Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/wVsSNAB1PeMCIFVoH15EKYoBeHg.roa
File: wVsSNAB1PeMCIFVoH15EKYoBeHg.roa (raw, json)
Hash identifier: V/+r7qtjtV3MIQlBTnQDyF0xmxwYUGlU3LlCNaXoNOk=
Subject key identifier: C1:5B:12:34:00:75:3D:E3:02:20:55:68:1F:5E:44:29:8A:01:78:78
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 01857139EA2B8871B51BB1087D2067DA418D
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/wVsSNAB1PeMCIFVoH15EKYoBeHg.roa
Signing time: Mon 02 Jan 2023 06:44:58 +0000
ROA not before: Mon 02 Jan 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.38.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ea:2b:88:71:b5:1b:b1:08:7d:20:67:da:41:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Jan 2 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c15b123400753de3022055681f5e44298a017878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:8a:9d:5c:bc:1e:af:be:61:7b:34:d2:e3:
b6:f7:3d:2e:b5:3a:7c:7d:c5:6f:40:bd:88:1f:a4:
0b:07:f2:95:dc:2c:b2:d5:4f:08:b3:c5:7c:0c:39:
76:8f:77:8c:f1:6d:d3:e5:c2:86:b3:a8:af:c7:82:
eb:93:0e:91:66:e3:a8:52:bd:e6:1d:6c:35:d7:6d:
20:f4:64:e3:c7:1d:0d:ed:87:3b:bd:77:f4:ec:f9:
b4:65:c7:55:f0:cf:df:67:57:c7:ec:3e:e1:11:72:
b2:e1:7a:4d:33:27:fe:56:d9:23:4a:ba:29:7a:9d:
90:92:79:8d:82:1d:a7:ae:78:7e:a4:46:49:33:c9:
57:45:10:bf:63:83:2d:61:cf:26:38:a6:c0:2d:55:
7f:68:56:ad:15:c6:64:71:a4:1f:55:7d:1e:5f:77:
b2:33:f8:2e:44:f9:fc:7c:7d:51:ef:75:14:53:ed:
e9:83:ec:1b:11:d1:ab:34:ec:a8:69:2c:fa:12:fd:
4f:2a:01:d8:6b:3e:92:95:c0:a9:3e:c2:09:42:07:
89:9a:18:27:04:b6:55:ce:c2:65:e9:bf:7b:3e:af:
4f:27:0d:ff:bc:21:b8:15:8c:87:ec:94:d5:66:1d:
b2:16:a8:4d:80:9a:61:bc:72:b7:54:b6:06:f2:f3:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5B:12:34:00:75:3D:E3:02:20:55:68:1F:5E:44:29:8A:01:78:78
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/wVsSNAB1PeMCIFVoH15EKYoBeHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3a:ae:25:87:01:54:c5:de:14:cc:13:04:a5:69:5f:c4:a2:
87:57:b5:ad:e1:03:2c:6c:b1:07:e9:96:bc:08:3d:0c:da:02:
ac:78:17:62:2d:74:d1:56:6e:b1:76:29:7c:57:88:2d:0e:42:
4d:e2:ff:af:3e:5c:7b:90:47:86:97:cc:6f:fa:e9:91:87:52:
bc:86:c5:59:ae:ca:e5:db:80:47:7f:a4:0a:c0:f2:45:b5:41:
bb:c1:c0:bc:d5:39:88:5b:b3:b2:78:af:4b:4d:83:cd:ee:b9:
8b:db:b0:cc:84:c2:55:40:1d:e4:13:ef:0f:20:34:96:8c:84:
be:97:74:e4:a4:06:69:b0:e7:38:18:c2:98:b9:ee:87:72:90:
b4:93:c6:8c:9f:51:fb:5e:f9:72:65:44:e3:b5:01:7e:0a:c1:
f7:ea:d4:0d:fe:f0:93:a1:eb:6f:e8:0a:5a:ec:70:9e:c3:99:
19:f1:ee:78:6f:ef:9c:76:d1:b9:cf:0f:16:1a:c1:25:54:e8:
81:ba:35:92:31:8c:3b:f8:af:36:07:51:f0:7f:d5:cf:e0:97:
78:53:e8:e1:4d:1b:3f:23:55:9a:85:56:7f:62:42:52:5b:3b:
a4:10:0a:4e:d4:aa:a2:fd:37:b1:97:66:2a:4b:52:58:ec:06:
da:f8:a2:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOeoriHG1G7EIfSBn2kGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDIzMmMxOWQwYTdmN2VkNzY5YzQ3MTU0MjFlNmNjMThi
ZGI2NDAwHhcNMjMwMTAyMDY0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTViMTIzNDAwNzUzZGUzMDIyMDU1NjgxZjVlNDQyOThhMDE3ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeaKnVy8Hq++YXs00uO29z0utTp8
fcVvQL2IH6QLB/KV3Cyy1U8Is8V8DDl2j3eM8W3T5cKGs6ivx4Lrkw6RZuOoUr3m
HWw1120g9GTjxx0N7Yc7vXf07Pm0ZcdV8M/fZ1fH7D7hEXKy4XpNMyf+VtkjSrop
ep2QknmNgh2nrnh+pEZJM8lXRRC/Y4MtYc8mOKbALVV/aFatFcZkcaQfVX0eX3ey
M/guRPn8fH1R73UUU+3pg+wbEdGrNOyoaSz6Ev1PKgHYaz6SlcCpPsIJQgeJmhgn
BLZVzsJl6b97Pq9PJw3/vCG4FYyH7JTVZh2yFqhNgJphvHK3VLYG8vOnvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFbEjQAdT3jAiBVaB9eRCmKAXh4MB8GA1UdIwQY
MBaAFG9CMsGdCn9+12nEcVQh5swYvbZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUt
NjZjYTU3Zjc0ZTBkLzEvd1ZzU05BQjFQZU1DSUZWb0gxNUVLWW9CZUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUtNjZjYTU3Zjc0ZTBk
LzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSaGMA0G
CSqGSIb3DQEBCwUAA4IBAQB6Oq4lhwFUxd4UzBMEpWlfxKKHV7Wt4QMsbLEH6Za8
CD0M2gKseBdiLXTRVm6xdil8V4gtDkJN4v+vPlx7kEeGl8xv+umRh1K8hsVZrsrl
24BHf6QKwPJFtUG7wcC81TmIW7OyeK9LTYPN7rmL27DMhMJVQB3kE+8PIDSWjIS+
l3TkpAZpsOc4GMKYue6HcpC0k8aMn1H7XvlyZUTjtQF+CsH36tQN/vCToetv6Apa
7HCew5kZ8e54b++cdtG5zw8WGsElVOiBujWSMYw7+K82B1Hwf9XP4Jd4U+jhTRs/
I1WahVZ/YkJSWzukEApO1Kqi/Texl2YqS1JY7Aba+KKG
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:03 2025 by rpki-client