Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/qEYPEC0WZOvgMOI733eSaevMB5U.roa
File: qEYPEC0WZOvgMOI733eSaevMB5U.roa (raw, json)
Hash identifier: T1hZMlHAZQymwz/PyfFhVg0lt+0zHpLSj7HWtuY0jBs=
Subject key identifier: A8:46:0F:10:2D:16:64:EB:E0:30:E2:3B:DF:77:92:69:EB:CC:07:95
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 158D2A35
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/qEYPEC0WZOvgMOI733eSaevMB5U.roa
Signing time: Sat 01 Jan 2022 11:04:18 +0000
ROA not before: Sat 01 Jan 2022 11:04:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48492
IP address blocks: 185.56.192.0/24 maxlen: 24
185.56.192.0/22 maxlen: 22
185.56.193.0/24 maxlen: 24
185.56.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361572917 (0x158d2a35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Jan 1 11:04:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8460f102d1664ebe030e23bdf779269ebcc0795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:e6:5c:40:58:22:f1:65:b9:76:87:26:2e:
b9:4a:26:da:17:f7:c7:fa:8b:36:7e:90:73:b1:53:
3f:f9:fb:a9:44:15:6e:b8:80:bb:b5:45:06:b1:67:
da:b5:0c:47:25:2c:47:36:a9:3c:b3:ca:45:5b:96:
8c:76:b6:22:ec:8f:f8:46:fd:eb:84:c9:59:69:b6:
22:b9:eb:ba:bb:7f:cf:52:82:4c:3d:cc:59:8a:7a:
68:9b:b4:64:ae:a6:c2:fe:ec:80:16:e9:8c:23:b5:
f6:44:7a:4d:c6:f4:93:13:30:3d:95:04:df:34:88:
aa:1b:44:68:35:f5:4c:14:33:10:ba:a0:e0:d9:4f:
6a:dc:8e:3b:fc:82:79:99:6a:b4:20:ef:e2:2c:55:
68:a3:87:80:4c:54:86:9f:44:95:99:aa:ea:4d:33:
2b:7a:cf:1d:67:df:29:70:92:5f:04:0f:b5:d7:95:
16:9d:13:82:e7:8d:61:5b:05:50:ae:af:4b:a5:a2:
6f:eb:2a:be:39:eb:1f:89:e6:f9:cd:cd:f6:ab:ee:
2e:31:0b:95:7d:be:08:b8:c5:5a:90:d4:23:3e:b9:
43:03:6f:69:56:a7:2b:76:92:bb:e7:3c:2c:8c:64:
0b:d8:08:98:92:98:76:ef:34:e4:6d:94:92:0c:01:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:0F:10:2D:16:64:EB:E0:30:E2:3B:DF:77:92:69:EB:CC:07:95
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/qEYPEC0WZOvgMOI733eSaevMB5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.192.0/22
Signature Algorithm: sha256WithRSAEncryption
96:bf:9b:4c:32:b1:5e:11:a7:95:c1:e5:42:9b:b3:69:01:75:
9f:ad:5b:84:9c:52:f4:e2:1f:99:1b:bf:9a:34:4a:41:10:bb:
2f:ef:38:9a:6d:9b:43:55:08:34:f7:2a:4e:ce:01:a4:bb:97:
21:43:28:5b:ca:e3:dd:0b:4b:37:ad:1c:65:be:5c:a7:b0:ae:
fe:14:f9:53:d8:f2:10:c0:4f:22:e2:d7:7e:11:a0:0a:1e:53:
ac:a3:d3:0c:fc:7e:40:f3:f0:67:c5:87:cf:e0:4b:36:fd:43:
3b:4b:08:bb:35:2f:24:3d:04:6e:4f:fb:42:02:4d:df:9f:b9:
ce:74:03:fd:93:66:9a:4a:a7:50:c8:70:a2:d5:2f:a6:1e:a0:
0f:2e:24:fa:e6:e1:92:98:33:ff:4e:5c:a4:8e:b0:91:36:37:
a1:5b:02:f8:7e:0a:cb:d3:0d:59:e6:06:24:1d:0f:82:df:01:
db:ad:23:2c:fd:06:53:26:b8:08:67:bb:11:fa:b9:b6:87:51:
83:74:b3:70:bd:a9:28:5c:ba:44:b2:03:55:7d:be:7c:6d:d5:
9f:e3:63:07:b2:65:ea:2a:53:06:d3:26:a2:29:4d:60:8b:ff:
48:32:6f:a8:f5:0c:72:4b:c5:03:c7:37:ac:99:18:bf:15:f0:
3c:a1:1e:fc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFY0qNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZTMxZGRlZjI1ZDk2Yzg0YjAwMWEyYWM1MDQ3YjA0ZTA2MGEwYWMzMB4XDTIyMDEw
MTExMDQxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTg0NjBmMTAyZDE2
NjRlYmUwMzBlMjNiZGY3NzkyNjllYmNjMDc5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJyA5lxAWCLxZbl2hyYuuUom2hf3x/qLNn6Qc7FTP/n7qUQV
briAu7VFBrFn2rUMRyUsRzapPLPKRVuWjHa2IuyP+Eb964TJWWm2Irnrurt/z1KC
TD3MWYp6aJu0ZK6mwv7sgBbpjCO19kR6Tcb0kxMwPZUE3zSIqhtEaDX1TBQzELqg
4NlPatyOO/yCeZlqtCDv4ixVaKOHgExUhp9ElZmq6k0zK3rPHWffKXCSXwQPtdeV
Fp0TgueNYVsFUK6vS6Wib+sqvjnrH4nm+c3N9qvuLjELlX2+CLjFWpDUIz65QwNv
aVanK3aSu+c8LIxkC9gImJKYdu805G2UkgwBUrsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSoRg8QLRZk6+Aw4jvfd5Jp68wHlTAfBgNVHSMEGDAWgBT+Md3vJdlshLAB
oqxQR7BOBgoKwzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19qSGQ3eVhaYklTd0FhS3NVRWV3VGdZS0NzTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvN2MwZjE0LTViMjQtNGIxYi04ZWI1LWI0ZDhjMmI3YTEwMy8x
L3FFWVBFQzBXWk92Z01PSTczM2VTYWV2TUI1VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
N2MwZjE0LTViMjQtNGIxYi04ZWI1LWI0ZDhjMmI3YTEwMy8xL19qSGQ3eVhaYklT
d0FhS3NVRWV3VGdZS0NzTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArk4wDANBgkqhkiG9w0BAQsFAAOC
AQEAlr+bTDKxXhGnlcHlQpuzaQF1n61bhJxS9OIfmRu/mjRKQRC7L+84mm2bQ1UI
NPcqTs4BpLuXIUMoW8rj3QtLN60cZb5cp7Cu/hT5U9jyEMBPIuLXfhGgCh5TrKPT
DPx+QPPwZ8WHz+BLNv1DO0sIuzUvJD0Ebk/7QgJN35+5znQD/ZNmmkqnUMhwotUv
ph6gDy4k+ubhkpgz/05cpI6wkTY3oVsC+H4Ky9MNWeYGJB0Pgt8B260jLP0GUya4
CGe7Efq5todRg3SzcL2pKFy6RLIDVX2+fG3Vn+NjB7Jl6ipTBtMmoilNYIv/SDJv
qPUMckvFA8c3rJkYvxXwPKEe/A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:07 2025 by rpki-client