Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/bhOpU0auD0QUjOcppSLmBjt9Lgg.roa
File: bhOpU0auD0QUjOcppSLmBjt9Lgg.roa (raw, json)
Hash identifier: 89kzwGdHYJM99YvYhFh1YrdVgH6sYMqRA5QHp8lOciQ=
Subject key identifier: 6E:13:A9:53:46:AE:0F:44:14:8C:E7:29:A5:22:E6:06:3B:7D:2E:08
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 018C06149616F172EEA534E216005DAFAD1B
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/bhOpU0auD0QUjOcppSLmBjt9Lgg.roa
Signing time: Sat 25 Nov 2023 10:44:21 +0000
ROA not before: Sat 25 Nov 2023 10:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203847
IP address blocks: 185.206.52.0/23 maxlen: 23
185.206.52.0/24 maxlen: 24
185.206.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:06:14:96:16:f1:72:ee:a5:34:e2:16:00:5d:af:ad:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Nov 25 10:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e13a95346ae0f44148ce729a522e6063b7d2e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:65:9b:a0:6f:69:00:b6:46:e5:44:72:07:
b4:df:1a:d3:67:98:3a:1f:60:4a:98:dd:55:93:28:
56:cc:98:ff:f9:af:b1:66:c0:bb:98:4e:2b:4e:81:
fe:48:a2:50:03:5d:20:d4:62:97:35:23:b4:5b:31:
34:9e:02:b3:22:35:b6:64:18:44:22:47:a5:7f:b3:
7f:0b:ee:23:de:dc:6a:1d:6d:b3:05:5d:d6:a7:74:
2e:41:9b:b7:4b:98:44:1f:d8:71:3d:5b:06:7d:60:
e3:cf:a7:f1:6e:28:3e:e5:23:56:0d:e0:60:08:1d:
ae:c9:5f:15:10:04:cf:0a:d4:40:be:08:48:96:8e:
5d:50:69:69:cc:cf:c2:fc:a9:dc:8a:a6:85:d4:29:
e5:a8:df:f7:75:a5:34:f5:ce:ed:62:69:81:e8:c8:
a4:fb:d1:7d:33:c3:41:b4:25:46:e8:8f:0c:a1:fc:
1f:00:5c:1a:d3:c1:43:22:ff:2c:d2:16:18:05:f3:
8f:e0:9c:bc:94:7f:93:15:63:8d:4b:72:5c:40:f0:
b6:d7:a2:9a:0f:54:e7:9e:c9:7e:93:78:76:76:eb:
9c:f6:8d:4b:84:4c:e3:4e:e9:80:69:61:46:56:98:
10:2d:98:15:95:4d:c3:46:3e:7a:63:78:e0:c8:9d:
f9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:13:A9:53:46:AE:0F:44:14:8C:E7:29:A5:22:E6:06:3B:7D:2E:08
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/bhOpU0auD0QUjOcppSLmBjt9Lgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.52.0/23
Signature Algorithm: sha256WithRSAEncryption
61:bb:60:85:b5:5c:3a:52:f9:09:ee:29:98:22:a7:7f:bb:72:
20:6a:10:ba:70:7b:a1:a8:87:d4:f3:e4:31:b3:49:42:a4:0d:
af:ea:74:1f:98:95:93:4b:11:c5:1b:17:b7:93:c5:9e:85:88:
6d:a7:2e:de:36:49:0f:01:bd:48:ee:0d:e8:bc:df:da:59:6b:
78:93:6d:4a:3f:9b:bc:08:91:c7:4b:82:ef:87:9e:3a:fb:68:
e5:22:84:74:90:2b:23:11:29:81:4b:d8:78:d5:3f:53:31:14:
3a:e7:b9:4b:f3:77:e9:48:e6:1f:63:99:87:9a:8a:1b:02:29:
67:09:fa:b7:8c:70:c5:8b:fb:26:42:ed:60:37:ee:6a:bb:ec:
07:d5:4a:13:9c:dc:34:60:52:5b:20:34:a1:0a:be:fd:21:8d:
64:6c:cc:ce:b3:6d:1b:ea:e3:02:50:df:86:80:a6:de:82:b7:
79:b0:0e:02:72:95:0b:22:c1:79:9e:ff:08:2b:e8:40:6a:6b:
cf:c6:f1:9a:5a:09:b8:2f:f3:8a:08:bb:f7:b4:df:d1:12:eb:
ea:e6:54:90:ff:dd:a4:da:81:bd:9b:bb:02:ce:3f:71:d6:30:
bf:e3:d9:be:53:d7:7e:c4:cd:5a:40:aa:71:44:05:00:57:ee:
dc:56:0c:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwGFJYW8XLupTTiFgBdr60bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjMxMTI1MTA0NDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTEzYTk1MzQ2YWUwZjQ0MTQ4Y2U3MjlhNTIyZTYwNjNiN2QyZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozJlm6BvaQC2RuVEcge03xrTZ5g6
H2BKmN1VkyhWzJj/+a+xZsC7mE4rToH+SKJQA10g1GKXNSO0WzE0ngKzIjW2ZBhE
Ikelf7N/C+4j3txqHW2zBV3Wp3QuQZu3S5hEH9hxPVsGfWDjz6fxbig+5SNWDeBg
CB2uyV8VEATPCtRAvghIlo5dUGlpzM/C/KnciqaF1CnlqN/3daU09c7tYmmB6Mik
+9F9M8NBtCVG6I8MofwfAFwa08FDIv8s0hYYBfOP4Jy8lH+TFWONS3JcQPC216Ka
D1Tnnsl+k3h2duuc9o1LhEzjTumAaWFGVpgQLZgVlU3DRj56Y3jgyJ35SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4TqVNGrg9EFIznKaUi5gY7fS4IMB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvYmhPcFUwYXVEMFFVak9jcHBTTG1CanQ5TGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuc40MA0G
CSqGSIb3DQEBCwUAA4IBAQBhu2CFtVw6UvkJ7imYIqd/u3IgahC6cHuhqIfU8+Qx
s0lCpA2v6nQfmJWTSxHFGxe3k8WehYhtpy7eNkkPAb1I7g3ovN/aWWt4k21KP5u8
CJHHS4Lvh546+2jlIoR0kCsjESmBS9h41T9TMRQ657lL83fpSOYfY5mHmoobAiln
Cfq3jHDFi/smQu1gN+5qu+wH1UoTnNw0YFJbIDShCr79IY1kbMzOs20b6uMCUN+G
gKbegrd5sA4CcpULIsF5nv8IK+hAamvPxvGaWgm4L/OKCLv3tN/REuvq5lSQ/92k
2oG9m7sCzj9x1jC/49m+U9d+xM1aQKpxRAUAV+7cVgzf
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:12 2025 by rpki-client