Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/8eGprtjLF29FoILtjVs1PHxry9o.roa
File: 8eGprtjLF29FoILtjVs1PHxry9o.roa (raw, json)
Hash identifier: ugJ++j5djjzklKrkkxSSya1PmOplF+jPymWqAH0f+Xc=
Subject key identifier: F1:E1:A9:AE:D8:CB:17:6F:45:A0:82:ED:8D:5B:35:3C:7C:6B:CB:DA
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 0515A9F1
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/8eGprtjLF29FoILtjVs1PHxry9o.roa
Signing time: Sat 01 Jan 2022 11:02:42 +0000
ROA not before: Sat 01 Jan 2022 11:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61046
IP address blocks: 91.193.16.0/23 maxlen: 23
77.83.197.0/24 maxlen: 24
188.119.148.0/23 maxlen: 23
193.42.37.0/24 maxlen: 24
5.149.250.0/23 maxlen: 23
185.81.112.0/23 maxlen: 23
79.141.170.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
2a01:8640:7::/48 maxlen: 48
2a01:8640:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85305841 (0x515a9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 11:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1e1a9aed8cb176f45a082ed8d5b353c7c6bcbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:51:71:44:f1:84:a7:a4:bb:af:53:8d:a8:
b9:45:88:2d:db:9d:ba:24:9a:d6:fe:b8:f1:5b:74:
82:54:9e:8b:1f:5f:87:ea:d5:89:10:75:b3:9d:4a:
1a:98:86:5c:35:f0:0b:d9:72:32:8c:77:3d:30:07:
02:da:f8:cd:d7:59:00:e8:f7:47:24:d2:62:4a:e1:
b1:f0:55:91:ee:f2:3a:ef:63:b9:c4:1b:3c:7e:ae:
65:b5:44:88:f2:12:0d:f5:cf:e9:ae:3b:45:44:98:
77:7e:19:4b:d5:31:a4:6a:fa:91:77:ad:d7:47:85:
8e:5b:c8:d4:1f:9a:c8:5f:c0:c8:1b:5a:a5:66:29:
30:6f:6b:76:fd:ae:81:60:d4:15:c6:ba:8c:3c:69:
4f:15:bb:eb:eb:48:3f:52:36:c5:84:75:35:5a:f2:
98:2d:f5:0b:31:73:e8:4e:24:1c:a8:c7:b2:70:be:
b3:47:4a:34:c9:b5:13:f5:84:7d:82:15:ec:02:51:
ff:2f:5f:8f:c1:f7:fd:74:c3:25:cb:cd:e2:a3:81:
49:31:d3:9b:23:7d:23:a1:71:4f:91:9f:39:fa:6a:
ac:37:25:36:0f:84:ca:43:a2:6f:d6:e1:29:d1:66:
90:cd:99:0f:10:1c:46:b5:6e:d2:44:c8:5e:c6:ec:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E1:A9:AE:D8:CB:17:6F:45:A0:82:ED:8D:5B:35:3C:7C:6B:CB:DA
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/8eGprtjLF29FoILtjVs1PHxry9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.250.0/23
77.83.197.0/24
79.141.170.0-79.141.172.255
91.193.16.0/23
185.81.112.0/23
188.119.148.0/23
193.42.37.0/24
IPv6:
2a01:8640:1::/48
2a01:8640:7::/48
Signature Algorithm: sha256WithRSAEncryption
4d:c0:a3:12:44:bf:e6:f9:5b:80:2b:e2:bb:2b:cb:ea:80:1a:
41:1e:ab:ef:7b:23:a3:57:1f:3e:52:f7:4f:51:46:40:14:96:
6e:a5:ba:04:07:a9:2d:37:e4:87:59:1f:34:dc:2e:bb:b1:8f:
d8:81:4f:de:ef:37:46:8d:f0:d9:19:19:27:05:a2:cb:6e:c9:
70:5f:06:2e:a2:03:db:fb:b9:1d:26:44:57:c5:73:5a:0f:cb:
8f:8b:e1:0f:32:a0:40:97:08:73:e9:a3:ef:7a:5e:02:63:65:
61:46:0d:e3:e1:f4:9d:8d:6e:66:50:75:96:b6:e9:e3:87:21:
f8:c9:61:36:b0:fe:70:e0:ca:30:f7:f7:e3:7f:70:94:87:a6:
c0:75:fa:c2:54:9e:bc:72:24:fc:ea:8c:e6:ea:9a:14:67:5f:
24:ca:b9:1d:91:30:45:e4:84:1b:00:c7:e5:0a:8f:5c:9c:d5:
e9:ae:cf:2e:6a:46:e0:98:7e:ea:5e:6a:d8:f8:db:6e:52:24:
b1:a7:c5:3a:63:bd:3e:58:1d:38:e4:b6:71:3c:cf:84:04:01:
13:68:c4:69:a3:14:01:2e:5a:b7:82:42:e9:8c:9e:c6:bc:14:
a1:40:a3:86:0a:d4:91:ee:47:77:8e:b0:92:70:11:fc:0f:4c:
2c:23:3d:92
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIEBRWp8TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OTEyNDJjMzNiYzJlMmU5ZTQ1ODUwYTBmYzY0YWIyYzc1MDZhNGI4MB4XDTIyMDEw
MTExMDI0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjFlMWE5YWVkOGNi
MTc2ZjQ1YTA4MmVkOGQ1YjM1M2M3YzZiY2JkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALwhUXFE8YSnpLuvU42ouUWILduduiSa1v648Vt0glSeix9f
h+rViRB1s51KGpiGXDXwC9lyMox3PTAHAtr4zddZAOj3RyTSYkrhsfBVke7yOu9j
ucQbPH6uZbVEiPISDfXP6a47RUSYd34ZS9UxpGr6kXet10eFjlvI1B+ayF/AyBta
pWYpMG9rdv2ugWDUFca6jDxpTxW76+tIP1I2xYR1NVrymC31CzFz6E4kHKjHsnC+
s0dKNMm1E/WEfYIV7AJR/y9fj8H3/XTDJcvN4qOBSTHTmyN9I6FxT5GfOfpqrDcl
Ng+EykOib9bhKdFmkM2ZDxAcRrVu0kTIXsbsCF8CAwEAAaOCAk8wggJLMB0GA1Ud
DgQWBBTx4amu2MsXb0Wggu2NWzU8fGvL2jAfBgNVHSMEGDAWgBRpEkLDO8Li6eRY
UKD8ZKssdQakuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FSSkN3enZDNHVua1dGQ2dfR1NyTEhVR3BMZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvNjM1NmI5LWM0OWYtNGI0ZC04ZTI5LTM2MmZmZThlZTI3MC8x
LzhlR3BydGpMRjI5Rm9JTHRqVnMxUEh4cnk5by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
NjM1NmI5LWM0OWYtNGI0ZC04ZTI5LTM2MmZmZThlZTI3MC8xL2FSSkN3enZDNHVu
a1dGQ2dfR1NyTEhVR3BMZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBl
BggrBgEFBQcBBwEB/wRWMFQwOAQCAAEwMgMEAQWV+gMEAE1TxTAMAwQBT42qAwQA
T42sAwQBW8EQAwQBuVFwAwQBvHeUAwQAwSolMBgEAgACMBIDBwAqAYZAAAEDBwAq
AYZAAAcwDQYJKoZIhvcNAQELBQADggEBAE3AoxJEv+b5W4Ar4rsry+qAGkEeq+97
I6NXHz5S909RRkAUlm6lugQHqS035IdZHzTcLruxj9iBT97vN0aN8NkZGScFostu
yXBfBi6iA9v7uR0mRFfFc1oPy4+L4Q8yoECXCHPpo+96XgJjZWFGDePh9J2NbmZQ
dZa26eOHIfjJYTaw/nDgyjD39+N/cJSHpsB1+sJUnrxyJPzqjObqmhRnXyTKuR2R
MEXkhBsAx+UKj1yc1emuzy5qRuCYfupeatj4225SJLGnxTpjvT5YHTjktnE8z4QE
ARNoxGmjFAEuWreCQumMnsa8FKFAo4YK1JHuR3eOsJJwEfwPTCwjPZI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:25 2025 by rpki-client