Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/ECQmf1WZYs9vEo-WozxQd20gcbY.roa
File: ECQmf1WZYs9vEo-WozxQd20gcbY.roa (raw, json)
Hash identifier: UtCQOI2WNmGIOY929fWNPUKUt9fjDUUK1oSxN5y3zw0=
Subject key identifier: 10:24:26:7F:55:99:62:CF:6F:12:8F:96:A3:3C:50:77:6D:20:71:B6
Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Certificate serial: 01856C9388A12E61F3294CFA31D3A4395DB6
Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/ECQmf1WZYs9vEo-WozxQd20gcbY.roa
Signing time: Sun 01 Jan 2023 09:04:46 +0000
ROA not before: Sun 01 Jan 2023 09:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206280
IP address blocks: 185.190.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:88:a1:2e:61:f3:29:4c:fa:31:d3:a4:39:5d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Validity
Not Before: Jan 1 09:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1024267f559962cf6f128f96a33c50776d2071b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:a4:c3:14:dd:ff:45:e0:2c:b8:0b:5d:8d:
c6:2d:da:1c:f7:38:c8:0c:df:c0:c5:96:35:c4:da:
00:74:c9:28:c7:6d:af:d3:dc:32:6f:33:10:3d:8a:
38:93:20:5c:71:14:7a:62:c2:ce:17:23:ab:c4:a0:
b5:f6:cc:0f:5a:0d:d6:fe:8e:e2:ba:ef:cb:67:38:
fa:42:4c:65:14:c3:73:3f:9d:a5:68:82:00:38:bd:
df:63:d2:63:c4:17:98:9a:87:52:6b:d1:2e:95:7b:
e3:a4:53:96:a0:79:1e:1a:83:4e:46:91:b3:22:81:
81:3c:78:f3:5d:e2:cb:36:51:18:b9:16:62:2b:54:
af:cd:75:68:4c:e4:9b:bb:be:46:25:cc:94:9c:7b:
e7:23:50:cc:77:00:17:e0:2c:5e:82:d8:34:76:07:
43:da:41:03:64:51:16:87:37:1f:74:24:17:07:79:
d1:e3:78:cb:b2:6b:43:72:6c:1b:91:4b:e9:71:a2:
bf:f4:10:c2:8c:6e:d6:ea:15:56:b5:82:aa:52:9f:
9b:fd:5c:1e:e5:97:06:19:9f:4a:c0:f1:4c:6a:7d:
54:d3:81:39:15:19:df:f2:87:07:fe:80:ce:28:92:
70:32:eb:cd:b1:65:12:19:f3:cc:85:40:19:86:cf:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:24:26:7F:55:99:62:CF:6F:12:8F:96:A3:3C:50:77:6D:20:71:B6
X509v3 Authority Key Identifier:
keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/ECQmf1WZYs9vEo-WozxQd20gcbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:8c:bc:ae:10:2d:fb:5c:68:15:d6:be:8e:2e:e4:a2:56:32:
e7:ee:ef:7a:b7:33:8b:c4:76:85:cd:ab:88:67:8a:3f:35:92:
45:0d:fe:c7:f0:fc:a0:64:32:ee:78:a3:a0:7f:ba:51:6c:77:
6c:cb:dd:18:1d:2d:d9:15:71:43:ef:d4:df:e3:59:67:67:8e:
bc:9b:e1:63:7c:80:b0:43:30:36:b3:27:96:60:f1:af:c0:5a:
02:75:19:7c:f8:ac:3f:20:9b:6d:fa:85:f4:99:ae:57:ab:d7:
8e:ab:7c:44:ad:73:c4:45:d8:c9:7b:db:c5:cd:0a:ee:da:d0:
c9:66:eb:cf:6c:64:22:e0:8b:e7:37:f2:0c:78:a6:ff:34:3b:
f9:a4:88:56:9f:ad:c9:ab:49:ed:a6:4a:a3:84:35:aa:13:4b:
b3:20:d2:26:c0:1d:39:32:22:0e:4a:94:05:7b:55:ef:2e:c6:
5b:2d:54:cd:b5:2a:05:3a:b0:d7:2d:43:b3:43:43:2e:11:8f:
26:b5:4a:b2:62:38:aa:16:b8:a7:26:65:dc:1b:92:18:79:4b:
2b:9c:c3:15:db:a3:26:c8:c2:80:56:69:aa:cf:48:8d:12:3e:
f3:05:89:4e:76:51:28:24:45:0a:58:6f:5f:b5:c0:f0:c1:d0:
a4:aa:9c:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsk4ihLmHzKUz6MdOkOV22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGEwM2Y4MGY2MmRhODY2MzUyZTE5OTA5OTdmMWQ0NmNl
YjJmYjAwHhcNMjMwMTAxMDkwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDI0MjY3ZjU1OTk2MmNmNmYxMjhmOTZhMzNjNTA3NzZkMjA3MWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzikwxTd/0XgLLgLXY3GLdoc9zjI
DN/AxZY1xNoAdMkox22v09wybzMQPYo4kyBccRR6YsLOFyOrxKC19swPWg3W/o7i
uu/LZzj6QkxlFMNzP52laIIAOL3fY9JjxBeYmodSa9EulXvjpFOWoHkeGoNORpGz
IoGBPHjzXeLLNlEYuRZiK1SvzXVoTOSbu75GJcyUnHvnI1DMdwAX4Cxegtg0dgdD
2kEDZFEWhzcfdCQXB3nR43jLsmtDcmwbkUvpcaK/9BDCjG7W6hVWtYKqUp+b/Vwe
5ZcGGZ9KwPFMan1U04E5FRnf8ocH/oDOKJJwMuvNsWUSGfPMhUAZhs+R9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAkJn9VmWLPbxKPlqM8UHdtIHG2MB8GA1UdIwQY
MBaAFOJKA/gPYtqGY1LhmQmX8dRs6y+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81NDBjNWYtYTJhMi00NGU0LTkyODct
NDFiNTQ1MDBmZGNmLzEvRUNRbWYxV1pZczl2RW8tV296eFFkMjBnY2JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81NDBjNWYtYTJhMi00NGU0LTkyODctNDFiNTQ1MDBmZGNm
LzEvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub78MA0G
CSqGSIb3DQEBCwUAA4IBAQBqjLyuEC37XGgV1r6OLuSiVjLn7u96tzOLxHaFzauI
Z4o/NZJFDf7H8PygZDLueKOgf7pRbHdsy90YHS3ZFXFD79Tf41lnZ468m+FjfICw
QzA2syeWYPGvwFoCdRl8+Kw/IJtt+oX0ma5Xq9eOq3xErXPERdjJe9vFzQru2tDJ
ZuvPbGQi4IvnN/IMeKb/NDv5pIhWn63Jq0ntpkqjhDWqE0uzINImwB05MiIOSpQF
e1XvLsZbLVTNtSoFOrDXLUOzQ0MuEY8mtUqyYjiqFrinJmXcG5IYeUsrnMMV26Mm
yMKAVmmqz0iNEj7zBYlOdlEoJEUKWG9ftcDwwdCkqpyV
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:36:19 2025 by rpki-client