Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/1dgmPu-SMBf39TtUpNwT8CD1eWs.roa
File: 1dgmPu-SMBf39TtUpNwT8CD1eWs.roa (raw, json)
Hash identifier: aVmWf53dBm4IagU4fqdSw80OMbnDkkvlgn4SD9Zajrc=
Subject key identifier: D5:D8:26:3E:EF:92:30:17:F7:F5:3B:54:A4:DC:13:F0:20:F5:79:6B
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 01857227F289027CD5FE3D01D23E7AF9C3B3
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/1dgmPu-SMBf39TtUpNwT8CD1eWs.roa
Signing time: Mon 02 Jan 2023 11:04:58 +0000
ROA not before: Mon 02 Jan 2023 11:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199479
IP address blocks: 185.14.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:f2:89:02:7c:d5:fe:3d:01:d2:3e:7a:f9:c3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jan 2 11:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5d8263eef923017f7f53b54a4dc13f020f5796b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:88:60:d8:c7:bb:c6:d9:0c:89:54:45:54:
37:d1:23:97:e8:9c:e9:ab:b3:70:eb:6b:ce:06:e9:
c3:e8:4d:f5:82:b6:ef:73:ed:31:c8:99:11:f3:76:
77:18:6f:4a:e9:d6:a2:a9:3e:e3:60:d0:e8:c5:3e:
50:3b:bf:3b:bd:39:a0:c5:3c:1b:1d:34:56:63:c2:
ac:64:5b:58:cf:02:9a:be:15:6b:ab:75:b7:df:91:
f3:e6:83:6a:f5:18:1b:32:08:5d:23:0a:4b:6a:08:
58:af:f3:5d:59:91:c1:de:2b:82:a2:b2:00:4e:d9:
56:89:bd:ba:0c:30:88:bc:e0:d2:6d:f0:b7:a6:7a:
19:69:0b:a6:b9:52:c3:9a:1e:dd:2f:96:6a:4d:02:
0a:cb:c3:ba:71:8e:25:af:0d:97:a2:58:ce:e2:8b:
ed:0a:aa:fe:86:c8:85:56:77:6d:af:10:72:cf:19:
df:65:bd:24:93:8e:05:9f:9a:1a:43:de:11:36:25:
49:84:39:b4:b8:b4:6f:46:4b:bb:60:51:51:b1:85:
ff:fa:48:cf:0d:37:8b:da:bf:03:9e:50:8b:a2:c8:
a1:fb:26:fa:8b:6d:9d:30:12:f8:d6:5b:a9:5a:5d:
df:d2:74:5a:db:64:d8:35:49:46:ff:f9:82:6a:79:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:26:3E:EF:92:30:17:F7:F5:3B:54:A4:DC:13:F0:20:F5:79:6B
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/1dgmPu-SMBf39TtUpNwT8CD1eWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.84.0/22
Signature Algorithm: sha256WithRSAEncryption
25:19:61:ea:f8:0d:fc:be:97:9c:7d:fa:c6:b3:e8:be:1e:33:
14:c3:63:f1:47:9a:a4:8b:bc:20:41:c8:56:3f:bc:97:13:01:
0e:a4:e8:e7:01:a9:96:f1:a5:10:23:9b:cf:02:f6:d7:de:ed:
42:f0:a1:b0:e5:bb:16:38:70:52:1b:d2:ff:3d:6f:5f:72:f0:
37:4a:4e:ef:5b:73:1f:78:4b:6d:82:35:6a:74:96:e5:ac:32:
3c:5c:92:4a:e4:37:5f:14:d4:e4:c8:e7:47:59:e3:f4:d8:de:
56:f0:00:e0:b7:d3:da:37:54:1b:88:46:b0:a8:af:00:8f:82:
70:aa:47:f4:33:07:f1:8a:34:2f:f5:6e:d2:32:cc:8e:3d:7d:
df:d1:af:ae:f7:c4:5e:46:44:06:15:2c:91:2a:3a:48:54:06:
6c:26:9c:95:ab:d6:84:7a:b7:34:3a:ba:7d:f9:f5:9d:47:f8:
a2:50:7c:10:d4:80:43:7c:e8:82:3f:61:4a:75:4e:da:ad:f8:
9b:cf:11:55:fc:79:88:58:66:5e:33:06:5f:3b:15:40:0b:cf:
1e:8b:2c:5c:cc:32:fb:28:57:aa:07:43:2b:bc:9d:19:ed:09:
7d:31:d9:94:e3:d8:9c:17:0f:69:e7:f2:7d:fd:7d:6c:58:95:
d4:2b:9c:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyJ/KJAnzV/j0B0j56+cOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzFiMzQ5MzhhMzFhMzRiZjU4NjZhMGYzZGQ3OGMzOGFh
YzYxMTkwHhcNMjMwMTAyMTEwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWQ4MjYzZWVmOTIzMDE3ZjdmNTNiNTRhNGRjMTNmMDIwZjU3OTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR6IYNjHu8bZDIlURVQ30SOX6Jzp
q7Nw62vOBunD6E31grbvc+0xyJkR83Z3GG9K6daiqT7jYNDoxT5QO787vTmgxTwb
HTRWY8KsZFtYzwKavhVrq3W335Hz5oNq9RgbMghdIwpLaghYr/NdWZHB3iuCorIA
TtlWib26DDCIvODSbfC3pnoZaQumuVLDmh7dL5ZqTQIKy8O6cY4lrw2XoljO4ovt
Cqr+hsiFVndtrxByzxnfZb0kk44Fn5oaQ94RNiVJhDm0uLRvRku7YFFRsYX/+kjP
DTeL2r8DnlCLosih+yb6i22dMBL41lupWl3f0nRa22TYNUlG//mCannrFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNXYJj7vkjAX9/U7VKTcE/Ag9XlrMB8GA1UdIwQY
MBaAFGtxs0k4oxo0v1hmoPPdeMOKrGEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYt
NmY1NmUxZmEwMjMwLzEvMWRnbVB1LVNNQmYzOVR0VXBOd1Q4Q0QxZVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYtNmY1NmUxZmEwMjMw
LzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQ5UMA0G
CSqGSIb3DQEBCwUAA4IBAQAlGWHq+A38vpecffrGs+i+HjMUw2PxR5qki7wgQchW
P7yXEwEOpOjnAamW8aUQI5vPAvbX3u1C8KGw5bsWOHBSG9L/PW9fcvA3Sk7vW3Mf
eEttgjVqdJblrDI8XJJK5DdfFNTkyOdHWeP02N5W8ADgt9PaN1QbiEawqK8Aj4Jw
qkf0MwfxijQv9W7SMsyOPX3f0a+u98ReRkQGFSyRKjpIVAZsJpyVq9aEerc0Orp9
+fWdR/iiUHwQ1IBDfOiCP2FKdU7arfibzxFV/HmIWGZeMwZfOxVAC88eiyxczDL7
KFeqB0MrvJ0Z7Ql9MdmU49icFw9p5/J9/X1sWJXUK5yH
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:57 2025 by rpki-client