Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/EolckPGxWlj9FrKpCg0l2AAdGcI.roa
File: EolckPGxWlj9FrKpCg0l2AAdGcI.roa (raw, json)
Hash identifier: +GinS6JXqzY5VYm2SHB+nUBMiBvdyctR07G3wawAT9k=
Subject key identifier: 12:89:5C:90:F1:B1:5A:58:FD:16:B2:A9:0A:0D:25:D8:00:1D:19:C2
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 0A8C06E3
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/EolckPGxWlj9FrKpCg0l2AAdGcI.roa
Signing time: Sat 01 Jan 2022 07:57:38 +0000
ROA not before: Sat 01 Jan 2022 07:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205614
IP address blocks: 185.171.44.0/22 maxlen: 24
2a0d:1f80::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176948963 (0xa8c06e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Jan 1 07:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12895c90f1b15a58fd16b2a90a0d25d8001d19c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:b3:ba:6b:90:d7:ff:e3:4f:97:7d:54:0c:
35:f9:ee:18:c7:23:16:a0:f3:18:cb:11:54:be:80:
57:d2:af:25:7d:72:14:b7:c9:59:e0:22:0b:26:15:
fc:36:df:eb:ab:15:30:0a:f7:6d:32:65:b9:36:9d:
b7:15:18:db:2b:56:45:33:71:ca:c5:da:95:c8:0e:
64:ac:9d:c4:68:ee:06:13:42:1d:07:cb:8e:a9:b7:
97:cb:aa:98:a3:5c:b5:30:c8:bf:b8:b7:3f:93:65:
96:50:0b:b5:28:29:4d:e1:39:0d:5f:5d:6f:95:01:
11:48:78:f0:50:9d:7c:ef:db:65:0d:55:62:75:54:
89:40:ea:cb:f7:05:ba:01:0a:4b:6d:5b:7e:56:16:
c8:83:17:48:8c:74:cb:dc:bf:87:cb:46:ee:0a:8f:
4d:24:3d:41:83:2d:d5:9a:2c:9a:93:c5:cb:a0:c3:
ae:dd:66:5f:d8:a4:cd:24:4c:6a:ed:3b:94:86:df:
e6:3a:af:01:e6:dd:ec:e7:69:cf:bc:bc:4a:55:04:
1d:fb:34:82:eb:72:43:8e:58:f4:b7:4b:33:6c:54:
58:fb:b6:84:36:9c:3f:73:22:95:cb:7c:77:c5:4e:
0e:d5:cc:7e:ca:05:ef:73:32:78:f1:03:1e:56:61:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:89:5C:90:F1:B1:5A:58:FD:16:B2:A9:0A:0D:25:D8:00:1D:19:C2
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/EolckPGxWlj9FrKpCg0l2AAdGcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.44.0/22
IPv6:
2a0d:1f80::/32
Signature Algorithm: sha256WithRSAEncryption
ac:35:44:4f:e9:df:34:70:89:7b:54:9b:d3:82:49:c9:f1:b3:
55:d4:16:1f:7d:26:dd:43:e8:16:be:37:77:a7:20:6a:fb:b0:
ae:1b:cc:62:08:84:05:c6:35:b2:4c:ce:f9:7f:7c:35:17:0b:
51:a3:ac:f7:0e:f3:3b:ad:5e:d7:08:fb:d1:ea:63:6f:6e:1b:
f7:79:c2:1b:75:19:53:ce:fa:7e:3b:b4:64:7c:93:7e:cc:d9:
1b:50:25:38:f0:53:0f:cb:58:22:f9:eb:a7:28:a9:b6:88:69:
ff:f4:f3:e4:2e:e6:3a:ea:47:73:6f:b0:7b:45:79:23:e0:1d:
1b:3e:e3:fd:d0:bd:9d:09:32:d8:81:8a:54:1e:72:d2:ed:83:
9f:bb:9f:91:20:e6:6d:45:6d:2f:19:d3:9e:80:48:12:6a:9d:
ed:d2:a3:12:f2:20:94:4a:b8:40:21:bd:56:72:13:41:fb:41:
dc:32:19:49:8e:7c:48:ce:28:91:cd:1e:f5:ac:22:49:1b:8d:
d2:02:83:d9:01:cb:7e:6c:56:99:50:d1:41:fd:d8:a1:40:e8:
c2:1c:c9:16:e4:66:88:6b:1a:38:ca:4c:ab:2a:c2:b9:84:8a:
ec:da:73:c1:0e:3d:f4:87:65:91:50:9e:5b:cf:52:f8:04:d9:
54:ec:55:71
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECowG4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NTA2MDk2Njk1ZjdlNjYxMGIxOWIwOGUxZDdmZDljNGQ5MTRhNGYwMB4XDTIyMDEw
MTA3NTczOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTI4OTVjOTBmMWIx
NWE1OGZkMTZiMmE5MGEwZDI1ZDgwMDFkMTljMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK5as7prkNf/40+XfVQMNfnuGMcjFqDzGMsRVL6AV9KvJX1y
FLfJWeAiCyYV/Dbf66sVMAr3bTJluTadtxUY2ytWRTNxysXalcgOZKydxGjuBhNC
HQfLjqm3l8uqmKNctTDIv7i3P5NlllALtSgpTeE5DV9db5UBEUh48FCdfO/bZQ1V
YnVUiUDqy/cFugEKS21bflYWyIMXSIx0y9y/h8tG7gqPTSQ9QYMt1ZosmpPFy6DD
rt1mX9ikzSRMau07lIbf5jqvAebd7Odpz7y8SlUEHfs0gutyQ45Y9LdLM2xUWPu2
hDacP3Milct8d8VODtXMfsoF73MyePEDHlZhwhECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQSiVyQ8bFaWP0WsqkKDSXYAB0ZwjAfBgNVHSMEGDAWgBRlBglmlffmYQsZ
sI4df9nE2RSk8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pRWUpacFgzNW1FTEdiQ09IWF9aeE5rVXBQQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvZjViYWE0LWY2NzAtNDM4NS1iYzM4LWE0MTUyNTU4ZDE4Yy8x
L0VvbGNrUEd4V2xqOUZyS3BDZzBsMkFBZEdjSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
ZjViYWE0LWY2NzAtNDM4NS1iYzM4LWE0MTUyNTU4ZDE4Yy8xL1pRWUpacFgzNW1F
TEdiQ09IWF9aeE5rVXBQQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmrLDANBAIAAjAHAwUAKg0fgDAN
BgkqhkiG9w0BAQsFAAOCAQEArDVET+nfNHCJe1Sb04JJyfGzVdQWH30m3UPoFr43
d6cgavuwrhvMYgiEBcY1skzO+X98NRcLUaOs9w7zO61e1wj70epjb24b93nCG3UZ
U876fju0ZHyTfszZG1AlOPBTD8tYIvnrpyiptohp//Tz5C7mOupHc2+we0V5I+Ad
Gz7j/dC9nQky2IGKVB5y0u2Dn7ufkSDmbUVtLxnTnoBIEmqd7dKjEvIglEq4QCG9
VnITQftB3DIZSY58SM4okc0e9awiSRuN0gKD2QHLfmxWmVDRQf3YoUDowhzJFuRm
iGsaOMpMqyrCuYSK7NpzwQ499IdlkVCeW89S+ATZVOxVcQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:18 2025 by rpki-client