Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/4XsCypOXtvlWJ-kUr0B_KSZHdJQ.roa
File: 4XsCypOXtvlWJ-kUr0B_KSZHdJQ.roa (raw, json)
Hash identifier: Ucr15DYevQX7VyuP4/cZjEqM/DokkV51q2nCLFwjTQ0=
Subject key identifier: E1:7B:02:CA:93:97:B6:F9:56:27:E9:14:AF:40:7F:29:26:47:74:94
Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial: 01856BC1064F45AE397D8B63B6C8243566A5
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/4XsCypOXtvlWJ-kUr0B_KSZHdJQ.roa
Signing time: Sun 01 Jan 2023 05:14:50 +0000
ROA not before: Sun 01 Jan 2023 05:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20723
IP address blocks: 217.112.160.0/20 maxlen: 20
185.84.232.0/22 maxlen: 22
178.20.136.0/21 maxlen: 21
131.117.208.0/21 maxlen: 21
79.170.248.0/21 maxlen: 21
217.115.240.0/20 maxlen: 20
2a00:6500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:06:4f:45:ae:39:7d:8b:63:b6:c8:24:35:66:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Validity
Not Before: Jan 1 05:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e17b02ca9397b6f95627e914af407f2926477494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4b:e3:f2:15:9a:f5:62:ca:3b:7d:c5:c6:32:
76:de:2e:1d:25:ca:3f:2f:b2:1f:71:f5:96:07:a8:
aa:7d:11:87:d2:fb:af:be:e6:45:a7:41:01:3c:dc:
ac:3d:f3:b8:2c:f3:40:82:7d:95:7e:1b:d9:cc:2f:
6a:2a:4e:58:74:92:37:48:fd:10:ad:e6:1b:51:b8:
e5:f3:40:04:73:35:c7:df:21:ae:3d:96:c0:42:6d:
39:c1:df:a2:5d:32:de:17:92:8f:24:3e:e3:a1:06:
41:67:34:e0:4b:67:7b:a6:fa:35:ed:e8:0c:e0:36:
ea:a8:8d:47:cc:a4:59:ec:70:45:a4:33:c3:a1:c1:
fc:ec:8b:06:92:9c:b4:e1:a1:d4:47:f1:59:aa:30:
b3:c2:49:5c:1a:ab:9a:2e:8d:a7:c0:04:9d:79:cc:
73:1d:75:22:f5:8b:01:0c:a1:72:81:db:62:bf:01:
da:ad:4a:bc:57:f8:43:ee:99:e0:1c:d4:a2:f4:da:
59:aa:ec:e0:30:45:11:72:df:21:34:bd:8f:40:6b:
6b:9f:ac:83:ea:ff:80:8d:f9:ac:52:fa:c1:94:e8:
96:99:b4:1a:36:a9:a7:f2:e2:bc:75:02:e5:20:2b:
11:61:94:ee:ad:11:42:5a:2d:37:6f:0d:80:85:5d:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7B:02:CA:93:97:B6:F9:56:27:E9:14:AF:40:7F:29:26:47:74:94
X509v3 Authority Key Identifier:
keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/4XsCypOXtvlWJ-kUr0B_KSZHdJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.248.0/21
131.117.208.0/21
178.20.136.0/21
185.84.232.0/22
217.112.160.0/20
217.115.240.0/20
IPv6:
2a00:6500::/29
Signature Algorithm: sha256WithRSAEncryption
2d:eb:f8:8e:17:21:cd:94:04:e9:9b:b9:03:d6:9a:3d:85:ed:
74:93:d5:64:9b:cf:00:6a:86:33:94:ca:c7:d7:27:ad:9b:d4:
a9:55:2e:a5:5f:e0:d0:c9:97:f0:85:3b:80:d3:4c:d8:18:5a:
78:95:3b:39:aa:17:ae:45:ad:2f:73:e0:94:2a:ec:e1:c0:fb:
01:c9:1c:6d:2d:39:c2:b6:e5:94:52:60:3d:59:96:03:5f:b2:
fa:e6:d6:01:8b:b2:2d:e1:d5:79:b9:b5:8e:df:49:e6:dc:d8:
b1:ac:e2:b6:27:56:6c:87:9d:72:e5:e2:57:6c:4e:67:d0:86:
7a:63:60:61:91:4d:f2:fb:60:09:6e:2e:07:96:32:cd:be:e7:
7e:92:43:d2:7e:4e:c7:d2:6b:aa:6d:d9:a6:01:47:d0:e2:e9:
9c:44:f4:99:bb:25:78:e4:e0:a7:20:4f:36:25:e9:16:01:67:
27:ac:fb:fc:00:37:dd:c0:80:2d:c8:7a:c4:08:32:a2:ab:59:
c3:9a:ec:5a:69:22:54:cc:4d:63:52:1e:cc:ee:c4:f2:b9:56:
08:55:00:3c:f4:62:98:4e:26:02:bd:0c:ee:79:1a:7e:4c:40:
38:69:06:91:68:66:1c:f0:7b:5f:bc:c5:c3:37:cb:3c:aa:01:
ab:29:de:c5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYVrwQZPRa45fYtjtsgkNWalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGZmODgwMzMwYWY3NjJhZTZjYzA1MGRlNWYzNGI1ZjU3
YjBiMDkwHhcNMjMwMTAxMDUxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTdiMDJjYTkzOTdiNmY5NTYyN2U5MTRhZjQwN2YyOTI2NDc3NDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0vj8hWa9WLKO33FxjJ23i4dJco/
L7IfcfWWB6iqfRGH0vuvvuZFp0EBPNysPfO4LPNAgn2VfhvZzC9qKk5YdJI3SP0Q
reYbUbjl80AEczXH3yGuPZbAQm05wd+iXTLeF5KPJD7joQZBZzTgS2d7pvo17egM
4DbqqI1HzKRZ7HBFpDPDocH87IsGkpy04aHUR/FZqjCzwklcGquaLo2nwASdecxz
HXUi9YsBDKFygdtivwHarUq8V/hD7pngHNSi9NpZquzgMEURct8hNL2PQGtrn6yD
6v+AjfmsUvrBlOiWmbQaNqmn8uK8dQLlICsRYZTurRFCWi03bw2AhV3OOwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFOF7AsqTl7b5VifpFK9AfykmR3SUMB8GA1UdIwQY
MBaAFJQP+IAzCvdirmzAUN5fNLX1ewsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAt
YTgyZjY1OGEyYWExLzEvNFhzQ3lwT1h0dmxXSi1rVXIwQl9LU1pIZEpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAtYTgyZjY1OGEyYWEx
LzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDT6r4AwQD
g3XQAwQDshSIAwQCuVToAwQE2XCgAwQE2XPwMA0EAgACMAcDBQMqAGUAMA0GCSqG
SIb3DQEBCwUAA4IBAQAt6/iOFyHNlATpm7kD1po9he10k9Vkm88AaoYzlMrH1yet
m9SpVS6lX+DQyZfwhTuA00zYGFp4lTs5qheuRa0vc+CUKuzhwPsByRxtLTnCtuWU
UmA9WZYDX7L65tYBi7It4dV5ubWO30nm3NixrOK2J1Zsh51y5eJXbE5n0IZ6Y2Bh
kU3y+2AJbi4HljLNvud+kkPSfk7H0muqbdmmAUfQ4umcRPSZuyV45OCnIE82JekW
AWcnrPv8ADfdwIAtyHrECDKiq1nDmuxaaSJUzE1jUh7M7sTyuVYIVQA89GKYTiYC
vQzueRp+TEA4aQaRaGYc8HtfvMXDN8s8qgGrKd7F
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:41:13 2025 by rpki-client