Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/DQ4WxwWluxeUSjXabRp5X_bvqiM.roa
File: DQ4WxwWluxeUSjXabRp5X_bvqiM.roa (raw, json)
Hash identifier: 29kVWJJHYX6t5GTYeK4IxrM4W4n26PAhoNcY/bEa7Ss=
Subject key identifier: 0D:0E:16:C7:05:A5:BB:17:94:4A:35:DA:6D:1A:79:5F:F6:EF:AA:23
Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial: 01856D53F95E472E5859EC5D4985DAFC5F82
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/DQ4WxwWluxeUSjXabRp5X_bvqiM.roa
Signing time: Sun 01 Jan 2023 12:34:57 +0000
ROA not before: Sun 01 Jan 2023 12:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15826
IP address blocks: 80.247.224.0/20 maxlen: 20
185.20.84.0/22 maxlen: 22
2a00:1a60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:f9:5e:47:2e:58:59:ec:5d:49:85:da:fc:5f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241ed58e426975e299875897caff9552640d9c09
Validity
Not Before: Jan 1 12:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d0e16c705a5bb17944a35da6d1a795ff6efaa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:f8:84:a8:64:71:8a:dc:d6:97:62:8c:59:
82:99:97:a1:5d:e6:0b:13:b2:78:77:dc:96:86:28:
b1:02:e3:b8:b1:50:f5:8f:80:ba:a6:c7:fa:4e:b7:
fd:8f:68:4b:bf:fc:aa:48:2a:cf:7a:24:21:09:5b:
92:77:19:6b:64:0d:ce:4b:6e:ac:82:fd:02:ee:8a:
3d:61:d3:52:05:9a:31:40:78:ab:a6:e5:31:5b:f3:
f5:45:d1:dd:56:e2:4d:d1:b4:23:fd:d3:03:2e:fd:
4f:9c:b1:3a:03:d4:0b:f1:95:6b:a9:66:42:ae:ba:
7a:59:fd:a4:e0:b5:ba:c1:89:d8:0a:14:8f:4a:88:
1c:78:59:ff:55:27:44:1b:c3:87:6b:49:b8:e4:3d:
1c:06:32:e6:c8:1d:2a:41:2d:e5:b3:7a:46:cb:93:
ca:2f:c9:ed:b5:51:9e:0b:47:1f:25:a7:14:e2:a8:
9b:25:27:3a:58:51:1d:24:6e:88:f2:61:41:cc:8e:
40:67:2a:49:b3:66:21:80:d7:40:cd:e7:04:5c:2c:
cd:32:31:94:cf:30:d4:d4:29:8d:cf:5b:9a:87:ea:
74:84:72:a0:34:43:83:fb:50:c0:20:98:d6:e9:55:
42:7d:f4:fa:e7:27:16:aa:29:93:2d:03:3b:bc:a3:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:16:C7:05:A5:BB:17:94:4A:35:DA:6D:1A:79:5F:F6:EF:AA:23
X509v3 Authority Key Identifier:
keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/DQ4WxwWluxeUSjXabRp5X_bvqiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.224.0/20
185.20.84.0/22
IPv6:
2a00:1a60::/32
Signature Algorithm: sha256WithRSAEncryption
3a:f9:1e:05:29:55:cf:cb:1c:c3:bf:67:c4:04:4c:a7:73:ae:
64:c9:0b:89:b7:f4:c2:e6:d8:38:c2:d6:fe:cf:85:74:27:c9:
a5:8e:62:f5:33:eb:f8:50:30:95:02:29:05:be:a0:24:73:14:
f6:42:b8:04:55:a4:8d:fd:53:0c:d7:22:86:1a:62:ae:3c:3d:
e8:35:2d:76:5d:ca:30:a5:4b:01:37:47:ce:b7:57:bb:fe:48:
b6:06:10:e5:18:42:43:49:bb:85:b1:be:87:5e:21:5e:5a:35:
03:95:f2:e7:c6:07:7f:88:39:5f:ed:85:3a:fd:24:93:b0:4d:
ac:c4:f1:dd:e3:e5:28:90:db:ff:ab:79:2e:eb:b5:0a:15:20:
d6:b7:51:96:a7:fd:9b:40:df:28:39:0a:67:66:88:82:e9:83:
0b:6a:e0:82:47:f2:4f:2d:27:a0:2b:30:9a:05:cc:6d:52:e0:
ee:6f:f8:38:0b:e0:d9:83:17:51:b3:76:1c:89:bb:c3:f7:14:
7a:34:35:65:63:64:d7:87:62:6f:ea:6a:b7:76:b2:77:a9:d6:
7b:99:ba:c4:08:23:ac:89:d7:16:ce:4c:e8:72:16:84:47:81:
17:84:e0:f1:c9:1d:af:49:ee:14:a4:0f:1e:8f:03:2f:98:70:
a7:37:c2:d5
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVtU/leRy5YWexdSYXa/F+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MWVkNThlNDI2OTc1ZTI5OTg3NTg5N2NhZmY5NTUyNjQw
ZDljMDkwHhcNMjMwMTAxMTIzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDBlMTZjNzA1YTViYjE3OTQ0YTM1ZGE2ZDFhNzk1ZmY2ZWZhYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstL4hKhkcYrc1pdijFmCmZehXeYL
E7J4d9yWhiixAuO4sVD1j4C6psf6Trf9j2hLv/yqSCrPeiQhCVuSdxlrZA3OS26s
gv0C7oo9YdNSBZoxQHirpuUxW/P1RdHdVuJN0bQj/dMDLv1PnLE6A9QL8ZVrqWZC
rrp6Wf2k4LW6wYnYChSPSogceFn/VSdEG8OHa0m45D0cBjLmyB0qQS3ls3pGy5PK
L8nttVGeC0cfJacU4qibJSc6WFEdJG6I8mFBzI5AZypJs2YhgNdAzecEXCzNMjGU
zzDU1CmNz1uah+p0hHKgNEOD+1DAIJjW6VVCffT65ycWqimTLQM7vKNjAQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFA0OFscFpbsXlEo12m0aeV/276ojMB8GA1UdIwQY
MBaAFCQe1Y5CaXXimYdYl8r/lVJkDZwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkI3VmprSnBkZUtaaDFpWHl2LVZVbVFObkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mNWRjNjItYmU2OC00NjYzLTg0ZGUt
NTU0NWI4OTAxNDM4LzEvRFE0V3h3V2x1eGVVU2pYYWJScDVYX2J2cWlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mNWRjNjItYmU2OC00NjYzLTg0ZGUtNTU0NWI4OTAxNDM4
LzEvSkI3VmprSnBkZUtaaDFpWHl2LVZVbVFObkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUPfgAwQC
uRRUMA0EAgACMAcDBQAqABpgMA0GCSqGSIb3DQEBCwUAA4IBAQA6+R4FKVXPyxzD
v2fEBEync65kyQuJt/TC5tg4wtb+z4V0J8mljmL1M+v4UDCVAikFvqAkcxT2QrgE
VaSN/VMM1yKGGmKuPD3oNS12XcowpUsBN0fOt1e7/ki2BhDlGEJDSbuFsb6HXiFe
WjUDlfLnxgd/iDlf7YU6/SSTsE2sxPHd4+UokNv/q3ku67UKFSDWt1GWp/2bQN8o
OQpnZoiC6YMLauCCR/JPLSegKzCaBcxtUuDub/g4C+DZgxdRs3YcibvD9xR6NDVl
Y2TXh2Jv6mq3drJ3qdZ7mbrECCOsidcWzkzochaER4EXhODxyR2vSe4UpA8ejwMv
mHCnN8LV
-----END CERTIFICATE-----
Generated at Wed Apr 23 14:26:56 2025 by rpki-client