Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/h1wLZkaDwMld1mCmWQKzUYVZZM4.roa
File: h1wLZkaDwMld1mCmWQKzUYVZZM4.roa (raw, json)
Hash identifier: pZInlibiQuvPJ8irQK8VjghpQu6l3i7NRUsnEd56JVs=
Subject key identifier: 87:5C:0B:66:46:83:C0:C9:5D:D6:60:A6:59:02:B3:51:85:59:64:CE
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 018658DF942404699725E48120E6830EC531
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/h1wLZkaDwMld1mCmWQKzUYVZZM4.roa
Signing time: Thu 16 Feb 2023 06:18:12 +0000
ROA not before: Thu 16 Feb 2023 06:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24991
IP address blocks: 81.93.192.0/21 maxlen: 21
81.93.202.0/23 maxlen: 23
81.93.201.0/24 maxlen: 24
81.93.200.0/24 maxlen: 24
81.93.204.0/22 maxlen: 22
2a03:da00::/36 maxlen: 36
2a03:da00:1000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:df:94:24:04:69:97:25:e4:81:20:e6:83:0e:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Feb 16 06:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=875c0b664683c0c95dd660a65902b351855964ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:f5:99:36:d6:1b:d1:1e:d7:65:14:d4:96:
16:12:92:84:b9:26:70:d8:82:19:d0:b0:96:16:f4:
9e:27:e0:f9:e1:51:09:e4:64:13:c4:4b:d9:6d:b3:
49:9d:43:fe:f8:d2:01:a1:8f:d0:bd:91:48:26:34:
f5:9f:65:eb:a6:71:b6:9c:82:17:35:ac:ca:e7:f2:
44:fe:33:94:bf:ce:97:95:b9:aa:aa:ec:af:f4:8a:
6f:9e:d5:60:fb:82:ad:3a:97:9e:5f:70:45:19:c0:
9a:b6:6a:d1:c3:e3:a5:1b:00:a4:00:8d:c2:f9:df:
78:db:9f:93:30:bc:2e:13:08:64:1a:9e:93:3b:ae:
8a:39:99:ae:2a:e2:b0:6f:39:8a:5f:6c:78:1f:8a:
d5:1b:cf:ad:9b:7f:62:5c:e3:90:3d:70:c2:c1:38:
92:ca:29:56:76:70:08:30:da:a4:9d:82:00:ac:03:
87:2f:3e:7e:cf:bb:e9:84:69:e0:e7:46:0a:2e:2c:
7b:bf:e7:0b:c7:dd:16:c1:d9:e2:20:90:03:2b:1e:
00:cb:eb:1a:ed:95:6f:2e:b2:f0:46:e3:8a:4b:70:
e9:02:cc:51:a9:2b:16:78:e5:d0:e8:fe:f8:fb:7a:
3c:d5:a3:1c:66:4c:d5:59:a3:d9:6c:ba:64:d4:50:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5C:0B:66:46:83:C0:C9:5D:D6:60:A6:59:02:B3:51:85:59:64:CE
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/h1wLZkaDwMld1mCmWQKzUYVZZM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.192.0/20
IPv6:
2a03:da00::/35
Signature Algorithm: sha256WithRSAEncryption
d9:ff:5b:f7:46:5c:87:00:49:62:73:ec:bb:be:13:99:96:ca:
91:13:a9:de:21:95:21:86:d0:30:a0:13:02:28:21:1a:d3:7c:
81:23:9a:fc:54:e9:e6:29:d8:fe:4b:e8:61:42:39:2a:c3:be:
7d:d0:b6:35:ed:1e:52:38:22:a6:97:48:04:ed:63:ad:09:25:
42:de:35:06:ab:cf:75:58:d0:2f:f3:85:39:5b:82:bb:3e:97:
52:98:40:7c:ce:96:df:78:76:35:ff:ad:18:a0:01:8c:b9:81:
12:b0:77:99:d7:58:d2:e0:f8:9c:6a:0e:23:e5:bd:61:1b:09:
0d:39:59:5e:90:31:26:d5:d1:6d:23:f0:f8:f8:e9:58:18:20:
91:9e:5f:f1:84:ef:3d:28:73:0b:06:62:14:29:ae:cc:c8:fa:
f6:f6:cd:6f:66:e5:e7:1f:35:1e:6c:9e:dc:86:ea:52:a5:bb:
7f:4a:fc:10:93:a8:16:5f:62:8e:00:73:b9:fd:dd:a1:65:f0:
b2:4e:3c:35:7a:af:b4:b3:d9:ab:53:e4:f6:cd:2c:2e:fd:07:
a0:95:db:46:39:80:84:20:76:6d:68:90:3a:ff:7c:46:4b:39:
5e:8b:60:09:ff:be:a7:16:fb:36:1e:7a:52:80:bb:88:e8:15:
9e:09:07:e5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYZY35QkBGmXJeSBIOaDDsUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy
NDkxYzUwHhcNMjMwMjE2MDYxODEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzVjMGI2NjQ2ODNjMGM5NWRkNjYwYTY1OTAyYjM1MTg1NTk2NGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9z1mTbWG9Ee12UU1JYWEpKEuSZw
2IIZ0LCWFvSeJ+D54VEJ5GQTxEvZbbNJnUP++NIBoY/QvZFIJjT1n2XrpnG2nIIX
NazK5/JE/jOUv86Xlbmqquyv9IpvntVg+4KtOpeeX3BFGcCatmrRw+OlGwCkAI3C
+d9425+TMLwuEwhkGp6TO66KOZmuKuKwbzmKX2x4H4rVG8+tm39iXOOQPXDCwTiS
yilWdnAIMNqknYIArAOHLz5+z7vphGng50YKLix7v+cLx90WwdniIJADKx4Ay+sa
7ZVvLrLwRuOKS3DpAsxRqSsWeOXQ6P74+3o81aMcZkzVWaPZbLpk1FBpBwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFIdcC2ZGg8DJXdZgplkCs1GFWWTOMB8GA1UdIwQY
MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt
MWM4YWZkMTlmZGJiLzEvaDF3TFprYUR3TWxkMW1DbVdRS3pVWVZaWk00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi
LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEUV3AMA4E
AgACMAgDBgUqA9oAADANBgkqhkiG9w0BAQsFAAOCAQEA2f9b90ZchwBJYnPsu74T
mZbKkROp3iGVIYbQMKATAighGtN8gSOa/FTp5inY/kvoYUI5KsO+fdC2Ne0eUjgi
ppdIBO1jrQklQt41BqvPdVjQL/OFOVuCuz6XUphAfM6W33h2Nf+tGKABjLmBErB3
mddY0uD4nGoOI+W9YRsJDTlZXpAxJtXRbSPw+PjpWBggkZ5f8YTvPShzCwZiFCmu
zMj69vbNb2bl5x81Hmye3IbqUqW7f0r8EJOoFl9ijgBzuf3doWXwsk48NXqvtLPZ
q1Pk9s0sLv0HoJXbRjmAhCB2bWiQOv98Rks5XotgCf++pxb7Nh56UoC7iOgVngkH
5Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:10 2025 by rpki-client