Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/7Y9sNERGsDRnZ7fFDNXzSF4Dv_Y.roa
File: 7Y9sNERGsDRnZ7fFDNXzSF4Dv_Y.roa (raw, json)
Hash identifier: v0T0IG49bz9jonEJwko+BjNzgiMq1l8edyXffYy0dAQ=
Subject key identifier: ED:8F:6C:34:44:46:B0:34:67:67:B7:C5:0C:D5:F3:48:5E:03:BF:F6
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018766E2582F80F97DEEFE4B51FC5B1771E8
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/7Y9sNERGsDRnZ7fFDNXzSF4Dv_Y.roa
Signing time: Sun 09 Apr 2023 16:38:42 +0000
ROA not before: Sun 09 Apr 2023 16:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 2.188.225.0/24 maxlen: 24
2.188.224.0/20 maxlen: 20
2.188.232.0/23 maxlen: 23
2.188.234.0/24 maxlen: 24
2.188.236.0/23 maxlen: 23
2.188.240.0/20 maxlen: 20
2.188.164.0/22 maxlen: 22
2.188.160.0/22 maxlen: 22
2.188.165.0/24 maxlen: 24
2.188.161.0/24 maxlen: 24
2.188.192.0/19 maxlen: 19
2.188.212.0/23 maxlen: 23
2.188.208.0/23 maxlen: 23
2.188.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:66:e2:58:2f:80:f9:7d:ee:fe:4b:51:fc:5b:17:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 9 16:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed8f6c344446b0346767b7c50cd5f3485e03bff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:43:7c:b1:e7:a2:3c:0c:1f:f9:16:14:61:
7d:75:9c:fd:a6:aa:1b:71:ad:bd:81:0d:b3:b9:61:
c0:73:46:21:3e:4d:9e:c9:c1:8a:e4:e6:97:03:aa:
9c:bc:35:31:19:82:d9:f0:31:11:4e:b7:ec:5f:d1:
c1:fc:9b:f8:a8:13:a3:a6:2c:a1:fa:67:43:9f:3f:
c6:83:d2:2f:da:4e:04:18:4b:bf:91:e7:aa:a2:b3:
bd:a7:d7:1a:7b:c6:8e:53:28:b5:4f:46:33:60:79:
44:0c:c3:56:0c:ba:d0:37:29:00:3e:f2:af:34:41:
ee:e8:18:40:7e:54:44:72:6c:79:d2:09:f3:cf:5f:
fc:76:c1:ee:b3:a4:ce:36:78:4c:20:51:3a:ec:03:
8e:ae:e8:8b:fc:56:64:8d:0d:06:4e:e4:33:ef:ae:
7b:91:bc:2e:f4:fe:f9:f6:22:a4:45:b4:42:52:38:
5b:eb:24:ce:e2:39:cc:1d:54:be:88:15:3e:a8:9e:
13:f8:79:48:1a:9f:65:22:a5:17:a8:16:3b:08:5a:
da:00:d2:46:41:7d:ea:01:50:40:72:ad:ba:56:ba:
70:10:c2:98:aa:f6:1e:aa:4d:39:1b:fd:0d:c2:f8:
1b:f7:a3:eb:3a:df:1d:b2:5e:db:16:36:43:3a:10:
29:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8F:6C:34:44:46:B0:34:67:67:B7:C5:0C:D5:F3:48:5E:03:BF:F6
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/7Y9sNERGsDRnZ7fFDNXzSF4Dv_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.60.0/24
2.188.160.0/21
2.188.192.0/18
Signature Algorithm: sha256WithRSAEncryption
83:c4:3b:8c:f2:21:42:b5:f4:f0:fe:dd:8d:43:3f:5f:d4:4d:
ba:d1:57:ff:d8:ec:2e:cf:0a:08:26:38:50:96:80:26:39:68:
ed:cc:02:c6:36:9f:33:c2:d7:13:5d:a4:73:69:e4:08:7a:4a:
b7:a7:44:c9:6a:ad:7a:71:ba:b2:37:7f:7c:14:21:43:15:eb:
17:57:ee:7c:b9:3c:6a:fc:76:a9:24:2a:c5:b1:6b:57:5a:16:
d0:69:62:2f:af:a0:5f:52:ba:58:46:2d:c8:3b:77:fb:13:67:
7c:20:a5:43:f8:66:25:3f:83:7a:83:47:8d:70:f0:ff:6c:9d:
c3:f9:50:56:37:32:b9:94:af:e2:25:ff:92:04:a5:a2:2c:01:
52:ca:24:95:4e:53:96:0f:83:b5:8c:ff:27:96:b4:3d:9a:93:
2f:9a:ee:a3:61:63:eb:6e:02:08:63:59:c0:e6:41:24:b7:1e:
31:25:6c:9e:f4:40:c3:e2:92:b8:ba:52:5a:d9:2d:e3:f3:2c:
ee:19:2f:12:8c:b6:e8:aa:4e:c4:c3:18:11:73:ec:f7:7e:8b:
5d:ef:75:3d:6d:05:4f:8e:00:cf:5a:ff:1c:89:81:81:77:71:
d1:09:3f:c4:d8:96:ab:de:1d:c0:c0:c8:0b:f7:c6:c8:ff:b8:
0b:f2:aa:ae
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYdm4lgvgPl97v5LUfxbF3HoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMwNDA5MTYzODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDhmNmMzNDQ0NDZiMDM0Njc2N2I3YzUwY2Q1ZjM0ODVlMDNiZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzilDfLHnojwMH/kWFGF9dZz9pqob
ca29gQ2zuWHAc0YhPk2eycGK5OaXA6qcvDUxGYLZ8DERTrfsX9HB/Jv4qBOjpiyh
+mdDnz/Gg9Iv2k4EGEu/keeqorO9p9cae8aOUyi1T0YzYHlEDMNWDLrQNykAPvKv
NEHu6BhAflREcmx50gnzz1/8dsHus6TONnhMIFE67AOOruiL/FZkjQ0GTuQz7657
kbwu9P759iKkRbRCUjhb6yTO4jnMHVS+iBU+qJ4T+HlIGp9lIqUXqBY7CFraANJG
QX3qAVBAcq26VrpwEMKYqvYeqk05G/0Nwvgb96PrOt8dsl7bFjZDOhApHQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO2PbDRERrA0Z2e3xQzV80heA7/2MB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvN1k5c05FUkdzRFJuWjdmRkROWHpTRjREdl9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAArw8AwQD
ArygAwQGArzAMA0GCSqGSIb3DQEBCwUAA4IBAQCDxDuM8iFCtfTw/t2NQz9f1E26
0Vf/2OwuzwoIJjhQloAmOWjtzALGNp8zwtcTXaRzaeQIekq3p0TJaq16cbqyN398
FCFDFesXV+58uTxq/HapJCrFsWtXWhbQaWIvr6BfUrpYRi3IO3f7E2d8IKVD+GYl
P4N6g0eNcPD/bJ3D+VBWNzK5lK/iJf+SBKWiLAFSyiSVTlOWD4O1jP8nlrQ9mpMv
mu6jYWPrbgIIY1nA5kEktx4xJWye9EDD4pK4ulJa2S3j8yzuGS8SjLboqk7EwxgR
c+z3fotd73U9bQVPjgDPWv8ciYGBd3HRCT/E2Jar3h3AwMgL98bI/7gL8qqu
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:34 2025 by rpki-client