Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/1-JaRLVHq7d-TZP0W27frcbEu_Xc.roa
File: 1-JaRLVHq7d-TZP0W27frcbEu_Xc.roa (raw, json)
Hash identifier: teZZCAjWcNKz8ytOIad0h6IKTJMDYWLkztShjjp9se0=
Subject key identifier: F8:96:91:2D:51:EA:ED:DF:93:64:FD:16:DB:B7:EB:71:B1:2E:FD:77
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 018A6F233B02F1331C977E7B92B136627B33
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/1-JaRLVHq7d-TZP0W27frcbEu_Xc.roa
Signing time: Thu 07 Sep 2023 10:14:54 +0000
ROA not before: Thu 07 Sep 2023 10:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50266
IP address blocks: 82.172.0.0/17 maxlen: 17
143.178.0.0/17 maxlen: 24
87.210.0.0/16 maxlen: 24
95.98.0.0/15 maxlen: 24
94.157.0.0/16 maxlen: 24
62.250.128.0/17 maxlen: 24
87.208.0.0/16 maxlen: 24
81.59.0.0/17 maxlen: 17
87.209.0.0/16 maxlen: 24
143.177.0.0/16 maxlen: 24
31.20.0.0/16 maxlen: 24
87.212.0.0/16 maxlen: 24
31.184.64.0/18 maxlen: 24
85.223.0.0/17 maxlen: 24
62.250.0.0/17 maxlen: 24
143.178.128.0/17 maxlen: 24
31.21.0.0/16 maxlen: 24
143.179.0.0/16 maxlen: 16
95.99.0.0/16 maxlen: 16
92.254.0.0/17 maxlen: 24
188.88.0.0/14 maxlen: 24
31.187.128.0/17 maxlen: 24
82.174.0.0/16 maxlen: 24
62.166.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:23:3b:02:f1:33:1c:97:7e:7b:92:b1:36:62:7b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Sep 7 10:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f896912d51eaeddf9364fd16dbb7eb71b12efd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:83:24:a5:21:36:a1:19:b6:3e:c7:31:c7:
68:a8:5f:27:c3:e9:a5:2d:6c:c4:1d:da:f8:4e:3c:
61:53:e7:37:52:72:7b:ee:67:5f:4a:49:81:5c:25:
2f:d8:91:8c:31:79:1c:85:51:ee:7b:3b:e0:3c:1a:
45:0f:52:57:2c:05:b0:3e:74:12:c8:a7:7a:f0:96:
1a:81:d5:99:5a:1c:92:61:fc:cf:72:fa:c5:35:a9:
42:d1:66:8e:6d:9e:80:f0:56:df:81:e8:82:06:37:
a0:d6:42:40:6a:d2:df:6e:7f:b9:87:37:27:c6:84:
e4:b4:43:51:1b:e7:30:88:6a:40:01:48:06:66:8f:
c3:ff:0f:00:a5:05:ae:de:22:d7:45:9c:5c:c0:b5:
48:8e:7e:00:34:9c:0c:51:a1:f8:8f:6b:83:83:80:
a4:72:ed:ed:3d:e6:74:aa:a6:1f:b5:26:c1:3d:f3:
c9:07:c1:3a:c9:45:a5:2d:cf:1c:e9:a7:15:bf:25:
43:15:7a:b4:3d:33:1e:0b:a8:82:3b:2c:b6:ae:f8:
76:76:22:54:11:1e:5e:1a:4f:c3:80:58:a7:7a:64:
59:16:19:0e:a2:fb:f2:7e:54:d9:92:5b:ac:1e:50:
87:23:32:44:0e:f1:97:5f:1c:a2:b8:3e:5d:e6:40:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:91:2D:51:EA:ED:DF:93:64:FD:16:DB:B7:EB:71:B1:2E:FD:77
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/1-JaRLVHq7d-TZP0W27frcbEu_Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.20.0.0/15
31.184.64.0/18
31.187.128.0/17
62.166.128.0/17
62.250.0.0/16
81.59.0.0/17
82.172.0.0/17
82.174.0.0/16
85.223.0.0/17
87.208.0.0-87.210.255.255
87.212.0.0/16
92.254.0.0/17
94.157.0.0/16
95.98.0.0/15
143.177.0.0-143.179.255.255
188.88.0.0/14
Signature Algorithm: sha256WithRSAEncryption
58:e6:b6:fe:cd:7d:d5:57:a8:44:f9:21:0d:fe:36:8e:ea:ef:
a7:f0:b5:d4:93:44:38:7a:24:7a:fb:e1:48:9f:09:ca:42:fd:
49:8b:fd:66:ad:cf:2c:ec:f5:5e:f3:10:44:14:58:4c:81:a8:
9d:61:08:c3:a2:6c:98:93:de:c3:7f:65:a5:20:d4:a2:9d:ea:
95:e5:a8:51:e4:b0:d5:45:b9:b1:d3:bc:6a:1d:6f:5d:e3:ab:
a6:0e:8d:c3:3d:bc:d9:9d:cd:85:19:50:95:ee:88:0d:2a:da:
61:52:7a:ef:08:19:1b:9e:69:c7:14:ef:f5:48:29:cc:12:bd:
03:94:5c:94:51:7b:a3:6b:c5:ea:bd:a0:e2:05:e6:19:b2:14:
ae:3c:b3:62:9a:a3:cd:bb:ae:20:8b:38:e9:76:f1:30:0d:2b:
bc:10:c3:ed:d8:ca:b6:b3:cb:0e:e4:c8:07:de:44:ce:61:76:
20:62:43:4f:41:e9:d5:0d:27:51:8a:31:3d:c4:84:b1:17:fa:
9b:63:d6:7a:9b:a6:b2:4b:40:53:01:4b:c4:85:07:36:bf:04:
f2:ba:42:46:46:7b:65:ef:b2:7c:18:01:79:fc:30:f3:53:39:
53:01:9f:2c:34:51:80:0e:47:d8:c9:22:87:15:e6:41:91:9e:
dc:2a:54:3c
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYpvIzsC8TMcl357krE2YnszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi
MWE4NzcwHhcNMjMwOTA3MTAxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODk2OTEyZDUxZWFlZGRmOTM2NGZkMTZkYmI3ZWI3MWIxMmVmZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXaDJKUhNqEZtj7HMcdoqF8nw+ml
LWzEHdr4TjxhU+c3UnJ77mdfSkmBXCUv2JGMMXkchVHuezvgPBpFD1JXLAWwPnQS
yKd68JYagdWZWhySYfzPcvrFNalC0WaObZ6A8FbfgeiCBjeg1kJAatLfbn+5hzcn
xoTktENRG+cwiGpAAUgGZo/D/w8ApQWu3iLXRZxcwLVIjn4ANJwMUaH4j2uDg4Ck
cu3tPeZ0qqYftSbBPfPJB8E6yUWlLc8c6acVvyVDFXq0PTMeC6iCOyy2rvh2diJU
ER5eGk/DgFinemRZFhkOovvyflTZklusHlCHIzJEDvGXXxyiuD5d5kCChQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFPiWkS1R6u3fk2T9Ftu363GxLv13MB8GA1UdIwQY
MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt
ZjU1NWUyZTY4YTEwLzEvMS1KYVJMVkhxN2QtVFpQMFcyN2ZyY2JFdV9YYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmUvYzFhY2Q2LTIzMGEtNGUzNi1hNThmLWY1NTVlMmU2OGEx
MC8xL1liVTBRM1VEWm9nVnJkazgwWDBLMC1HeHFIYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjB+BggrBgEFBQcBBwEB/wRvMG0wawQCAAEwZQMDAR8UAwQG
H7hAAwQHH7uAAwQHPqaAAwMAPvoDBAdROwADBAdSrAADAwBSrgMEB1XfADAKAwME
V9ADAwBX0gMDAFfUAwQHXP4AAwMAXp0DAwFfYjAKAwMAj7EDAwKPsAMDArxYMA0G
CSqGSIb3DQEBCwUAA4IBAQBY5rb+zX3VV6hE+SEN/jaO6u+n8LXUk0Q4eiR6++FI
nwnKQv1Ji/1mrc8s7PVe8xBEFFhMgaidYQjDomyYk97Df2WlINSineqV5ahR5LDV
Rbmx07xqHW9d46umDo3DPbzZnc2FGVCV7ogNKtphUnrvCBkbnmnHFO/1SCnMEr0D
lFyUUXuja8XqvaDiBeYZshSuPLNimqPNu64gizjpdvEwDSu8EMPt2Mq2s8sO5MgH
3kTOYXYgYkNPQenVDSdRijE9xISxF/qbY9Z6m6ayS0BTAUvEhQc2vwTyukJGRntl
77J8GAF5/DDzUzlTAZ8sNFGADkfYySKHFeZBkZ7cKlQ8
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:34 2025 by rpki-client