Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/ipAE8y7FAfaFxA_yL4XUvqf3HrQ.roa
File: ipAE8y7FAfaFxA_yL4XUvqf3HrQ.roa (raw, json)
Hash identifier: ttnD9V/f5r7j9nICWG8CGJFvWptaw2f/vZSK5gU2ibM=
Subject key identifier: 8A:90:04:F3:2E:C5:01:F6:85:C4:0F:F2:2F:85:D4:BE:A7:F7:1E:B4
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 0520B19C
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/ipAE8y7FAfaFxA_yL4XUvqf3HrQ.roa
Signing time: Mon 03 Jan 2022 08:48:55 +0000
ROA not before: Mon 03 Jan 2022 08:48:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42708
IP address blocks: 79.141.174.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
193.42.39.0/24 maxlen: 24
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86028700 (0x520b19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 3 08:48:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a9004f32ec501f685c40ff22f85d4bea7f71eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:3c:58:19:72:f8:8e:04:2f:c0:82:e5:5f:
82:95:6e:9e:c1:38:19:5f:c2:c8:a1:5b:ba:93:ba:
02:0c:b2:be:c1:d6:75:e0:5f:b6:bb:e4:12:7d:cb:
4c:af:31:84:7b:3f:4c:aa:2c:cc:37:c5:c9:a1:41:
0e:74:90:f2:91:f1:34:ac:74:9a:a8:86:30:ab:09:
cb:d7:4a:bd:ca:5c:bc:80:cb:02:d2:ac:b7:ee:3f:
d2:70:a4:da:e3:5e:78:05:e3:ad:c6:08:1f:f1:32:
4b:ba:9a:6c:5f:82:ba:8f:72:f5:fb:8c:8f:09:2f:
ea:ae:d5:13:1b:81:ee:2c:a2:f0:f2:bc:fd:fe:9b:
f3:ef:d7:9d:b9:63:ae:d2:e1:39:0b:75:b3:33:f1:
3c:2e:09:a6:18:43:fc:50:1d:e2:e9:82:03:85:3e:
5e:ac:19:fa:87:5c:b9:9e:72:43:15:a1:88:f8:d0:
59:22:4b:d2:92:62:59:d3:d4:66:a8:3b:ba:85:91:
2b:4f:a6:1d:ad:26:1b:9e:31:b3:6a:d1:f0:e4:81:
9b:b9:8b:35:61:8e:0c:25:62:5c:5b:59:a1:fe:84:
a1:fc:76:8b:6e:eb:c6:e0:18:97:14:fb:3d:f7:e6:
01:72:04:f2:e6:87:b3:95:c3:31:7a:48:bd:a9:c8:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:90:04:F3:2E:C5:01:F6:85:C4:0F:F2:2F:85:D4:BE:A7:F7:1E:B4
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/ipAE8y7FAfaFxA_yL4XUvqf3HrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.174.0/23
185.117.88.0/23
185.174.133.0/24
193.42.39.0/24
IPv6:
2a01:8640:6::/48
2a01:8640:9::/48
Signature Algorithm: sha256WithRSAEncryption
15:f9:05:ba:2d:f0:ea:dc:91:8c:e0:5c:b6:a9:6b:7a:1e:04:
9f:0b:51:2a:f3:6e:ec:ec:cd:e5:54:36:21:93:6a:06:1e:fb:
b2:28:11:73:ff:b5:64:86:c8:9f:48:ed:70:f6:21:7d:ef:c3:
c5:a2:62:fd:81:a3:fd:4c:2b:92:c7:ac:7f:d4:d8:89:55:97:
04:62:b3:f8:32:13:7c:87:5d:20:b0:04:82:02:69:08:49:db:
9d:9c:0c:4d:d7:f2:cd:5c:f5:c0:98:8d:e9:c4:15:e5:60:25:
f3:9a:3f:75:db:f2:be:62:1b:bc:1a:da:20:ce:2b:da:d3:aa:
d5:61:96:db:03:6f:19:c1:7f:41:da:21:ca:37:74:1e:bb:76:
59:e2:74:c7:46:bc:db:53:bf:1c:92:33:d4:2b:40:6f:1c:c8:
31:12:01:ca:dc:67:98:27:e0:92:f0:14:9a:e2:50:86:89:4c:
f3:23:c7:04:04:83:d3:d2:58:a4:a2:29:7e:4c:58:e5:68:7d:
d2:f8:b7:80:2b:18:85:12:0c:a7:4b:60:4f:84:e4:03:89:b2:
d9:3b:71:a1:ab:6b:e2:14:60:3e:7b:53:56:fd:41:01:cf:a3:
34:9f:aa:87:27:86:eb:2b:f7:04:91:10:ac:c8:02:4d:69:50:
be:27:70:0a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIEBSCxnDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OTEyNDJjMzNiYzJlMmU5ZTQ1ODUwYTBmYzY0YWIyYzc1MDZhNGI4MB4XDTIyMDEw
MzA4NDg1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGE5MDA0ZjMyZWM1
MDFmNjg1YzQwZmYyMmY4NWQ0YmVhN2Y3MWViNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANh2PFgZcviOBC/AguVfgpVunsE4GV/CyKFbupO6AgyyvsHW
deBftrvkEn3LTK8xhHs/TKoszDfFyaFBDnSQ8pHxNKx0mqiGMKsJy9dKvcpcvIDL
AtKst+4/0nCk2uNeeAXjrcYIH/EyS7qabF+Cuo9y9fuMjwkv6q7VExuB7iyi8PK8
/f6b8+/XnbljrtLhOQt1szPxPC4JphhD/FAd4umCA4U+XqwZ+odcuZ5yQxWhiPjQ
WSJL0pJiWdPUZqg7uoWRK0+mHa0mG54xs2rR8OSBm7mLNWGODCViXFtZof6Eofx2
i27rxuAYlxT7PffmAXIE8uaHs5XDMXpIvanI2bsCAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBSKkATzLsUB9oXED/IvhdS+p/cetDAfBgNVHSMEGDAWgBRpEkLDO8Li6eRY
UKD8ZKssdQakuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FSSkN3enZDNHVua1dGQ2dfR1NyTEhVR3BMZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvNjM1NmI5LWM0OWYtNGI0ZC04ZTI5LTM2MmZmZThlZTI3MC8x
L2lwQUU4eTdGQWZhRnhBX3lMNFhVdnFmM0hyUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
NjM1NmI5LWM0OWYtNGI0ZC04ZTI5LTM2MmZmZThlZTI3MC8xL2FSSkN3enZDNHVu
a1dGQ2dfR1NyTEhVR3BMZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowHgQCAAEwGAMEAU+NrgMEAbl1WAMEALmuhQMEAMEq
JzAYBAIAAjASAwcAKgGGQAAGAwcAKgGGQAAJMA0GCSqGSIb3DQEBCwUAA4IBAQAV
+QW6LfDq3JGM4Fy2qWt6HgSfC1Eq827s7M3lVDYhk2oGHvuyKBFz/7VkhsifSO1w
9iF978PFomL9gaP9TCuSx6x/1NiJVZcEYrP4MhN8h10gsASCAmkISdudnAxN1/LN
XPXAmI3pxBXlYCXzmj912/K+Yhu8Gtogziva06rVYZbbA28ZwX9B2iHKN3Qeu3ZZ
4nTHRrzbU78ckjPUK0BvHMgxEgHK3GeYJ+CS8BSa4lCGiUzzI8cEBIPT0likoil+
TFjlaH3S+LeAKxiFEgynS2BPhOQDibLZO3Ghq2viFGA+e1NW/UEBz6M0n6qHJ4br
K/cEkRCsyAJNaVC+J3AK
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:56 2025 by rpki-client