Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/uR8T8-UT7THpZ9jCxjl2XfMk2I4.roa
File: uR8T8-UT7THpZ9jCxjl2XfMk2I4.roa (raw, json)
Hash identifier: jzYTwHt9pHoIqh0v4wvWZ0AgV5LXQHkspkdcv9DWDNM=
Subject key identifier: B9:1F:13:F3:E5:13:ED:31:E9:67:D8:C2:C6:39:76:5D:F3:24:D8:8E
Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial: 03D28C40
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/uR8T8-UT7THpZ9jCxjl2XfMk2I4.roa
Signing time: Sat 01 Jan 2022 12:54:12 +0000
ROA not before: Sat 01 Jan 2022 12:54:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56704
IP address blocks: 185.159.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64130112 (0x3d28c40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
Validity
Not Before: Jan 1 12:54:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b91f13f3e513ed31e967d8c2c639765df324d88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:02:58:68:fd:d8:b8:48:6d:3b:aa:de:dc:21:
44:d1:b0:fa:f7:8d:df:95:80:50:d1:74:1e:a1:eb:
bf:db:1e:30:c9:48:bc:3b:a9:40:39:6d:62:c0:af:
51:17:09:35:a1:fc:06:20:b2:a3:8b:dd:57:9f:34:
c4:6d:de:58:90:0c:fc:e9:f2:d9:87:ac:19:ab:d9:
78:8e:9e:41:4c:00:66:3b:48:ca:b8:3b:c8:8a:71:
58:3f:64:91:4a:91:22:5a:7d:39:ea:9e:db:51:5d:
49:5f:37:8b:cb:f1:9e:95:b3:f2:94:76:62:a0:c5:
64:ca:3a:a6:b7:52:f2:42:c0:39:a7:a4:54:ec:2f:
88:4e:78:71:67:77:b3:88:3e:03:46:3c:2a:ba:8c:
29:a0:1d:e9:0f:9c:a1:8d:51:22:33:b6:79:ea:33:
2d:9a:66:0a:fa:c3:e1:2f:ba:55:78:a4:5f:0f:57:
34:e9:b7:ba:e5:87:40:21:64:a3:a1:ca:ab:20:7c:
b2:9f:ad:54:50:27:12:0c:da:c0:c1:d5:4a:5d:1b:
66:3d:3f:f5:38:16:a0:21:e3:ed:50:30:f3:c6:47:
3c:c7:15:b4:46:43:18:37:49:9b:27:fd:80:fe:6e:
55:70:39:ab:91:0a:6f:c2:a1:b5:1f:3a:d6:8a:0c:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:13:F3:E5:13:ED:31:E9:67:D8:C2:C6:39:76:5D:F3:24:D8:8E
X509v3 Authority Key Identifier:
keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/uR8T8-UT7THpZ9jCxjl2XfMk2I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.158.0/24
Signature Algorithm: sha256WithRSAEncryption
65:09:92:1e:95:24:2c:b6:62:93:6f:80:15:0b:c0:71:59:90:
9f:da:47:20:12:4d:05:e4:b6:7e:42:4a:f9:39:dc:a0:d1:f6:
0c:b1:bd:85:ea:79:ab:51:8b:76:9f:3f:b6:1b:71:2a:a4:7e:
b9:bc:3d:1e:54:4f:fb:89:c6:ec:a3:81:9a:0a:3a:29:00:4d:
d5:0c:70:b5:06:b6:ca:fa:da:c9:24:4f:db:7e:5e:ac:8b:1a:
92:99:34:96:c6:75:d5:c2:c4:f4:26:5f:56:b1:e8:9a:cb:ea:
f5:03:0d:12:f4:c3:b3:14:d9:56:90:db:fc:3a:ab:bb:af:53:
cb:1e:ed:e9:e3:98:35:93:d3:9b:cc:b3:7d:5f:57:b7:40:40:
dd:7a:7a:9e:0c:20:13:5e:b1:9d:1e:dd:2e:d5:1a:cd:bd:a4:
a6:bf:75:a9:be:7a:05:94:e1:2a:36:fa:67:1f:99:c3:da:a2:
55:2b:64:08:f1:3b:09:2f:35:33:3c:66:45:d9:27:a8:96:32:
41:1a:bf:f2:d1:4f:db:e5:63:9f:c3:21:6d:8b:8a:67:8f:64:
b6:ee:52:a9:d6:36:b8:af:42:73:ab:e6:d9:0f:9c:62:97:8e:
ea:a6:7a:d4:6e:dd:eb:b4:69:41:be:d0:78:f8:9b:c8:bd:13:
05:22:c0:99
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA9KMQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YWIxOTk2NTE1ODg0NDM0Yjg3ODgyYjViOTcyYTZlNTI5ZmZiMDBiMB4XDTIyMDEw
MTEyNTQxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjkxZjEzZjNlNTEz
ZWQzMWU5NjdkOGMyYzYzOTc2NWRmMzI0ZDg4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOcCWGj92LhIbTuq3twhRNGw+veN35WAUNF0HqHrv9seMMlI
vDupQDltYsCvURcJNaH8BiCyo4vdV580xG3eWJAM/Ony2YesGavZeI6eQUwAZjtI
yrg7yIpxWD9kkUqRIlp9Oeqe21FdSV83i8vxnpWz8pR2YqDFZMo6prdS8kLAOaek
VOwviE54cWd3s4g+A0Y8KrqMKaAd6Q+coY1RIjO2eeozLZpmCvrD4S+6VXikXw9X
NOm3uuWHQCFko6HKqyB8sp+tVFAnEgzawMHVSl0bZj0/9TgWoCHj7VAw88ZHPMcV
tEZDGDdJmyf9gP5uVXA5q5EKb8KhtR861ooM2jkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS5HxPz5RPtMeln2MLGOXZd8yTYjjAfBgNVHSMEGDAWgBRasZllFYhENLh4
grW5cqblKf+wCzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dyR1paUldJUkRTNGVJSzF1WEttNVNuX3NBcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvOTRjOTE5LWU2ZWEtNGUxOC1hZjEyLWVkNWIwMWQyNTI4Yy8x
L3VSOFQ4LVVUN1RIcFo5akN4amwyWGZNazJJNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
OTRjOTE5LWU2ZWEtNGUxOC1hZjEyLWVkNWIwMWQyNTI4Yy8xL1dyR1paUldJUkRT
NGVJSzF1WEttNVNuX3NBcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmfnjANBgkqhkiG9w0BAQsFAAOC
AQEAZQmSHpUkLLZik2+AFQvAcVmQn9pHIBJNBeS2fkJK+TncoNH2DLG9hep5q1GL
dp8/thtxKqR+ubw9HlRP+4nG7KOBmgo6KQBN1QxwtQa2yvraySRP235erIsakpk0
lsZ11cLE9CZfVrHomsvq9QMNEvTDsxTZVpDb/Dqru69Tyx7t6eOYNZPTm8yzfV9X
t0BA3Xp6ngwgE16xnR7dLtUazb2kpr91qb56BZThKjb6Zx+Zw9qiVStkCPE7CS81
MzxmRdknqJYyQRq/8tFP2+Vjn8MhbYuKZ49ktu5SqdY2uK9Cc6vm2Q+cYpeO6qZ6
1G7d67RpQb7QePibyL0TBSLAmQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:15 2025 by rpki-client