Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/v7aTfUpjVp2B2tr5GKf2S9Jg7b4.roa
File: v7aTfUpjVp2B2tr5GKf2S9Jg7b4.roa (raw, json)
Hash identifier: zAGV7+AdkIczdFNaxFJ/HsRJ4BXjYyPoDjFB//vaagQ=
Subject key identifier: BF:B6:93:7D:4A:63:56:9D:81:DA:DA:F9:18:A7:F6:4B:D2:60:ED:BE
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 018572C360620F8C2C7C0A8C28B86C08C217
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/v7aTfUpjVp2B2tr5GKf2S9Jg7b4.roa
Signing time: Mon 02 Jan 2023 13:54:44 +0000
ROA not before: Mon 02 Jan 2023 13:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206574
IP address blocks: 185.105.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:60:62:0f:8c:2c:7c:0a:8c:28:b8:6c:08:c2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Jan 2 13:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfb6937d4a63569d81dadaf918a7f64bd260edbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:06:bf:b4:80:6d:23:45:89:c3:65:f9:f3:
63:1f:6a:34:0e:69:b1:d5:d2:24:9e:d9:3b:af:01:
9c:85:34:4b:3a:2d:1e:7c:71:95:41:f2:05:d9:ec:
1f:d2:d9:43:51:13:be:f8:37:dc:ee:c1:33:a0:0e:
37:3f:29:e4:16:92:e8:c3:63:0c:d3:bb:ef:fc:75:
aa:da:85:03:6a:9f:c3:8a:de:36:e3:38:6c:34:8b:
9e:9d:dc:2c:53:ed:c7:d3:f4:d4:e9:a1:f2:e2:f7:
c2:0f:5e:06:2b:41:f1:f0:b2:33:38:d5:ac:84:2a:
16:4c:27:cd:b5:bd:70:6b:f9:27:2d:7b:3e:6f:72:
64:cc:de:1c:21:a4:1f:fd:84:ca:9d:c1:c3:c9:fb:
3d:21:95:ec:d8:c4:b2:22:4c:12:6a:ef:7e:7f:2f:
c9:e2:16:63:26:de:b3:5b:45:09:78:18:a6:be:42:
ac:c5:f2:12:9a:8d:38:87:f0:13:a0:05:db:2e:8c:
25:40:78:b4:d9:fd:17:e5:e3:1a:ab:3a:41:58:74:
dd:87:30:df:e2:00:06:ec:92:0d:f5:43:32:bc:ee:
4b:b9:c1:78:be:44:e4:cb:7f:cc:93:c2:0f:e4:19:
d5:24:0d:a3:92:e2:00:6a:35:58:2d:1d:a1:83:68:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:93:7D:4A:63:56:9D:81:DA:DA:F9:18:A7:F6:4B:D2:60:ED:BE
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/v7aTfUpjVp2B2tr5GKf2S9Jg7b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.183.0/24
Signature Algorithm: sha256WithRSAEncryption
70:65:e1:49:db:2a:66:38:5b:8b:89:54:12:c8:bd:fb:69:12:
3d:e6:7a:38:b1:25:88:a6:4b:06:0e:78:6d:97:1b:5a:10:ef:
bf:1f:33:16:49:f2:c4:f8:ab:52:b6:47:7f:c7:75:ec:ae:7f:
9f:9f:51:08:4f:8b:16:2e:63:ac:44:6a:18:03:42:d4:d5:e5:
a3:0e:88:b3:f1:f2:11:8e:d8:84:a4:a7:64:7b:37:7f:1e:71:
e0:4a:21:90:11:85:0c:43:dc:56:5a:f0:20:8c:d0:fd:ff:1a:
7d:c9:fb:31:3b:34:c3:0d:2b:d6:a2:2b:54:e1:03:2e:5d:00:
23:19:7a:3f:ab:96:e9:2f:ef:0b:0a:74:b5:0e:fc:fc:41:4c:
96:cf:56:bd:f0:29:fa:a5:0f:3e:8c:f5:56:71:c3:76:a1:c2:
f8:33:10:a8:20:f6:bc:2e:dc:fb:cc:1a:21:22:48:f6:f0:d0:
c9:fd:bf:c4:8f:28:f9:af:cc:48:ca:72:2b:cc:e3:fd:3d:b3:
dc:71:f2:99:f0:02:27:74:31:26:7c:9a:8b:2e:0b:f7:af:74:
c0:13:c5:17:8c:68:cd:d5:89:5a:5a:f3:e8:cb:32:99:97:5d:
7e:30:8c:25:62:6c:02:f3:06:16:7d:42:59:ae:74:34:88:8b:
72:c6:5e:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyw2BiD4wsfAqMKLhsCMIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDgwMjQxODg0OTFhMzE5YzUyNzY3MjFmOTQwZWZhZTdm
YzIxYWYwHhcNMjMwMTAyMTM1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmI2OTM3ZDRhNjM1NjlkODFkYWRhZjkxOGE3ZjY0YmQyNjBlZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkEGv7SAbSNFicNl+fNjH2o0Dmmx
1dIkntk7rwGchTRLOi0efHGVQfIF2ewf0tlDURO++Dfc7sEzoA43PynkFpLow2MM
07vv/HWq2oUDap/Dit424zhsNIuendwsU+3H0/TU6aHy4vfCD14GK0Hx8LIzONWs
hCoWTCfNtb1wa/knLXs+b3JkzN4cIaQf/YTKncHDyfs9IZXs2MSyIkwSau9+fy/J
4hZjJt6zW0UJeBimvkKsxfISmo04h/AToAXbLowlQHi02f0X5eMaqzpBWHTdhzDf
4gAG7JIN9UMyvO5LucF4vkTky3/Mk8IP5BnVJA2jkuIAajVYLR2hg2jVbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL+2k31KY1adgdra+Rin9kvSYO2+MB8GA1UdIwQY
MBaAFAPYAkGISRoxnFJ2ch+UDvrn/CGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODct
N2JiYWM4Y2MyNzgzLzEvdjdhVGZVcGpWcDJCMnRyNUdLZjJTOUpnN2I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODctN2JiYWM4Y2MyNzgz
LzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWm3MA0G
CSqGSIb3DQEBCwUAA4IBAQBwZeFJ2ypmOFuLiVQSyL37aRI95no4sSWIpksGDnht
lxtaEO+/HzMWSfLE+KtStkd/x3Xsrn+fn1EIT4sWLmOsRGoYA0LU1eWjDoiz8fIR
jtiEpKdkezd/HnHgSiGQEYUMQ9xWWvAgjND9/xp9yfsxOzTDDSvWoitU4QMuXQAj
GXo/q5bpL+8LCnS1Dvz8QUyWz1a98Cn6pQ8+jPVWccN2ocL4MxCoIPa8Ltz7zBoh
Ikj28NDJ/b/Ejyj5r8xIynIrzOP9PbPccfKZ8AIndDEmfJqLLgv3r3TAE8UXjGjN
1YlaWvPoyzKZl11+MIwlYmwC8wYWfUJZrnQ0iItyxl66
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:45:35 2025 by rpki-client