Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/daW7Fj2NlbQbUodREl1tbSbq4gE.roa
File: daW7Fj2NlbQbUodREl1tbSbq4gE.roa (raw, json)
Hash identifier: SFGB5NS7hP4k1jcS3LdBnw1I3tyZN+6/lVxUI6o5v6Y=
Subject key identifier: 75:A5:BB:16:3D:8D:95:B4:1B:52:87:51:12:5D:6D:6D:26:EA:E2:01
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 049B21A7
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/daW7Fj2NlbQbUodREl1tbSbq4gE.roa
Signing time: Sat 01 Jan 2022 08:00:47 +0000
ROA not before: Sat 01 Jan 2022 08:00:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42487
IP address blocks: 89.28.144.0/21 maxlen: 21
185.94.220.0/22 maxlen: 22
2a01:58c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77275559 (0x49b21a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Jan 1 08:00:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75a5bb163d8d95b41b528751125d6d6d26eae201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:2f:6c:46:10:39:6c:d5:f0:f7:cb:54:da:
86:f8:ea:8a:e5:c5:6a:42:a4:19:2f:0a:02:97:2b:
63:c1:b6:c6:9e:56:c9:c6:4f:eb:24:06:98:41:e6:
b0:3d:f8:7e:2d:ff:ef:c2:e3:a8:28:99:96:c0:52:
3d:d6:97:7e:a3:64:87:50:35:2a:9e:7a:19:10:de:
a9:4a:98:21:ad:40:84:67:73:7c:de:d2:66:5e:95:
d0:10:27:65:71:15:4e:2e:aa:2e:31:f3:02:7e:bd:
fe:99:0c:74:53:fc:36:17:8b:70:50:7f:0e:3b:2a:
9d:d1:2f:d4:51:98:10:50:26:24:3d:89:58:95:ac:
97:15:2e:29:f0:3e:f8:47:4c:8e:d6:2c:0a:98:ec:
6b:b7:5d:13:be:c8:40:79:76:fc:cc:6f:6d:5a:a3:
60:ce:04:2f:2a:e7:19:5b:87:89:ae:e5:bb:6d:e3:
e5:e0:b5:d7:33:43:c7:c7:c0:d7:0f:9c:8b:fc:b6:
98:8f:2a:88:23:25:3a:14:c2:fe:fa:05:20:98:31:
c5:99:30:bd:52:fa:dc:b0:b2:2b:40:51:d0:89:19:
c7:4d:79:08:b2:38:eb:a9:bb:ae:a5:3a:57:f0:d0:
c6:9f:8a:27:7c:16:b1:27:1e:4c:35:3a:cf:6d:e4:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A5:BB:16:3D:8D:95:B4:1B:52:87:51:12:5D:6D:6D:26:EA:E2:01
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/daW7Fj2NlbQbUodREl1tbSbq4gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.144.0/21
185.94.220.0/22
IPv6:
2a01:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
af:ca:7c:41:5f:50:33:13:32:41:88:6e:2c:35:d0:7c:6d:dd:
6e:6a:57:39:ee:6c:06:17:57:5c:6e:d6:c7:22:17:79:4f:ab:
9f:a1:a2:50:a6:cf:3b:1d:bb:a6:dc:c1:13:38:64:90:14:75:
cd:c1:21:a9:ae:da:54:c4:c6:59:d1:ef:4b:ad:a6:b3:a9:41:
46:a2:58:75:b7:b1:bf:0d:5e:8f:e0:3f:7c:43:d7:b8:65:5b:
c6:a8:1e:d1:e1:57:68:09:b7:36:14:b4:c2:7d:26:0b:a2:2a:
54:2c:00:c7:f1:4d:ef:d6:cc:06:d1:bc:98:85:44:41:36:85:
f2:15:87:ed:2e:cb:2c:65:f1:58:55:ce:e6:fe:cf:94:f0:f9:
78:7e:bc:0b:85:a2:98:3d:e4:3d:ac:1f:49:44:7b:5e:8c:23:
04:9f:0d:e3:a2:68:de:d6:98:65:cc:07:d9:60:4b:4d:19:19:
33:98:f5:a3:45:3b:17:d0:e8:54:8d:9f:6b:36:59:78:7f:43:
a8:8f:e2:56:62:a4:72:af:90:b1:16:b8:cd:14:48:0d:0a:70:
13:80:03:80:d5:aa:dc:08:cf:9e:87:1c:93:95:15:86:b3:2c:
23:5b:f3:fc:12:b1:95:dc:5e:83:d3:ad:f4:1e:f0:24:df:40:
9e:8c:25:f1
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEBJshpzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MzNkZWVkODgzYzJhNjkwY2U1NDgyOWI0OGY5ZDc4Y2Q3YjI1ZmQ3MB4XDTIyMDEw
MTA4MDA0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzVhNWJiMTYzZDhk
OTViNDFiNTI4NzUxMTI1ZDZkNmQyNmVhZTIwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJMuL2xGEDls1fD3y1TahvjqiuXFakKkGS8KApcrY8G2xp5W
ycZP6yQGmEHmsD34fi3/78LjqCiZlsBSPdaXfqNkh1A1Kp56GRDeqUqYIa1AhGdz
fN7SZl6V0BAnZXEVTi6qLjHzAn69/pkMdFP8NheLcFB/DjsqndEv1FGYEFAmJD2J
WJWslxUuKfA++EdMjtYsCpjsa7ddE77IQHl2/MxvbVqjYM4ELyrnGVuHia7lu23j
5eC11zNDx8fA1w+ci/y2mI8qiCMlOhTC/voFIJgxxZkwvVL63LCyK0BR0IkZx015
CLI466m7rqU6V/DQxp+KJ3wWsSceTDU6z23kDacCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBR1pbsWPY2VtBtSh1ESXW1tJuriATAfBgNVHSMEGDAWgBQTPe7Yg8KmkM5U
gptI+deM17Jf1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0V6M3UySVBDcHBET1ZJS2JTUG5Yak5leVg5Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvYzQ0NDA5LWE2NWQtNGI4YS1iZmVhLTRiZWRkM2JkNmVhMS8x
L2RhVzdGajJObGJRYlVvZFJFbDF0YlNicTRnRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
YzQ0NDA5LWE2NWQtNGI4YS1iZmVhLTRiZWRkM2JkNmVhMS8xL0V6M3UySVBDcHBE
T1ZJS2JTUG5Yak5leVg5Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA1kckAMEArle3DANBAIAAjAHAwUA
KgFYwDANBgkqhkiG9w0BAQsFAAOCAQEAr8p8QV9QMxMyQYhuLDXQfG3dbmpXOe5s
BhdXXG7WxyIXeU+rn6GiUKbPOx27ptzBEzhkkBR1zcEhqa7aVMTGWdHvS62ms6lB
RqJYdbexvw1ej+A/fEPXuGVbxqge0eFXaAm3NhS0wn0mC6IqVCwAx/FN79bMBtG8
mIVEQTaF8hWH7S7LLGXxWFXO5v7PlPD5eH68C4WimD3kPawfSUR7XowjBJ8N46Jo
3taYZcwH2WBLTRkZM5j1o0U7F9DoVI2fazZZeH9DqI/iVmKkcq+QsRa4zRRIDQpw
E4ADgNWq3AjPnocck5UVhrMsI1vz/BKxldxeg9Ot9B7wJN9Anowl8Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:23 2025 by rpki-client