Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/hD_dEzdvsQp9cQsAIRal0oh-9Ks.roa
File: hD_dEzdvsQp9cQsAIRal0oh-9Ks.roa (raw, json)
Hash identifier: rNznk5Tt/Y8FF3OIFHUJj0GfoL6KJ4ruOJGUK80xe8c=
Subject key identifier: 84:3F:DD:13:37:6F:B1:0A:7D:71:0B:00:21:16:A5:D2:88:7E:F4:AB
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 04CE2C5F
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/hD_dEzdvsQp9cQsAIRal0oh-9Ks.roa
Signing time: Wed 18 May 2022 07:30:16 +0000
ROA not before: Wed 18 May 2022 07:30:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202513
IP address blocks: 185.249.148.0/22 maxlen: 24
185.98.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80620639 (0x4ce2c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: May 18 07:30:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=843fdd13376fb10a7d710b002116a5d2887ef4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:e1:d9:19:20:67:ec:e5:a8:d7:cc:17:97:
b6:65:7e:ee:36:ae:f8:b1:f8:ae:a3:00:32:92:9c:
fa:e9:48:96:f4:35:ee:bc:65:46:df:7e:04:c6:f9:
69:9f:48:26:04:0f:1d:eb:a7:e4:82:03:0a:13:15:
3b:ce:a3:e5:ff:6e:3f:ff:b0:9e:cf:2c:31:d5:fa:
73:3a:da:be:02:10:03:44:08:5a:b0:f6:95:e9:c3:
cc:49:4b:2e:4b:80:af:02:3e:eb:4e:f7:ee:ce:dd:
e3:f1:e0:8c:2d:6e:96:83:47:36:e8:6e:5c:c1:e9:
fe:d4:1a:a4:45:8b:92:db:3e:9d:d5:8d:9b:16:cb:
05:13:b1:8e:ee:25:70:ff:85:ae:ed:f4:da:c1:88:
05:88:94:00:dc:f0:6b:7f:e7:97:45:ac:7e:ea:2d:
28:97:3a:dd:93:6b:9f:06:b3:43:f8:b9:5c:a9:be:
4d:81:27:1c:52:58:50:f8:18:11:ba:29:cc:a7:d0:
c5:ca:c7:e6:fe:8f:d0:cb:ec:92:54:9e:f7:80:8b:
42:18:61:86:ba:eb:68:99:84:ab:1c:65:af:c7:dd:
f8:0e:e9:61:2b:b6:9d:9c:2e:ff:ec:b3:96:54:95:
90:ea:3a:ab:79:a4:4e:d8:43:7e:26:64:c1:18:9c:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3F:DD:13:37:6F:B1:0A:7D:71:0B:00:21:16:A5:D2:88:7E:F4:AB
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/hD_dEzdvsQp9cQsAIRal0oh-9Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.16.0/22
185.249.148.0/22
Signature Algorithm: sha256WithRSAEncryption
84:d6:2f:7c:e6:a3:71:c5:a8:ad:07:8b:5a:89:ea:74:d4:ef:
d5:95:fb:de:3d:60:85:3b:03:cd:14:7d:a7:41:96:e6:b3:1b:
3e:1b:d4:b9:ae:c9:7c:c6:ad:ca:53:82:45:e4:8a:49:be:1c:
66:55:e7:c4:15:0a:24:28:56:bf:5a:44:94:25:52:e2:27:80:
2e:a5:9c:91:26:a6:5c:fa:02:52:d3:1a:2d:29:d8:a0:47:25:
f2:49:93:ec:e7:da:6e:b0:89:71:ca:00:0b:cd:ed:6a:2d:29:
7d:89:d2:2c:7d:18:7e:8a:0e:c3:ee:e5:50:10:82:83:33:32:
f6:54:15:76:b1:9e:02:ae:ac:a0:38:5d:14:9b:6a:25:3a:d6:
6e:c3:d1:d4:c8:5e:0e:0b:09:60:e2:26:a9:13:e6:05:a4:cb:
69:3c:d4:c2:7c:7c:a2:79:c8:b0:f5:41:27:cc:ac:ee:03:05:
da:85:ff:87:4b:a4:e6:56:ce:6c:05:9a:07:04:a7:02:ad:0e:
f8:6f:29:c5:88:ad:64:d0:7d:37:9e:6c:65:87:02:ab:1e:21:
c1:e9:f4:c2:d6:11:07:c3:e4:da:14:08:79:37:c9:37:35:ed:
f5:aa:86:85:8a:9f:af:ec:4a:7f:66:0d:71:6d:d4:a0:64:60:
14:78:ae:6d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBM4sXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDg1MDYxMzYxYjE5ZjIxMmVmZTkwYzJkOGNmM2VlZTYxN2YyMGU1MB4XDTIyMDUx
ODA3MzAxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQzZmRkMTMzNzZm
YjEwYTdkNzEwYjAwMjExNmE1ZDI4ODdlZjRhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKju4dkZIGfs5ajXzBeXtmV+7jau+LH4rqMAMpKc+ulIlvQ1
7rxlRt9+BMb5aZ9IJgQPHeun5IIDChMVO86j5f9uP/+wns8sMdX6czravgIQA0QI
WrD2lenDzElLLkuArwI+60737s7d4/HgjC1uloNHNuhuXMHp/tQapEWLkts+ndWN
mxbLBROxju4lcP+Fru302sGIBYiUANzwa3/nl0WsfuotKJc63ZNrnwazQ/i5XKm+
TYEnHFJYUPgYEbopzKfQxcrH5v6P0MvsklSe94CLQhhhhrrraJmEqxxlr8fd+A7p
YSu2nZwu/+yzllSVkOo6q3mkTthDfiZkwRicLDMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSEP90TN2+xCn1xCwAhFqXSiH70qzAfBgNVHSMEGDAWgBRthQYTYbGfIS7+
kMLYzz7uYX8g5TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JZVUdFMkd4bnlFdV9wREMyTTgtN21GX0lPVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvN2U3YjhiLTc5ZTAtNGY1MS1iODY2LTY3YWQ2MGQzODZkZC8x
L2hEX2RFemR2c1FwOWNRc0FJUmFsMG9oLTlLcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
N2U3YjhiLTc5ZTAtNGY1MS1iODY2LTY3YWQ2MGQzODZkZC8xL2JZVUdFMkd4bnlF
dV9wREMyTTgtN21GX0lPVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArliEAMEArn5lDANBgkqhkiG9w0B
AQsFAAOCAQEAhNYvfOajccWorQeLWonqdNTv1ZX73j1ghTsDzRR9p0GW5rMbPhvU
ua7JfMatylOCReSKSb4cZlXnxBUKJChWv1pElCVS4ieALqWckSamXPoCUtMaLSnY
oEcl8kmT7OfabrCJccoAC83tai0pfYnSLH0YfooOw+7lUBCCgzMy9lQVdrGeAq6s
oDhdFJtqJTrWbsPR1MheDgsJYOImqRPmBaTLaTzUwnx8onnIsPVBJ8ys7gMF2oX/
h0uk5lbObAWaBwSnAq0O+G8pxYitZNB9N55sZYcCqx4hwen0wtYRB8Pk2hQIeTfJ
NzXt9aqGhYqfr+xKf2YNcW3UoGRgFHiubQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:55 2025 by rpki-client