Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/fjtJ12ThyknrBMCNCoEpu3Mo6OE.roa
File: fjtJ12ThyknrBMCNCoEpu3Mo6OE.roa (raw, json)
Hash identifier: v38kzp7SsD+4K9VSq9bxLEy9XUzljk42a2PGgDBDuPo=
Subject key identifier: 7E:3B:49:D7:64:E1:CA:49:EB:04:C0:8D:0A:81:29:BB:73:28:E8:E1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 01880A18ADE0C382203B707354EA1B7F782C
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/fjtJ12ThyknrBMCNCoEpu3Mo6OE.roa
Signing time: Thu 11 May 2023 09:16:09 +0000
ROA not before: Thu 11 May 2023 09:16:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 62.178.0.0/16 maxlen: 17
195.34.136.0/21 maxlen: 22
195.34.144.0/20 maxlen: 21
84.112.0.0/14 maxlen: 15
213.47.0.0/17 maxlen: 18
84.115.208.0/20 maxlen: 20
84.115.224.0/20 maxlen: 20
80.241.16.0/20 maxlen: 21
217.25.122.0/23 maxlen: 23
185.35.152.0/22 maxlen: 23
80.108.0.0/15 maxlen: 16
213.47.128.0/18 maxlen: 19
217.25.112.0/20 maxlen: 22
213.47.208.0/21 maxlen: 22
213.47.216.0/22 maxlen: 23
213.47.224.0/19 maxlen: 20
212.186.0.0/16 maxlen: 17
80.110.64.0/23 maxlen: 23
195.34.128.0/23 maxlen: 24
195.34.131.0/24 maxlen: 24
212.17.64.0/18 maxlen: 19
80.110.0.0/16 maxlen: 17
213.47.192.0/20 maxlen: 21
2a02:838c::/30 maxlen: 30
2a02:8380::/30 maxlen: 33
2a02:8380::/28 maxlen: 29
2a00:e360::/32 maxlen: 33
2a02:838a::/41 maxlen: 44
2a02:8384::/31 maxlen: 32
2a02:8388::/29 maxlen: 30
2a02:8388::/31 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:18:ad:e0:c3:82:20:3b:70:73:54:ea:1b:7f:78:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: May 11 09:16:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e3b49d764e1ca49eb04c08d0a8129bb7328e8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:52:3a:2a:d2:81:d5:72:9d:04:8a:86:39:dd:
c2:eb:be:a6:69:2a:3f:55:26:8b:f0:86:21:54:81:
d4:bd:85:b3:9c:12:60:6d:67:c1:6a:e3:4e:a6:bf:
51:f6:0d:b0:e7:54:9b:e4:24:ac:1e:9b:4a:80:84:
43:0c:8f:cc:c1:a8:05:67:29:43:0f:f2:1b:aa:32:
43:f1:f7:42:c8:cb:ea:e1:08:29:87:ce:8f:49:a8:
d3:e9:96:51:a5:62:e9:4f:79:a0:ef:4e:29:d5:17:
a0:28:38:b1:be:35:9b:d4:4a:1e:9a:b8:b4:ed:b2:
78:68:0f:b6:90:22:53:4a:6c:fe:5f:95:64:0f:91:
60:f9:47:72:84:49:41:d9:84:fd:ee:e7:4d:dd:9c:
5b:34:be:cd:bd:a5:ed:f6:a0:35:c7:c9:4a:91:ad:
cd:87:eb:b3:a3:4e:be:17:7d:0d:d1:51:d4:70:11:
08:b9:5d:ae:48:af:cf:b1:4a:75:96:0e:0f:f0:0d:
dd:8d:ba:6d:92:77:a4:e1:7b:3a:88:63:b5:d6:36:
87:3d:3f:bc:a6:f6:0f:b6:6a:2e:bd:49:6e:6a:72:
ec:48:27:77:34:fb:7c:ff:05:97:5b:4c:8b:79:ab:
07:aa:42:df:2c:54:e3:a8:00:1b:74:10:65:6d:62:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:49:D7:64:E1:CA:49:EB:04:C0:8D:0A:81:29:BB:73:28:E8:E1
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/fjtJ12ThyknrBMCNCoEpu3Mo6OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.178.0.0/16
80.108.0.0-80.110.255.255
80.241.16.0/20
84.112.0.0/14
185.35.152.0/22
195.34.128.0/23
195.34.131.0/24
195.34.136.0-195.34.159.255
212.17.64.0/18
212.186.0.0/16
213.47.0.0-213.47.219.255
213.47.224.0/19
217.25.112.0/20
IPv6:
2a00:e360::/32
2a02:8380::/28
Signature Algorithm: sha256WithRSAEncryption
1b:81:40:86:81:5b:c3:cf:90:3c:14:1a:49:4f:99:93:d7:b5:
de:c5:c8:85:b9:94:ea:a7:ae:23:74:36:68:ea:4e:e4:19:17:
a0:d6:2a:56:4f:07:2c:1b:cc:a0:aa:93:a8:53:cf:65:40:48:
8d:f5:fc:77:72:33:b3:34:62:dd:c6:c0:ec:4f:f8:79:a2:a5:
05:80:73:c4:eb:00:61:b3:e8:07:a7:c4:31:dd:06:23:5a:6c:
e8:40:ce:00:85:3e:fc:1f:16:bf:16:91:f2:6e:cf:b3:06:cc:
df:a6:60:f8:0b:f4:8a:19:d4:89:6b:b4:7e:a5:e2:ef:95:57:
e3:81:1d:72:42:7a:2d:4d:5e:39:35:8f:43:17:eb:7a:7b:cb:
31:6d:c5:ad:54:39:1d:93:96:cf:b9:7c:a7:71:d9:92:3a:19:
76:f4:8d:58:ff:d9:22:99:24:48:56:7c:0c:a1:3f:31:1b:a2:
2c:c4:ea:42:b9:36:d4:4b:4a:36:17:d1:4e:d0:40:ee:e1:d8:
b3:d9:c5:d3:da:06:b0:3f:49:7f:dc:7e:dd:81:cd:6d:b8:b2:
bf:e6:08:d8:fd:dc:05:a6:70:7c:cd:e2:d1:8c:af:72:63:f1:
2d:70:4e:d2:18:97:3f:72:8b:01:db:08:ed:dc:de:ab:6a:af:
f6:15:d0:2e
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAYgKGK3gw4IgO3BzVOobf3gsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YjVmYWQxOGRkOTExMDQxM2EzMWI0ZDhlMTg3NjVhMjdk
NGMzZjEwHhcNMjMwNTExMDkxNjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTNiNDlkNzY0ZTFjYTQ5ZWIwNGMwOGQwYTgxMjliYjczMjhlOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVI6KtKB1XKdBIqGOd3C676maSo/
VSaL8IYhVIHUvYWznBJgbWfBauNOpr9R9g2w51Sb5CSsHptKgIRDDI/MwagFZylD
D/IbqjJD8fdCyMvq4Qgph86PSajT6ZZRpWLpT3mg704p1RegKDixvjWb1Eoemri0
7bJ4aA+2kCJTSmz+X5VkD5Fg+UdyhElB2YT97udN3ZxbNL7NvaXt9qA1x8lKka3N
h+uzo06+F30N0VHUcBEIuV2uSK/PsUp1lg4P8A3djbptknek4Xs6iGO11jaHPT+8
pvYPtmouvUluanLsSCd3NPt8/wWXW0yLeasHqkLfLFTjqAAbdBBlbWJaPwIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFH47Sddk4cpJ6wTAjQqBKbtzKOjhMB8GA1UdIwQY
MBaAFIm1+tGN2REEE6MbTY4Ydlon1MPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAt
NDI1MGNlNTUxN2Q5LzEvZmp0SjEyVGh5a25yQk1DTkNvRXB1M01vNk9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAtNDI1MGNlNTUxN2Q5
LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MGYEAgABMGADAwA+sjAK
AwMCUGwDAwBQbgMEBFDxEAMDAlRwAwQCuSOYAwQBwyKAAwQAwyKDMAwDBAPDIogD
BAXDIoADBAbUEUADAwDUujALAwMA1S8DBALVL9gDBAXVL+ADBATZGXAwFAQCAAIw
DgMFACoA42ADBQQqAoOAMA0GCSqGSIb3DQEBCwUAA4IBAQAbgUCGgVvDz5A8FBpJ
T5mT17XexciFuZTqp64jdDZo6k7kGReg1ipWTwcsG8ygqpOoU89lQEiN9fx3cjOz
NGLdxsDsT/h5oqUFgHPE6wBhs+gHp8Qx3QYjWmzoQM4AhT78Hxa/FpHybs+zBszf
pmD4C/SKGdSJa7R+peLvlVfjgR1yQnotTV45NY9DF+t6e8sxbcWtVDkdk5bPuXyn
cdmSOhl29I1Y/9kimSRIVnwMoT8xG6IsxOpCuTbUS0o2F9FO0EDu4diz2cXT2gaw
P0l/3H7dgc1tuLK/5gjY/dwFpnB8zeLRjK9yY/EtcE7SGJc/cosB2wjt3N6raq/2
FdAu
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:23:09 2025 by rpki-client