Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/miHkXOklZ95w3RrNmTexHNaMfN8.roa
File: miHkXOklZ95w3RrNmTexHNaMfN8.roa (raw, json)
Hash identifier: BlvGQBFdX0BLsCbiPHdSRqODCy/wzgoTGCoijseowpQ=
Subject key identifier: 9A:21:E4:5C:E9:25:67:DE:70:DD:1A:CD:99:37:B1:1C:D6:8C:7C:DF
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 0189D429D701496BA5ABD5678840C8B2E962
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/miHkXOklZ95w3RrNmTexHNaMfN8.roa
Signing time: Tue 08 Aug 2023 08:00:59 +0000
ROA not before: Tue 08 Aug 2023 08:00:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207552
IP address blocks: 185.170.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:29:d7:01:49:6b:a5:ab:d5:67:88:40:c8:b2:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Aug 8 08:00:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a21e45ce92567de70dd1acd9937b11cd68c7cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:a9:32:12:e2:62:1c:0c:a1:da:91:80:50:
39:20:6a:b7:1a:5e:3d:22:0a:a4:a5:16:1c:ef:c6:
45:de:7a:78:1b:8b:61:16:06:46:56:63:e9:b7:71:
89:eb:95:44:e9:32:4d:01:d1:8b:82:c1:97:ef:ed:
54:a8:32:0c:46:5a:b1:f1:eb:72:06:f3:da:ba:e3:
f4:04:e2:8d:60:89:d2:98:21:ea:68:59:1d:65:9a:
f8:23:15:9d:c8:2b:da:4e:3e:ff:74:0a:67:f5:85:
28:1f:a2:21:6b:44:9e:b8:2e:04:4a:5f:99:42:b2:
de:56:fe:59:a0:96:6d:5c:bc:19:6b:9c:a8:7a:23:
a0:35:e2:4e:46:0a:3a:1f:4a:7d:31:44:66:f0:4f:
88:4b:bc:f1:38:bf:b8:af:be:1d:89:a2:b6:b9:f7:
c9:29:c5:2c:0c:da:79:f6:4b:e2:cf:85:34:f5:3e:
d2:0e:6b:3a:ba:0c:b2:ad:eb:b8:2b:f2:d6:d6:65:
d0:0d:2e:3c:72:cb:6b:33:45:26:8d:77:78:19:60:
24:ef:9e:4d:4a:33:a1:3e:a0:5e:7b:c5:fe:7b:f2:
6b:ef:d4:bc:e3:d3:7f:c2:ba:2a:3c:d4:68:97:aa:
d3:3f:25:d4:75:14:4d:33:85:44:33:d6:0e:b2:7e:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:21:E4:5C:E9:25:67:DE:70:DD:1A:CD:99:37:B1:1C:D6:8C:7C:DF
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/miHkXOklZ95w3RrNmTexHNaMfN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:31:b7:23:ff:bc:5d:ef:77:93:c5:9a:b7:f8:3d:72:3c:ac:
8d:cd:3b:4f:d4:05:67:08:cd:74:73:2f:3c:38:97:1b:6a:da:
62:f8:97:7d:38:e7:fd:7b:be:05:71:cb:1f:e6:7d:66:18:32:
c2:f8:2e:09:8d:69:e1:d9:e8:58:c1:2b:b9:b7:b5:c4:a4:da:
4d:b9:25:ae:3b:41:a4:93:85:3b:6e:7d:9f:42:77:24:85:d9:
8c:49:60:d3:1f:29:92:e0:b9:44:89:80:e8:38:1c:c1:5d:5c:
ae:c5:6b:53:1b:84:72:7c:49:5f:e1:ea:09:26:34:c1:04:b4:
29:25:09:fd:bf:c0:64:37:ac:83:74:f2:8d:21:b5:62:23:b1:
c7:b4:15:85:b4:11:bc:5b:20:25:0c:26:d8:bb:1e:84:62:45:
7a:28:f3:a8:86:1d:d2:bc:48:2d:f0:32:a6:8a:60:b8:cc:47:
df:14:e8:5b:3a:db:c0:b1:55:12:7b:09:76:f6:5b:fb:c9:c5:
35:df:41:e0:c1:8e:60:59:40:b1:d5:97:03:3b:b7:f1:b8:3b:
b8:76:70:7f:b0:74:56:de:3e:4c:fc:eb:b0:16:62:7a:c3:d0:
9f:5b:a2:a3:a4:4a:97:32:de:10:91:86:73:18:55:c5:c5:78:
ca:cd:e7:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnUKdcBSWulq9VniEDIsuliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTc3MTc3NjVlNGJjYzcxOTFiMjVkMWE0ZTY2ZDM4OGM5
YzUzZDkwHhcNMjMwODA4MDgwMDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTIxZTQ1Y2U5MjU2N2RlNzBkZDFhY2Q5OTM3YjExY2Q2OGM3Y2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNepMhLiYhwModqRgFA5IGq3Gl49
IgqkpRYc78ZF3np4G4thFgZGVmPpt3GJ65VE6TJNAdGLgsGX7+1UqDIMRlqx8ety
BvPauuP0BOKNYInSmCHqaFkdZZr4IxWdyCvaTj7/dApn9YUoH6Iha0SeuC4ESl+Z
QrLeVv5ZoJZtXLwZa5yoeiOgNeJORgo6H0p9MURm8E+IS7zxOL+4r74diaK2uffJ
KcUsDNp59kviz4U09T7SDms6ugyyreu4K/LW1mXQDS48cstrM0UmjXd4GWAk755N
SjOhPqBee8X+e/Jr79S849N/wroqPNRol6rTPyXUdRRNM4VEM9YOsn686wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJoh5FzpJWfecN0azZk3sRzWjHzfMB8GA1UdIwQY
MBaAFOPncXdl5LzHGRsl0aTmbTiMnFPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQt
NTYzZDQ3YTdhYjYxLzEvbWlIa1hPa2xaOTV3M1JyTm1UZXhITmFNZk44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQtNTYzZDQ3YTdhYjYx
LzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaqSMA0G
CSqGSIb3DQEBCwUAA4IBAQAcMbcj/7xd73eTxZq3+D1yPKyNzTtP1AVnCM10cy88
OJcbatpi+Jd9OOf9e74Fccsf5n1mGDLC+C4JjWnh2ehYwSu5t7XEpNpNuSWuO0Gk
k4U7bn2fQnckhdmMSWDTHymS4LlEiYDoOBzBXVyuxWtTG4RyfElf4eoJJjTBBLQp
JQn9v8BkN6yDdPKNIbViI7HHtBWFtBG8WyAlDCbYux6EYkV6KPOohh3SvEgt8DKm
imC4zEffFOhbOtvAsVUSewl29lv7ycU130HgwY5gWUCx1ZcDO7fxuDu4dnB/sHRW
3j5M/OuwFmJ6w9CfW6KjpEqXMt4QkYZzGFXFxXjKzefX
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:54:50 2025 by rpki-client