Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rZDQdaow3ALhG6ycv_2K1f09-_w.roa
File: rZDQdaow3ALhG6ycv_2K1f09-_w.roa (raw, json)
Hash identifier: DEA0WRXmxVkteE0hyPs+fdU5xt0NdLU88AH6qPxEGwI=
Subject key identifier: AD:90:D0:75:AA:30:DC:02:E1:1B:AC:9C:BF:FD:8A:D5:FD:3D:FB:FC
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAEBA6F9C113516645D2CBE61EE4CE
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rZDQdaow3ALhG6ycv_2K1f09-_w.roa
Signing time: Sun 01 Jan 2023 10:05:16 +0000
ROA not before: Sun 01 Jan 2023 10:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43893
IP address blocks: 192.165.66.0/24 maxlen: 24
194.103.221.0/24 maxlen: 24
194.71.224.0/24 maxlen: 24
192.165.30.0/24 maxlen: 24
194.71.161.0/24 maxlen: 24
194.71.162.0/24 maxlen: 24
194.132.80.0/24 maxlen: 24
193.234.52.0/24 maxlen: 24
194.132.82.0/23 maxlen: 23
193.234.53.0/24 maxlen: 24
192.121.13.0/24 maxlen: 24
194.132.30.0/24 maxlen: 24
192.121.62.0/24 maxlen: 24
192.71.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:eb:a6:f9:c1:13:51:66:45:d2:cb:e6:1e:e4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad90d075aa30dc02e11bac9cbffd8ad5fd3dfbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9a:a2:c4:75:e8:1a:c8:b2:fc:58:26:11:a2:
69:8d:18:da:df:b6:c3:29:77:ae:a7:b8:47:fb:cf:
b1:b1:04:b7:84:97:59:0d:3e:a0:dc:32:47:e5:ee:
62:01:d1:f1:75:f4:d3:7f:a2:80:5b:13:79:b2:6b:
ba:b9:d3:2b:11:93:e2:d7:57:1e:8c:05:ed:8b:ba:
54:c2:89:cb:56:a0:9c:89:75:65:47:8d:b0:54:9a:
67:bf:c8:20:7f:d2:7f:0b:a1:58:b2:c5:41:3e:27:
bc:56:19:c6:a6:d7:75:58:98:2f:9c:b4:7c:21:32:
46:cc:72:a0:19:5d:f5:38:5f:16:f2:df:0b:2a:0d:
6d:d2:0c:df:56:75:b6:d2:58:3e:4d:8f:52:10:62:
c3:f1:27:70:70:1e:79:2e:7c:0d:4f:5f:20:12:68:
a9:83:86:db:da:96:9a:e8:32:62:d8:2f:de:4b:95:
fd:51:8c:87:bb:48:c6:fc:20:94:41:a8:17:00:99:
a1:50:38:84:74:62:f2:47:51:2c:af:a7:0c:76:77:
05:ea:aa:b0:aa:f3:f3:bc:ab:bb:23:3b:ea:e2:5a:
51:ff:78:e5:38:a1:64:d2:f7:ad:e4:2d:54:64:11:
87:37:28:f2:04:2d:ef:d8:e2:33:61:00:15:a4:22:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:D0:75:AA:30:DC:02:E1:1B:AC:9C:BF:FD:8A:D5:FD:3D:FB:FC
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rZDQdaow3ALhG6ycv_2K1f09-_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.58.0/24
192.121.13.0/24
192.121.62.0/24
192.165.30.0/24
192.165.66.0/24
193.234.52.0/23
194.71.161.0-194.71.162.255
194.71.224.0/24
194.103.221.0/24
194.132.30.0/24
194.132.80.0/24
194.132.82.0/23
Signature Algorithm: sha256WithRSAEncryption
17:26:f3:62:95:a5:18:88:f2:89:e2:61:63:4c:8f:8a:d2:07:
77:b6:47:f0:f2:05:66:dc:77:a9:a7:89:d6:77:41:ea:e8:62:
b8:4d:4d:77:93:36:c5:77:da:ca:1c:16:f1:ba:5e:d0:a8:76:
ea:85:c2:d6:4b:07:f9:0d:66:1b:6e:39:ca:77:be:5a:07:4d:
23:35:5c:a6:ad:50:72:bd:0d:e7:af:f2:23:a6:47:10:07:56:
bc:0a:fe:7e:24:da:1f:ba:04:e6:91:62:a0:37:93:f0:01:47:
10:ef:8d:b3:86:de:68:07:0b:f3:ee:64:1c:76:40:d2:ad:0d:
74:bc:1d:07:f9:5d:82:46:7d:bd:ed:ba:d8:70:fb:a4:3e:e2:
54:0d:0f:e7:f3:a9:24:0b:c9:fd:8e:a2:20:31:75:17:50:56:
2a:fa:fd:0a:0b:fd:40:6a:9f:16:95:62:23:0c:09:33:d5:2d:
ab:ce:c9:1c:8a:a0:45:89:24:bf:c0:6e:86:ef:1a:89:37:45:
70:e7:b6:dc:ab:69:08:04:ca:57:49:58:f0:6b:6c:85:b3:41:
f2:3b:fd:22:99:f0:b7:81:b5:3e:b1:59:e6:fa:4a:8e:c5:97:
5f:cf:39:05:6b:cc:5c:2b:ad:9f:be:94:ee:64:81:70:1e:e4:
ef:fe:5f:15
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYVsyuum+cETUWZF0svmHuTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDkwZDA3NWFhMzBkYzAyZTExYmFjOWNiZmZkOGFkNWZkM2RmYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZqixHXoGsiy/FgmEaJpjRja37bD
KXeup7hH+8+xsQS3hJdZDT6g3DJH5e5iAdHxdfTTf6KAWxN5smu6udMrEZPi11ce
jAXti7pUwonLVqCciXVlR42wVJpnv8ggf9J/C6FYssVBPie8VhnGptd1WJgvnLR8
ITJGzHKgGV31OF8W8t8LKg1t0gzfVnW20lg+TY9SEGLD8SdwcB55LnwNT18gEmip
g4bb2paa6DJi2C/eS5X9UYyHu0jG/CCUQagXAJmhUDiEdGLyR1Esr6cMdncF6qqw
qvPzvKu7Izvq4lpR/3jlOKFk0vet5C1UZBGHNyjyBC3v2OIzYQAVpCJrpQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFK2Q0HWqMNwC4RusnL/9itX9Pfv8MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvclpEUWRhb3czQUxoRzZ5Y3ZfMksxZjA5LV93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAwEc6AwQA
wHkNAwQAwHk+AwQAwKUeAwQAwKVCAwQBweo0MAwDBADCR6EDBADCR6IDBADCR+AD
BADCZ90DBADChB4DBADChFADBAHChFIwDQYJKoZIhvcNAQELBQADggEBABcm82KV
pRiI8oniYWNMj4rSB3e2R/DyBWbcd6mnidZ3QeroYrhNTXeTNsV32socFvG6XtCo
duqFwtZLB/kNZhtuOcp3vloHTSM1XKatUHK9Deev8iOmRxAHVrwK/n4k2h+6BOaR
YqA3k/ABRxDvjbOG3mgHC/PuZBx2QNKtDXS8HQf5XYJGfb3tuthw+6Q+4lQND+fz
qSQLyf2OoiAxdRdQVir6/QoL/UBqnxaVYiMMCTPVLavOyRyKoEWJJL/AbobvGok3
RXDnttyraQgEyldJWPBrbIWzQfI7/SKZ8LeBtT6xWeb6So7Fl1/POQVrzFwrrZ++
lO5kgXAe5O/+XxU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:10 2025 by rpki-client