Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5dtGSFJ98lUI6STYUXQ8iYBLwQU.roa
File: 5dtGSFJ98lUI6STYUXQ8iYBLwQU.roa (raw, json)
Hash identifier: w2UADcHnyLlDlFJGkiXXYVF3tIMW3EhVE+qvIHm8wME=
Subject key identifier: E5:DB:46:48:52:7D:F2:55:08:E9:24:D8:51:74:3C:89:80:4B:C1:05
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01877A37ACE59CDBE1062BFC1A0958A753F0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5dtGSFJ98lUI6STYUXQ8iYBLwQU.roa
Signing time: Thu 13 Apr 2023 10:44:41 +0000
ROA not before: Thu 13 Apr 2023 10:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.132.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:37:ac:e5:9c:db:e1:06:2b:fc:1a:09:58:a7:53:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 13 10:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5db4648527df25508e924d851743c89804bc105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:1e:a0:9b:b9:4e:9d:89:41:66:88:38:7c:
86:ec:1f:7c:27:a5:f5:f4:ad:69:65:3a:68:1c:ee:
15:39:5a:d6:57:36:dd:39:3c:9e:3a:06:90:28:4d:
ad:94:df:18:29:b4:05:1b:09:a7:0f:e5:e3:96:a1:
de:37:0b:f0:38:2a:cc:11:c7:71:09:ef:a2:9e:0f:
53:0f:9c:12:e3:ed:a6:a9:d2:e4:0b:46:80:a0:09:
09:e9:6d:d9:6e:4f:0f:25:1a:3e:f7:96:30:43:18:
f1:f5:22:b4:fd:10:34:e6:65:4a:bf:d6:99:4f:01:
ad:a9:59:0c:15:4d:dc:5b:0a:55:72:bb:9c:d5:fd:
d8:ff:1b:a9:3a:08:1d:4e:6b:4c:6c:aa:17:fb:1b:
2f:ac:8c:61:d4:ea:ec:e3:24:44:58:e2:e1:0b:17:
f8:23:03:af:7f:1a:d3:cc:9f:90:06:44:cf:4c:ad:
04:bf:76:bb:1d:69:ea:00:44:cc:6c:df:44:9c:49:
5c:67:c6:d5:71:e3:ec:de:27:a5:b0:c3:60:71:9e:
45:96:f3:84:eb:b9:32:84:08:07:7d:49:08:6b:a2:
29:ac:ff:a3:b8:0d:76:46:c5:35:51:11:b6:9b:a1:
0b:20:f9:e4:8b:4a:8a:32:e6:11:bc:df:c3:6c:53:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DB:46:48:52:7D:F2:55:08:E9:24:D8:51:74:3C:89:80:4B:C1:05
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5dtGSFJ98lUI6STYUXQ8iYBLwQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.152.0-84.32.154.255
84.32.156.0/24
88.216.45.0/24
88.216.56.0/24
88.216.58.0-88.216.65.255
88.216.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:78:9e:4e:fa:9c:42:6e:fa:79:72:18:f3:d0:a6:57:42:29:
fc:82:77:8f:91:1e:ca:c6:47:e6:32:49:65:8a:68:88:b4:27:
e6:61:99:86:11:9a:11:86:66:ed:1c:71:8a:d6:20:dc:8f:f0:
84:42:ee:e4:b0:e7:87:f1:b2:8c:a5:6a:69:8f:21:14:bd:ff:
ee:1a:ef:cf:00:e4:6c:9f:3b:76:60:fd:88:58:6f:c0:b9:48:
e7:58:52:4f:b6:82:ac:2c:5f:8b:b2:0e:26:f4:92:2c:38:c3:
bd:88:ba:1c:26:a6:96:66:7b:28:80:ad:e6:62:4a:56:0a:32:
e0:d7:53:56:f4:2b:ba:3f:a0:8b:d3:63:89:56:fc:27:42:32:
bf:2a:db:a6:91:b2:6c:72:8f:bc:a9:30:12:9a:1b:d6:1f:58:
03:40:2a:e4:66:f0:ea:da:f3:58:16:8f:93:ac:6e:8e:70:5a:
85:be:d4:43:e4:c0:db:7e:2d:79:4e:63:b6:d5:b9:ed:3e:c9:
46:11:81:ae:96:f4:69:53:26:71:a2:d8:5f:6c:9d:85:a8:d7:
72:c0:50:cb:96:4e:98:c6:63:a1:ff:11:aa:d8:79:39:2e:a5:
11:95:02:3e:f0:90:ee:dd:ea:03:72:71:e4:6f:fc:22:5b:f4:
a2:d7:94:fa
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYd6N6zlnNvhBiv8GglYp1PwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNDEzMTA0NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWRiNDY0ODUyN2RmMjU1MDhlOTI0ZDg1MTc0M2M4OTgwNGJjMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj4eoJu5Tp2JQWaIOHyG7B98J6X1
9K1pZTpoHO4VOVrWVzbdOTyeOgaQKE2tlN8YKbQFGwmnD+XjlqHeNwvwOCrMEcdx
Ce+ing9TD5wS4+2mqdLkC0aAoAkJ6W3Zbk8PJRo+95YwQxjx9SK0/RA05mVKv9aZ
TwGtqVkMFU3cWwpVcruc1f3Y/xupOggdTmtMbKoX+xsvrIxh1Ors4yREWOLhCxf4
IwOvfxrTzJ+QBkTPTK0Ev3a7HWnqAETMbN9EnElcZ8bVcePs3ielsMNgcZ5FlvOE
67kyhAgHfUkIa6IprP+juA12RsU1URG2m6ELIPnki0qKMuYRvN/DbFO8RwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFOXbRkhSffJVCOkk2FF0PImAS8EFMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvNWR0R1NGSjk4bFVJNlNUWVVYUThpWUJMd1FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBANUIJgD
BABUIJoDBABUIJwDBABY2C0DBABY2DgwDAMEAVjYOgMEAVjYQAMEAFjYhDANBgkq
hkiG9w0BAQsFAAOCAQEAoHieTvqcQm76eXIY89CmV0Ip/IJ3j5EeysZH5jJJZYpo
iLQn5mGZhhGaEYZm7RxxitYg3I/whELu5LDnh/GyjKVqaY8hFL3/7hrvzwDkbJ87
dmD9iFhvwLlI51hST7aCrCxfi7IOJvSSLDjDvYi6HCamlmZ7KICt5mJKVgoy4NdT
VvQruj+gi9NjiVb8J0IyvyrbppGybHKPvKkwEpob1h9YA0Aq5Gbw6trzWBaPk6xu
jnBahb7UQ+TA234teU5jttW57T7JRhGBrpb0aVMmcaLYX2ydhajXcsBQy5ZOmMZj
of8Rqth5OS6lEZUCPvCQ7t3qA3Jx5G/8Ilv0oteU+g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:05 2025 by rpki-client