Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/dlbJPJGR_YwcE0ZKkSjSAfBTLOo.roa
File: dlbJPJGR_YwcE0ZKkSjSAfBTLOo.roa (raw, json)
Hash identifier: 8JX1yWSLykLRB6is7TGfR73RqfBpLWdTCXOQbzbpFuw=
Subject key identifier: 76:56:C9:3C:91:91:FD:8C:1C:13:46:4A:91:28:D2:01:F0:53:2C:EA
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0188D35AD23FBB0282814932BDADEF5E3BD0
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/dlbJPJGR_YwcE0ZKkSjSAfBTLOo.roa
Signing time: Mon 19 Jun 2023 11:12:04 +0000
ROA not before: Mon 19 Jun 2023 11:12:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 45.141.148.0/24 maxlen: 24
45.147.47.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:5a:d2:3f:bb:02:82:81:49:32:bd:ad:ef:5e:3b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 19 11:12:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7656c93c9191fd8c1c13464a9128d201f0532cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:92:7c:c2:4e:b4:eb:ac:20:4f:3d:dc:15:
5d:f8:07:96:47:3d:fc:b0:07:76:26:9a:70:cc:17:
f2:99:a7:34:d9:5f:38:6f:43:89:25:bd:71:95:d8:
c1:68:86:0b:21:c0:54:3e:8b:7c:6b:ae:40:41:76:
b6:92:36:e4:10:7d:ef:e8:a5:9d:57:10:5e:ef:f8:
85:9e:50:ba:4c:5b:69:a8:56:53:31:e5:b4:8e:18:
32:0e:9c:ba:9f:8e:b2:87:5d:90:d5:5e:98:cc:d1:
66:db:28:38:e6:e7:6f:a1:53:2d:b7:01:c1:ee:59:
57:47:4f:1c:d5:4c:f3:cf:73:43:b2:09:a7:a0:83:
08:7b:9d:37:b5:50:c2:c6:33:ff:b1:49:f0:5f:d7:
98:fa:0a:18:d3:ae:35:d9:6a:19:69:fd:3d:54:05:
d4:04:c6:91:69:0d:1e:0d:27:3a:8b:d6:41:29:fa:
01:0b:46:80:47:21:86:4d:f2:ad:8b:a6:db:1f:67:
9c:7f:e9:59:21:0e:39:8b:49:7e:cc:d0:a0:6b:f6:
c9:44:9c:3d:a8:e3:dd:06:be:7e:8f:db:e0:8c:38:
f4:60:c3:3d:af:15:cd:41:7e:00:86:5b:83:63:80:
96:a7:e4:7c:f5:84:79:16:e6:88:af:b2:87:9a:24:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:56:C9:3C:91:91:FD:8C:1C:13:46:4A:91:28:D2:01:F0:53:2C:EA
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/dlbJPJGR_YwcE0ZKkSjSAfBTLOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
45.141.148.0/24
45.147.47.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
0d:d2:9d:c3:a6:7d:78:21:e7:b1:eb:26:2f:6d:63:66:06:8d:
a6:4e:cb:46:b6:0e:cb:5e:2e:77:85:f9:4f:04:41:63:eb:22:
52:9b:df:0b:44:54:14:4c:16:47:8d:74:d8:c7:dd:10:0b:e5:
a8:b3:81:2d:ef:10:d4:df:91:0c:2c:6c:76:d0:64:84:34:8c:
cb:ae:46:63:5a:47:c1:f3:58:1e:db:43:40:52:48:52:8c:14:
fc:a5:7b:af:c7:e7:94:c8:8c:ce:c8:41:22:dc:20:fc:0a:7d:
b1:fd:a2:b6:ac:c0:a7:ef:2a:f3:33:00:66:f4:f2:fe:36:72:
d2:48:80:b6:a8:4c:5c:12:ea:f9:4e:85:a5:a4:55:eb:28:8e:
8c:84:14:b0:d2:50:ec:15:b8:bc:0a:8e:32:d7:3c:40:b0:24:
ae:2e:b0:a6:97:aa:4c:00:45:31:a9:37:68:9f:10:f8:ee:e4:
52:7e:d3:95:95:67:e6:c8:72:f3:c9:74:2a:92:46:c7:e8:bf:
20:ef:8d:1c:bf:36:3d:df:a8:8a:cb:1b:b7:4d:57:c6:9d:de:
2a:36:1f:d5:12:f7:ae:ec:db:3c:de:29:88:b1:8f:ca:94:13:
0a:69:14:d2:49:e4:df:72:16:66:36:34:0c:40:70:90:a7:19:
aa:59:76:9f
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYjTWtI/uwKCgUkyva3vXjvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMwNjE5MTExMjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjU2YzkzYzkxOTFmZDhjMWMxMzQ2NGE5MTI4ZDIwMWYwNTMyY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5OSfMJOtOusIE893BVd+AeWRz38
sAd2JppwzBfymac02V84b0OJJb1xldjBaIYLIcBUPot8a65AQXa2kjbkEH3v6KWd
VxBe7/iFnlC6TFtpqFZTMeW0jhgyDpy6n46yh12Q1V6YzNFm2yg45udvoVMttwHB
7llXR08c1Uzzz3NDsgmnoIMIe503tVDCxjP/sUnwX9eY+goY06412WoZaf09VAXU
BMaRaQ0eDSc6i9ZBKfoBC0aARyGGTfKti6bbH2ecf+lZIQ45i0l+zNCga/bJRJw9
qOPdBr5+j9vgjDj0YMM9rxXNQX4AhluDY4CWp+R89YR5FuaIr7KHmiTEEQIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFHZWyTyRkf2MHBNGSpEo0gHwUyzqMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvZGxiSlBKR1JfWXdjRTBaS2tTalNBZkJUTE9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQALYMCAwQA
LY2UAwQALZMvAwQCTVPIAwQAwnTlAwQBwnTsAwQAwpIkAwQAwpIvMA0EAgACMAcD
BQMqCYeAMA0GCSqGSIb3DQEBCwUAA4IBAQAN0p3Dpn14Ieex6yYvbWNmBo2mTstG
tg7LXi53hflPBEFj6yJSm98LRFQUTBZHjXTYx90QC+Wos4Et7xDU35EMLGx20GSE
NIzLrkZjWkfB81ge20NAUkhSjBT8pXuvx+eUyIzOyEEi3CD8Cn2x/aK2rMCn7yrz
MwBm9PL+NnLSSIC2qExcEur5ToWlpFXrKI6MhBSw0lDsFbi8Co4y1zxAsCSuLrCm
l6pMAEUxqTdonxD47uRSftOVlWfmyHLzyXQqkkbH6L8g740cvzY936iKyxu3TVfG
nd4qNh/VEveu7Ns83imIsY/KlBMKaRTSSeTfchZmNjQMQHCQpxmqWXaf
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:48 2025 by rpki-client