Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/g7zOx59xDJpIOnYyoA5KTMzHwe8.roa
File: g7zOx59xDJpIOnYyoA5KTMzHwe8.roa (raw, json)
Hash identifier: e0tFJTcUR3aN7uwRvZOCHlI/xHH+S/YErCYM9ntmRz4=
Subject key identifier: 83:BC:CE:C7:9F:71:0C:9A:48:3A:76:32:A0:0E:4A:4C:CC:C7:C1:EF
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 018570FBD8C588F7EB281A257FFB834F8876
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/g7zOx59xDJpIOnYyoA5KTMzHwe8.roa
Signing time: Mon 02 Jan 2023 05:37:11 +0000
ROA not before: Mon 02 Jan 2023 05:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34636
IP address blocks: 94.139.176.0/21 maxlen: 21
94.139.184.0/22 maxlen: 22
94.139.190.0/23 maxlen: 23
94.139.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:d8:c5:88:f7:eb:28:1a:25:7f:fb:83:4f:88:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jan 2 05:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83bccec79f710c9a483a7632a00e4a4cccc7c1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:5f:82:e4:b7:bc:05:92:a1:25:50:9e:25:
0c:bc:0a:40:1c:97:e5:18:a7:9b:a2:2c:55:fd:f7:
fb:ce:7a:ae:01:33:f2:b9:7c:5b:cf:46:19:95:d1:
2e:4d:a9:b9:26:67:7f:bf:d8:85:00:dd:43:e4:4e:
ea:c8:77:9e:da:79:6a:16:29:18:bf:1b:ca:40:21:
d8:60:1a:85:22:b9:e7:cf:bf:9b:87:d4:1f:1c:46:
47:05:9f:48:99:7b:15:29:7d:7b:bc:a8:49:ba:f2:
bb:b0:a4:86:4e:32:57:01:3d:40:45:71:84:0b:49:
06:ad:13:57:44:17:f6:c7:7f:40:35:bf:02:f1:98:
04:82:5e:71:55:58:13:fd:d2:0f:74:39:ba:54:9f:
36:44:d9:d1:7b:2e:45:6a:c8:3d:a7:b2:0c:88:fd:
f8:ab:ad:8b:74:9b:f9:10:c4:e9:3d:1a:1d:d9:13:
cc:be:4e:99:57:3c:a4:6a:b6:ea:91:a0:55:3e:9f:
fe:c1:48:b5:73:fe:11:df:33:0e:76:73:05:40:d4:
71:d4:83:df:c7:89:4a:92:9a:a8:07:15:54:06:60:
af:b0:43:98:f8:66:37:b6:00:f9:52:73:dd:7b:8c:
af:ba:43:87:19:43:4f:f0:1e:26:e4:4c:17:8b:d1:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BC:CE:C7:9F:71:0C:9A:48:3A:76:32:A0:0E:4A:4C:CC:C7:C1:EF
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/g7zOx59xDJpIOnYyoA5KTMzHwe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0-94.139.188.255
94.139.190.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:6e:eb:a8:bc:4d:b0:a9:2a:66:e8:d9:5c:bd:5d:88:cc:9e:
de:39:77:af:85:2a:57:58:a0:49:6b:43:29:e7:5d:2d:b0:1e:
27:d8:6d:2b:75:67:07:1d:f1:a7:e7:a8:1e:dd:ae:84:65:d7:
65:d4:c1:be:b7:cb:ab:33:e3:11:ee:c8:5f:f8:36:58:70:ae:
f4:45:0d:79:d3:e7:71:38:d2:58:38:f2:94:d3:0a:3d:a6:d8:
9a:e8:7b:b9:93:23:d9:c7:cf:98:1b:35:41:f5:15:79:92:b9:
bd:50:05:18:ce:25:1f:86:77:10:cf:ca:fc:fe:37:5a:4f:c8:
b9:2d:95:9c:26:39:be:0d:0e:4e:18:a2:0f:50:ce:bd:84:ea:
fb:94:c3:85:60:e8:6f:d3:0b:37:b1:31:58:aa:70:5b:63:03:
11:17:15:08:0a:6c:b1:02:fb:ee:0e:dd:f0:2e:50:c0:cb:1b:
80:99:57:89:1d:a9:d6:96:7e:11:e2:81:a7:bf:3f:b7:30:9f:
03:c5:65:21:af:11:8e:f1:6e:5b:59:e1:d6:54:fb:8d:a5:3e:
da:9e:02:e3:b5:9d:e3:2d:51:76:45:ce:f6:10:28:e8:e7:ad:
2f:35:6f:2c:18:88:82:5e:2c:7a:29:dc:01:f3:37:e6:24:26:
55:bd:da:49
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVw+9jFiPfrKBolf/uDT4h2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjMwMTAyMDUzNzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2JjY2VjNzlmNzEwYzlhNDgzYTc2MzJhMDBlNGE0Y2NjYzdjMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx1fguS3vAWSoSVQniUMvApAHJfl
GKeboixV/ff7znquATPyuXxbz0YZldEuTam5Jmd/v9iFAN1D5E7qyHee2nlqFikY
vxvKQCHYYBqFIrnnz7+bh9QfHEZHBZ9ImXsVKX17vKhJuvK7sKSGTjJXAT1ARXGE
C0kGrRNXRBf2x39ANb8C8ZgEgl5xVVgT/dIPdDm6VJ82RNnRey5Fasg9p7IMiP34
q62LdJv5EMTpPRod2RPMvk6ZVzykarbqkaBVPp/+wUi1c/4R3zMOdnMFQNRx1IPf
x4lKkpqoBxVUBmCvsEOY+GY3tgD5UnPde4yvukOHGUNP8B4m5EwXi9FM3QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIO8zsefcQyaSDp2MqAOSkzMx8HvMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvZzd6T3g1OXhESnBJT25ZeW9BNUtUTXpId2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARei7AD
BABei7wDBAFei74wDQYJKoZIhvcNAQELBQADggEBAB9u66i8TbCpKmbo2Vy9XYjM
nt45d6+FKldYoElrQynnXS2wHifYbSt1Zwcd8afnqB7droRl12XUwb63y6sz4xHu
yF/4NlhwrvRFDXnT53E40lg48pTTCj2m2Jroe7mTI9nHz5gbNUH1FXmSub1QBRjO
JR+GdxDPyvz+N1pPyLktlZwmOb4NDk4Yog9Qzr2E6vuUw4Vg6G/TCzexMViqcFtj
AxEXFQgKbLEC++4O3fAuUMDLG4CZV4kdqdaWfhHigae/P7cwnwPFZSGvEY7xbltZ
4dZU+42lPtqeAuO1neMtUXZFzvYQKOjnrS81bywYiIJeLHop3AHzN+YkJlW92kk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:27 2025 by rpki-client