Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/wySBY0pSDiUahBIQJVslBUldM2Q.roa
File: wySBY0pSDiUahBIQJVslBUldM2Q.roa (raw, json)
Hash identifier: 7SNOf2SFoXSVuYdXDh1mHIwFoy6I03S3NeVdnk2+W4A=
Subject key identifier: C3:24:81:63:4A:52:0E:25:1A:84:12:10:25:5B:25:05:49:5D:33:64
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01856EC1FA2CF526290B1E709D6E36C756A0
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/wySBY0pSDiUahBIQJVslBUldM2Q.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199447
IP address blocks: 185.12.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fa:2c:f5:26:29:0b:1e:70:9d:6e:36:c7:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c32481634a520e251a841210255b2505495d3364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:9e:cf:d3:10:6d:e2:2d:13:0c:c3:a2:6e:
e9:a1:ce:21:81:6d:e7:04:b4:e5:a4:26:76:04:2d:
60:4c:d0:b4:51:e5:52:36:a3:3d:6d:e0:3d:6c:9f:
73:4f:8e:ba:26:c3:1f:52:a7:0e:1a:89:dc:f7:69:
ea:57:e3:03:8e:34:bd:37:4f:78:a4:81:26:8e:fc:
ba:a5:da:65:1e:1e:f7:05:c9:ec:cb:19:f4:20:a5:
39:86:25:15:f3:b0:b0:38:01:77:04:f8:4d:8a:4b:
90:02:44:8b:5e:b0:36:b5:3e:7c:03:c5:a7:c9:4b:
28:2b:a9:67:e0:24:90:c4:5b:39:8d:ca:f8:b0:80:
63:68:2c:73:e5:d9:99:b5:63:b9:c7:41:de:8c:80:
99:b0:0f:7c:34:60:e1:96:92:7f:57:96:88:03:63:
28:e1:6b:32:19:d4:f6:f1:80:1f:2b:80:40:2a:ee:
fd:95:fa:09:ea:80:7c:46:ba:83:57:15:76:0a:ff:
f6:34:3f:57:4e:e9:dd:f2:ee:53:b7:06:21:66:41:
c4:74:64:1f:c2:5b:1b:13:01:be:ec:b9:12:77:55:
3b:30:07:21:ef:83:a8:7d:12:cb:6f:c5:74:00:1a:
77:28:cd:95:c2:04:96:e5:d2:62:a3:38:3a:ff:7c:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:24:81:63:4A:52:0E:25:1A:84:12:10:25:5B:25:05:49:5D:33:64
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/wySBY0pSDiUahBIQJVslBUldM2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:bf:cc:02:c9:c2:29:85:b6:22:fc:55:b9:d2:c8:e6:a1:f6:
c9:2a:fc:33:51:79:12:48:d8:e5:b5:87:d1:cb:dd:c7:50:7e:
f4:ff:82:d3:f9:f4:b7:31:e6:ca:49:c7:6b:f4:b7:17:75:da:
4c:af:e2:87:45:09:69:c1:7b:e5:4e:42:a3:d4:6f:37:2a:b3:
26:cd:2c:a8:73:4b:8b:95:5c:58:e0:8a:81:85:d7:90:c8:ea:
96:41:f4:be:6b:8a:06:31:31:ed:a9:ff:12:b2:58:57:4f:3a:
3d:a1:15:c0:43:ac:b1:c6:0f:ae:f7:81:bb:cf:a2:81:5c:5f:
ea:ff:55:16:fb:fa:5b:07:aa:22:b5:0c:18:88:d6:6c:32:11:
e2:94:50:4e:7b:47:12:9e:0a:76:3f:fb:13:6b:8c:01:d0:64:
ca:ad:04:c8:cf:8d:6e:96:f6:93:c5:51:d9:64:25:18:c2:6b:
f4:00:df:45:99:db:d5:65:5e:5f:20:35:98:9e:15:0c:aa:70:
08:90:17:f0:e2:d1:b0:bb:61:d6:ee:e1:f6:fc:7c:06:5d:f4:
d6:ce:f0:4e:67:41:ec:0f:e0:09:83:9e:35:0a:c6:a8:20:25:
ec:ae:80:b2:13:d6:92:e2:0b:1b:0e:5a:fb:70:ae:0e:f7:e4:
53:86:ff:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuwfos9SYpCx5wnW42x1agMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi
ZmVjOWMwHhcNMjMwMTAxMTkxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzI0ODE2MzRhNTIwZTI1MWE4NDEyMTAyNTViMjUwNTQ5NWQzMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssmez9MQbeItEwzDom7poc4hgW3n
BLTlpCZ2BC1gTNC0UeVSNqM9beA9bJ9zT466JsMfUqcOGonc92nqV+MDjjS9N094
pIEmjvy6pdplHh73Bcnsyxn0IKU5hiUV87CwOAF3BPhNikuQAkSLXrA2tT58A8Wn
yUsoK6ln4CSQxFs5jcr4sIBjaCxz5dmZtWO5x0HejICZsA98NGDhlpJ/V5aIA2Mo
4WsyGdT28YAfK4BAKu79lfoJ6oB8RrqDVxV2Cv/2ND9XTund8u5TtwYhZkHEdGQf
wlsbEwG+7LkSd1U7MAch74OofRLLb8V0ABp3KM2VwgSW5dJiozg6/3zd9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMMkgWNKUg4lGoQSECVbJQVJXTNkMB8GA1UdIwQY
MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt
OWNhOThmNDk1MGNmLzEvd3lTQlkwcFNEaVVhaEJJUUpWc2xCVWxkTTJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm
LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQwLMA0G
CSqGSIb3DQEBCwUAA4IBAQDBv8wCycIphbYi/FW50sjmofbJKvwzUXkSSNjltYfR
y93HUH70/4LT+fS3MebKScdr9LcXddpMr+KHRQlpwXvlTkKj1G83KrMmzSyoc0uL
lVxY4IqBhdeQyOqWQfS+a4oGMTHtqf8SslhXTzo9oRXAQ6yxxg+u94G7z6KBXF/q
/1UW+/pbB6oitQwYiNZsMhHilFBOe0cSngp2P/sTa4wB0GTKrQTIz41ulvaTxVHZ
ZCUYwmv0AN9FmdvVZV5fIDWYnhUMqnAIkBfw4tGwu2HW7uH2/HwGXfTWzvBOZ0Hs
D+AJg541CsaoICXsroCyE9aS4gsbDlr7cK4O9+RThv9/
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:39 2025 by rpki-client