Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/WdTeTQBtJ0KYoyxMeQMctIK6a44.roa
File: WdTeTQBtJ0KYoyxMeQMctIK6a44.roa (raw, json)
Hash identifier: VzeXNAjL26TIY1E3Guys1JXVW3bESLt0BmiMuplivLk=
Subject key identifier: 59:D4:DE:4D:00:6D:27:42:98:A3:2C:4C:79:03:1C:B4:82:BA:6B:8E
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0187085825BE440024B4D6ED58C2F8C5CA5F
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/WdTeTQBtJ0KYoyxMeQMctIK6a44.roa
Signing time: Wed 22 Mar 2023 08:03:27 +0000
ROA not before: Wed 22 Mar 2023 08:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 89.19.42.0/23 maxlen: 32
83.229.76.0/22 maxlen: 32
203.166.152.0/22 maxlen: 32
119.13.192.0/20 maxlen: 32
203.166.148.0/22 maxlen: 32
83.229.104.0/22 maxlen: 32
93.114.10.0/23 maxlen: 32
93.114.12.0/22 maxlen: 32
95.215.36.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
209.20.176.0/21 maxlen: 32
93.180.192.0/20 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:58:25:be:44:00:24:b4:d6:ed:58:c2:f8:c5:ca:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Mar 22 08:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59d4de4d006d274298a32c4c79031cb482ba6b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:a1:f0:e5:63:2a:da:da:e0:3f:a8:f7:29:
4a:b0:f0:7f:81:ce:50:de:33:d1:26:ff:36:51:af:
56:f2:1f:f1:29:48:62:ca:fd:c5:62:73:c0:38:fa:
0f:f0:9c:fd:a5:54:40:45:a0:8e:c5:07:c4:27:13:
f1:2b:41:02:d7:03:5d:66:6b:a0:48:4d:13:dd:f2:
06:5a:49:3f:8c:61:49:f7:91:0f:4c:f2:2f:83:a2:
a9:99:98:e5:7d:92:9b:f7:50:50:21:b2:77:af:cc:
3e:6a:91:c2:3a:53:0a:5e:e2:08:e0:b7:f9:8f:f2:
c8:c1:db:c0:6c:53:17:a3:dc:ef:c4:bd:5a:84:06:
03:c7:25:36:6f:0e:af:a1:76:74:ff:15:ca:19:9f:
d2:8b:3f:ad:76:2b:ca:2d:47:a5:0b:ad:4e:19:d0:
df:42:ef:a5:4f:c3:ca:58:b8:0a:ab:e6:bb:58:70:
01:13:31:4e:24:e5:f8:bc:49:3a:53:ca:d1:34:da:
64:36:9a:14:98:0c:4b:ba:a5:59:be:ba:39:07:a4:
95:a3:8f:36:40:17:8c:37:4b:9c:01:ca:37:5b:2e:
e3:ee:eb:28:a2:80:be:62:dc:a3:46:52:8f:36:5e:
e8:86:cd:fa:67:d3:6a:47:d4:a5:c6:67:56:e0:63:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:DE:4D:00:6D:27:42:98:A3:2C:4C:79:03:1C:B4:82:BA:6B:8E
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/WdTeTQBtJ0KYoyxMeQMctIK6a44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.92.0/22
83.229.76.0/22
83.229.104.0/22
89.19.42.0/23
93.114.10.0-93.114.15.255
93.180.192.0/20
95.215.36.0/22
119.13.192.0/20
203.166.148.0-203.166.155.255
209.20.176.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:51:9b:0e:1d:9f:ce:9f:84:7b:1a:86:7b:ab:44:16:ca:00:
3c:91:7d:82:d1:39:99:c4:ab:cd:16:9e:da:ae:18:b0:4c:87:
1f:2e:b3:2d:03:3e:57:61:eb:4a:22:94:10:d8:26:10:3d:76:
6e:06:d2:d0:cd:24:87:c7:ea:fd:7f:2b:c0:2d:62:a6:cc:1e:
f7:7c:a1:e8:03:8f:52:40:b2:81:c9:ed:f6:50:52:c5:bf:5f:
b3:a2:13:21:5c:3d:95:67:59:bf:28:6e:45:a3:1c:8f:87:32:
41:70:e4:53:21:c4:72:35:12:45:7e:63:f9:53:ff:c6:f5:3b:
db:a5:a1:75:b5:73:7b:6d:16:bb:db:db:04:64:15:f1:47:a7:
87:9c:b2:7b:5c:14:59:2c:7b:0e:e3:58:42:cc:40:b9:b7:b7:
dd:1b:78:fb:6c:ec:9c:e9:ee:4e:9b:73:3b:c8:28:98:63:60:
9e:7d:5d:b4:f8:de:17:9f:2b:25:8d:56:1f:1e:38:6f:db:5d:
9e:d2:ff:04:c0:27:fd:61:31:8d:77:10:ff:72:04:0d:e6:62:
2f:c4:a3:85:7f:0f:8a:f5:fb:07:ba:29:a8:7f:5a:18:fe:0c:
89:ec:81:0a:01:5a:f1:85:e5:51:41:ba:15:6f:ff:56:b0:ec:
44:0f:9f:6f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYcIWCW+RAAktNbtWML4xcpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjMwMzIyMDgwMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWQ0ZGU0ZDAwNmQyNzQyOThhMzJjNGM3OTAzMWNiNDgyYmE2YjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUSh8OVjKtra4D+o9ylKsPB/gc5Q
3jPRJv82Ua9W8h/xKUhiyv3FYnPAOPoP8Jz9pVRARaCOxQfEJxPxK0EC1wNdZmug
SE0T3fIGWkk/jGFJ95EPTPIvg6KpmZjlfZKb91BQIbJ3r8w+apHCOlMKXuII4Lf5
j/LIwdvAbFMXo9zvxL1ahAYDxyU2bw6voXZ0/xXKGZ/Siz+tdivKLUelC61OGdDf
Qu+lT8PKWLgKq+a7WHABEzFOJOX4vEk6U8rRNNpkNpoUmAxLuqVZvro5B6SVo482
QBeMN0ucAco3Wy7j7usoooC+YtyjRlKPNl7ohs36Z9NqR9SlxmdW4GNFXQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFFnU3k0AbSdCmKMsTHkDHLSCumuOMB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEvV2RUZVRRQnRKMEtZb3l4TWVRTWN0SUs2YTQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQCLY5cAwQC
U+VMAwQCU+VoAwQBWRMqMAwDBAFdcgoDBARdcgADBARdtMADBAJf1yQDBAR3DcAw
DAMEAsumlAMEAsummAMEA9EUsDANBgkqhkiG9w0BAQsFAAOCAQEAnFGbDh2fzp+E
exqGe6tEFsoAPJF9gtE5mcSrzRae2q4YsEyHHy6zLQM+V2HrSiKUENgmED12bgbS
0M0kh8fq/X8rwC1ipswe93yh6AOPUkCygcnt9lBSxb9fs6ITIVw9lWdZvyhuRaMc
j4cyQXDkUyHEcjUSRX5j+VP/xvU726WhdbVze20Wu9vbBGQV8Uenh5yye1wUWSx7
DuNYQsxAube33Rt4+2zsnOnuTptzO8gomGNgnn1dtPjeF58rJY1WHx44b9tdntL/
BMAn/WExjXcQ/3IEDeZiL8SjhX8PivX7B7opqH9aGP4MieyBCgFa8YXlUUG6FW//
VrDsRA+fbw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:31 2025 by rpki-client