Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/dA7KjjmXs56Osfa8pY-tP4Rt3UI.roa
File: dA7KjjmXs56Osfa8pY-tP4Rt3UI.roa (raw, json)
Hash identifier: 3AgYmJfl+N6gBbhPnWOvrspRyHVoEi7QBJLGocssqLY=
Subject key identifier: 74:0E:CA:8E:39:97:B3:9E:8E:B1:F6:BC:A5:8F:AD:3F:84:6D:DD:42
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 01856CEF470CEC9EF28D75B87DADC0A129A0
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/dA7KjjmXs56Osfa8pY-tP4Rt3UI.roa
Signing time: Sun 01 Jan 2023 10:44:58 +0000
ROA not before: Sun 01 Jan 2023 10:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12306
IP address blocks: 82.98.127.0/24 maxlen: 24
213.83.0.0/18 maxlen: 32
82.98.64.0/18 maxlen: 32
212.19.32.0/19 maxlen: 32
2a02:2e0::/29 maxlen: 128
2a02:2e0:a::/48 maxlen: 48
2a02:2e0:cd4e::/48 maxlen: 48
2a02:2e0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:47:0c:ec:9e:f2:8d:75:b8:7d:ad:c0:a1:29:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jan 1 10:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=740eca8e3997b39e8eb1f6bca58fad3f846ddd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:70:72:6d:df:fb:e6:98:db:01:20:89:6a:
54:83:c2:2b:51:fa:56:1d:9a:25:97:57:15:8a:b9:
e1:3a:88:b1:09:0d:3c:1e:c2:6e:61:8c:bd:e6:93:
b6:29:54:03:8d:94:38:c9:d2:72:cd:da:b4:57:db:
5b:79:f6:cc:35:8a:5b:63:4b:f9:3e:d6:73:c4:a0:
c1:22:d0:12:6f:26:4c:a5:24:38:f9:b5:63:f2:36:
f7:f5:75:c3:42:67:a3:8f:bd:09:87:21:a5:5f:d0:
e9:41:08:35:7b:60:04:09:f7:58:fd:d8:43:e4:32:
96:e4:dc:2a:20:1a:0d:c3:8d:ae:5e:29:a9:59:c0:
f7:43:25:8d:b1:17:0e:8a:53:72:ad:97:57:76:ce:
26:1f:a9:5b:bd:aa:c3:17:22:59:a4:a4:be:17:a7:
f7:f0:5e:46:8c:06:9d:9e:21:bc:2e:9d:82:20:37:
f9:5e:55:83:f0:27:d1:04:8e:c7:b7:f6:80:14:bf:
71:4c:5f:32:cf:4e:6d:f2:46:3d:bf:02:d4:99:9e:
5e:ba:43:fb:dd:17:8c:44:76:b4:9c:82:75:ac:57:
cf:e8:86:a0:a7:fc:aa:3f:81:0f:00:5a:77:33:c1:
a6:65:94:e3:3c:ea:54:7f:27:cb:bd:2f:13:22:74:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0E:CA:8E:39:97:B3:9E:8E:B1:F6:BC:A5:8F:AD:3F:84:6D:DD:42
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/dA7KjjmXs56Osfa8pY-tP4Rt3UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.64.0/18
212.19.32.0/19
213.83.0.0/18
IPv6:
2a02:2e0::/29
Signature Algorithm: sha256WithRSAEncryption
65:a9:87:0e:d4:39:d7:cb:31:92:de:16:b2:b0:88:d9:54:9f:
f8:cb:64:5b:0b:5b:2b:f2:56:54:88:69:99:55:c7:a4:f6:81:
1e:22:23:3b:28:08:73:cb:5b:85:d4:fc:ec:e9:f6:0b:39:e8:
d8:df:8d:49:38:65:33:1f:c2:a0:b2:ac:0b:cf:a8:c9:2a:51:
77:ec:fb:5f:c0:fc:4f:af:e2:7d:ee:11:13:86:2b:51:64:d7:
75:af:e2:00:6a:b0:ee:2a:50:25:f8:98:ee:7d:c0:50:1e:a5:
85:2b:d2:9f:a8:f0:d7:14:af:ce:d4:d1:b4:86:39:26:d4:e0:
8e:9c:fd:e7:88:5a:48:29:91:1e:78:c4:8f:2d:37:a7:39:7a:
57:33:4c:9d:fc:b4:53:2a:bf:76:54:3c:44:c5:27:89:a7:f1:
bb:e7:df:61:b6:f3:1d:d6:3d:e2:40:46:f4:3e:f9:d5:aa:10:
64:a5:9b:25:cd:f5:97:94:3c:d4:fd:a9:15:0c:2f:09:66:6a:
94:f5:f3:1c:9e:c9:0a:ea:db:85:d6:8f:55:df:dd:b2:9a:6c:
29:36:85:32:7d:b3:92:a2:b4:a0:e4:0b:04:55:f8:61:87:d9:
ae:5e:d9:79:d3:13:d6:a3:0a:8d:29:23:18:d4:6b:2c:af:00:
09:24:24:63
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVs70cM7J7yjXW4fa3AoSmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk
NGJiNWMwHhcNMjMwMTAxMTA0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDBlY2E4ZTM5OTdiMzllOGViMWY2YmNhNThmYWQzZjg0NmRkZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwZwcm3f++aY2wEgiWpUg8IrUfpW
HZoll1cVirnhOoixCQ08HsJuYYy95pO2KVQDjZQ4ydJyzdq0V9tbefbMNYpbY0v5
PtZzxKDBItASbyZMpSQ4+bVj8jb39XXDQmejj70JhyGlX9DpQQg1e2AECfdY/dhD
5DKW5NwqIBoNw42uXimpWcD3QyWNsRcOilNyrZdXds4mH6lbvarDFyJZpKS+F6f3
8F5GjAadniG8Lp2CIDf5XlWD8CfRBI7Ht/aAFL9xTF8yz05t8kY9vwLUmZ5eukP7
3ReMRHa0nIJ1rFfP6Iagp/yqP4EPAFp3M8GmZZTjPOpUfyfLvS8TInR0aQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHQOyo45l7OejrH2vKWPrT+Ebd1CMB8GA1UdIwQY
MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt
YTU2ODM4NDRlNzkyLzEvZEE3S2pqbVhzNTZPc2ZhOHBZLXRQNFJ0M1VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky
LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGUmJAAwQF
1BMgAwQG1VMAMA0EAgACMAcDBQMqAgLgMA0GCSqGSIb3DQEBCwUAA4IBAQBlqYcO
1DnXyzGS3haysIjZVJ/4y2RbC1sr8lZUiGmZVcek9oEeIiM7KAhzy1uF1Pzs6fYL
OejY341JOGUzH8KgsqwLz6jJKlF37PtfwPxPr+J97hEThitRZNd1r+IAarDuKlAl
+JjufcBQHqWFK9KfqPDXFK/O1NG0hjkm1OCOnP3niFpIKZEeeMSPLTenOXpXM0yd
/LRTKr92VDxExSeJp/G7599htvMd1j3iQEb0PvnVqhBkpZslzfWXlDzU/akVDC8J
ZmqU9fMcnskK6tuF1o9V392ymmwpNoUyfbOSorSg5AsEVfhhh9muXtl50xPWowqN
KSMY1GssrwAJJCRj
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:37 2025 by rpki-client