Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/y632sPS4N9hT_ZCC5WL4_q4TLT4.roa
File: y632sPS4N9hT_ZCC5WL4_q4TLT4.roa (raw, json)
Hash identifier: Skz7H8AvdXhGFTeCnuqrNhGsyGQfWuM1v8Qi4jyR9+o=
Subject key identifier: CB:AD:F6:B0:F4:B8:37:D8:53:FD:90:82:E5:62:F8:FE:AE:13:2D:3E
Certificate issuer: /CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Certificate serial: 01856E8B44C31656AB0D37536E42788B2D2D
Authority key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/y632sPS4N9hT_ZCC5WL4_q4TLT4.roa
Signing time: Sun 01 Jan 2023 18:14:58 +0000
ROA not before: Sun 01 Jan 2023 18:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209936
IP address blocks: 185.242.164.0/23 maxlen: 23
185.242.164.0/22 maxlen: 23
2a0c:e780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:44:c3:16:56:ab:0d:37:53:6e:42:78:8b:2d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Validity
Not Before: Jan 1 18:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbadf6b0f4b837d853fd9082e562f8feae132d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:22:8c:a3:f4:90:60:d5:cb:f0:cb:15:b5:4f:
c1:61:30:c1:0c:1d:b9:11:9f:f8:2f:c9:ef:37:01:
92:f7:93:b3:e6:b7:62:97:34:e5:0e:43:cf:97:27:
21:ba:80:2c:8e:04:70:db:e5:e0:ff:a2:64:4a:2b:
94:0a:98:54:b6:f9:ee:ea:af:a4:c4:a1:d3:6a:7d:
9d:5c:0f:16:9a:59:b2:0d:80:c5:88:63:f9:e3:55:
57:69:48:69:19:b9:08:01:b6:f8:63:6f:fb:19:0c:
79:40:45:9e:77:eb:a8:55:e1:75:35:79:60:a9:fc:
49:37:70:dc:e0:79:55:26:b0:32:fd:52:b9:fa:88:
55:c7:68:60:4f:7e:2a:40:8d:0f:26:85:38:73:f9:
67:bd:51:29:c7:77:ee:de:70:03:37:c0:b5:61:09:
f3:9c:d6:65:67:ba:2d:fd:6e:b2:93:37:66:17:8a:
5a:c9:ca:2f:1d:73:57:ad:99:56:1e:87:3f:a9:a6:
43:2b:35:60:4a:f8:9e:0b:54:59:28:e2:8a:59:45:
e8:91:78:34:ee:8f:b4:2d:86:da:51:73:7c:e2:78:
ce:40:14:96:2b:82:05:7e:09:c8:06:47:9f:23:bf:
fd:0b:cd:c3:12:67:22:9d:33:89:57:3b:96:8f:88:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AD:F6:B0:F4:B8:37:D8:53:FD:90:82:E5:62:F8:FE:AE:13:2D:3E
X509v3 Authority Key Identifier:
keyid:8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/y632sPS4N9hT_ZCC5WL4_q4TLT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.164.0/22
IPv6:
2a0c:e780::/29
Signature Algorithm: sha256WithRSAEncryption
c1:90:eb:36:e6:f6:99:5a:af:9a:25:9b:b0:13:47:24:f4:90:
9c:2f:b9:6f:8c:e4:61:c8:1a:e1:67:ca:22:ef:b2:63:03:28:
41:43:b5:20:21:a1:3e:56:4a:01:4b:c8:a7:09:12:ca:80:ff:
88:f9:ad:aa:8c:47:86:20:3c:8f:da:f0:af:e3:42:1b:72:10:
76:dd:f8:54:6e:52:4f:4a:d5:63:44:78:36:f5:43:56:eb:f9:
02:a1:dc:82:b6:80:f5:05:a9:30:3d:72:27:c8:53:11:e0:36:
9e:6d:cd:17:e9:97:21:e6:c4:95:d5:a5:a0:43:2f:11:f2:83:
97:42:f6:c7:36:48:68:7e:f3:a6:f7:d0:da:a5:1c:fe:48:0b:
af:a2:aa:bc:34:3c:19:32:d5:3a:f9:c5:24:e6:5f:c1:9d:fd:
14:23:3f:dc:d6:b4:0f:f0:4a:66:fa:eb:01:17:d7:fa:6d:68:
75:aa:d9:2b:87:ae:de:cc:5f:6f:b5:b1:bd:ad:6b:aa:68:da:
83:f8:e7:d8:91:df:62:8f:ae:a5:9f:ac:24:fd:dc:52:32:f9:
ae:d1:83:31:49:1b:e1:5a:75:b6:fa:b4:3c:c5:23:c5:c8:9f:
13:7a:2d:b7:02:57:bb:d4:bd:a4:ea:54:7c:b6:6f:32:95:37:
69:d4:cf:10
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVui0TDFlarDTdTbkJ4iy0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2RkZDVjMzBkNTgwZWIwZmVlY2EyYTE2Y2Y1YzVhOGIy
NTY4ZmQwHhcNMjMwMTAxMTgxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmFkZjZiMGY0YjgzN2Q4NTNmZDkwODJlNTYyZjhmZWFlMTMyZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCKMo/SQYNXL8MsVtU/BYTDBDB25
EZ/4L8nvNwGS95Oz5rdilzTlDkPPlychuoAsjgRw2+Xg/6JkSiuUCphUtvnu6q+k
xKHTan2dXA8WmlmyDYDFiGP541VXaUhpGbkIAbb4Y2/7GQx5QEWed+uoVeF1NXlg
qfxJN3Dc4HlVJrAy/VK5+ohVx2hgT34qQI0PJoU4c/lnvVEpx3fu3nADN8C1YQnz
nNZlZ7ot/W6ykzdmF4paycovHXNXrZlWHoc/qaZDKzVgSvieC1RZKOKKWUXokXg0
7o+0LYbaUXN84njOQBSWK4IFfgnIBkefI7/9C83DEmcinTOJVzuWj4jUrwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMut9rD0uDfYU/2QguVi+P6uEy0+MB8GA1UdIwQY
MBaAFIrN3Vww1YDrD+7KKhbPXFqLJWj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMzZFhERFZnT3NQN3NvcUZzOWNXb3NsYVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yNWFjYTctN2UyOC00ODdjLTg2ZDIt
MTdiMWM3Mzc5MzAwLzEveTYzMnNQUzROOWhUX1pDQzVXTDRfcTRUTFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yNWFjYTctN2UyOC00ODdjLTg2ZDItMTdiMWM3Mzc5MzAw
LzEvaXMzZFhERFZnT3NQN3NvcUZzOWNXb3NsYVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufKkMA0E
AgACMAcDBQMqDOeAMA0GCSqGSIb3DQEBCwUAA4IBAQDBkOs25vaZWq+aJZuwE0ck
9JCcL7lvjORhyBrhZ8oi77JjAyhBQ7UgIaE+VkoBS8inCRLKgP+I+a2qjEeGIDyP
2vCv40IbchB23fhUblJPStVjRHg29UNW6/kCodyCtoD1BakwPXInyFMR4Daebc0X
6Zch5sSV1aWgQy8R8oOXQvbHNkhofvOm99DapRz+SAuvoqq8NDwZMtU6+cUk5l/B
nf0UIz/c1rQP8Epm+usBF9f6bWh1qtkrh67ezF9vtbG9rWuqaNqD+OfYkd9ij66l
n6wk/dxSMvmu0YMxSRvhWnW2+rQ8xSPFyJ8Tei23Ale71L2k6lR8tm8ylTdp1M8Q
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:00:40 2025 by rpki-client