Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/m8w7zDm-LVDzKZxbBBEjJ127gO0.roa
File: m8w7zDm-LVDzKZxbBBEjJ127gO0.roa (raw, json)
Hash identifier: DaJe/mUid6WWTqKzDs4t6HMPK/2YE0AO5PF2RETriMI=
Subject key identifier: 9B:CC:3B:CC:39:BE:2D:50:F3:29:9C:5B:04:11:23:27:5D:BB:80:ED
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0184155D988EACC3BBB68244BCAB52DD6116
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/m8w7zDm-LVDzKZxbBBEjJ127gO0.roa
Signing time: Wed 26 Oct 2022 17:36:06 +0000
ROA not before: Wed 26 Oct 2022 17:36:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50352
IP address blocks: 185.94.82.0/24 maxlen: 24
185.94.80.0/23 maxlen: 23
193.42.157.0/24 maxlen: 24
194.50.52.0/24 maxlen: 24
2a05:bf81::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:5d:98:8e:ac:c3:bb:b6:82:44:bc:ab:52:dd:61:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Oct 26 17:36:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bcc3bcc39be2d50f3299c5b041123275dbb80ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:c3:95:83:0b:00:93:e7:20:65:3a:ba:78:
b7:d5:a3:e9:cf:31:26:ad:3d:37:94:98:ba:85:43:
8b:9d:4f:5a:1b:0f:d9:e2:e7:41:64:fb:f6:6c:84:
af:63:cb:fb:2b:b5:3e:cc:d6:c5:2d:1f:ea:db:72:
7c:fd:e1:82:79:95:2e:76:fc:20:02:66:d3:1b:8b:
23:e5:db:c0:57:8b:05:4a:b8:3e:3a:14:2b:2a:40:
db:8c:b6:67:98:47:2b:b1:84:1a:0a:c1:75:e4:30:
67:4c:3e:b5:c8:d2:6b:19:60:35:9e:ac:da:aa:88:
c3:87:96:bf:b5:8b:28:f1:50:fc:08:d5:85:93:2d:
9f:6e:ea:40:16:5a:ff:91:3f:fa:78:d3:10:fd:eb:
88:5d:16:63:cf:ce:3d:e5:9f:df:79:1a:b2:a0:33:
e9:87:a7:bd:a0:fe:cf:b5:31:38:65:56:a5:c2:aa:
98:81:fc:d1:6e:a9:00:57:d7:4e:66:38:f8:b5:71:
82:bf:b6:46:5d:96:51:d0:6f:4b:a7:27:dc:6e:c8:
81:55:b8:1f:89:d3:0b:08:2f:96:cd:a8:bd:c7:e7:
b6:6b:a2:78:dd:a9:89:d5:64:fe:ef:5c:56:b4:15:
25:cf:82:d5:36:c9:c4:4b:0e:8e:0d:c6:61:6f:7d:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:3B:CC:39:BE:2D:50:F3:29:9C:5B:04:11:23:27:5D:BB:80:ED
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/m8w7zDm-LVDzKZxbBBEjJ127gO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.80.0-185.94.82.255
193.42.157.0/24
194.50.52.0/24
IPv6:
2a05:bf81::/32
Signature Algorithm: sha256WithRSAEncryption
4b:19:4c:87:e3:9e:fd:69:be:d9:15:7d:e9:c8:c3:6b:05:aa:
22:fc:25:30:ce:ae:61:0d:64:84:f6:e9:80:4b:c1:f6:3d:65:
f9:b2:7f:bd:95:20:ca:95:69:b5:07:a7:5e:f4:08:41:96:b9:
bc:e3:81:fd:ad:a5:be:2f:15:22:29:3e:58:68:23:fd:06:d6:
01:8b:c5:e9:4e:fe:d1:93:f7:b1:f4:d1:98:f4:34:5c:09:f7:
ba:66:d1:d0:91:25:bd:dc:91:26:11:63:5b:99:a3:98:6a:16:
ba:d6:c3:7a:ec:15:5f:88:1e:e5:65:96:14:c6:02:f7:fb:c8:
dc:38:b7:d0:46:b0:87:4b:93:86:d8:73:54:20:f6:19:3a:c8:
d7:99:30:93:59:5a:da:88:0a:97:32:59:82:da:d9:9d:26:35:
6c:55:c9:b4:e1:4c:f5:e8:fa:56:11:08:58:49:3c:ac:d8:27:
d9:b2:7e:8b:28:08:05:48:ef:65:50:bf:5e:75:98:dc:03:88:
15:93:b1:9a:a4:4f:44:65:c6:46:d1:e7:d6:b0:1c:73:e9:07:
c4:86:4f:64:c6:53:d1:c6:fb:78:6f:b1:d7:ff:3c:27:63:75:
c0:c8:7c:98:b5:62:02:44:c3:eb:27:6f:f2:10:ed:4b:75:a1:
7d:d0:7f:f7
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYQVXZiOrMO7toJEvKtS3WEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3
MDM4MTUwHhcNMjIxMDI2MTczNjA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmNjM2JjYzM5YmUyZDUwZjMyOTljNWIwNDExMjMyNzVkYmI4MGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUXDlYMLAJPnIGU6uni31aPpzzEm
rT03lJi6hUOLnU9aGw/Z4udBZPv2bISvY8v7K7U+zNbFLR/q23J8/eGCeZUudvwg
AmbTG4sj5dvAV4sFSrg+OhQrKkDbjLZnmEcrsYQaCsF15DBnTD61yNJrGWA1nqza
qojDh5a/tYso8VD8CNWFky2fbupAFlr/kT/6eNMQ/euIXRZjz8495Z/feRqyoDPp
h6e9oP7PtTE4ZValwqqYgfzRbqkAV9dOZjj4tXGCv7ZGXZZR0G9LpyfcbsiBVbgf
idMLCC+Wzai9x+e2a6J43amJ1WT+71xWtBUlz4LVNsnESw6ODcZhb33m9wIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFJvMO8w5vi1Q8ymcWwQRIyddu4DtMB8GA1UdIwQY
MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt
MzAxODlhNWE0ZWJhLzEvbTh3N3pEbS1MVkR6S1p4YkJCRWpKMTI3Z08wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh
LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAS5XlAD
BAC5XlIDBADBKp0DBADCMjQwDQQCAAIwBwMFACoFv4EwDQYJKoZIhvcNAQELBQAD
ggEBAEsZTIfjnv1pvtkVfenIw2sFqiL8JTDOrmENZIT26YBLwfY9Zfmyf72VIMqV
abUHp170CEGWubzjgf2tpb4vFSIpPlhoI/0G1gGLxelO/tGT97H00Zj0NFwJ97pm
0dCRJb3ckSYRY1uZo5hqFrrWw3rsFV+IHuVllhTGAvf7yNw4t9BGsIdLk4bYc1Qg
9hk6yNeZMJNZWtqICpcyWYLa2Z0mNWxVybThTPXo+lYRCFhJPKzYJ9myfosoCAVI
72VQv151mNwDiBWTsZqkT0RlxkbR59awHHPpB8SGT2TGU9HG+3hvsdf/PCdjdcDI
fJi1YgJEw+snb/IQ7Ut1oX3Qf/c=
-----END CERTIFICATE-----
Generated at Sun Apr 13 22:09:50 2025 by rpki-client