Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/qWk42ZDkFg-aj4unp93T39uZHnM.roa
File: qWk42ZDkFg-aj4unp93T39uZHnM.roa (raw, json)
Hash identifier: aKVhKxX5chumJ2nVZgtnru5t+QbCrF6ct74XLOEwVIA=
Subject key identifier: A9:69:38:D9:90:E4:16:0F:9A:8F:8B:A7:A7:DD:D3:DF:DB:99:1E:73
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 018F41
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/qWk42ZDkFg-aj4unp93T39uZHnM.roa
Signing time: Tue 14 Jun 2022 11:45:57 +0000
ROA not before: Tue 14 Jun 2022 11:45:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208666
IP address blocks: 83.229.2.0/24 maxlen: 24
2a09:b300::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102209 (0x18f41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Jun 14 11:45:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a96938d990e4160f9a8f8ba7a7ddd3dfdb991e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:22:b8:ba:ff:6a:be:5a:06:c7:9c:16:f1:
fd:46:27:4f:73:0c:19:bf:3f:1a:9f:b8:93:a3:18:
41:20:ba:7d:ac:51:65:9f:36:21:a5:0a:15:a7:0d:
a6:99:89:4c:4f:ad:7f:28:2e:c8:80:01:b6:66:a7:
ef:6c:b5:5d:fc:40:7a:e9:5f:6f:f6:68:dd:f7:c8:
cb:61:9b:36:bc:75:90:55:6c:ef:5e:1f:de:81:6d:
6a:e0:52:74:69:fb:4a:00:50:3b:c5:05:2e:88:9d:
62:95:93:12:93:20:19:36:dd:6d:04:c6:f3:c9:9b:
14:cf:82:59:20:5c:5b:91:52:89:c7:8f:de:f2:41:
8d:86:2a:c4:80:da:95:a8:db:8d:57:ef:cd:70:24:
87:89:4b:ca:a2:d8:46:d7:41:4d:59:7f:d6:0a:8b:
44:6c:ee:d8:9f:47:fc:83:16:df:9d:ff:e3:96:09:
ad:b0:a4:43:79:4a:a3:80:15:70:28:05:44:ed:f2:
1b:8a:78:e0:b9:bc:06:72:f8:b4:88:55:e4:41:13:
36:b2:6e:a9:0e:e3:3c:af:ac:75:8d:79:e8:ef:73:
07:05:c1:68:67:9a:d9:38:f6:76:03:76:3e:1e:76:
f3:7d:d2:25:a4:d6:ed:2b:1c:d9:22:cc:03:f0:82:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:38:D9:90:E4:16:0F:9A:8F:8B:A7:A7:DD:D3:DF:DB:99:1E:73
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/qWk42ZDkFg-aj4unp93T39uZHnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.2.0/24
IPv6:
2a09:b300::/29
Signature Algorithm: sha256WithRSAEncryption
92:86:c2:16:01:fd:2f:0e:5c:7d:41:78:e5:4f:df:3e:79:b1:
65:66:d6:03:a7:33:59:4f:c0:42:f1:6d:3a:c6:68:03:73:f7:
1f:15:0a:c3:04:c0:24:b5:2f:54:76:7d:ef:37:83:f1:f7:02:
bd:03:42:bb:e3:39:5b:ce:15:b0:80:85:8e:d2:9c:a3:62:50:
f1:79:dc:4b:2a:10:d2:eb:d0:c5:cd:fc:21:19:6f:4c:4a:2b:
82:5b:28:0f:ba:c6:f0:79:d0:65:ee:b0:d4:99:08:86:9d:61:
ac:2a:10:f0:23:2c:1d:5d:e0:6a:b1:d0:67:b2:f9:46:46:11:
60:0d:27:5d:90:5c:51:b4:2f:a8:50:53:eb:60:c6:49:dd:6b:
76:9e:97:43:7b:5e:d1:bd:ae:13:63:cb:64:ea:07:e4:0f:d8:
be:c5:a4:6d:ba:b6:ef:3f:4b:10:9e:2f:70:f7:0b:93:5f:0d:
fa:fa:6b:6e:f5:e6:a5:63:ad:50:e3:01:48:65:d5:a0:af:f7:
bb:44:4c:54:9a:6c:82:72:42:de:72:59:b5:4e:02:98:3d:f1:
b7:b0:dc:9e:d2:91:82:50:22:15:fc:23:60:86:81:bd:f6:5b:
71:f3:e9:a0:19:a7:e8:7c:a6:8c:5d:e9:37:68:45:6b:75:30:
d7:e3:ab:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDAY9BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY0
MDFhZGVkYmM5YzhmMWM2Y2YyMzg5ZmM3Zjc0MWVkZjRmMTlmMmMwHhcNMjIwNjE0
MTE0NTU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhOTY5MzhkOTkwZTQx
NjBmOWE4ZjhiYTdhN2RkZDNkZmRiOTkxZTczMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1CsiuLr/ar5aBsecFvH9RidPcwwZvz8an7iToxhBILp9rFFl
nzYhpQoVpw2mmYlMT61/KC7IgAG2ZqfvbLVd/EB66V9v9mjd98jLYZs2vHWQVWzv
Xh/egW1q4FJ0aftKAFA7xQUuiJ1ilZMSkyAZNt1tBMbzyZsUz4JZIFxbkVKJx4/e
8kGNhirEgNqVqNuNV+/NcCSHiUvKothG10FNWX/WCotEbO7Yn0f8gxbfnf/jlgmt
sKRDeUqjgBVwKAVE7fIbinjgubwGcvi0iFXkQRM2sm6pDuM8r6x1jXno73MHBcFo
Z5rZOPZ2A3Y+HnbzfdIlpNbtKxzZIswD8IICvQIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFKlpONmQ5BYPmo+Lp6fd09/bmR5zMB8GA1UdIwQYMBaAFGQBre28nI8cbPI4
n8f3Qe308Z8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEtMzU2YzA5NmJjNmY5LzEv
cVdrNDJaRGtGZy1hajR1bnA5M1QzOXVaSG5NLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85
OGM4NjAtNTI5OC00ODQ2LWJlYWEtMzU2YzA5NmJjNmY5LzEvWkFHdDdieWNqeHhz
OGppZnhfZEI3ZlR4bnl3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAU+UCMA0EAgACMAcDBQMqCbMAMA0G
CSqGSIb3DQEBCwUAA4IBAQCShsIWAf0vDlx9QXjlT98+ebFlZtYDpzNZT8BC8W06
xmgDc/cfFQrDBMAktS9Udn3vN4Px9wK9A0K74zlbzhWwgIWO0pyjYlDxedxLKhDS
69DFzfwhGW9MSiuCWygPusbwedBl7rDUmQiGnWGsKhDwIywdXeBqsdBnsvlGRhFg
DSddkFxRtC+oUFPrYMZJ3Wt2npdDe17Rva4TY8tk6gfkD9i+xaRturbvP0sQni9w
9wuTXw36+mtu9ealY61Q4wFIZdWgr/e7RExUmmyCckLeclm1TgKYPfG3sNye0pGC
UCIV/CNghoG99ltx8+mgGafofKaMXek3aEVrdTDX46uI
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:29:45 2025 by rpki-client