Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/NvLe6TXuFN2h06pIpQLmq12AZmA.roa
File: NvLe6TXuFN2h06pIpQLmq12AZmA.roa (raw, json)
Hash identifier: tDLF50bxzlynqV1gU8A/0DbIDx9vXZMwErx02HLJikg=
Subject key identifier: 36:F2:DE:E9:35:EE:14:DD:A1:D3:AA:48:A5:02:E6:AB:5D:80:66:60
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 0189DBB76B2B96FB5D66AFC5AFFFC01E1762
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/NvLe6TXuFN2h06pIpQLmq12AZmA.roa
Signing time: Wed 09 Aug 2023 19:12:58 +0000
ROA not before: Wed 09 Aug 2023 19:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51295
IP address blocks: 185.179.156.0/22 maxlen: 22
185.248.196.0/22 maxlen: 22
194.165.26.0/24 maxlen: 24
45.153.91.0/24 maxlen: 24
45.153.88.0/24 maxlen: 24
2a0a:8880:1::/48 maxlen: 48
2a0a:8880:2::/48 maxlen: 48
2a0a:8880:aaaa::/48 maxlen: 48
2a0f:4440:aaaa::/48 maxlen: 48
2a0f:4440:abcd::/48 maxlen: 48
2a0a:8880::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:db:b7:6b:2b:96:fb:5d:66:af:c5:af:ff:c0:1e:17:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Aug 9 19:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36f2dee935ee14dda1d3aa48a502e6ab5d806660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:5c:60:88:24:b4:db:13:9d:db:77:13:8d:
ab:18:78:74:a5:8d:c7:44:ce:74:f4:22:45:29:7a:
b4:cf:6b:bb:76:a9:3d:0e:fa:a9:e6:3b:e6:db:2b:
ba:34:4e:d1:06:e1:09:83:13:bc:03:ce:5b:2c:72:
db:2d:02:39:0f:a5:cc:c0:5a:58:11:37:42:9d:41:
59:c7:07:16:8d:3c:e3:a7:98:b3:5e:24:d5:94:32:
b5:ea:be:31:dc:82:95:9e:1a:15:5e:1d:a5:fa:e2:
5e:22:86:2d:94:7c:0a:58:de:8a:af:5d:dc:12:97:
63:9c:e4:3e:60:a9:45:13:02:d6:f7:db:c2:7c:41:
6f:30:50:b0:f8:41:d8:3b:d5:f0:ba:23:b8:41:19:
b2:05:34:42:9e:12:5b:06:db:14:7c:c0:f8:52:60:
16:3d:38:45:54:5b:72:1a:d4:e5:da:f3:e7:19:6d:
09:5b:dc:84:19:a6:ec:ca:a7:c3:25:cd:e3:a9:2a:
ca:f5:46:4c:46:67:94:0d:f4:64:fd:8a:a6:d1:c6:
28:98:6e:02:38:20:78:bd:e5:c2:5c:f4:53:d7:da:
1c:b3:d9:8f:cf:1c:44:4b:f3:6d:e9:85:d2:3f:10:
a9:ca:0b:6e:b5:93:8b:20:c6:c8:ca:10:97:8b:d4:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F2:DE:E9:35:EE:14:DD:A1:D3:AA:48:A5:02:E6:AB:5D:80:66:60
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/NvLe6TXuFN2h06pIpQLmq12AZmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.88.0/24
45.153.91.0/24
185.179.156.0/22
185.248.196.0/22
194.165.26.0/24
IPv6:
2a0a:8880::-2a0a:8880:2:ffff:ffff:ffff:ffff:ffff
2a0a:8880:aaaa::/48
2a0f:4440:aaaa::/48
2a0f:4440:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
72:f2:18:0b:1d:db:24:ce:09:a4:19:c6:c8:5d:62:ea:88:87:
7b:fb:bb:66:eb:2d:6d:50:7a:eb:39:f7:60:78:46:02:8f:ba:
11:cd:ad:12:57:ad:08:f7:7f:55:b3:b9:1c:36:68:fb:e6:6a:
ce:dd:bf:a6:f1:a6:7f:64:e8:87:6a:66:c4:8f:03:99:08:3d:
91:6f:d2:11:41:5d:ce:df:62:23:9c:4c:33:2e:b3:d7:4e:68:
a5:09:61:48:d2:95:3e:a8:f8:74:38:df:0f:b3:0a:e8:88:a2:
4d:0a:e7:43:80:fb:3c:fa:17:c6:90:84:93:d3:42:55:23:c8:
6f:ff:6b:b7:fd:75:52:82:6a:4d:36:a6:31:bb:2f:e6:84:89:
8a:d8:31:c5:4c:33:e6:b1:41:16:c5:ed:17:16:39:f0:f5:21:
b8:66:b5:07:89:14:97:d9:8a:aa:a4:79:7b:e2:45:de:b5:b3:
f3:33:02:97:1e:cb:43:3a:6c:56:d1:f5:7c:4b:33:64:c8:40:
14:33:9a:20:c7:5e:9e:c5:ef:ec:98:08:17:da:96:30:ba:6d:
e8:64:a9:4d:da:84:e2:0c:c7:cf:b4:57:fa:56:c0:3d:32:1e:
0b:9e:45:ff:30:24:1a:28:da:5f:97:b8:6e:1a:48:3a:e1:ef:
c6:54:15:73
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAYnbt2srlvtdZq/Fr//AHhdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjMwODA5MTkxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmYyZGVlOTM1ZWUxNGRkYTFkM2FhNDhhNTAyZTZhYjVkODA2NjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35ZcYIgktNsTndt3E42rGHh0pY3H
RM509CJFKXq0z2u7dqk9Dvqp5jvm2yu6NE7RBuEJgxO8A85bLHLbLQI5D6XMwFpY
ETdCnUFZxwcWjTzjp5izXiTVlDK16r4x3IKVnhoVXh2l+uJeIoYtlHwKWN6Kr13c
EpdjnOQ+YKlFEwLW99vCfEFvMFCw+EHYO9XwuiO4QRmyBTRCnhJbBtsUfMD4UmAW
PThFVFtyGtTl2vPnGW0JW9yEGabsyqfDJc3jqSrK9UZMRmeUDfRk/Yqm0cYomG4C
OCB4veXCXPRT19ocs9mPzxxES/Nt6YXSPxCpygtutZOLIMbIyhCXi9ROCQIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFDby3uk17hTdodOqSKUC5qtdgGZgMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvTnZMZTZUWHVGTjJoMDZwSXBRTG1xMTJBWm1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzAkBAIAATAeAwQALZlYAwQA
LZlbAwQCubOcAwQCufjEAwQAwqUaMDMEAgACMC0wEAMFByoKiIADBwAqCoiAAAID
BwAqCoiAqqoDBwAqD0RAqqoDBwAqD0RAq80wDQYJKoZIhvcNAQELBQADggEBAHLy
GAsd2yTOCaQZxshdYuqIh3v7u2brLW1Qeus592B4RgKPuhHNrRJXrQj3f1WzuRw2
aPvmas7dv6bxpn9k6IdqZsSPA5kIPZFv0hFBXc7fYiOcTDMus9dOaKUJYUjSlT6o
+HQ43w+zCuiIok0K50OA+zz6F8aQhJPTQlUjyG//a7f9dVKCak02pjG7L+aEiYrY
McVMM+axQRbF7RcWOfD1IbhmtQeJFJfZiqqkeXviRd61s/MzApcey0M6bFbR9XxL
M2TIQBQzmiDHXp7F7+yYCBfaljC6behkqU3ahOIMx8+0V/pWwD0yHgueRf8wJBoo
2l+XuG4aSDrh78ZUFXM=
-----END CERTIFICATE-----
Generated at Wed May 14 02:26:47 2025 by rpki-client