Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/6D3-8IRm9xN4zoWFOZf61UnB0H4.roa
File: 6D3-8IRm9xN4zoWFOZf61UnB0H4.roa (raw, json)
Hash identifier: dAFL+bd0hgW8HGhZwxIyQc0Ks97xEr3Tj+YKFZrqzU4=
Subject key identifier: E8:3D:FE:F0:84:66:F7:13:78:CE:85:85:39:97:FA:D5:49:C1:D0:7E
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 0FEB98A9
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/6D3-8IRm9xN4zoWFOZf61UnB0H4.roa
Signing time: Sat 01 Jan 2022 03:03:02 +0000
ROA not before: Sat 01 Jan 2022 03:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52165
IP address blocks: 185.185.185.0/24 maxlen: 24
185.185.184.0/24 maxlen: 24
185.185.186.0/24 maxlen: 24
185.185.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267098281 (0xfeb98a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Jan 1 03:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e83dfef08466f71378ce85853997fad549c1d07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:74:a5:70:49:15:49:0f:12:ca:eb:77:1e:
40:fd:76:b1:88:0d:8e:7a:39:a5:a2:26:7a:6c:3f:
82:f4:92:d4:66:62:47:3f:a1:e6:da:3c:1e:8d:1c:
3f:0b:0e:3f:42:34:8a:17:43:79:b7:2a:ce:b0:4c:
2f:f9:b2:ca:f6:49:de:d4:58:ca:73:dd:2a:1c:8c:
c4:ab:57:62:f3:ab:62:cf:71:0e:a3:48:d4:13:d0:
ac:01:d4:a0:c5:7a:26:50:e9:40:04:04:2e:05:62:
2a:70:b9:f0:25:b1:5e:8c:bf:2f:b5:67:bc:58:f1:
26:79:eb:16:f1:88:58:18:90:b9:46:7a:b4:47:36:
0c:cc:98:df:8d:c0:6c:5b:08:84:b3:53:56:ec:13:
c5:3b:7a:d7:0e:be:8c:38:1c:df:39:5c:8f:91:51:
ca:b8:45:a3:c7:4b:3a:c0:0a:18:48:de:ca:02:f6:
57:46:49:83:b1:c9:f0:42:9d:7a:91:4a:db:6e:ba:
c6:dc:f1:3d:31:33:39:08:cc:43:ad:71:18:8b:80:
92:6d:24:91:74:aa:32:67:c3:24:2e:8e:eb:34:be:
10:49:10:8c:f9:cc:5a:2a:77:c1:a1:30:3c:ed:39:
a7:b9:a6:19:14:47:89:1b:62:f1:7c:31:26:4a:56:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3D:FE:F0:84:66:F7:13:78:CE:85:85:39:97:FA:D5:49:C1:D0:7E
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/6D3-8IRm9xN4zoWFOZf61UnB0H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:5c:9a:c9:42:0d:5a:ff:14:ec:b2:a4:61:af:ac:d5:f3:38:
df:8d:34:ce:8d:96:cb:17:fb:03:d9:7f:7b:71:56:31:dc:f8:
fb:25:fc:56:0c:44:32:d0:e8:84:f9:7e:c1:52:5d:83:d8:16:
08:2a:14:ef:ff:6a:98:a3:af:be:59:73:c8:23:5f:b2:b6:2c:
10:1e:5e:41:65:0a:69:c3:a6:00:44:ac:41:a7:05:95:a4:2b:
59:82:a8:90:fa:cc:61:83:a2:ab:9a:f2:53:4d:e1:24:13:ee:
93:47:1f:46:ac:c6:77:01:b6:4e:ae:37:11:cd:98:a7:29:90:
c0:55:ed:3f:85:f1:87:ca:3b:0f:b1:57:74:3f:c2:13:ec:1e:
52:45:ce:28:97:7e:70:06:ca:d7:de:92:59:f8:a1:72:27:e2:
52:4e:86:9c:cd:e4:3f:b2:ff:66:33:a3:86:b1:8a:6c:de:51:
0e:9f:da:0f:b0:ed:c4:3b:d3:b8:b7:06:1b:04:51:51:2b:75:
1b:21:c5:83:0e:7a:1e:22:1b:36:83:c1:58:06:32:bc:cb:05:
ec:cf:0e:d5:8b:d4:5c:6c:69:2e:1f:46:8d:fb:3e:56:8a:25:
b8:25:19:ec:fc:01:d7:28:5b:a4:2d:41:0a:7b:de:64:6a:66:
3d:d3:1a:70
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED+uYqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZjlmMDJkYmQ5NzI1OTVhMzFjYWJlYWIwY2Q5NWQ3MDZhOGNkZDMxMB4XDTIyMDEw
MTAzMDMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTgzZGZlZjA4NDY2
ZjcxMzc4Y2U4NTg1Mzk5N2ZhZDU0OWMxZDA3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI3ZdKVwSRVJDxLK63ceQP12sYgNjno5paImemw/gvSS1GZi
Rz+h5to8Ho0cPwsOP0I0ihdDebcqzrBML/myyvZJ3tRYynPdKhyMxKtXYvOrYs9x
DqNI1BPQrAHUoMV6JlDpQAQELgViKnC58CWxXoy/L7VnvFjxJnnrFvGIWBiQuUZ6
tEc2DMyY343AbFsIhLNTVuwTxTt61w6+jDgc3zlcj5FRyrhFo8dLOsAKGEjeygL2
V0ZJg7HJ8EKdepFK2266xtzxPTEzOQjMQ61xGIuAkm0kkXSqMmfDJC6O6zS+EEkQ
jPnMWip3waEwPO05p7mmGRRHiRti8XwxJkpW+RcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBToPf7whGb3E3jOhYU5l/rVScHQfjAfBgNVHSMEGDAWgBTPnwLb2XJZWjHK
vqsM2V1waozdMTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3o1OEMyOWx5V1ZveHlyNnJETmxkY0dxTTNURS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvNGU3Y2Y5LWE5ZGYtNGJhMy1hZjc3LWUyNzA3ZTE5NzU0MS8x
LzZEMy04SVJtOXhONHpvV0ZPWmY2MVVuQjBINC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
NGU3Y2Y5LWE5ZGYtNGJhMy1hZjc3LWUyNzA3ZTE5NzU0MS8xL3o1OEMyOWx5V1Zv
eHlyNnJETmxkY0dxTTNURS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArm5uDANBgkqhkiG9w0BAQsFAAOC
AQEAoVyayUINWv8U7LKkYa+s1fM43400zo2Wyxf7A9l/e3FWMdz4+yX8VgxEMtDo
hPl+wVJdg9gWCCoU7/9qmKOvvllzyCNfsrYsEB5eQWUKacOmAESsQacFlaQrWYKo
kPrMYYOiq5ryU03hJBPuk0cfRqzGdwG2Tq43Ec2YpymQwFXtP4Xxh8o7D7FXdD/C
E+weUkXOKJd+cAbK196SWfihcifiUk6GnM3kP7L/ZjOjhrGKbN5RDp/aD7DtxDvT
uLcGGwRRUSt1GyHFgw56HiIbNoPBWAYyvMsF7M8O1YvUXGxpLh9Gjfs+VooluCUZ
7PwB1yhbpC1BCnveZGpmPdMacA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:18:01 2025 by rpki-client