Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/B0EfmrgcXZDHDEd4WF1B4Lf2a-M.roa
File: B0EfmrgcXZDHDEd4WF1B4Lf2a-M.roa (raw, json)
Hash identifier: QV67MlN7RhhpIGIvadfVJRBOGvCt/8s4kQSIc5twUR8=
Subject key identifier: 07:41:1F:9A:B8:1C:5D:90:C7:0C:47:78:58:5D:41:E0:B7:F6:6B:E3
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01856D9D17EB668A26DC599AC5B0725152EC
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/B0EfmrgcXZDHDEd4WF1B4Lf2a-M.roa
Signing time: Sun 01 Jan 2023 13:54:49 +0000
ROA not before: Sun 01 Jan 2023 13:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203811
IP address blocks: 185.122.252.0/24 maxlen: 24
185.122.253.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
185.122.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:17:eb:66:8a:26:dc:59:9a:c5:b0:72:51:52:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jan 1 13:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07411f9ab81c5d90c70c4778585d41e0b7f66be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:7e:ae:ac:62:ed:aa:26:74:c7:68:49:2e:
68:fb:6e:d3:a5:d8:dc:3d:ee:08:16:f5:07:e2:38:
3c:1c:6b:5d:8f:05:19:e9:b1:ea:12:e9:88:81:8b:
84:53:30:5a:1b:94:d5:3b:60:57:1c:83:93:2c:f4:
ee:47:1f:b3:88:53:fe:50:a9:a2:5b:c9:01:b8:2e:
92:23:14:d6:bc:14:06:ed:57:d9:c6:b1:e2:52:be:
96:9d:3b:06:d3:5b:0c:f9:10:dc:78:8f:35:b4:6f:
47:c5:2c:4a:52:d8:06:19:b9:42:1d:5e:44:85:10:
67:cf:18:a2:d5:5f:8e:15:13:9b:59:d3:46:94:ec:
c7:1c:bb:23:c3:82:2c:48:8d:14:bf:60:e6:04:36:
15:eb:ee:51:26:bd:89:a2:99:1b:0c:59:46:28:81:
f0:f0:59:20:14:b7:16:27:21:f2:89:28:63:b8:96:
d5:c5:71:76:72:0f:70:51:be:1d:1c:35:7a:a4:86:
a0:2e:da:b7:e4:2b:fc:82:9d:07:08:f4:b2:75:d5:
e3:d7:6c:00:4d:2d:d5:1f:1a:82:4f:b3:49:fc:e7:
b5:76:e7:4d:a8:fb:0e:71:8c:9c:b2:a9:0f:4b:68:
15:c6:ef:6b:d5:8b:96:fd:a9:93:04:02:0c:50:ff:
d7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:41:1F:9A:B8:1C:5D:90:C7:0C:47:78:58:5D:41:E0:B7:F6:6B:E3
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/B0EfmrgcXZDHDEd4WF1B4Lf2a-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.252.0/22
Signature Algorithm: sha256WithRSAEncryption
03:18:7a:b9:9e:a9:43:89:6c:e8:47:97:04:ab:d5:60:e0:17:
0d:a8:82:65:b5:54:c0:08:36:a5:a4:ef:f3:ea:2e:86:ea:1f:
02:2a:45:5f:5c:00:7c:91:ef:16:e6:b2:d4:45:ca:c1:bf:51:
3d:50:bd:ba:81:c0:f3:62:c8:80:12:ef:d0:f3:80:0b:99:b6:
a1:96:9e:6e:a8:59:0e:0f:3e:fd:54:83:5f:9c:e1:1a:75:5b:
b3:a9:6f:b1:d5:f0:78:c9:22:c5:69:27:e8:01:63:9a:db:75:
ba:8f:4a:f0:3c:e8:ab:85:90:80:44:9c:13:63:48:51:5f:b9:
73:3d:9b:7c:00:c0:dd:58:a9:ae:53:ec:2f:ad:53:de:44:8e:
fb:5e:69:cf:e3:50:9b:5b:71:5f:3c:bd:64:b1:3c:3c:13:39:
6d:d3:4b:cf:80:1f:a7:a0:76:02:13:3d:0a:7f:88:c6:b4:13:
56:dc:9b:a0:43:44:c6:4e:d2:35:7d:de:b2:9a:92:c1:d6:8c:
e6:71:1a:71:dd:9a:73:9a:74:35:6f:81:ea:68:3a:35:53:e4:
82:e3:16:08:06:05:9d:21:c9:3b:17:fc:e8:68:cd:4f:14:44:
80:d2:04:0f:15:8a:2f:a0:25:5d:25:4f:87:e3:59:fc:42:c8:
48:7b:28:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtnRfrZoom3FmaxbByUVLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2MzZGU2MTAxMWRlMDcxMDFlMTRkYzA3MjczOTUxNzFj
YjAzYWIwHhcNMjMwMTAxMTM1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzQxMWY5YWI4MWM1ZDkwYzcwYzQ3Nzg1ODVkNDFlMGI3ZjY2YmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3x+rqxi7aomdMdoSS5o+27Tpdjc
Pe4IFvUH4jg8HGtdjwUZ6bHqEumIgYuEUzBaG5TVO2BXHIOTLPTuRx+ziFP+UKmi
W8kBuC6SIxTWvBQG7VfZxrHiUr6WnTsG01sM+RDceI81tG9HxSxKUtgGGblCHV5E
hRBnzxii1V+OFRObWdNGlOzHHLsjw4IsSI0Uv2DmBDYV6+5RJr2JopkbDFlGKIHw
8FkgFLcWJyHyiShjuJbVxXF2cg9wUb4dHDV6pIagLtq35Cv8gp0HCPSyddXj12wA
TS3VHxqCT7NJ/Oe1dudNqPsOcYycsqkPS2gVxu9r1YuW/amTBAIMUP/XuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAdBH5q4HF2QxwxHeFhdQeC39mvjMB8GA1UdIwQY
MBaAFBI8PeYQEd4HEB4U3AcnOVFxywOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUt
YjUwNGM5YWU5YmJjLzEvQjBFZm1yZ2NYWkRIREVkNFdGMUI0TGYyYS1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUtYjUwNGM5YWU5YmJj
LzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXr8MA0G
CSqGSIb3DQEBCwUAA4IBAQADGHq5nqlDiWzoR5cEq9Vg4BcNqIJltVTACDalpO/z
6i6G6h8CKkVfXAB8ke8W5rLURcrBv1E9UL26gcDzYsiAEu/Q84ALmbahlp5uqFkO
Dz79VINfnOEadVuzqW+x1fB4ySLFaSfoAWOa23W6j0rwPOirhZCARJwTY0hRX7lz
PZt8AMDdWKmuU+wvrVPeRI77XmnP41CbW3FfPL1ksTw8Ezlt00vPgB+noHYCEz0K
f4jGtBNW3JugQ0TGTtI1fd6ympLB1ozmcRpx3ZpzmnQ1b4HqaDo1U+SC4xYIBgWd
Ick7F/zoaM1PFESA0gQPFYovoCVdJU+H41n8QshIeyjM
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:43 2025 by rpki-client