Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/09HCDLuGSkyDRLNA12oZAKAWZsw.roa
File: 09HCDLuGSkyDRLNA12oZAKAWZsw.roa (raw, json)
Hash identifier: BDK8urzADVbdZsFkzXKIjM3GNlUmy54KWITWtttEpYY=
Subject key identifier: D3:D1:C2:0C:BB:86:4A:4C:83:44:B3:40:D7:6A:19:00:A0:16:66:CC
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 01857255852933432DA417DC87E430228763
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/09HCDLuGSkyDRLNA12oZAKAWZsw.roa
Signing time: Mon 02 Jan 2023 11:54:45 +0000
ROA not before: Mon 02 Jan 2023 11:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 89.204.240.0/20 maxlen: 24
95.83.196.0/22 maxlen: 24
95.83.196.0/23 maxlen: 24
89.204.160.0/20 maxlen: 24
95.83.229.0/24 maxlen: 24
92.251.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:85:29:33:43:2d:a4:17:dc:87:e4:30:22:87:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Jan 2 11:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3d1c20cbb864a4c8344b340d76a1900a01666cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:2b:33:9b:70:18:9b:f0:e7:27:fd:93:7f:
97:fe:11:38:db:96:7e:8d:a3:a3:b8:ba:ea:1d:e7:
05:cf:fc:cb:15:20:c8:60:6b:3c:98:e5:e2:e1:e9:
25:9f:dd:89:e8:74:63:29:83:be:2f:76:98:59:c5:
06:50:b4:04:da:d0:05:b6:60:fa:6f:a0:13:92:9f:
59:b1:57:0b:b6:14:d6:3a:9b:5b:bc:68:6c:06:17:
f7:f4:6c:e3:a0:c1:0d:f0:ca:c5:b9:af:23:51:58:
d9:8f:b6:72:57:cb:8f:15:5c:52:3c:a3:ee:17:c4:
50:5b:bd:3c:8b:0f:3c:9d:14:dc:75:b2:bf:48:60:
f2:4e:54:61:50:bc:19:ae:99:eb:f0:a1:3c:0e:d7:
c8:e5:e4:3c:c3:51:10:08:e5:1f:1d:c3:fb:7c:6f:
81:4e:ad:b5:36:18:23:6a:bb:fa:a9:44:11:10:53:
99:02:01:5c:4f:e1:77:e9:46:6e:16:87:72:03:b0:
ae:2b:e3:2c:ea:b9:13:d9:f6:07:b3:bb:e5:e3:91:
ce:49:8c:94:96:7b:9b:eb:82:bf:8e:f2:49:d0:ae:
ae:16:53:d9:3f:39:5f:b1:9d:53:df:bc:fc:e0:fe:
d2:fe:dc:a6:c0:bc:1d:c8:41:21:64:32:92:84:38:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:C2:0C:BB:86:4A:4C:83:44:B3:40:D7:6A:19:00:A0:16:66:CC
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/09HCDLuGSkyDRLNA12oZAKAWZsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.204.160.0/20
89.204.240.0/20
92.251.240.0/21
95.83.196.0/22
95.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:cd:16:58:78:2e:5b:26:08:d1:20:40:66:d2:47:cb:16:31:
8d:9d:be:d2:63:22:4e:20:0d:a9:f4:77:2d:f5:84:ec:c0:c8:
d7:aa:e0:e0:40:7d:3e:c1:aa:2f:46:f3:6b:65:d4:57:6d:bd:
18:fc:31:99:4f:ca:a7:42:74:d4:2b:15:10:37:03:65:04:24:
93:e3:74:6e:2e:34:5e:ef:ed:e3:c8:88:ac:ac:54:b1:4a:02:
f8:4f:cf:76:90:05:b0:4e:13:78:85:b5:2c:67:01:ab:5a:c3:
46:da:bb:20:31:85:d5:fe:e3:be:32:5f:ed:11:d3:a8:86:09:
a4:03:a6:76:f6:d4:62:e3:86:b3:2c:58:e4:fa:97:15:ba:07:
90:dc:b5:2b:e8:61:b5:fc:dc:1b:ff:65:75:86:3a:58:c0:4e:
99:80:ab:35:75:77:34:66:bd:4a:e1:09:80:a6:21:73:d5:e4:
de:4c:2e:f5:b9:42:65:e3:83:65:e7:61:8a:05:39:09:15:d2:
df:fb:f1:94:41:5c:91:00:0e:48:25:7d:d3:48:c0:61:a3:30:
18:e1:5a:ec:6f:7a:22:41:61:94:d3:8d:db:c4:b4:c4:bb:0b:
bb:8b:e4:76:4e:11:1f:20:f7:72:79:e0:d4:1a:62:2d:c8:d9:
31:fa:c9:f9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVyVYUpM0MtpBfch+QwIodjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWNmMjYwZDIzMjYzYTdjNmJiNmM1OWMxOWVlYmM2NzU5
YjYwYmUwHhcNMjMwMTAyMTE1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2QxYzIwY2JiODY0YTRjODM0NGIzNDBkNzZhMTkwMGEwMTY2NmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpMrM5twGJvw5yf9k3+X/hE425Z+
jaOjuLrqHecFz/zLFSDIYGs8mOXi4ekln92J6HRjKYO+L3aYWcUGULQE2tAFtmD6
b6ATkp9ZsVcLthTWOptbvGhsBhf39GzjoMEN8MrFua8jUVjZj7ZyV8uPFVxSPKPu
F8RQW708iw88nRTcdbK/SGDyTlRhULwZrpnr8KE8DtfI5eQ8w1EQCOUfHcP7fG+B
Tq21Nhgjarv6qUQREFOZAgFcT+F36UZuFodyA7CuK+Ms6rkT2fYHs7vl45HOSYyU
lnub64K/jvJJ0K6uFlPZPzlfsZ1T37z84P7S/tymwLwdyEEhZDKShDhFgwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNPRwgy7hkpMg0SzQNdqGQCgFmbMMB8GA1UdIwQY
MBaAFMGs8mDSMmOnxrtsWcGe68Z1m2C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEt
ZmZkNjQ2ZDA1ZjY3LzEvMDlIQ0RMdUdTa3lEUkxOQTEyb1pBS0FXWnN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEtZmZkNjQ2ZDA1ZjY3
LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEWcygAwQE
WczwAwQDXPvwAwQCX1PEAwQAX1PlMA0GCSqGSIb3DQEBCwUAA4IBAQCKzRZYeC5b
JgjRIEBm0kfLFjGNnb7SYyJOIA2p9Hct9YTswMjXquDgQH0+waovRvNrZdRXbb0Y
/DGZT8qnQnTUKxUQNwNlBCST43RuLjRe7+3jyIisrFSxSgL4T892kAWwThN4hbUs
ZwGrWsNG2rsgMYXV/uO+Ml/tEdOohgmkA6Z29tRi44azLFjk+pcVugeQ3LUr6GG1
/Nwb/2V1hjpYwE6ZgKs1dXc0Zr1K4QmApiFz1eTeTC71uUJl44Nl52GKBTkJFdLf
+/GUQVyRAA5IJX3TSMBhozAY4Vrsb3oiQWGU043bxLTEuwu7i+R2ThEfIPdyeeDU
GmItyNkx+sn5
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:42:54 2025 by rpki-client