Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/vehtuKg50yiNPfgRScSETWVy6Ko.roa
File: vehtuKg50yiNPfgRScSETWVy6Ko.roa (raw, json)
Hash identifier: JHYyRthZEJ2SlCH6MM2Bozn8OTK+aFfhCB0JbDBTkoI=
Subject key identifier: BD:E8:6D:B8:A8:39:D3:28:8D:3D:F8:11:49:C4:84:4D:65:72:E8:AA
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 15509C9D
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/vehtuKg50yiNPfgRScSETWVy6Ko.roa
Signing time: Sat 01 Jan 2022 13:56:59 +0000
ROA not before: Sat 01 Jan 2022 13:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 212.103.0.0/19 maxlen: 24
195.167.224.0/20 maxlen: 24
185.204.172.0/22 maxlen: 24
89.224.0.0/14 maxlen: 24
195.167.192.0/20 maxlen: 24
92.102.0.0/15 maxlen: 24
213.30.128.0/18 maxlen: 24
213.244.0.0/19 maxlen: 24
46.218.0.0/16 maxlen: 24
217.66.112.0/20 maxlen: 24
82.101.0.0/18 maxlen: 24
83.145.64.0/18 maxlen: 24
195.248.0.0/19 maxlen: 24
77.104.0.0/18 maxlen: 24
212.99.0.0/17 maxlen: 24
2a02:e000::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357604509 (0x15509c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 13:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bde86db8a839d3288d3df81149c4844d6572e8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:67:85:d7:62:6a:0b:84:56:03:7f:53:ab:
3f:5e:88:88:ad:53:25:d3:65:e9:3b:ae:2f:6e:ff:
d4:d6:02:2c:6a:89:1a:27:a0:6b:98:1f:ee:e9:ca:
f4:5f:dd:35:d3:58:8f:c3:47:cf:09:4d:df:4a:5e:
0a:6c:e7:98:66:f3:6c:d7:5c:50:32:9e:b8:ba:ba:
2b:ad:c2:14:49:fe:d5:02:1d:66:86:24:ce:45:9e:
0b:23:53:3d:bc:ae:af:4b:77:5b:56:25:d1:97:9b:
c9:79:5f:b9:e7:c6:c8:a1:b7:d6:f2:a3:ef:6e:a2:
65:fd:62:45:83:c7:fe:ba:f8:cc:af:a6:7f:e3:bc:
75:06:63:a1:52:a9:58:3e:0e:b7:d8:97:fb:22:37:
28:af:f0:fb:1e:9e:f2:4f:79:6a:39:cc:64:aa:87:
c3:8f:01:40:64:82:f0:3b:7f:55:e0:b2:df:49:59:
11:d2:af:b9:cb:70:6c:e6:2a:12:bc:d8:2d:4d:cc:
3f:0f:d8:05:b3:de:a1:f8:3c:8b:3e:7b:49:93:2f:
59:ec:15:25:dc:24:22:d7:7b:2b:cb:64:00:09:62:
f3:42:31:4e:a3:a3:c2:b7:5a:50:a0:de:31:13:d9:
08:7a:9a:c5:f4:fb:97:d2:6a:f7:f9:f9:4f:33:8a:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E8:6D:B8:A8:39:D3:28:8D:3D:F8:11:49:C4:84:4D:65:72:E8:AA
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/vehtuKg50yiNPfgRScSETWVy6Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.218.0.0/16
77.104.0.0/18
82.101.0.0/18
83.145.64.0/18
89.224.0.0/14
92.102.0.0/15
185.204.172.0/22
195.167.192.0/20
195.167.224.0/20
195.248.0.0/19
212.99.0.0/17
212.103.0.0/19
213.30.128.0/18
213.244.0.0/19
217.66.112.0/20
IPv6:
2a02:e000::/29
Signature Algorithm: sha256WithRSAEncryption
87:de:2d:22:85:2d:ac:ea:1e:75:78:da:c1:3d:82:41:50:c2:
9c:bf:d3:90:64:9e:c1:77:8d:00:7f:0f:fd:3b:e7:8a:0b:f0:
94:6e:4e:b8:95:81:d1:7f:3e:a6:00:69:6c:2b:dc:fe:98:75:
67:2f:97:b8:3c:fb:d2:e0:5c:6c:3d:da:b0:a4:77:82:c4:43:
30:c0:fd:b6:61:bc:41:6c:88:5b:9c:f1:3d:e5:e4:25:20:94:
a9:29:38:fa:50:00:06:53:0d:53:6c:f7:74:9d:fb:ef:62:c9:
3c:fd:a3:b7:74:b4:d9:65:9e:dc:06:50:e2:40:d8:d9:38:42:
5e:b5:2b:b7:c6:e9:07:d4:55:a3:20:94:58:32:fd:82:5d:57:
4c:49:7f:7d:b0:fb:3d:ec:79:9d:71:21:11:a3:be:d0:c4:02:
97:2c:07:40:87:db:98:16:a5:44:6f:62:e0:8a:13:3e:f8:2c:
e4:31:ce:40:be:83:ca:30:53:6d:78:25:e6:e6:d2:65:4a:56:
cb:2c:ec:11:8c:61:e9:09:b7:0a:16:8e:df:35:a4:53:5c:08:
8a:5f:45:7b:b8:98:09:e0:57:b8:fa:c7:de:dd:90:32:e6:7f:
03:de:7a:ba:09:e5:2a:ba:72:17:78:9d:8d:f2:a4:b2:4e:a0:
4a:1a:b1:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIEFVCcnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MmUyODEwZjQ5YjM2ZmRkNjQxYzMyNmJkMWRlNGU0MmQxMjhiMDQ2MB4XDTIyMDEw
MTEzNTY1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmRlODZkYjhhODM5
ZDMyODhkM2RmODExNDljNDg0NGQ2NTcyZThhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN7fZ4XXYmoLhFYDf1OrP16IiK1TJdNl6TuuL27/1NYCLGqJ
Giega5gf7unK9F/dNdNYj8NHzwlN30peCmznmGbzbNdcUDKeuLq6K63CFEn+1QId
ZoYkzkWeCyNTPbyur0t3W1Yl0ZebyXlfuefGyKG31vKj726iZf1iRYPH/rr4zK+m
f+O8dQZjoVKpWD4Ot9iX+yI3KK/w+x6e8k95ajnMZKqHw48BQGSC8Dt/VeCy30lZ
EdKvuctwbOYqErzYLU3MPw/YBbPeofg8iz57SZMvWewVJdwkItd7K8tkAAli80Ix
TqOjwrdaUKDeMRPZCHqaxfT7l9Jq9/n5TzOKMm8CAwEAAaOCAmkwggJlMB0GA1Ud
DgQWBBS96G24qDnTKI09+BFJxIRNZXLoqjAfBgNVHSMEGDAWgBTy4oEPSbNv3WQc
MmvR3k5C0SiwRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzh1S0JEMG16Yjkxa0hESnIwZDVPUXRFb3NFWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmIvNzllOTA1LWZiMGQtNGI4Yi05MzkwLTUwZDJiNzBiY2YzMS8x
L3ZlaHR1S2c1MHlpTlBmZ1JTY1NFVFdWeTZLby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIv
NzllOTA1LWZiMGQtNGI4Yi05MzkwLTUwZDJiNzBiY2YzMS8xLzh1S0JEMG16Yjkx
a0hESnIwZDVPUXRFb3NFWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB/
BggrBgEFBQcBBwEB/wRwMG4wXQQCAAEwVwMDAC7aAwQGTWgAAwQGUmUAAwQGU5FA
AwMCWeADAwFcZgMEArnMrAMEBMOnwAMEBMOn4AMEBcP4AAMEB9RjAAMEBdRnAAME
BtUegAMEBdX0AAMEBNlCcDANBAIAAjAHAwUDKgLgADANBgkqhkiG9w0BAQsFAAOC
AQEAh94tIoUtrOoedXjawT2CQVDCnL/TkGSewXeNAH8P/TvnigvwlG5OuJWB0X8+
pgBpbCvc/ph1Zy+XuDz70uBcbD3asKR3gsRDMMD9tmG8QWyIW5zxPeXkJSCUqSk4
+lAABlMNU2z3dJ3772LJPP2jt3S02WWe3AZQ4kDY2ThCXrUrt8bpB9RVoyCUWDL9
gl1XTEl/fbD7Pex5nXEhEaO+0MQClywHQIfbmBalRG9i4IoTPvgs5DHOQL6DyjBT
bXgl5ubSZUpWyyzsEYxh6Qm3ChaO3zWkU1wIil9Fe7iYCeBXuPrH3t2QMuZ/A956
ugnlKrpyF3idjfKksk6gShqxSQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:17:35 2025 by rpki-client