Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/qB6aK1oO2H-K6xZpptR9YhbgTg8.roa
File: qB6aK1oO2H-K6xZpptR9YhbgTg8.roa (raw, json)
Hash identifier: hoKuZCVWGTWLVJmLK6xzw1xe8ZV8Mpuw3mGd2EP2QWI=
Subject key identifier: A8:1E:9A:2B:5A:0E:D8:7F:8A:EB:16:69:A6:D4:7D:62:16:E0:4E:0F
Certificate issuer: /CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Certificate serial: 018571D7AAD8FB9D4596FF28ECDB6F993D2D
Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/qB6aK1oO2H-K6xZpptR9YhbgTg8.roa
Signing time: Mon 02 Jan 2023 09:37:17 +0000
ROA not before: Mon 02 Jan 2023 09:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49879
IP address blocks: 185.21.204.0/22 maxlen: 22
217.116.192.0/21 maxlen: 21
217.116.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:aa:d8:fb:9d:45:96:ff:28:ec:db:6f:99:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Validity
Not Before: Jan 2 09:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a81e9a2b5a0ed87f8aeb1669a6d47d6216e04e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:d1:1d:2e:b2:41:93:79:14:41:b4:6d:88:
ab:cd:9b:0d:b6:a1:38:ef:58:1a:14:4b:0d:05:0f:
a2:1f:06:e1:28:9e:6a:fc:98:a0:b5:ea:47:3c:a6:
db:c9:27:f8:fa:32:b0:84:94:79:b1:1f:c7:30:f8:
85:05:d2:73:ea:89:59:07:40:63:09:8a:78:2d:bc:
26:b6:11:fe:38:72:06:41:cf:1b:77:fd:ec:75:a4:
cc:3c:8d:ee:3d:fe:ff:da:80:18:6a:06:07:e4:3e:
2c:de:84:c3:3d:35:75:91:dc:f4:f2:4b:86:08:3b:
8d:26:10:dc:f0:34:77:07:ef:27:7f:f3:49:87:a0:
82:45:53:7b:d3:42:9f:f6:d2:f7:32:d1:6b:3f:c7:
08:a3:e4:32:c0:2c:d9:d2:70:6d:6f:69:f2:6b:9a:
65:6f:ab:7a:76:62:b9:d5:0b:41:fe:59:e9:20:57:
7c:f2:da:d8:92:7b:dc:09:fa:4f:85:93:46:00:d4:
fd:61:1c:64:65:4c:a9:88:a4:78:36:9f:51:0f:80:
fc:ec:ae:8f:29:c3:df:d9:dc:cb:c8:42:01:02:11:
3e:53:a9:d9:52:2f:15:37:89:0d:55:26:29:30:7e:
21:42:40:4c:f6:00:2b:fb:6a:0a:d9:51:81:db:6e:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1E:9A:2B:5A:0E:D8:7F:8A:EB:16:69:A6:D4:7D:62:16:E0:4E:0F
X509v3 Authority Key Identifier:
keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/qB6aK1oO2H-K6xZpptR9YhbgTg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.204.0/22
217.116.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:1b:3a:e9:3b:cb:12:26:d8:3b:79:10:cb:9d:ec:75:b8:ae:
00:9f:5d:38:a9:22:a0:59:0c:6e:cf:05:c7:01:fc:3b:66:55:
bb:73:f5:ab:a7:bf:6b:c7:9a:6e:bf:07:88:94:7a:8d:09:83:
e3:28:64:26:f6:64:f6:43:e7:6c:2c:2e:67:ca:55:cb:bf:5c:
d7:d2:e6:71:58:49:05:cf:af:81:ff:cf:09:00:d3:7f:0b:67:
7e:ad:a1:d9:b6:82:98:c1:46:cb:76:29:59:e5:58:93:a8:cc:
7b:55:7d:31:25:bf:65:94:0b:96:d8:e4:10:45:c1:bc:2e:3c:
c1:49:2f:3e:4e:d5:ad:a9:fe:ca:69:a5:48:94:6f:fe:3c:51:
2a:c2:05:c5:ec:8b:cf:ef:f1:5b:12:31:b3:30:47:db:ba:28:
35:46:79:06:7d:e3:f7:2e:c6:67:89:34:f7:80:e7:c7:ae:db:
79:54:92:a0:94:be:55:b6:f3:38:06:ac:76:8e:17:bd:a3:75:
22:32:ed:13:b6:31:4a:45:2f:fb:95:8b:f7:df:4c:d0:62:7c:
21:a0:fe:44:30:76:45:1e:e3:f2:19:b4:80:5a:b5:76:ef:8c:
3b:34:58:18:e0:97:30:40:9c:5a:2e:7b:0d:23:c3:2b:ba:b0:
6b:1f:a0:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVx16rY+51Flv8o7NtvmT0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmJlZTRhOTY4ZGYwZmFjNDc1MWI0ZjQ5MDI3ZmEwOTVj
NjUyNzcwHhcNMjMwMTAyMDkzNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODFlOWEyYjVhMGVkODdmOGFlYjE2NjlhNmQ0N2Q2MjE2ZTA0ZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T/RHS6yQZN5FEG0bYirzZsNtqE4
71gaFEsNBQ+iHwbhKJ5q/JigtepHPKbbySf4+jKwhJR5sR/HMPiFBdJz6olZB0Bj
CYp4LbwmthH+OHIGQc8bd/3sdaTMPI3uPf7/2oAYagYH5D4s3oTDPTV1kdz08kuG
CDuNJhDc8DR3B+8nf/NJh6CCRVN700Kf9tL3MtFrP8cIo+QywCzZ0nBtb2nya5pl
b6t6dmK51QtB/lnpIFd88trYknvcCfpPhZNGANT9YRxkZUypiKR4Np9RD4D87K6P
KcPf2dzLyEIBAhE+U6nZUi8VN4kNVSYpMH4hQkBM9gAr+2oK2VGB227VWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKgemitaDth/iusWaabUfWIW4E4PMB8GA1UdIwQY
MBaAFLv77kqWjfD6xHUbT0kCf6CVxlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jZDA4MWUtODljMi00MzA5LTk0OTAt
MGE4OWM2OTk2ZmVmLzEvcUI2YUsxb08ySC1LNnhacHB0UjlZaGJnVGc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jZDA4MWUtODljMi00MzA5LTk0OTAtMGE4OWM2OTk2ZmVm
LzEvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuRXMAwQE
2XTAMA0GCSqGSIb3DQEBCwUAA4IBAQAsGzrpO8sSJtg7eRDLnex1uK4An104qSKg
WQxuzwXHAfw7ZlW7c/Wrp79rx5puvweIlHqNCYPjKGQm9mT2Q+dsLC5nylXLv1zX
0uZxWEkFz6+B/88JANN/C2d+raHZtoKYwUbLdilZ5ViTqMx7VX0xJb9llAuW2OQQ
RcG8LjzBSS8+TtWtqf7KaaVIlG/+PFEqwgXF7IvP7/FbEjGzMEfbuig1RnkGfeP3
LsZniTT3gOfHrtt5VJKglL5VtvM4Bqx2jhe9o3UiMu0TtjFKRS/7lYv330zQYnwh
oP5EMHZFHuPyGbSAWrV274w7NFgY4JcwQJxaLnsNI8MrurBrH6Bi
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:48:04 2025 by rpki-client