Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/tvR3RFMzueD70XbqvE1VYODeSkE.roa
File: tvR3RFMzueD70XbqvE1VYODeSkE.roa (raw, json)
Hash identifier: x4LcWAPynhnYouMeaqHQccPOwdUfFE9y3F2KOBeS82s=
Subject key identifier: B6:F4:77:44:53:33:B9:E0:FB:D1:76:EA:BC:4D:55:60:E0:DE:4A:41
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: FC6E64
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/tvR3RFMzueD70XbqvE1VYODeSkE.roa
Signing time: Sat 01 Jan 2022 06:01:38 +0000
ROA not before: Sat 01 Jan 2022 06:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209257
IP address blocks: 185.186.223.0/24 maxlen: 24
185.186.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16543332 (0xfc6e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Jan 1 06:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6f477445333b9e0fbd176eabc4d5560e0de4a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:db:e9:50:ca:84:7e:57:88:84:20:70:4b:
86:a9:18:d9:c7:5c:f1:f3:0c:a5:0f:a5:1e:3b:fe:
e2:65:93:94:0e:51:91:0a:dd:b1:2d:23:64:77:21:
86:47:78:ab:f0:db:dc:21:6d:54:a5:d7:e3:be:f4:
52:97:2c:e3:04:8d:b3:50:f6:40:65:2b:27:df:58:
87:53:83:91:d9:c7:16:2d:9e:51:6c:f7:ba:47:31:
67:2e:2f:8f:d1:c5:88:b3:22:a3:65:fb:a1:9a:4a:
86:d2:67:ad:ac:f8:0c:b1:1c:20:be:1a:55:ab:58:
19:12:31:36:89:29:a5:e9:79:d7:d2:b7:7b:f4:48:
d0:e0:6f:a1:67:47:e1:ba:b7:df:74:fb:09:b5:84:
8b:5a:be:c7:c3:5f:ec:37:3e:d0:3c:1e:38:69:aa:
c8:c0:f4:73:7e:72:78:d5:9c:b2:45:47:36:7e:e4:
4b:ef:5f:72:13:19:1f:49:99:39:b9:ca:8a:28:6a:
0b:e8:fb:fa:81:42:99:58:8d:b1:67:c5:85:5c:33:
1a:29:3d:12:87:3f:c0:62:28:b3:5a:cd:44:c0:5d:
30:1d:6e:11:f3:e4:6a:be:a4:4c:ee:56:4b:64:b8:
f6:44:a9:43:6a:92:1d:2e:3e:fb:75:bc:17:d1:18:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F4:77:44:53:33:B9:E0:FB:D1:76:EA:BC:4D:55:60:E0:DE:4A:41
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/tvR3RFMzueD70XbqvE1VYODeSkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.221.0/24
185.186.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:be:85:3b:b2:4c:a2:0c:27:d8:12:ab:98:17:6e:f0:05:4a:
df:d0:00:11:35:ab:fd:a0:9a:d3:84:07:bf:e0:a6:56:26:6d:
28:20:7f:54:8a:93:62:c8:c7:35:f7:82:5c:19:de:1c:53:dc:
54:21:b0:c8:19:72:82:3a:be:8a:d1:39:cc:53:af:71:90:c2:
bb:6e:eb:30:51:2b:05:fa:a2:16:b1:c7:24:dd:16:e5:85:16:
48:0c:ff:2a:b3:d7:79:3f:b7:35:cc:4d:36:33:58:ed:3c:b4:
b3:41:11:e9:f8:ae:a4:12:27:84:5b:e3:5c:df:92:71:8a:44:
0e:5a:25:fa:f9:e3:f5:a4:d4:ee:90:b3:37:39:49:98:52:bb:
c4:e4:2f:7e:85:8d:ff:12:70:ab:72:99:44:4d:a4:2a:5c:1c:
2f:2d:8a:87:89:9f:bf:99:18:cb:b0:d8:e7:83:c7:49:e3:32:
3e:8b:3b:86:7c:53:e1:5f:f1:4a:c3:72:6e:57:55:d1:52:bb:
01:64:db:57:a8:e5:12:11:be:15:62:e9:fc:96:89:ad:ed:25:
b6:5e:94:71:61:39:79:2b:b2:7d:61:1a:1a:55:81:a5:8b:de:
dd:d8:12:c3:20:43:2c:42:11:d0:fb:e5:bf:d2:44:5f:ce:ee:
d9:dc:b0:08
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAPxuZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MzVjYTUyMTM2MjIyNmQwM2MxODI5MDAzZDgxZDQ5OGFhODM4ZjMzMB4XDTIyMDEw
MTA2MDEzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZmNDc3NDQ1MzMz
YjllMGZiZDE3NmVhYmM0ZDU1NjBlMGRlNGE0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANlC2+lQyoR+V4iEIHBLhqkY2cdc8fMMpQ+lHjv+4mWTlA5R
kQrdsS0jZHchhkd4q/Db3CFtVKXX4770Upcs4wSNs1D2QGUrJ99Yh1ODkdnHFi2e
UWz3ukcxZy4vj9HFiLMio2X7oZpKhtJnraz4DLEcIL4aVatYGRIxNokppel519K3
e/RI0OBvoWdH4bq333T7CbWEi1q+x8Nf7Dc+0DweOGmqyMD0c35yeNWcskVHNn7k
S+9fchMZH0mZObnKiihqC+j7+oFCmViNsWfFhVwzGik9Eoc/wGIos1rNRMBdMB1u
EfPkar6kTO5WS2S49kSpQ2qSHS4++3W8F9EYIEUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS29HdEUzO54PvRduq8TVVg4N5KQTAfBgNVHSMEGDAWgBQzXKUhNiIm0DwY
KQA9gdSYqoOPMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L00xeWxJVFlpSnRBOEdDa0FQWUhVbUtxRGp6TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvZGM2MDhhLTE3NWUtNDJkMy05M2Q4LTk3NGM0NGFiOWNmYi8x
L3R2UjNSRk16dWVENzBYYnF2RTFWWU9EZVNrRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
ZGM2MDhhLTE3NWUtNDJkMy05M2Q4LTk3NGM0NGFiOWNmYi8xL00xeWxJVFlpSnRB
OEdDa0FQWUhVbUtxRGp6TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALm63QMEALm63zANBgkqhkiG9w0B
AQsFAAOCAQEASr6FO7JMogwn2BKrmBdu8AVK39AAETWr/aCa04QHv+CmViZtKCB/
VIqTYsjHNfeCXBneHFPcVCGwyBlygjq+itE5zFOvcZDCu27rMFErBfqiFrHHJN0W
5YUWSAz/KrPXeT+3NcxNNjNY7Ty0s0ER6fiupBInhFvjXN+ScYpEDlol+vnj9aTU
7pCzNzlJmFK7xOQvfoWN/xJwq3KZRE2kKlwcLy2Kh4mfv5kYy7DY54PHSeMyPos7
hnxT4V/xSsNybldV0VK7AWTbV6jlEhG+FWLp/JaJre0ltl6UcWE5eSuyfWEaGlWB
pYve3dgSwyBDLEIR0Pvlv9JEX87u2dywCA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 21:07:25 2025 by rpki-client