Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/DjWbeMR1xq3JsgRWFOvx9ZudZs4.roa
File: DjWbeMR1xq3JsgRWFOvx9ZudZs4.roa (raw, json)
Hash identifier: jzAtpa5yYNukGQ+1YJk716TlvA/CXFGU4PSRwAgeQFw=
Subject key identifier: 0E:35:9B:78:C4:75:C6:AD:C9:B2:04:56:14:EB:F1:F5:9B:9D:66:CE
Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial: 0181D84941EAFF0CBFB19039080A728266C4
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/DjWbeMR1xq3JsgRWFOvx9ZudZs4.roa
Signing time: Thu 07 Jul 2022 10:51:28 +0000
ROA not before: Thu 07 Jul 2022 10:51:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210472
IP address blocks: 185.112.3.0/24 maxlen: 24
185.112.2.0/24 maxlen: 24
185.112.1.0/24 maxlen: 24
185.112.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:49:41:ea:ff:0c:bf:b1:90:39:08:0a:72:82:66:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
Validity
Not Before: Jul 7 10:51:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e359b78c475c6adc9b2045614ebf1f59b9d66ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:8b:43:06:04:0f:b3:ac:4a:99:58:78:b3:
e4:19:9d:86:6f:ed:50:ac:76:2b:1d:21:b0:31:e9:
4c:85:73:5e:b3:c3:2e:66:07:62:e2:ea:f5:b5:f3:
6e:9d:c0:4c:2b:3c:3f:be:14:c9:9c:15:99:79:6e:
59:da:27:d5:d5:9b:46:89:53:90:0b:16:fc:c6:45:
89:25:6c:58:a4:27:70:07:e1:ac:4b:42:b6:5d:19:
8d:7c:50:66:70:89:1d:1d:44:cd:4a:f7:91:1f:cf:
59:85:c3:84:5c:55:d1:cc:8e:10:ec:0a:98:97:a0:
96:f6:4a:19:c9:35:d5:7b:1c:12:b5:f1:7b:5b:72:
9d:4b:32:da:ab:67:d1:57:1e:97:6c:06:33:a1:31:
f0:1d:55:bf:4c:c3:06:a3:4c:ae:1e:23:e6:da:f0:
74:3b:11:47:d5:e2:16:9f:39:fb:32:5f:a6:5d:81:
a0:f6:2c:d4:55:45:cc:0e:91:49:93:52:df:2b:04:
4b:72:85:bc:44:d9:9e:60:a1:07:b9:7e:59:53:43:
9c:36:41:c5:ee:48:0b:e0:16:63:c6:e3:c9:ab:eb:
63:6c:e3:a5:6f:05:17:c2:ff:57:62:09:07:96:00:
60:f4:29:54:63:8d:17:1a:3a:3e:03:35:23:68:d1:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:35:9B:78:C4:75:C6:AD:C9:B2:04:56:14:EB:F1:F5:9B:9D:66:CE
X509v3 Authority Key Identifier:
keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/DjWbeMR1xq3JsgRWFOvx9ZudZs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.0.0/22
Signature Algorithm: sha256WithRSAEncryption
38:5b:dd:ba:23:0d:8e:5f:84:f3:1b:27:55:19:69:f4:41:46:
c1:67:2a:b9:93:ae:ae:95:ed:94:7f:f4:84:0c:ea:bd:c5:c5:
d1:36:40:53:95:b6:7f:7d:bc:af:c2:01:91:6a:f4:03:a1:43:
b3:d5:3a:ff:9d:7a:84:48:97:52:d7:64:79:e7:2c:b2:77:6b:
37:e8:02:7c:39:6b:5d:84:18:59:53:aa:23:38:62:2c:60:a2:
30:2f:5a:d3:c4:1a:e3:28:37:5f:a3:f7:61:01:38:38:c1:79:
5e:2b:46:b6:e8:cc:56:08:ba:03:a7:ce:f2:ee:c2:7a:d8:c9:
65:75:47:bb:07:b3:4f:b7:76:7b:be:0d:04:c2:f5:14:ce:b8:
cd:48:50:76:a0:5c:ac:ef:22:5a:86:52:1b:3b:97:ac:ce:3d:
e3:fe:be:af:bb:c9:f7:a6:13:56:95:b3:0c:2e:a6:00:51:ae:
ae:40:98:a7:8b:5e:e0:c0:2e:95:41:04:fe:b2:8d:09:bd:d0:
22:e2:01:29:c8:d6:89:51:5a:38:b2:98:a9:5c:ac:fa:eb:c6:
2d:20:f5:d1:65:dd:56:b0:40:da:ab:6b:90:ea:34:b1:ca:45:
8c:a0:66:f6:62:74:de:df:b4:82:48:53:1e:52:a3:1e:f0:f3:
68:4a:20:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHYSUHq/wy/sZA5CApygmbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzc0NDY3ZTIxODQ5NTI0OTQzZDJiZDQ1OTAxMDcyMGYz
ZTIwZTQwHhcNMjIwNzA3MTA1MTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTM1OWI3OGM0NzVjNmFkYzliMjA0NTYxNGViZjFmNTliOWQ2NmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg+LQwYED7OsSplYeLPkGZ2Gb+1Q
rHYrHSGwMelMhXNes8MuZgdi4ur1tfNuncBMKzw/vhTJnBWZeW5Z2ifV1ZtGiVOQ
Cxb8xkWJJWxYpCdwB+GsS0K2XRmNfFBmcIkdHUTNSveRH89ZhcOEXFXRzI4Q7AqY
l6CW9koZyTXVexwStfF7W3KdSzLaq2fRVx6XbAYzoTHwHVW/TMMGo0yuHiPm2vB0
OxFH1eIWnzn7Ml+mXYGg9izUVUXMDpFJk1LfKwRLcoW8RNmeYKEHuX5ZU0OcNkHF
7kgL4BZjxuPJq+tjbOOlbwUXwv9XYgkHlgBg9ClUY40XGjo+AzUjaNFNdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA41m3jEdcatybIEVhTr8fWbnWbOMB8GA1UdIwQY
MBaAFF53RGfiGElSSUPSvUWQEHIPPiDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMGEyMmYtMjBmYS00ZDk4LThiMDMt
YWE0MDA1MzJkYWViLzEvRGpXYmVNUjF4cTNKc2dSV0ZPdng5WnVkWnM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yMGEyMmYtMjBmYS00ZDk4LThiMDMtYWE0MDA1MzJkYWVi
LzEvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXAAMA0G
CSqGSIb3DQEBCwUAA4IBAQA4W926Iw2OX4TzGydVGWn0QUbBZyq5k66ule2Uf/SE
DOq9xcXRNkBTlbZ/fbyvwgGRavQDoUOz1Tr/nXqESJdS12R55yyyd2s36AJ8OWtd
hBhZU6ojOGIsYKIwL1rTxBrjKDdfo/dhATg4wXleK0a26MxWCLoDp87y7sJ62Mll
dUe7B7NPt3Z7vg0EwvUUzrjNSFB2oFys7yJahlIbO5eszj3j/r6vu8n3phNWlbMM
LqYAUa6uQJini17gwC6VQQT+so0JvdAi4gEpyNaJUVo4spipXKz668YtIPXRZd1W
sEDaq2uQ6jSxykWMoGb2YnTe37SCSFMeUqMe8PNoSiB8
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:06 2025 by rpki-client