Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/csl9JdnFBL-JjO7dt4mgpPZzX7Y.roa
File: csl9JdnFBL-JjO7dt4mgpPZzX7Y.roa (raw, json)
Hash identifier: j7vTEcq5KGtkAlo3aOU6AUgqAvbt3d7OLYXjiFRPRlE=
Subject key identifier: 72:C9:7D:25:D9:C5:04:BF:89:8C:EE:DD:B7:89:A0:A4:F6:73:5F:B6
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 01856C5CB0ED6A462E0056BD8E6E0C201DE7
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/csl9JdnFBL-JjO7dt4mgpPZzX7Y.roa
Signing time: Sun 01 Jan 2023 08:04:51 +0000
ROA not before: Sun 01 Jan 2023 08:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49273
IP address blocks: 188.113.227.0/24 maxlen: 24
188.113.230.0/24 maxlen: 24
188.113.231.0/24 maxlen: 24
188.113.228.0/24 maxlen: 24
188.113.229.0/24 maxlen: 24
188.113.233.0/24 maxlen: 24
188.113.232.0/24 maxlen: 24
188.113.234.0/24 maxlen: 24
188.113.237.0/24 maxlen: 24
188.113.238.0/24 maxlen: 24
188.113.235.0/24 maxlen: 24
188.113.236.0/24 maxlen: 24
188.113.240.0/24 maxlen: 24
188.113.239.0/24 maxlen: 24
188.113.241.0/24 maxlen: 24
188.113.247.0/24 maxlen: 24
188.113.248.0/24 maxlen: 24
188.113.192.0/24 maxlen: 24
188.113.195.0/24 maxlen: 24
188.113.196.0/24 maxlen: 24
188.113.193.0/24 maxlen: 24
188.113.194.0/24 maxlen: 24
188.113.199.0/24 maxlen: 24
188.113.197.0/24 maxlen: 24
188.113.198.0/24 maxlen: 24
188.113.202.0/24 maxlen: 24
188.113.203.0/24 maxlen: 24
188.113.200.0/24 maxlen: 24
188.113.201.0/24 maxlen: 24
188.113.206.0/24 maxlen: 24
188.113.204.0/24 maxlen: 24
188.113.205.0/24 maxlen: 24
188.113.209.0/24 maxlen: 24
188.113.210.0/24 maxlen: 24
188.113.207.0/24 maxlen: 24
188.113.208.0/24 maxlen: 24
188.113.213.0/24 maxlen: 24
188.113.211.0/24 maxlen: 24
188.113.212.0/24 maxlen: 24
188.113.218.0/24 maxlen: 24
188.113.219.0/24 maxlen: 24
188.113.216.0/24 maxlen: 24
188.113.217.0/24 maxlen: 24
188.113.214.0/24 maxlen: 24
188.113.215.0/24 maxlen: 24
188.113.224.0/24 maxlen: 24
188.113.221.0/24 maxlen: 24
188.113.226.0/24 maxlen: 24
188.113.225.0/24 maxlen: 24
185.208.179.0/24 maxlen: 24
2a02:f7c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:b0:ed:6a:46:2e:00:56:bd:8e:6e:0c:20:1d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Jan 1 08:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72c97d25d9c504bf898ceeddb789a0a4f6735fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:49:1b:09:ab:34:e1:14:10:f5:52:b5:a8:
0d:45:71:60:7e:7a:02:ed:9b:55:c0:eb:0f:de:1d:
15:51:49:44:0e:aa:5c:e2:e0:40:69:26:f5:96:79:
0d:fa:4d:5b:7e:7f:52:e2:18:33:c2:1a:0b:80:8c:
f3:d7:1e:34:7a:06:31:e9:40:0a:da:0c:2a:37:8e:
2b:a7:a5:cc:46:f3:2a:03:dc:56:54:d8:43:6e:d3:
d1:cb:ad:01:0c:8f:78:f2:20:06:69:5b:d3:45:5b:
5e:ae:2e:b6:88:ac:85:71:0e:d0:df:e3:8d:d7:82:
1e:23:61:68:49:84:6d:88:d8:a6:d3:95:d7:a6:52:
07:24:e5:e3:c0:12:b3:5a:63:0a:b9:e1:95:9c:ab:
6a:82:43:51:a2:b7:cd:0e:19:61:a7:9a:83:6e:ee:
ba:18:6e:58:51:2c:36:a2:3b:13:be:46:00:21:be:
f1:96:a0:59:4a:f0:8a:9b:41:29:f9:dc:34:97:23:
43:0f:6a:b1:e2:35:fe:34:9b:61:e0:18:62:68:a5:
10:aa:30:17:6a:2e:67:c1:d7:4f:47:24:01:c0:8e:
65:b8:e1:18:f5:64:86:99:96:a7:fe:3b:0a:e2:b1:
04:57:d1:b7:91:31:c2:8a:88:79:ef:26:47:ff:1f:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C9:7D:25:D9:C5:04:BF:89:8C:EE:DD:B7:89:A0:A4:F6:73:5F:B6
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/csl9JdnFBL-JjO7dt4mgpPZzX7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.179.0/24
188.113.192.0-188.113.219.255
188.113.221.0/24
188.113.224.0-188.113.241.255
188.113.247.0-188.113.248.255
IPv6:
2a02:f7c0::/32
Signature Algorithm: sha256WithRSAEncryption
18:8d:dd:eb:ee:5b:4c:be:56:f7:50:1c:20:17:84:54:3a:d0:
f8:c6:9e:8f:65:d8:0a:d7:b5:bd:94:bd:27:f5:55:9e:01:80:
cf:7b:da:a1:b1:61:4c:1c:c2:3d:65:28:3b:2b:88:3f:6e:4b:
a6:aa:63:a7:78:8d:29:6c:cf:aa:18:7d:c3:e4:6d:bd:9d:18:
fc:9d:02:4f:0b:79:68:b7:c6:4c:e7:0c:47:be:d5:dd:86:29:
70:cb:23:5c:96:92:00:cf:2d:d5:bb:d7:74:79:4b:b5:83:f2:
5f:1b:04:18:c0:a2:a6:0e:a1:80:ac:d1:7c:8b:f5:14:b8:23:
d1:00:bc:62:f5:58:6a:1f:ef:17:7a:9f:e6:da:cf:f4:7b:03:
07:11:0e:ce:2f:2c:65:a1:43:ba:d8:4b:dc:c5:05:d9:9f:87:
52:f2:8a:93:f3:d1:4f:70:8d:af:a5:a3:dc:1d:1c:e5:54:1a:
1e:b2:9d:f1:ce:a7:a9:4c:bb:0f:87:9b:50:12:e3:44:2a:ff:
1b:c1:58:ef:9e:be:64:b1:59:f3:72:e5:4c:c0:08:ae:b3:d6:
ce:4c:91:e5:4b:05:7c:d4:1f:a5:c3:7b:fc:13:25:92:f9:d8:
98:c2:78:ed:e9:6b:b8:a6:e1:7e:da:9d:ce:88:72:50:a9:44:
c9:e2:dc:34
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYVsXLDtakYuAFa9jm4MIB3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjUyNWRlNGFhNmQwY2ExYWU3YmQ4ZWUxZTM1YmZkMjY5
NjQ5YmIwHhcNMjMwMTAxMDgwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmM5N2QyNWQ5YzUwNGJmODk4Y2VlZGRiNzg5YTBhNGY2NzM1ZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkRJGwmrNOEUEPVStagNRXFgfnoC
7ZtVwOsP3h0VUUlEDqpc4uBAaSb1lnkN+k1bfn9S4hgzwhoLgIzz1x40egYx6UAK
2gwqN44rp6XMRvMqA9xWVNhDbtPRy60BDI948iAGaVvTRVteri62iKyFcQ7Q3+ON
14IeI2FoSYRtiNim05XXplIHJOXjwBKzWmMKueGVnKtqgkNRorfNDhlhp5qDbu66
GG5YUSw2ojsTvkYAIb7xlqBZSvCKm0Ep+dw0lyNDD2qx4jX+NJth4BhiaKUQqjAX
ai5nwddPRyQBwI5luOEY9WSGmZan/jsK4rEEV9G3kTHCioh57yZH/x/3xQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFHLJfSXZxQS/iYzu3beJoKT2c1+2MB8GA1UdIwQY
MBaAFNplJd5KptDKGue9juHjW/0mlkm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYt
ZWVkZjc2MDc3ZjA5LzEvY3NsOUpkbkZCTC1Kak83ZHQ0bWdwUFp6WDdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYtZWVkZjc2MDc3ZjA5
LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQAudCzMAwD
BAa8ccADBAK8cdgDBAC8cd0wDAMEBbxx4AMEAbxx8DAMAwQAvHH3AwQAvHH4MA0E
AgACMAcDBQAqAvfAMA0GCSqGSIb3DQEBCwUAA4IBAQAYjd3r7ltMvlb3UBwgF4RU
OtD4xp6PZdgK17W9lL0n9VWeAYDPe9qhsWFMHMI9ZSg7K4g/bkumqmOneI0pbM+q
GH3D5G29nRj8nQJPC3lot8ZM5wxHvtXdhilwyyNclpIAzy3Vu9d0eUu1g/JfGwQY
wKKmDqGArNF8i/UUuCPRALxi9VhqH+8Xep/m2s/0ewMHEQ7OLyxloUO62EvcxQXZ
n4dS8oqT89FPcI2vpaPcHRzlVBoesp3xzqepTLsPh5tQEuNEKv8bwVjvnr5ksVnz
cuVMwAius9bOTJHlSwV81B+lw3v8EyWS+diYwnjt6Wu4puF+2p3OiHJQqUTJ4tw0
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:21 2025 by rpki-client