Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/je7yhK9_R9bBPL4yH7altXeZwQA.roa
File: je7yhK9_R9bBPL4yH7altXeZwQA.roa (raw, json)
Hash identifier: plFMRV/7bo5N6Wq5VbP+X/hRPVtsliJ1ikDl07oyC/w=
Subject key identifier: 8D:EE:F2:84:AF:7F:47:D6:C1:3C:BE:32:1F:B6:A5:B5:77:99:C1:00
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 06D5920B
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/je7yhK9_R9bBPL4yH7altXeZwQA.roa
Signing time: Sat 01 Jan 2022 14:00:25 +0000
ROA not before: Sat 01 Jan 2022 14:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205496
IP address blocks: 194.15.137.0/24 maxlen: 24
185.214.228.0/24 maxlen: 24
185.214.228.0/22 maxlen: 22
185.214.231.0/24 maxlen: 24
185.214.230.0/24 maxlen: 24
185.214.229.0/24 maxlen: 24
2001:67c:2fd8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114659851 (0x6d5920b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Jan 1 14:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8deef284af7f47d6c13cbe321fb6a5b57799c100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:16:73:9d:0a:30:c9:ce:1a:f5:af:12:6e:
ee:05:e3:b2:66:ad:66:d6:01:95:2a:c2:36:f4:ed:
59:99:65:9f:78:c1:68:aa:44:55:65:f3:25:c4:b4:
d3:fb:48:3f:98:02:c0:db:e7:84:03:ee:cc:f8:fe:
06:9b:ff:17:38:c6:4d:4a:b1:95:8d:2f:17:b8:39:
4a:d6:da:a1:88:46:41:c2:26:fb:96:c1:e5:cb:b6:
92:d7:f8:c0:bf:6d:5f:a6:24:53:94:83:8c:77:bc:
83:5d:d5:42:39:71:dc:7e:72:a5:80:8c:12:03:0c:
12:70:92:da:cf:b9:d7:4e:1a:ba:47:42:4e:17:f0:
df:b5:4b:ab:e3:e2:ee:b8:54:9a:ed:6b:c3:ec:d2:
94:44:57:94:e6:5d:13:36:a6:81:c9:64:4d:32:74:
f1:98:65:49:7e:f0:c0:df:fd:e6:51:8e:e5:68:3e:
dd:35:e9:60:f2:1c:79:28:91:0f:80:c8:25:43:c6:
e6:1f:2a:7a:58:ce:f1:38:f1:8d:2c:fc:5c:3a:51:
05:d2:ec:f8:93:e5:e9:d4:f7:e1:ac:1b:fb:0e:e8:
e0:86:f9:e2:5c:0c:39:b5:01:d2:7a:56:d0:f4:56:
e5:aa:4b:de:7a:33:c9:10:e2:13:e3:93:00:bd:ae:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:F2:84:AF:7F:47:D6:C1:3C:BE:32:1F:B6:A5:B5:77:99:C1:00
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/je7yhK9_R9bBPL4yH7altXeZwQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.228.0/22
194.15.137.0/24
IPv6:
2001:67c:2fd8::/48
Signature Algorithm: sha256WithRSAEncryption
8b:19:37:64:8a:5e:e3:9b:27:9c:36:de:9f:fb:e0:15:34:43:
d5:2e:44:7c:d3:bc:a9:e0:c2:a8:8e:0e:bd:8a:3f:62:60:73:
01:91:3b:a3:c6:bd:2d:03:9d:eb:8d:f0:f3:1e:59:64:a3:40:
f2:fc:79:7f:48:0e:dc:c0:f8:69:bd:35:cb:bf:c1:ca:cc:1d:
41:ff:17:ae:5e:81:83:8e:f5:f2:29:d5:67:b9:9b:03:0d:d2:
0e:39:98:ba:d3:f8:57:e0:74:ef:58:45:e3:db:bf:bb:d7:86:
b5:a1:b9:1f:e3:40:fe:ce:09:25:6b:30:a8:cf:b7:bc:56:16:
c4:17:65:a1:09:ff:eb:50:d0:a9:2f:a2:5a:4e:f9:7c:b8:d3:
f5:cd:90:47:bb:a3:cc:e1:32:5a:c7:ab:fe:c2:a0:b4:c0:b8:
ec:a7:ba:f0:18:3c:1d:e3:57:5e:cc:06:6a:b9:b3:7a:98:46:
10:63:84:ca:9a:35:45:19:45:67:02:19:99:de:96:74:9d:be:
9b:88:b3:98:e2:25:7d:a3:d8:37:8d:eb:f9:ad:f2:78:39:4c:
01:98:48:52:70:19:8a:f9:4b:dd:b7:aa:8a:59:c7:36:9f:12:
ff:d1:8c:f6:3e:b6:28:b7:94:1e:90:50:40:cd:25:07:aa:7e:
21:f3:8d:c8
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEBtWSCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Nzc5OTY4ZTY2ZWRiZWEzNzJlZjk1YmFhMmJmNjg5MTM4NTY3YTQwMB4XDTIyMDEw
MTE0MDAyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGRlZWYyODRhZjdm
NDdkNmMxM2NiZTMyMWZiNmE1YjU3Nzk5YzEwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANkTFnOdCjDJzhr1rxJu7gXjsmatZtYBlSrCNvTtWZlln3jB
aKpEVWXzJcS00/tIP5gCwNvnhAPuzPj+Bpv/FzjGTUqxlY0vF7g5StbaoYhGQcIm
+5bB5cu2ktf4wL9tX6YkU5SDjHe8g13VQjlx3H5ypYCMEgMMEnCS2s+5104aukdC
Thfw37VLq+Pi7rhUmu1rw+zSlERXlOZdEzamgclkTTJ08ZhlSX7wwN/95lGO5Wg+
3TXpYPIceSiRD4DIJUPG5h8qeljO8TjxjSz8XDpRBdLs+JPl6dT34awb+w7o4Ib5
4lwMObUB0npW0PRW5apL3nozyRDiE+OTAL2ufxECAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBSN7vKEr39H1sE8vjIftqW1d5nBADAfBgNVHSMEGDAWgBTXeZaOZu2+o3Lv
lbqiv2iROFZ6QDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEzbVdqbWJ0dnFOeTc1VzZvcjlva1RoV2VrQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvOTRiZjViLWQzOGEtNGM3Ni1iMDFmLTZlNmZhMzliYjFlYy8x
L2plN3loSzlfUjliQlBMNHlIN2FsdFhlWndRQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
OTRiZjViLWQzOGEtNGM3Ni1iMDFmLTZlNmZhMzliYjFlYy8xLzEzbVdqbWJ0dnFO
eTc1VzZvcjlva1RoV2VrQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEArnW5AMEAMIPiTAPBAIAAjAJAwcA
IAEGfC/YMA0GCSqGSIb3DQEBCwUAA4IBAQCLGTdkil7jmyecNt6f++AVNEPVLkR8
07yp4MKojg69ij9iYHMBkTujxr0tA53rjfDzHllko0Dy/Hl/SA7cwPhpvTXLv8HK
zB1B/xeuXoGDjvXyKdVnuZsDDdIOOZi60/hX4HTvWEXj27+714a1obkf40D+zgkl
azCoz7e8VhbEF2WhCf/rUNCpL6JaTvl8uNP1zZBHu6PM4TJax6v+wqC0wLjsp7rw
GDwd41dezAZqubN6mEYQY4TKmjVFGUVnAhmZ3pZ0nb6biLOY4iV9o9g3jev5rfJ4
OUwBmEhScBmK+Uvdt6qKWcc2nxL/0Yz2PrYot5QekFBAzSUHqn4h843I
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:26 2025 by rpki-client