Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/CBhgAGWSBuNg1FCPGPchUaTGvYs.roa
File: CBhgAGWSBuNg1FCPGPchUaTGvYs.roa (raw, json)
Hash identifier: 34MTnY6W1sRgAhQ6/LdPEotf5HUCFrjAuXOttDj2TYQ=
Subject key identifier: 08:18:60:00:65:92:06:E3:60:D4:50:8F:18:F7:21:51:A4:C6:BD:8B
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 01856F0B6390359A6A9A3803644B6DA41C5D
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/CBhgAGWSBuNg1FCPGPchUaTGvYs.roa
Signing time: Sun 01 Jan 2023 20:34:55 +0000
ROA not before: Sun 01 Jan 2023 20:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41678
IP address blocks: 185.4.12.0/24 maxlen: 24
185.4.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:63:90:35:9a:6a:9a:38:03:64:4b:6d:a4:1c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Jan 1 20:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08186000659206e360d4508f18f72151a4c6bd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:4e:49:2d:29:2b:17:eb:66:5f:9b:4a:ce:
16:39:35:a4:d0:3a:24:cf:7f:67:97:36:d9:3e:08:
f0:ce:2c:b6:a4:fa:a7:64:43:a5:32:76:8b:8b:71:
f3:23:c6:9a:9e:84:a7:a3:04:2d:77:1b:38:69:da:
a6:6c:1f:d5:0e:04:44:f1:f1:d0:6d:df:05:55:e7:
83:ce:98:8e:84:f6:7e:7d:03:82:d9:d3:07:17:12:
e6:de:1b:17:72:88:d4:9e:c3:3a:65:0a:79:44:fe:
54:84:f1:4e:e7:4a:aa:33:1e:23:ca:b0:79:93:c2:
0c:92:21:dc:74:f6:ab:d8:22:c2:8c:08:87:fc:a8:
3a:8f:40:ea:68:6a:ad:31:b1:56:3a:d1:e9:e8:aa:
6e:7a:60:00:23:58:2e:3e:ad:9b:0a:3e:80:1a:c6:
9c:71:4f:77:bf:2b:fa:79:fd:2d:ee:75:4e:97:66:
02:33:4b:8b:5b:ce:93:bc:c0:87:90:8a:a3:1d:08:
ab:2f:8d:a3:c1:5e:ce:70:8b:32:23:b7:47:07:5f:
04:d6:40:9e:33:ac:b8:fe:22:29:15:a5:a2:05:5f:
29:dd:26:39:0a:a6:91:a5:3e:24:89:96:f7:09:cd:
c1:5e:8b:41:2e:65:c3:54:13:5f:3d:36:b0:34:6d:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:60:00:65:92:06:E3:60:D4:50:8F:18:F7:21:51:A4:C6:BD:8B
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/CBhgAGWSBuNg1FCPGPchUaTGvYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.12.0/23
Signature Algorithm: sha256WithRSAEncryption
02:8e:f4:a7:e8:15:6a:0d:ad:4f:09:41:0d:fb:0c:a2:99:b2:
1b:38:4e:2d:60:27:ba:6c:c4:8f:34:eb:f4:d3:29:cc:e6:ec:
af:43:82:10:87:c5:1d:86:0e:53:d4:a4:c1:9d:54:89:b2:7e:
0f:77:91:60:00:95:8f:51:45:db:45:33:3a:44:d0:92:95:3e:
d2:80:b6:c2:48:36:25:d9:b1:8e:14:ad:a1:25:26:52:6e:fd:
fe:e6:db:a9:00:20:44:92:f7:7c:8f:18:dd:72:30:a8:73:ec:
c5:63:a6:37:e8:78:69:15:c9:e2:d9:97:93:f2:8d:51:12:23:
45:47:0a:63:9a:22:5c:5d:d8:9b:b3:8a:8f:5d:30:23:3a:9f:
6d:d3:a5:0e:21:9a:ac:b7:aa:67:28:59:43:55:97:8b:7f:ca:
4b:ad:15:81:cb:98:6c:a9:75:ad:5f:2c:fa:16:94:e4:7d:20:
95:28:ed:23:df:fe:db:09:8d:61:4b:cd:4a:23:0a:0f:38:23:
38:d3:fc:1d:77:50:6b:38:d9:82:63:b5:63:d7:f5:03:ec:da:
6b:91:81:b8:53:34:84:37:8f:72:89:90:a5:c3:63:b8:17:c6:
0b:3e:65:d3:25:92:7f:ca:23:23:d6:82:bd:67:15:0c:4f:77:
7c:0b:fb:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvC2OQNZpqmjgDZEttpBxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNjFkZjcxZjk3NDYxYzZiM2I0NTQ4ZmRjZmVjZDc3YjY3
OTAzMGYwHhcNMjMwMTAxMjAzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODE4NjAwMDY1OTIwNmUzNjBkNDUwOGYxOGY3MjE1MWE0YzZiZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWZOSS0pKxfrZl+bSs4WOTWk0Dok
z39nlzbZPgjwziy2pPqnZEOlMnaLi3HzI8aanoSnowQtdxs4adqmbB/VDgRE8fHQ
bd8FVeeDzpiOhPZ+fQOC2dMHFxLm3hsXcojUnsM6ZQp5RP5UhPFO50qqMx4jyrB5
k8IMkiHcdPar2CLCjAiH/Kg6j0DqaGqtMbFWOtHp6KpuemAAI1guPq2bCj6AGsac
cU93vyv6ef0t7nVOl2YCM0uLW86TvMCHkIqjHQirL42jwV7OcIsyI7dHB18E1kCe
M6y4/iIpFaWiBV8p3SY5CqaRpT4kiZb3Cc3BXotBLmXDVBNfPTawNG1MvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAgYYABlkgbjYNRQjxj3IVGkxr2LMB8GA1UdIwQY
MBaAFLth33H5dGHGs7RUj9z+zXe2eQMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTJIZmNmbDBZY2F6dEZTUDNQN05kN1o1QXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mNTJjZWEtM2Y0MS00ODJiLThjZTgt
MmUyNTQ4MzEwZGYzLzEvQ0JoZ0FHV1NCdU5nMUZDUEdQY2hVYVRHdllzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mNTJjZWEtM2Y0MS00ODJiLThjZTgtMmUyNTQ4MzEwZGYz
LzEvdTJIZmNmbDBZY2F6dEZTUDNQN05kN1o1QXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQQMMA0G
CSqGSIb3DQEBCwUAA4IBAQACjvSn6BVqDa1PCUEN+wyimbIbOE4tYCe6bMSPNOv0
0ynM5uyvQ4IQh8Udhg5T1KTBnVSJsn4Pd5FgAJWPUUXbRTM6RNCSlT7SgLbCSDYl
2bGOFK2hJSZSbv3+5tupACBEkvd8jxjdcjCoc+zFY6Y36HhpFcni2ZeT8o1REiNF
RwpjmiJcXdibs4qPXTAjOp9t06UOIZqst6pnKFlDVZeLf8pLrRWBy5hsqXWtXyz6
FpTkfSCVKO0j3/7bCY1hS81KIwoPOCM40/wdd1BrONmCY7Vj1/UD7NprkYG4UzSE
N49yiZClw2O4F8YLPmXTJZJ/yiMj1oK9ZxUMT3d8C/t1
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:43 2025 by rpki-client