTRHq6bo4bXnAuIaRhEFLngn6btlcrlWjBBhyJYszXsleNqyGJ2mbtdzEs9WB3BS
TWSyDUCgBg0fASAQ7r1Ttc+Q8jQyUEpC1haq+sqxVaGyTwBtPaWwgycNg0V7RfkP
/ZY5ueK8yO2lB+mxU6J2Mw9uxgtqd/K7STybrgwRrRlVznDQvoORXYoaFY5bNUZy
8GO7bxloveDzYHA5fvrbI/lz0bKfg71NqNiKODCIu6d5r3lEAOEL3xteDk6ZS622
fPpOEkwuwL+/4wynF2Oo2gnsIqI/SGRvEcdoXuX6yOrhKBK6MczZJucp6wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKXc+/2hTzU5WLvTPbnYKIj+NkwHMB8GA1UdIwQY
MBaAFD3kmxhE/kQir74QzdKBnHRIJ35lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgt
MGFjOWI0ZDdlYWI3LzEvcGR6N19hRlBOVGxZdTlNOXVkZ29pUDQyVEFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgtMGFjOWI0ZDdlYWI3
LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBLZkQAwQD
shY4AwQCuR/0MA0EAgACMAcDBQAqAB4oMA0GCSqGSIb3DQEBCwUAA4IBAQBbOZQC
TBTOCo1LzFCKBEy0IE4KJqphHwQfiqeM3U3ozwHvXnnc8HJxz5NORkYa+TYHCuPl
mmkTDDDLLXnanctnXodTnKn9ytN6EIWzZ1Qet+/wjqs0T0DdgQvcO1Gu8mHSzmUV
yDafxa/mvLqBjYAi2z9ZVuRm13bQR+nvh2aCELVzwUzJkIhaIw6kvJMGqzFjkfFD
SDSMdQMOAvMmPy6ufAKud0ihHEsjrZjt1tafSvfJYCJRhnDW23r/eXK8uUwU086d
mbYXXg5x6hyDf4w7AbguKzaGGP8kj2ypmwYCA6PWcLHjMT0y9s7aDzhvcYoZdUSG
CbVV7kQjfXhtPqVW
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:32:05 2025 by rpki-client