Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/kKq4fy7CfO-RzzreFgvOe5eC1EY.roa
File: kKq4fy7CfO-RzzreFgvOe5eC1EY.roa (raw, json)
Hash identifier: aJdX/9KRGh+96KLH7pbe5yBS7b7Vlpm2M5Ov+X1jmvM=
Subject key identifier: 90:AA:B8:7F:2E:C2:7C:EF:91:CF:3A:DE:16:0B:CE:7B:97:82:D4:46
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 018899DFAAE57A994DE364F0AB9EEA97373F
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/kKq4fy7CfO-RzzreFgvOe5eC1EY.roa
Signing time: Thu 08 Jun 2023 07:19:12 +0000
ROA not before: Thu 08 Jun 2023 07:19:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9145
IP address blocks: 92.252.0.0/17 maxlen: 24
212.95.96.0/19 maxlen: 24
212.6.64.0/18 maxlen: 24
85.16.0.0/16 maxlen: 24
95.33.0.0/16 maxlen: 24
85.8.64.0/18 maxlen: 24
213.252.128.0/18 maxlen: 24
37.138.0.0/16 maxlen: 24
82.149.160.0/19 maxlen: 24
90.153.0.0/17 maxlen: 24
89.166.128.0/17 maxlen: 24
213.168.192.0/19 maxlen: 24
80.66.0.0/19 maxlen: 24
62.89.160.0/19 maxlen: 24
213.183.160.0/19 maxlen: 24
91.96.0.0/15 maxlen: 24
31.150.0.0/16 maxlen: 24
80.228.0.0/16 maxlen: 24
87.245.0.0/18 maxlen: 24
89.233.64.0/19 maxlen: 24
31.184.0.0/18 maxlen: 24
213.182.96.0/19 maxlen: 24
91.248.0.0/15 maxlen: 24
31.187.112.0/20 maxlen: 24
213.170.160.0/19 maxlen: 24
178.142.0.0/16 maxlen: 24
188.118.128.0/18 maxlen: 24
2a02:8020::/30 maxlen: 30
2a02:8200::/27 maxlen: 48
2a00:1470::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:df:aa:e5:7a:99:4d:e3:64:f0:ab:9e:ea:97:37:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jun 8 07:19:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90aab87f2ec27cef91cf3ade160bce7b9782d446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:59:52:c1:9c:5a:97:63:03:5d:14:6b:bd:
c2:ad:11:ab:37:05:eb:01:47:87:9a:d9:a4:4e:54:
0e:c0:bb:59:0e:b6:f6:c4:94:ca:da:d7:ab:ac:60:
82:f2:ed:ef:d8:4b:db:94:c7:85:87:5b:f7:db:89:
e7:45:a1:ae:ae:c2:98:f7:7c:98:24:3d:a8:06:97:
1c:9d:a6:9b:d6:7f:39:5b:cb:e1:7c:8c:ef:b4:b1:
e6:73:eb:76:a8:96:84:8f:14:28:06:d2:f5:7d:72:
74:cf:bb:99:31:60:d2:62:0d:44:05:90:42:94:20:
f5:a6:40:41:7b:0e:67:e4:85:2d:a0:1c:37:16:8a:
63:12:39:99:f1:9f:5d:d9:ca:9b:e6:6a:3a:42:d3:
52:fe:b5:77:f1:10:57:da:83:6b:b6:82:21:33:9f:
84:c1:94:ea:fb:17:f5:f9:23:3e:5b:c1:aa:7d:b1:
33:1e:90:d0:5f:66:92:b3:cd:1e:70:9f:ca:17:bb:
bf:04:1a:d4:5d:4d:28:6f:a5:61:39:94:d9:1e:ae:
f1:7a:13:43:4e:f9:ac:33:27:54:a0:98:e6:e8:d9:
7d:2b:98:bc:0b:7e:62:c3:d3:ab:e5:1e:b8:29:95:
ff:f5:e1:4e:91:72:74:95:e9:f2:c2:9d:00:1d:bc:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AA:B8:7F:2E:C2:7C:EF:91:CF:3A:DE:16:0B:CE:7B:97:82:D4:46
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/kKq4fy7CfO-RzzreFgvOe5eC1EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.150.0.0/16
31.184.0.0/18
31.187.112.0/20
37.138.0.0/16
62.89.160.0/19
80.66.0.0/19
80.228.0.0/16
82.149.160.0/19
85.8.64.0/18
85.16.0.0/16
87.245.0.0/18
89.166.128.0/17
89.233.64.0/19
90.153.0.0/17
91.96.0.0/15
91.248.0.0/15
92.252.0.0/17
95.33.0.0/16
178.142.0.0/16
188.118.128.0/18
212.6.64.0/18
212.95.96.0/19
213.168.192.0/19
213.170.160.0/19
213.182.96.0/19
213.183.160.0/19
213.252.128.0/18
IPv6:
2a00:1470::/32
2a02:8020::/30
2a02:8200::/27
Signature Algorithm: sha256WithRSAEncryption
8c:18:48:5d:69:98:5d:db:56:d5:6e:1b:b5:75:61:c3:d9:ae:
ac:27:d3:bf:77:74:ab:c3:58:ae:6e:52:cb:fa:3f:43:74:43:
63:4f:31:3f:b1:f6:ec:60:18:41:98:0a:74:10:e4:a7:b4:a0:
29:0a:2f:31:2a:5d:dd:d6:2f:e2:19:a0:d5:be:8a:0e:99:25:
e4:b1:76:3f:5b:e3:3c:16:8c:f8:c1:81:00:67:b5:f7:1c:2a:
b5:14:b3:cc:63:8e:0d:53:76:41:fe:c5:25:35:25:9c:3c:55:
00:ec:73:e1:95:32:28:93:e3:62:ff:01:3b:94:88:ba:b3:f1:
0b:99:02:5f:68:16:e6:73:2d:83:6f:5f:a4:cc:85:61:a4:80:
37:45:26:30:4b:0a:b1:de:fb:dd:44:c1:f9:f2:24:72:bd:98:
c0:ff:dd:80:4d:1e:5e:8d:c2:ed:6d:66:f8:e4:bf:1e:79:db:
e1:cd:f8:12:c3:d3:74:5b:63:15:e9:c5:08:80:64:c7:1e:c7:
d1:32:cd:d0:d2:36:88:16:b3:d3:e2:e8:bf:92:d7:79:65:3a:
6a:76:a6:a2:e1:5a:6a:4c:d9:c8:7d:b9:86:69:3f:6d:bf:de:
21:7a:3b:6e:f3:5a:97:14:59:c8:21:07:82:a7:22:0d:03:4c:
c3:10:01:a0
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAYiZ36rleplN42Twq57qlzc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3
Zjc3NzQwHhcNMjMwNjA4MDcxOTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGFhYjg3ZjJlYzI3Y2VmOTFjZjNhZGUxNjBiY2U3Yjk3ODJkNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR9ZUsGcWpdjA10Ua73CrRGrNwXr
AUeHmtmkTlQOwLtZDrb2xJTK2terrGCC8u3v2EvblMeFh1v324nnRaGursKY93yY
JD2oBpccnaab1n85W8vhfIzvtLHmc+t2qJaEjxQoBtL1fXJ0z7uZMWDSYg1EBZBC
lCD1pkBBew5n5IUtoBw3FopjEjmZ8Z9d2cqb5mo6QtNS/rV38RBX2oNrtoIhM5+E
wZTq+xf1+SM+W8GqfbEzHpDQX2aSs80ecJ/KF7u/BBrUXU0ob6VhOZTZHq7xehND
TvmsMydUoJjm6Nl9K5i8C35iw9Or5R64KZX/9eFOkXJ0lenywp0AHbx+owIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFJCquH8uwnzvkc863hYLznuXgtRGMB8GA1UdIwQY
MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt
NTQ2OGIyY2YwYTc3LzEva0txNGZ5N0NmTy1SenpyZUZndk9lNWVDMUVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3
LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBoQQCAAEwgZoDAwAf
lgMEBh+4AAMEBB+7cAMDACWKAwQFPlmgAwQFUEIAAwMAUOQDBAVSlaADBAZVCEAD
AwBVEAMEBlf1AAMEB1mmgAMEBVnpQAMEB1qZAAMDAVtgAwMBW/gDBAdc/AADAwBf
IQMDALKOAwQGvHaAAwQG1AZAAwQF1F9gAwQF1ajAAwQF1aqgAwQF1bZgAwQF1beg
AwQG1fyAMBsEAgACMBUDBQAqABRwAwUCKgKAIAMFBSoCggAwDQYJKoZIhvcNAQEL
BQADggEBAIwYSF1pmF3bVtVuG7V1YcPZrqwn0793dKvDWK5uUsv6P0N0Q2NPMT+x
9uxgGEGYCnQQ5Ke0oCkKLzEqXd3WL+IZoNW+ig6ZJeSxdj9b4zwWjPjBgQBntfcc
KrUUs8xjjg1TdkH+xSU1JZw8VQDsc+GVMiiT42L/ATuUiLqz8QuZAl9oFuZzLYNv
X6TMhWGkgDdFJjBLCrHe+91EwfnyJHK9mMD/3YBNHl6Nwu1tZvjkvx552+HN+BLD
03RbYxXpxQiAZMcex9EyzdDSNogWs9Pi6L+S13llOmp2pqLhWmpM2ch9uYZpP22/
3iF6O27zWpcUWcghB4KnIg0DTMMQAaA=
-----END CERTIFICATE-----
Generated at Sun May 11 10:46:34 2025 by rpki-client