Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/Vi3G2V2SdABCp6qi-fXOzWqo_J8.roa
File: Vi3G2V2SdABCp6qi-fXOzWqo_J8.roa (raw, json)
Hash identifier: MSOHazec+G3PE74xEoU3o9tgX8144pOHZxHMf+G/JTg=
Subject key identifier: 56:2D:C6:D9:5D:92:74:00:42:A7:AA:A2:F9:F5:CE:CD:6A:A8:FC:9F
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 0184E7515DC0AC23014F161CC8AB69D52C3C
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/Vi3G2V2SdABCp6qi-fXOzWqo_J8.roa
Signing time: Tue 06 Dec 2022 12:03:00 +0000
ROA not before: Tue 06 Dec 2022 12:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51175
IP address blocks: 185.101.190.0/24 maxlen: 24
185.101.188.0/22 maxlen: 22
195.110.50.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:51:5d:c0:ac:23:01:4f:16:1c:c8:ab:69:d5:2c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Dec 6 12:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=562dc6d95d92740042a7aaa2f9f5cecd6aa8fc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:af:49:85:e3:4d:c8:39:fb:77:73:d7:c0:
a2:ad:0b:a9:f4:52:28:c0:af:e4:d8:c3:7b:7a:5b:
1a:4f:bc:d1:90:ea:fe:e0:d9:77:72:32:67:2d:49:
87:4a:c0:f1:ea:40:bd:3c:3a:1d:d4:b6:e8:af:0f:
99:ca:03:47:45:2b:18:52:dc:3c:1a:51:71:a9:f3:
0d:cc:d7:e2:49:e3:d2:ca:fe:f9:1c:2b:79:7c:32:
11:5c:61:8a:fe:5a:75:1a:6d:45:47:85:35:0b:d7:
e0:89:61:39:bc:c8:be:a2:62:25:18:67:8e:a3:c3:
5a:bb:86:e3:21:fa:c2:56:53:64:07:66:30:65:a1:
1a:f1:e3:9f:c8:87:a4:9f:b5:a5:c3:1b:ed:d2:cf:
fa:b5:24:eb:c2:0a:89:68:83:75:10:0f:35:bd:8e:
aa:2e:10:51:87:66:29:97:fb:ee:51:65:0a:cf:72:
34:d6:51:32:f7:7c:ca:83:2c:a9:0d:81:a2:c1:f6:
e3:e4:8e:86:16:17:51:4a:68:27:d5:7a:3b:7d:3e:
33:57:4b:47:9e:31:ac:3a:94:00:17:3f:79:c8:05:
59:4d:cc:f6:c8:f2:13:91:04:75:04:f4:b7:a5:c2:
17:fc:37:c3:96:7f:8f:29:9c:29:32:e1:9e:6b:1a:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2D:C6:D9:5D:92:74:00:42:A7:AA:A2:F9:F5:CE:CD:6A:A8:FC:9F
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/Vi3G2V2SdABCp6qi-fXOzWqo_J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.188.0/22
195.110.50.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:fc:49:ef:0e:e3:04:6b:0c:3f:a2:cf:a4:1b:c6:7b:b8:82:
e9:0d:48:b3:54:f3:84:10:a6:71:28:ac:47:aa:76:6b:93:e8:
f6:92:56:46:0a:8b:a7:bd:59:ee:a0:5e:88:50:81:4e:87:42:
a1:39:ca:3d:24:63:5f:a6:e7:b6:d5:57:a7:44:51:53:13:dc:
50:ae:f2:28:fd:a5:8d:74:89:3e:f0:18:b5:0f:76:1e:04:c8:
b9:ba:fe:e0:a6:89:42:98:5f:69:f8:ff:33:89:70:77:fc:d6:
2a:76:04:6d:5e:1e:a5:02:7d:de:cf:16:bd:c0:b6:0a:0b:a6:
5a:64:d0:d5:e5:31:78:13:c4:4d:69:07:9c:34:c4:37:1a:4f:
d4:88:0e:7e:e2:0f:57:a0:5e:b2:ac:11:54:8e:2c:7e:2b:cc:
fd:84:5d:6a:e8:7d:3c:2b:3f:76:b5:11:fd:3a:7b:5d:5c:e3:
4a:92:9b:d6:b1:5f:d2:2c:c4:81:40:3e:78:94:67:fb:56:7b:
c5:63:20:b2:53:f4:0f:1e:c7:b8:79:27:b3:32:8c:55:d2:bf:
e9:d4:79:5d:86:f5:5a:73:af:dc:da:3d:ba:f9:7b:01:1d:63:
c2:69:8d:c9:9d:a6:b1:c0:e5:e8:05:24:f4:d8:15:a2:73:e5:
3a:2e:90:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYTnUV3ArCMBTxYcyKtp1Sw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWYwY2IwNmE1YTQ3YjRkZGFjN2Y0ZDZkZmQ0NGFiYTRk
MzFmMmUwHhcNMjIxMjA2MTIwMzAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjJkYzZkOTVkOTI3NDAwNDJhN2FhYTJmOWY1Y2VjZDZhYThmYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF+vSYXjTcg5+3dz18CirQup9FIo
wK/k2MN7elsaT7zRkOr+4Nl3cjJnLUmHSsDx6kC9PDod1Lborw+ZygNHRSsYUtw8
GlFxqfMNzNfiSePSyv75HCt5fDIRXGGK/lp1Gm1FR4U1C9fgiWE5vMi+omIlGGeO
o8Nau4bjIfrCVlNkB2YwZaEa8eOfyIekn7Wlwxvt0s/6tSTrwgqJaIN1EA81vY6q
LhBRh2Ypl/vuUWUKz3I01lEy93zKgyypDYGiwfbj5I6GFhdRSmgn1Xo7fT4zV0tH
njGsOpQAFz95yAVZTcz2yPITkQR1BPS3pcIX/DfDln+PKZwpMuGeaxqJwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFYtxtldknQAQqeqovn1zs1qqPyfMB8GA1UdIwQY
MBaAFE1fDLBqWke03ax/TW39RKuk0x8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2Mt
ZGM4YjUyZTNlYTBhLzEvVmkzRzJWMlNkQUJDcDZxaS1mWE96V3FvX0o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2MtZGM4YjUyZTNlYTBh
LzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuWW8AwQB
w24yMA0GCSqGSIb3DQEBCwUAA4IBAQAf/EnvDuMEaww/os+kG8Z7uILpDUizVPOE
EKZxKKxHqnZrk+j2klZGCounvVnuoF6IUIFOh0KhOco9JGNfpue21VenRFFTE9xQ
rvIo/aWNdIk+8Bi1D3YeBMi5uv7gpolCmF9p+P8ziXB3/NYqdgRtXh6lAn3ezxa9
wLYKC6ZaZNDV5TF4E8RNaQecNMQ3Gk/UiA5+4g9XoF6yrBFUjix+K8z9hF1q6H08
Kz92tRH9OntdXONKkpvWsV/SLMSBQD54lGf7VnvFYyCyU/QPHse4eSezMoxV0r/p
1HldhvVac6/c2j26+XsBHWPCaY3JnaaxwOXoBST02BWic+U6LpAQ
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:54 2025 by rpki-client