Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3z3CcOW7OrmQezbJMAn7Q_rTmkA.roa
File: 3z3CcOW7OrmQezbJMAn7Q_rTmkA.roa (raw, json)
Hash identifier: WVkjmLlS+sERfgKxxKIhNPNkpMDbX+BV1PXZiuYV4Fw=
Subject key identifier: DF:3D:C2:70:E5:BB:3A:B9:90:7B:36:C9:30:09:FB:43:FA:D3:9A:40
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4285C99B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3z3CcOW7OrmQezbJMAn7Q_rTmkA.roa
Signing time: Sat 01 Jan 2022 14:03:25 +0000
ROA not before: Sat 01 Jan 2022 14:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200606
IP address blocks: 194.14.135.0/24 maxlen: 24
194.71.245.0/24 maxlen: 24
194.103.43.0/24 maxlen: 24
192.165.131.0/24 maxlen: 24
193.182.110.0/24 maxlen: 24
193.234.77.0/24 maxlen: 24
192.121.226.0/24 maxlen: 24
193.234.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116064155 (0x4285c99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df3dc270e5bb3ab9907b36c93009fb43fad39a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:d2:e7:51:33:54:68:e7:4e:a5:8e:de:d5:
27:e4:7f:5f:c3:60:60:2c:fc:c3:bb:d4:64:8b:ba:
2f:0b:07:eb:02:2c:f2:db:92:71:5a:ae:62:8c:7e:
5d:2a:49:f7:fe:c6:29:75:5c:0e:b5:e7:a5:c3:b5:
85:78:74:05:15:0e:0d:76:bf:6d:90:80:5e:1e:52:
d6:88:53:27:74:83:c2:19:58:f3:df:e8:ce:7f:d4:
d3:55:9d:a6:a3:cb:25:a0:51:4e:7f:04:9f:a2:87:
77:78:76:b8:2f:5c:c3:9f:79:de:75:ec:d3:94:da:
e7:b1:66:dd:e2:59:35:81:eb:4f:d6:32:1e:36:74:
bd:8a:bf:38:75:86:ec:fa:fb:d0:1c:25:f0:62:07:
41:92:f8:2a:51:44:7e:5b:d3:04:c8:4c:26:25:f6:
4c:df:50:e5:de:aa:62:e1:4f:dd:d2:fe:39:6d:64:
dc:38:07:50:3f:06:a2:e0:af:02:9e:de:65:87:76:
85:4c:00:36:a2:d4:a1:2a:d5:a0:b5:c9:08:bb:41:
75:49:78:5c:ef:74:8b:3d:49:82:de:00:82:4e:ae:
a0:00:5a:ac:b8:ed:df:72:f5:81:7e:8a:73:f8:24:
18:dc:c0:c3:ba:24:c4:4f:6f:57:5f:cf:84:9c:bf:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3D:C2:70:E5:BB:3A:B9:90:7B:36:C9:30:09:FB:43:FA:D3:9A:40
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3z3CcOW7OrmQezbJMAn7Q_rTmkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.226.0/24
192.165.131.0/24
193.182.110.0/24
193.234.76.0/23
194.14.135.0/24
194.71.245.0/24
194.103.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1b:d1:06:4c:32:e1:65:03:8f:43:9b:63:2c:b8:27:34:71:
42:1d:df:07:c7:d2:a3:da:0c:3a:23:56:a1:4a:56:d9:03:9e:
9c:ce:29:de:bd:5d:20:35:fd:be:1a:70:5b:8b:05:a5:eb:36:
ff:ca:58:7c:8f:38:df:5b:30:c9:fb:03:9a:c9:0d:55:bb:eb:
32:0d:19:44:22:61:15:ac:0a:32:1c:bb:17:67:81:76:43:92:
01:7f:58:6e:be:0a:10:ac:d9:cc:59:96:d0:bf:b6:ba:ca:ee:
7a:76:84:71:9f:5d:73:40:39:00:0d:a2:bf:95:81:93:5c:ff:
dd:14:66:7b:31:e2:86:40:15:1d:b9:38:0b:64:94:b9:13:bf:
52:c1:7a:c9:d9:4a:5f:0f:3b:e0:3e:f8:9c:ea:a6:31:41:9f:
45:df:b1:8b:06:7a:c7:c7:18:75:6d:db:0d:5a:df:7a:21:fb:
81:62:41:60:05:54:95:4a:90:90:0c:e8:e8:6b:29:d4:ed:b0:
71:f3:db:2c:a5:56:7e:f5:d6:67:f5:28:12:8b:a9:f7:5a:74:
a4:cc:f4:3c:f4:0f:9f:04:5f:1f:24:de:0b:fd:96:f2:0f:cb:
1f:20:80:37:e3:ff:4b:97:4a:33:a8:3a:52:e9:3c:7c:e6:db:
d3:81:36:19
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEQoXJmzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTM1YzdmNTcxZWVmZWI2NzQwNGFiNmM0NWZkNDc1NTUxYWRhZjFiMB4XDTIyMDEw
MTE0MDMyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGYzZGMyNzBlNWJi
M2FiOTkwN2IzNmM5MzAwOWZiNDNmYWQzOWE0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANK/0udRM1Ro506ljt7VJ+R/X8NgYCz8w7vUZIu6LwsH6wIs
8tuScVquYox+XSpJ9/7GKXVcDrXnpcO1hXh0BRUODXa/bZCAXh5S1ohTJ3SDwhlY
89/ozn/U01WdpqPLJaBRTn8En6KHd3h2uC9cw5953nXs05Ta57Fm3eJZNYHrT9Yy
HjZ0vYq/OHWG7Pr70Bwl8GIHQZL4KlFEflvTBMhMJiX2TN9Q5d6qYuFP3dL+OW1k
3DgHUD8GouCvAp7eZYd2hUwANqLUoSrVoLXJCLtBdUl4XO90iz1Jgt4Agk6uoABa
rLjt33L1gX6Kc/gkGNzAw7okxE9vV1/PhJy/3WUCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBTfPcJw5bs6uZB7NskwCftD+tOaQDAfBgNVHSMEGDAWgBQhNcf1ce7+tnQE
q2xF/UdVUa2vGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8x
LzN6M0NjT1c3T3JtUWV6YkpNQW43UV9yVG1rQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
NjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8xL0lUWEg5WEh1X3Ja
MEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAMB54gMEAMClgwMEAMG2bgMEAcHq
TAMEAMIOhwMEAMJH9QMEAMJnKzANBgkqhkiG9w0BAQsFAAOCAQEAHRvRBkwy4WUD
j0ObYyy4JzRxQh3fB8fSo9oMOiNWoUpW2QOenM4p3r1dIDX9vhpwW4sFpes2/8pY
fI8431swyfsDmskNVbvrMg0ZRCJhFawKMhy7F2eBdkOSAX9Ybr4KEKzZzFmW0L+2
usruenaEcZ9dc0A5AA2iv5WBk1z/3RRmezHihkAVHbk4C2SUuRO/UsF6ydlKXw87
4D74nOqmMUGfRd+xiwZ6x8cYdW3bDVrfeiH7gWJBYAVUlUqQkAzo6Gsp1O2wcfPb
LKVWfvXWZ/UoEoup91p0pMz0PPQPnwRfHyTeC/2W8g/LHyCAN+P/S5dKM6g6Uuk8
fObb04E2GQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:18 2025 by rpki-client