Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/pDH-Kx3ewUsA6reLlg2mQvhpjAg.roa
File: pDH-Kx3ewUsA6reLlg2mQvhpjAg.roa (raw, json)
Hash identifier: 3czuZlsdElvJwmlruXvAi3WfhQfSbjwQAI7PVWxepng=
Subject key identifier: A4:31:FE:2B:1D:DE:C1:4B:00:EA:B7:8B:96:0D:A6:42:F8:69:8C:08
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 07C03124
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/pDH-Kx3ewUsA6reLlg2mQvhpjAg.roa
Signing time: Sat 01 Jan 2022 00:53:13 +0000
ROA not before: Sat 01 Jan 2022 00:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49835
IP address blocks: 109.69.12.0/24 maxlen: 24
109.69.14.0/24 maxlen: 24
109.69.15.0/24 maxlen: 24
109.69.13.0/24 maxlen: 24
185.32.17.0/24 maxlen: 24
185.32.16.0/24 maxlen: 24
185.32.18.0/24 maxlen: 24
185.32.19.0/24 maxlen: 24
5.10.205.0/24 maxlen: 24
5.10.206.0/24 maxlen: 24
5.10.203.0/24 maxlen: 24
5.10.204.0/24 maxlen: 24
5.10.202.0/24 maxlen: 24
5.10.200.0/24 maxlen: 24
5.10.201.0/24 maxlen: 24
5.10.207.0/24 maxlen: 24
109.69.11.0/24 maxlen: 24
109.69.9.0/24 maxlen: 24
109.69.10.0/24 maxlen: 24
109.69.8.0/24 maxlen: 24
2a00:1508::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130036004 (0x7c03124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Jan 1 00:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a431fe2b1ddec14b00eab78b960da642f8698c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:bc:27:9b:99:57:b7:f4:b2:a3:8f:cb:91:
98:e8:b1:eb:cb:0f:e6:22:19:d7:4a:c4:0c:ab:e8:
b9:ae:32:0f:a6:50:15:cc:67:cb:08:de:13:60:1e:
8d:fe:2a:c3:a4:82:36:1c:0f:c0:a9:8b:a5:ad:0c:
62:18:d3:1a:02:ed:cf:20:a7:7a:b0:e7:fb:ec:87:
6f:7a:8b:8b:26:4d:6f:40:cb:7e:74:7b:30:cb:a6:
96:19:65:9e:75:b8:37:bb:4d:59:da:01:ce:d0:92:
9b:47:1d:5d:8f:35:12:97:fa:37:80:e6:04:c7:3f:
da:fc:af:4a:85:c7:0d:4a:83:31:d6:24:9a:20:7b:
ac:33:16:a3:77:1b:5d:e9:8e:3a:82:02:3a:7f:3d:
38:56:6e:2e:33:74:d3:83:93:bb:3e:27:7f:49:7e:
e6:27:aa:1a:45:69:7f:13:c2:5c:44:da:33:29:d2:
73:fa:c8:1e:53:6a:ac:a2:6c:e7:ec:ce:f7:fe:43:
29:67:f1:28:fa:79:71:50:b9:c0:c5:e0:28:01:d2:
86:88:70:fc:a9:65:d1:c3:e0:36:c0:a8:83:7f:bb:
62:23:20:c9:5a:ac:78:b1:bf:7a:ec:15:76:26:15:
60:de:3b:6a:e2:a0:54:de:92:1f:05:cd:d8:73:89:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:31:FE:2B:1D:DE:C1:4B:00:EA:B7:8B:96:0D:A6:42:F8:69:8C:08
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/pDH-Kx3ewUsA6reLlg2mQvhpjAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.200.0/21
109.69.8.0/21
185.32.16.0/22
IPv6:
2a00:1508::/32
Signature Algorithm: sha256WithRSAEncryption
d7:91:d6:fc:90:86:58:f6:b0:c0:92:8d:c4:f9:06:f2:c4:38:
25:c3:47:53:d2:30:52:32:42:aa:e5:af:11:62:94:91:23:7a:
7e:77:d1:64:a1:4b:8c:8d:ad:2f:40:6c:d1:f4:d2:2b:f6:30:
07:7d:ef:2d:b8:fa:31:f9:61:42:75:90:80:29:fe:90:2d:da:
e5:a9:e7:c2:cf:2c:6c:d1:34:39:e1:c7:d5:e9:c0:6a:e5:8f:
ac:c5:14:e8:56:1e:64:c9:6a:f6:50:54:59:40:30:13:07:d1:
c3:4c:72:2b:07:19:44:e3:4a:52:8e:8d:58:e3:fb:fe:b0:31:
e7:fb:ce:47:16:d4:4a:fc:2c:ef:1b:63:57:c1:79:de:b5:2c:
d9:57:23:8f:fc:2d:78:7c:ae:ff:23:ee:5f:eb:57:e6:37:d7:
b2:4a:ca:70:88:32:c8:0d:ac:b0:34:23:64:3a:0d:f0:9d:ab:
1a:4f:2f:4e:96:cc:d7:d2:27:7d:de:ad:af:68:ef:ca:36:41:
cc:a3:57:8b:a4:b1:bc:d6:fd:7e:a8:72:f8:50:74:fa:f7:db:
fc:3a:83:cb:5a:30:71:22:ee:77:27:c3:d4:a7:03:52:ae:35:
64:02:71:23:97:73:77:a9:27:c6:5c:f6:89:1c:03:b1:34:49:
02:25:b0:7f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEB8AxJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NzllYjRkOGM2NWYzYTdiNDU0Y2EyYTVlNWY2NDA5NGU5ZDg4YmQzMB4XDTIyMDEw
MTAwNTMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTQzMWZlMmIxZGRl
YzE0YjAwZWFiNzhiOTYwZGE2NDJmODY5OGMwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALXdvCebmVe39LKjj8uRmOix68sP5iIZ10rEDKvoua4yD6ZQ
FcxnywjeE2Aejf4qw6SCNhwPwKmLpa0MYhjTGgLtzyCnerDn++yHb3qLiyZNb0DL
fnR7MMumlhllnnW4N7tNWdoBztCSm0cdXY81Epf6N4DmBMc/2vyvSoXHDUqDMdYk
miB7rDMWo3cbXemOOoICOn89OFZuLjN004OTuz4nf0l+5ieqGkVpfxPCXETaMynS
c/rIHlNqrKJs5+zO9/5DKWfxKPp5cVC5wMXgKAHShohw/Kll0cPgNsCog3+7YiMg
yVqseLG/euwVdiYVYN47auKgVN6SHwXN2HOJV8kCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSkMf4rHd7BSwDqt4uWDaZC+GmMCDAfBgNVHSMEGDAWgBQHnrTYxl86e0VM
oqXl9kCU6diL0zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0I1NjAyTVpmT250RlRLS2w1ZlpBbE9uWWk5TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWUvMmZjMDA3LTM2MWQtNGY0Ny1hYWY3LTQ4NGQ4NDNlNmRlMy8x
L3BESC1LeDNld1VzQTZyZUxsZzJtUXZocGpBZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUv
MmZjMDA3LTM2MWQtNGY0Ny1hYWY3LTQ4NGQ4NDNlNmRlMy8xL0I1NjAyTVpmT250
RlRLS2w1ZlpBbE9uWWk5TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAwUKyAMEA21FCAMEArkgEDANBAIA
AjAHAwUAKgAVCDANBgkqhkiG9w0BAQsFAAOCAQEA15HW/JCGWPawwJKNxPkG8sQ4
JcNHU9IwUjJCquWvEWKUkSN6fnfRZKFLjI2tL0Bs0fTSK/YwB33vLbj6MflhQnWQ
gCn+kC3a5annws8sbNE0OeHH1enAauWPrMUU6FYeZMlq9lBUWUAwEwfRw0xyKwcZ
RONKUo6NWOP7/rAx5/vORxbUSvws7xtjV8F53rUs2Vcjj/wteHyu/yPuX+tX5jfX
skrKcIgyyA2ssDQjZDoN8J2rGk8vTpbM19Infd6tr2jvyjZBzKNXi6SxvNb9fqhy
+FB0+vfb/DqDy1owcSLudyfD1KcDUq41ZAJxI5dzd6knxlz2iRwDsTRJAiWwfw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:40 2024 by rpki-client on console-fra.rpki-client.org