Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/t9p_AiPZQ2mDJaDn38S-U6_d2EU.roa
File: t9p_AiPZQ2mDJaDn38S-U6_d2EU.roa (raw, json)
Hash identifier: clC0G3lbKCmzTa5BursLOu+sgXg3HnZwW4namK+9hC8=
Subject key identifier: B7:DA:7F:02:23:D9:43:69:83:25:A0:E7:DF:C4:BE:53:AF:DD:D8:45
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 3792DA20
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/t9p_AiPZQ2mDJaDn38S-U6_d2EU.roa
Signing time: Sat 01 Jan 2022 16:04:55 +0000
ROA not before: Sat 01 Jan 2022 16:04:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29422
IP address blocks: 194.29.192.0/21 maxlen: 21
194.79.16.0/22 maxlen: 22
81.17.192.0/21 maxlen: 21
185.123.116.0/22 maxlen: 22
109.75.224.0/21 maxlen: 21
80.69.160.0/21 maxlen: 21
80.69.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932370976 (0x3792da20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Jan 1 16:04:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7da7f0223d943698325a0e7dfc4be53afddd845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:ca:ba:ba:bc:2b:5b:86:61:b1:ab:88:b1:
b3:59:99:0d:db:3f:44:36:59:6e:a2:b0:5c:6d:f9:
f0:70:02:07:c0:49:ac:a0:88:92:42:a5:ef:a0:54:
7f:48:fb:19:b6:77:50:cf:09:5e:13:95:43:87:39:
9a:4f:3f:28:cc:89:9a:61:e2:b4:b0:24:82:72:ee:
44:47:30:2d:12:2e:3c:fb:fa:2f:f8:92:73:36:99:
26:c6:96:23:90:7f:55:7a:64:5d:d9:79:99:fd:a4:
95:2f:06:31:cc:7b:62:b0:fd:75:4c:60:51:91:16:
9d:cd:26:30:d1:0e:2c:33:84:6c:cb:83:b0:01:b4:
45:fa:c3:8f:1c:d4:72:e7:f5:1d:37:40:98:af:18:
09:7b:a7:f8:76:07:44:fc:de:ca:7d:e6:de:b0:61:
6c:7b:c8:01:9e:7e:06:d1:d8:fe:8f:e1:51:1a:1e:
29:f0:a1:dd:12:9f:09:cd:10:19:40:a8:73:e9:48:
61:77:24:f4:49:59:5c:46:a5:6a:83:20:1e:dc:96:
ae:05:31:af:a7:8a:f9:61:bf:7a:27:8b:94:c4:d1:
84:8c:ab:cc:f5:4b:14:c6:f8:f3:ed:32:5d:d9:ac:
fd:91:8a:1f:cf:67:42:22:6e:b6:61:51:01:26:9a:
35:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DA:7F:02:23:D9:43:69:83:25:A0:E7:DF:C4:BE:53:AF:DD:D8:45
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/t9p_AiPZQ2mDJaDn38S-U6_d2EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.160.0-80.69.171.255
81.17.192.0/21
109.75.224.0/21
185.123.116.0/22
194.29.192.0/21
194.79.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:9a:2e:ba:dc:7c:7a:45:50:c5:16:1a:75:5c:0c:95:4d:f4:
d3:8c:b6:7f:7d:86:54:b5:57:31:55:32:e6:4f:0a:12:88:72:
80:35:59:01:54:f7:f4:fe:92:19:c1:4d:85:9c:5c:6d:c5:0a:
e0:84:97:2d:ef:06:46:8d:78:e9:d0:3a:b0:74:90:d7:aa:6d:
1d:2e:7a:cf:c8:cb:6b:83:0b:b2:d5:f0:c4:90:f3:39:43:7b:
27:18:14:f8:78:35:c7:8c:33:3f:c0:7c:3a:09:30:15:3b:69:
f2:6f:47:da:02:4b:83:72:13:b5:08:45:3a:e5:eb:58:d2:82:
04:a1:9b:2d:26:c1:cb:03:8c:c2:85:16:a3:e9:de:ec:28:6c:
ae:20:dd:a5:4d:9a:c1:e2:52:ea:83:34:f5:ee:f6:19:8a:33:
4b:a0:82:0b:18:f5:67:a4:a6:4f:14:4c:63:0c:dd:8d:14:3b:
ad:cb:ce:58:ff:3c:a6:87:13:c4:88:97:81:18:8d:2e:fa:9e:
2d:e3:cd:18:b6:b7:6c:03:51:f8:c4:cd:24:9b:31:3b:ad:47:
29:68:5c:34:db:e1:61:13:45:69:63:32:41:bc:01:61:ca:cc:
dc:94:7b:6e:93:c1:27:86:a1:d2:cb:bf:ab:6b:3b:75:8e:dc:
c8:b6:07:49
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEN5LaIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTNkMDRlNzJiYjI0OWM3OWViMTE2OGNmMWQ0M2EzY2E1NDhjMjA2MB4XDTIyMDEw
MTE2MDQ1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjdkYTdmMDIyM2Q5
NDM2OTgzMjVhMGU3ZGZjNGJlNTNhZmRkZDg0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJbTyrq6vCtbhmGxq4ixs1mZDds/RDZZbqKwXG358HACB8BJ
rKCIkkKl76BUf0j7GbZ3UM8JXhOVQ4c5mk8/KMyJmmHitLAkgnLuREcwLRIuPPv6
L/iSczaZJsaWI5B/VXpkXdl5mf2klS8GMcx7YrD9dUxgUZEWnc0mMNEOLDOEbMuD
sAG0RfrDjxzUcuf1HTdAmK8YCXun+HYHRPzeyn3m3rBhbHvIAZ5+BtHY/o/hURoe
KfCh3RKfCc0QGUCoc+lIYXck9ElZXEalaoMgHtyWrgUxr6eK+WG/eieLlMTRhIyr
zPVLFMb48+0yXdms/ZGKH89nQiJutmFRASaaNdECAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBS32n8CI9lDaYMloOffxL5Tr93YRTAfBgNVHSMEGDAWgBQFPQTnK7JJx56x
Fozx1Do8pUjCBjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUMEU1eXV5U2NlZXNSYU04ZFE2UEtWSXdnWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvMzU1MGI0LTUxYjUtNDQ4Yi1hYjYyLTJhODEzZGJmNDU4Mi8x
L3Q5cF9BaVBaUTJtREphRG4zOFMtVTZfZDJFVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
MzU1MGI0LTUxYjUtNDQ4Yi1hYjYyLTJhODEzZGJmNDU4Mi8xL0JUMEU1eXV5U2Nl
ZXNSYU04ZFE2UEtWSXdnWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLDAMAwQFUEWgAwQCUEWoAwQDURHAAwQD
bUvgAwQCuXt0AwQDwh3AAwQCwk8QMA0GCSqGSIb3DQEBCwUAA4IBAQCgmi663Hx6
RVDFFhp1XAyVTfTTjLZ/fYZUtVcxVTLmTwoSiHKANVkBVPf0/pIZwU2FnFxtxQrg
hJct7wZGjXjp0DqwdJDXqm0dLnrPyMtrgwuy1fDEkPM5Q3snGBT4eDXHjDM/wHw6
CTAVO2nyb0faAkuDchO1CEU65etY0oIEoZstJsHLA4zChRaj6d7sKGyuIN2lTZrB
4lLqgzT17vYZijNLoIILGPVnpKZPFExjDN2NFDuty85Y/zymhxPEiJeBGI0u+p4t
480YtrdsA1H4xM0kmzE7rUcpaFw02+FhE0VpYzJBvAFhyszclHtuk8EnhqHSy7+r
azt1jtzItgdJ
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:00 2025 by rpki-client