Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uC35C2wDFJDRnaXQxXUszlqwhWM.roa
File: uC35C2wDFJDRnaXQxXUszlqwhWM.roa (raw, json)
Hash identifier: auWF5H0uDIT8SIDtjsk7ogXnBnpbPhoAgJCQiIIHqH0=
Subject key identifier: B8:2D:F9:0B:6C:03:14:90:D1:9D:A5:D0:C5:75:2C:CE:5A:B0:85:63
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0185A54731027EAD07C7065E24FB2562A022
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uC35C2wDFJDRnaXQxXUszlqwhWM.roa
Signing time: Thu 12 Jan 2023 09:19:44 +0000
ROA not before: Thu 12 Jan 2023 09:19:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3352
IP address blocks: 81.39.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:47:31:02:7e:ad:07:c7:06:5e:24:fb:25:62:a0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 12 09:19:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b82df90b6c031490d19da5d0c5752cce5ab08563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:69:95:1a:14:bb:db:33:14:20:bc:ea:57:72:
ed:72:8f:c3:83:e4:8c:97:5a:b3:05:08:4c:38:a1:
63:e6:76:df:45:93:5c:c9:c7:89:48:f1:d2:3a:4a:
47:2d:6b:a0:91:6e:56:8d:a7:48:1f:7e:18:19:89:
9e:37:69:85:29:fe:68:9d:a2:3b:6f:8d:b4:bb:9f:
6b:65:a2:84:ab:dc:22:85:0e:6c:38:95:24:ae:2b:
4c:a1:3d:47:d1:98:04:9f:60:62:1b:06:76:e1:34:
83:ba:45:42:97:b8:68:da:39:26:fd:07:cf:bc:e6:
29:8b:0a:d4:1f:62:97:0a:32:7e:f8:2a:14:f0:77:
3a:cc:47:9a:42:ec:2e:b7:5e:d3:e4:4b:1d:3c:cc:
85:30:b8:44:a8:95:32:02:4d:87:25:ea:fe:37:76:
b1:0b:b4:60:d1:97:08:7f:51:df:ef:e0:22:a6:50:
32:12:2a:b5:91:54:b4:95:24:5b:87:d5:f9:85:ba:
7f:d7:07:19:fd:18:9f:3b:7f:c2:30:ed:2f:d2:ab:
45:95:67:ae:9c:37:6d:59:85:18:b2:66:37:c9:76:
05:e6:aa:a8:e1:0d:77:5a:2b:92:9c:d1:94:1e:eb:
7b:2c:22:69:fd:4c:52:3d:9d:da:47:99:9f:09:b4:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2D:F9:0B:6C:03:14:90:D1:9D:A5:D0:C5:75:2C:CE:5A:B0:85:63
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uC35C2wDFJDRnaXQxXUszlqwhWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.137.0.0/16
81.39.0.0/16
83.34.0.0/15
83.37.0.0/16
83.57.0.0/16
83.59.0.0/16
88.8.0.0/14
88.13.0.0-88.16.255.255
88.24.0.0/15
Signature Algorithm: sha256WithRSAEncryption
05:f6:a2:6e:b9:ff:dd:6b:ac:6f:eb:82:7b:71:18:c9:55:a4:
92:1b:2b:fd:fd:2b:5a:70:89:b4:c0:a6:9c:30:16:d0:71:a8:
30:3e:fc:e3:44:0e:b7:59:b0:f2:ca:a7:8c:c0:7a:92:9f:35:
aa:b2:c6:d0:05:d0:d8:90:6a:03:b3:dd:b5:31:bb:0e:87:73:
59:32:72:57:35:2a:cc:7f:e5:88:0e:8e:52:a4:ad:db:33:59:
d2:8a:64:4c:19:23:39:bf:cf:0c:46:d2:0e:63:2e:b2:1c:4e:
02:36:f5:a8:22:b2:1d:a4:15:af:72:d9:64:83:ea:fe:af:37:
c0:ab:5c:3b:b0:81:ae:bb:9f:4b:81:cc:df:0c:7c:ee:23:3b:
82:fd:d5:43:f0:e6:ce:01:4a:a6:5c:01:a7:bc:17:60:07:f0:
3c:ee:f3:91:c2:f5:3f:cf:50:2f:a9:b3:33:52:72:a3:7d:4a:
24:3b:cb:8f:68:4d:06:5b:de:11:1c:3f:c2:d8:47:00:1f:d1:
1e:16:ec:95:f1:f6:ac:b2:d6:58:8e:c4:be:bc:6f:6a:1c:1b:
c9:b6:fa:14:2c:5e:de:b9:91:1d:a4:8c:83:07:ba:1e:e3:4f:
aa:3e:e8:f5:5f:d9:9b:b1:3b:d6:ab:4f:c1:2e:f4:40:79:ef:
0b:9a:62:43
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYWlRzECfq0HxwZeJPslYqAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjMwMTEyMDkxOTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODJkZjkwYjZjMDMxNDkwZDE5ZGE1ZDBjNTc1MmNjZTVhYjA4NTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWmVGhS72zMUILzqV3Ltco/Dg+SM
l1qzBQhMOKFj5nbfRZNcyceJSPHSOkpHLWugkW5WjadIH34YGYmeN2mFKf5onaI7
b420u59rZaKEq9wihQ5sOJUkritMoT1H0ZgEn2BiGwZ24TSDukVCl7ho2jkm/QfP
vOYpiwrUH2KXCjJ++CoU8Hc6zEeaQuwut17T5EsdPMyFMLhEqJUyAk2HJer+N3ax
C7Rg0ZcIf1Hf7+AiplAyEiq1kVS0lSRbh9X5hbp/1wcZ/RifO3/CMO0v0qtFlWeu
nDdtWYUYsmY3yXYF5qqo4Q13WiuSnNGUHut7LCJp/UxSPZ3aR5mfCbQeHwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFLgt+QtsAxSQ0Z2l0MV1LM5asIVjMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvdUMzNUMyd0RGSkRSbmFYUXhYVXN6bHF3aFdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwMAAokDAwBR
JwMDAVMiAwMAUyUDAwBTOQMDAFM7AwMCWAgwCgMDAFgNAwMAWBADAwFYGDANBgkq
hkiG9w0BAQsFAAOCAQEABfaibrn/3Wusb+uCe3EYyVWkkhsr/f0rWnCJtMCmnDAW
0HGoMD7840QOt1mw8sqnjMB6kp81qrLG0AXQ2JBqA7PdtTG7DodzWTJyVzUqzH/l
iA6OUqSt2zNZ0opkTBkjOb/PDEbSDmMushxOAjb1qCKyHaQVr3LZZIPq/q83wKtc
O7CBrrufS4HM3wx87iM7gv3VQ/DmzgFKplwBp7wXYAfwPO7zkcL1P89QL6mzM1Jy
o31KJDvLj2hNBlveERw/wthHAB/RHhbslfH2rLLWWI7Evrxvahwbybb6FCxe3rmR
HaSMgwe6HuNPqj7o9V/Zm7E71qtPwS70QHnvC5piQw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:34:00 2025 by rpki-client