Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/g7GbK93mu3wrT9uyV5W9hli3UfA.roa
File: g7GbK93mu3wrT9uyV5W9hli3UfA.roa (raw, json)
Hash identifier: NFGvLKTLqJ7Z8BccL7WYDt0CjnMh8Y0PtR3UIRtuD/4=
Subject key identifier: 83:B1:9B:2B:DD:E6:BB:7C:2B:4F:DB:B2:57:95:BD:86:58:B7:51:F0
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: AF06BF
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/g7GbK93mu3wrT9uyV5W9hli3UfA.roa
Signing time: Sat 01 Jan 2022 02:57:04 +0000
ROA not before: Sat 01 Jan 2022 02:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60372
IP address blocks: 185.156.214.0/24 maxlen: 24
185.156.215.0/24 maxlen: 24
185.4.252.0/24 maxlen: 24
185.4.253.0/24 maxlen: 24
185.4.254.0/24 maxlen: 24
185.4.255.0/24 maxlen: 24
185.156.212.0/24 maxlen: 24
185.156.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11470527 (0xaf06bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Jan 1 02:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83b19b2bdde6bb7c2b4fdbb25795bd8658b751f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:09:16:db:58:ac:79:3c:09:06:b8:cb:f8:
01:b0:f7:c6:31:71:3c:ce:1d:e7:12:30:83:a5:c9:
a0:14:2e:a6:80:94:a1:72:47:96:66:8e:43:b9:e0:
a9:86:ad:e4:25:d5:66:72:dc:52:7b:50:83:02:d7:
5c:f1:83:fc:55:87:b1:a6:33:14:78:a0:b2:f6:83:
4e:89:12:16:ce:83:98:36:ab:81:4f:c8:5d:dc:c6:
36:93:29:06:aa:de:96:af:60:aa:19:b6:06:f9:5a:
78:b5:19:01:80:06:c0:c1:c2:c2:ff:6a:dc:00:92:
6f:89:63:b6:79:cb:3a:6b:5e:0d:ed:af:58:28:4a:
59:9f:8b:7c:04:26:49:5c:b6:10:b6:ea:f9:12:db:
89:95:13:04:c2:21:49:4f:b0:9c:a0:58:a3:4f:a8:
40:55:32:c2:98:87:b8:c2:01:fb:3d:07:db:06:a1:
0a:09:60:5a:78:98:5a:2c:17:09:15:e9:ca:c1:c8:
2b:bb:e9:2b:ff:91:e0:b1:4c:73:fd:35:c9:0e:ae:
b5:37:e3:37:a5:5c:c7:2d:a4:75:2b:d0:28:59:69:
ab:ae:2b:2a:c6:d2:05:ae:18:ad:25:c1:26:e6:1d:
6e:e2:18:bf:21:f4:db:e0:58:c5:8e:5e:03:7b:ab:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:9B:2B:DD:E6:BB:7C:2B:4F:DB:B2:57:95:BD:86:58:B7:51:F0
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/g7GbK93mu3wrT9uyV5W9hli3UfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.252.0/22
185.156.212.0/22
Signature Algorithm: sha256WithRSAEncryption
98:f2:9d:4a:69:dd:9d:8c:07:8a:cb:f3:41:5a:5d:2a:14:58:
16:e9:bb:22:f8:71:55:a6:57:3a:70:20:f9:08:21:6c:36:23:
3c:22:4c:3f:25:94:9e:e0:50:66:52:88:e8:a0:81:2e:5e:65:
64:6d:d4:dd:4e:d7:a6:9c:5f:b5:49:84:1e:17:07:ba:bc:0e:
ef:9a:7b:6b:30:9c:08:35:0c:b5:c0:21:7b:43:1a:56:53:f9:
07:77:4e:3d:f7:6a:4b:28:6c:05:c2:3f:70:81:ee:8d:89:27:
61:fe:db:6f:6d:20:2e:f7:a7:64:59:e1:e0:eb:c3:dd:f8:e1:
ed:b0:64:42:5b:63:07:c5:fc:71:4a:a0:bc:b7:ee:59:5b:d2:
ff:00:10:73:45:f6:17:e8:6d:50:71:95:a8:55:b2:7f:17:72:
1c:21:2d:29:9b:88:bb:51:ae:48:3d:fa:47:db:d6:0c:e5:ad:
21:5c:d0:6c:6e:e2:da:fc:c2:48:7f:fe:ca:1b:1e:ea:92:71:
c6:23:6d:ea:50:97:b8:9f:00:1c:9f:dd:23:21:bf:14:d5:69:
0c:12:ad:aa:35:e7:a4:e4:b0:f3:9e:14:e5:d9:f9:a0:49:52:
35:c6:23:fc:85:be:b1:31:ea:7c:b4:a2:48:74:28:5c:eb:1f:
14:27:f8:8a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAK8GvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YjEwMjQzZjk4NjM2ZmFhMGZiNmM1YWU2YmFkOWIwYWJhZDIzNDM4MB4XDTIyMDEw
MTAyNTcwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODNiMTliMmJkZGU2
YmI3YzJiNGZkYmIyNTc5NWJkODY1OGI3NTFmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALbiCRbbWKx5PAkGuMv4AbD3xjFxPM4d5xIwg6XJoBQupoCU
oXJHlmaOQ7ngqYat5CXVZnLcUntQgwLXXPGD/FWHsaYzFHigsvaDTokSFs6DmDar
gU/IXdzGNpMpBqrelq9gqhm2BvlaeLUZAYAGwMHCwv9q3ACSb4ljtnnLOmteDe2v
WChKWZ+LfAQmSVy2ELbq+RLbiZUTBMIhSU+wnKBYo0+oQFUywpiHuMIB+z0H2wah
CglgWniYWiwXCRXpysHIK7vpK/+R4LFMc/01yQ6utTfjN6Vcxy2kdSvQKFlpq64r
KsbSBa4YrSXBJuYdbuIYvyH02+BYxY5eA3urnA0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSDsZsr3ea7fCtP27JXlb2GWLdR8DAfBgNVHSMEGDAWgBTLECQ/mGNvqg+2
xa5rrZsKutI0ODAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3l4QWtQNWhqYjZvUHRzV3VhNjJiQ3JyU05EZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvZjhlYjljLTViOTktNGNlZi05M2YwLTQ4ZjE1MWI1MjMxZi8x
L2c3R2JLOTNtdTN3clQ5dXlWNVc5aGxpM1VmQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
ZjhlYjljLTViOTktNGNlZi05M2YwLTQ4ZjE1MWI1MjMxZi8xL3l4QWtQNWhqYjZv
UHRzV3VhNjJiQ3JyU05EZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArkE/AMEArmc1DANBgkqhkiG9w0B
AQsFAAOCAQEAmPKdSmndnYwHisvzQVpdKhRYFum7IvhxVaZXOnAg+QghbDYjPCJM
PyWUnuBQZlKI6KCBLl5lZG3U3U7XppxftUmEHhcHurwO75p7azCcCDUMtcAhe0Ma
VlP5B3dOPfdqSyhsBcI/cIHujYknYf7bb20gLvenZFnh4OvD3fjh7bBkQltjB8X8
cUqgvLfuWVvS/wAQc0X2F+htUHGVqFWyfxdyHCEtKZuIu1GuSD36R9vWDOWtIVzQ
bG7i2vzCSH/+yhse6pJxxiNt6lCXuJ8AHJ/dIyG/FNVpDBKtqjXnpOSw854U5dn5
oElSNcYj/IW+sTHqfLSiSHQoXOsfFCf4ig==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:13 2025 by rpki-client