Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/003pjwExHo7MpHz4fIW-XvmQ8_w.roa
File: 003pjwExHo7MpHz4fIW-XvmQ8_w.roa (raw, json)
Hash identifier: H92jem/aNK6/wF5rzx2JrzFVtNQNHGXjbJ8SzqZnW9E=
Subject key identifier: D3:4D:E9:8F:01:31:1E:8E:CC:A4:7C:F8:7C:85:BE:5E:F9:90:F3:FC
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 01856F66D6094E75005A61150DD94300F5F2
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/003pjwExHo7MpHz4fIW-XvmQ8_w.roa
Signing time: Sun 01 Jan 2023 22:14:48 +0000
ROA not before: Sun 01 Jan 2023 22:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39087
IP address blocks: 194.39.99.0/24 maxlen: 32
194.39.101.0/24 maxlen: 32
91.223.28.0/24 maxlen: 32
194.37.1.0/24 maxlen: 32
91.223.70.0/24 maxlen: 32
185.97.200.0/22 maxlen: 32
194.37.254.0/24 maxlen: 32
91.223.75.0/24 maxlen: 32
5.8.36.0/22 maxlen: 32
91.223.89.0/24 maxlen: 32
2a00:1b78::/29 maxlen: 64
2a0f:a3c0::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d6:09:4e:75:00:5a:61:15:0d:d9:43:00:f5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Jan 1 22:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d34de98f01311e8ecca47cf87c85be5ef990f3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e2:20:b2:dc:bd:d0:05:30:c7:c3:1c:22:4d:
bd:d0:5e:5e:ab:a2:64:40:55:29:20:de:ee:77:e0:
a0:cf:73:3f:cb:ab:55:cf:aa:b1:55:ee:c7:0e:f8:
0d:6a:c0:43:af:99:82:8b:b0:f0:1f:f1:75:65:94:
36:de:94:5f:43:6d:c8:c6:a3:04:fb:1f:9b:09:25:
3d:aa:ec:c8:7d:e6:09:b4:cb:5d:49:67:4f:c6:36:
17:c1:f2:82:47:0b:e3:52:b5:1d:71:28:9c:88:36:
0b:94:d4:60:80:17:b5:d1:20:34:27:73:8d:f2:5e:
2f:d0:03:bb:79:5b:17:47:62:68:61:a0:26:1a:bd:
e6:b9:c9:8a:a6:92:64:7b:bb:6b:88:4e:56:a9:cb:
5a:d4:17:6a:64:7b:9c:a2:ef:9c:ef:d1:76:0e:71:
fd:72:a1:5e:82:df:85:89:c8:d9:fd:98:27:62:6a:
4b:c2:a8:85:16:11:40:b6:bb:c6:36:0d:85:c9:07:
7d:72:31:40:89:96:6f:dc:46:a7:40:83:26:43:72:
f1:81:dd:b1:40:1f:9b:47:80:a7:0f:e8:66:2d:9c:
51:84:38:00:4c:a5:24:35:e2:c1:0d:df:c2:74:1b:
f0:fa:0b:01:32:5d:b6:93:02:91:f5:f8:5e:e5:41:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4D:E9:8F:01:31:1E:8E:CC:A4:7C:F8:7C:85:BE:5E:F9:90:F3:FC
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/003pjwExHo7MpHz4fIW-XvmQ8_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.36.0/22
91.223.28.0/24
91.223.70.0/24
91.223.75.0/24
91.223.89.0/24
185.97.200.0/22
194.37.1.0/24
194.37.254.0/24
194.39.99.0/24
194.39.101.0/24
IPv6:
2a00:1b78::/29
2a0f:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:ac:7c:55:c8:df:c4:53:07:b1:d3:fa:98:a4:68:f7:33:72:
ee:3b:63:6e:6b:ec:62:cd:6b:d5:92:80:3b:bb:44:87:7b:3d:
3f:41:20:42:ff:18:39:58:f9:04:90:10:67:86:d4:ce:57:25:
e7:2b:fb:de:ca:2b:58:c1:79:71:51:94:f8:69:f7:da:a0:a7:
2d:b7:75:e6:89:94:35:95:db:27:24:4a:de:3f:00:ad:a7:6e:
2e:50:63:1e:ca:d0:fa:78:d6:ac:9d:14:64:6b:bc:be:65:86:
62:02:4b:77:ab:d4:df:c9:d6:2c:f4:cf:6f:6f:82:0b:46:25:
d0:ea:d5:23:2a:89:e4:ab:b0:31:ed:34:61:5b:e6:1b:04:70:
5a:ca:36:2c:5f:d3:40:12:63:b8:35:81:50:54:b7:6e:97:1c:
c2:6c:c9:3d:23:e3:09:c2:d3:7f:03:1a:8b:77:b4:f3:dc:35:
8e:97:21:db:eb:05:5b:c0:50:d3:77:b1:31:02:55:96:56:46:
14:49:97:fb:98:61:d1:18:af:b9:36:7c:9f:f1:80:5b:fe:3e:
fb:99:c4:af:c7:90:64:69:ab:58:68:55:d9:f7:82:50:b5:6b:
f3:69:1c:56:85:37:2c:dd:e0:4b:60:db:7d:55:63:88:75:37:
71:30:12:11
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAYVvZtYJTnUAWmEVDdlDAPXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMWRmNmE4YWFhNzA0MWQ3MjUyODVkMGRkMGUxODBhNjQ5
YmMyMTMwHhcNMjMwMTAxMjIxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzRkZTk4ZjAxMzExZThlY2NhNDdjZjg3Yzg1YmU1ZWY5OTBmM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOIgsty90AUwx8McIk290F5eq6Jk
QFUpIN7ud+Cgz3M/y6tVz6qxVe7HDvgNasBDr5mCi7DwH/F1ZZQ23pRfQ23IxqME
+x+bCSU9quzIfeYJtMtdSWdPxjYXwfKCRwvjUrUdcSiciDYLlNRggBe10SA0J3ON
8l4v0AO7eVsXR2JoYaAmGr3mucmKppJke7triE5Wqcta1BdqZHucou+c79F2DnH9
cqFegt+FicjZ/ZgnYmpLwqiFFhFAtrvGNg2FyQd9cjFAiZZv3EanQIMmQ3Lxgd2x
QB+bR4CnD+hmLZxRhDgATKUkNeLBDd/CdBvw+gsBMl22kwKR9fhe5UEZ0QIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFNNN6Y8BMR6OzKR8+HyFvl75kPP8MB8GA1UdIwQY
MBaAFOId9qiqpwQdclKF0N0OGApkm8ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEt
NjJiYTNhNjg4NGM4LzEvMDAzcGp3RXhIbzdNcEh6NGZJVy1Ydm1ROF93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEtNjJiYTNhNjg4NGM4
LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQCBQgkAwQA
W98cAwQAW99GAwQAW99LAwQAW99ZAwQCuWHIAwQAwiUBAwQAwiX+AwQAwidjAwQA
widlMBQEAgACMA4DBQMqABt4AwUDKg+jwDANBgkqhkiG9w0BAQsFAAOCAQEAhKx8
VcjfxFMHsdP6mKRo9zNy7jtjbmvsYs1r1ZKAO7tEh3s9P0EgQv8YOVj5BJAQZ4bU
zlcl5yv73sorWMF5cVGU+Gn32qCnLbd15omUNZXbJyRK3j8AraduLlBjHsrQ+njW
rJ0UZGu8vmWGYgJLd6vU38nWLPTPb2+CC0Yl0OrVIyqJ5KuwMe00YVvmGwRwWso2
LF/TQBJjuDWBUFS3bpccwmzJPSPjCcLTfwMai3e089w1jpch2+sFW8BQ03exMQJV
llZGFEmX+5hh0RivuTZ8n/GAW/4++5nEr8eQZGmrWGhV2feCULVr82kcVoU3LN3g
S2DbfVVjiHU3cTASEQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:36 2025 by rpki-client