Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/5AcQF0QiY6rQr5o5URWV9WfoxT8.roa
File: 5AcQF0QiY6rQr5o5URWV9WfoxT8.roa (raw, json)
Hash identifier: d1YBPtx5RWIM8gQpLzR15Kq9Sqk625FmImi0lDQAMBE=
Subject key identifier: E4:07:10:17:44:22:63:AA:D0:AF:9A:39:51:15:95:F5:67:E8:C5:3F
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 018B1120CB483DC741A839B7DD45142DA045
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/5AcQF0QiY6rQr5o5URWV9WfoxT8.roa
Signing time: Sun 08 Oct 2023 21:10:43 +0000
ROA not before: Sun 08 Oct 2023 21:10:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61327
IP address blocks: 185.11.40.0/22 maxlen: 24
185.42.216.0/22 maxlen: 24
2a03:68c0::/32 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:11:20:cb:48:3d:c7:41:a8:39:b7:dd:45:14:2d:a0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Oct 8 21:10:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4071017442263aad0af9a39511595f567e8c53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:d4:9d:2f:08:6d:35:bd:0e:62:fa:c2:a4:
5a:bf:49:1b:89:e4:e1:21:4f:93:9f:72:76:90:46:
93:fe:fa:79:74:6d:d6:bf:b1:2f:9b:17:e6:95:dc:
a3:db:fc:87:d0:c6:8f:d0:ef:7b:4b:0a:7b:ef:de:
a4:7b:52:ee:2a:aa:4d:da:fe:1e:ad:11:5a:c2:bc:
49:02:73:d6:56:d2:2e:24:9a:be:7d:e0:34:16:82:
95:63:be:a6:93:3d:3c:b3:5e:f2:89:6c:e9:fb:aa:
db:8d:7a:29:a2:f5:fc:0f:51:e2:25:1d:76:cf:78:
fe:72:46:87:50:23:85:70:cf:74:67:73:b3:d3:16:
01:e3:f7:35:85:96:77:f3:a1:1c:9c:90:e8:4f:b3:
e8:9e:d5:34:49:56:46:32:5e:88:b1:30:5a:80:61:
c9:16:92:fa:c2:11:04:06:b9:56:5b:97:6e:2e:2e:
b1:fb:57:20:1e:d2:d8:c8:f3:6b:96:d8:8d:57:7c:
f1:3d:0c:ac:f9:83:d7:a1:c4:45:b1:3f:ec:75:5c:
6f:ce:cd:02:8f:8a:52:76:56:9c:92:29:f8:db:46:
9f:0d:22:56:44:9b:ae:4c:72:58:88:9a:3c:4f:6c:
4e:cb:f0:52:c6:11:cd:10:28:d9:85:88:0c:c3:8e:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:07:10:17:44:22:63:AA:D0:AF:9A:39:51:15:95:F5:67:E8:C5:3F
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/5AcQF0QiY6rQr5o5URWV9WfoxT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.40.0/22
185.42.216.0/22
IPv6:
2a03:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
32:88:f9:26:8e:5f:8f:a4:b9:0d:84:d6:d7:7c:82:5f:dc:9f:
65:93:92:c3:87:45:27:60:3f:cf:5a:cb:48:25:4c:37:20:9a:
f2:02:99:01:45:e6:57:60:96:30:d7:51:9f:b5:9c:78:56:3e:
95:4d:44:44:1f:f7:10:e8:b8:52:0b:bd:62:bb:c9:f7:e8:cc:
74:b8:84:d2:2b:b6:97:39:9e:18:fd:09:9d:1c:b7:12:4f:0d:
6c:14:b2:a3:c1:20:6e:72:50:3b:5c:a2:bc:bb:19:8c:fa:e2:
54:4b:b0:59:0a:b0:98:d8:60:72:4d:69:e8:20:27:17:a6:bc:
8e:ad:5e:2e:cc:ef:23:14:77:ea:1b:f5:c6:08:cc:16:f6:0f:
89:34:3d:76:1d:25:db:ca:7d:c2:7e:b3:de:30:fd:26:29:f9:
46:b2:65:a1:2b:f0:89:f8:3c:e9:4c:7b:32:7d:c1:46:41:76:
0c:32:94:5f:16:47:30:33:ac:c7:6a:52:ad:9a:4a:7a:2b:d8:
bc:df:71:01:92:b3:bc:c1:eb:76:6d:a7:d8:37:59:3d:35:ce:
07:b2:14:0b:bc:c0:29:30:d4:19:e7:d4:1f:b2:85:dc:36:31:
28:a0:33:a2:af:cd:7a:bf:74:6f:7d:18:d3:b4:8d:e4:23:2f:
18:e6:25:bf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYsRIMtIPcdBqDm33UUULaBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmQzNzU1YTM1MDFiOWNiMGQ1ZWJhYTQ5OWU1ZWExNDli
Y2YwOGIwHhcNMjMxMDA4MjExMDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDA3MTAxNzQ0MjI2M2FhZDBhZjlhMzk1MTE1OTVmNTY3ZThjNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5bUnS8IbTW9DmL6wqRav0kbieTh
IU+Tn3J2kEaT/vp5dG3Wv7Evmxfmldyj2/yH0MaP0O97Swp7796ke1LuKqpN2v4e
rRFawrxJAnPWVtIuJJq+feA0FoKVY76mkz08s17yiWzp+6rbjXopovX8D1HiJR12
z3j+ckaHUCOFcM90Z3Oz0xYB4/c1hZZ386EcnJDoT7PontU0SVZGMl6IsTBagGHJ
FpL6whEEBrlWW5duLi6x+1cgHtLYyPNrltiNV3zxPQys+YPXocRFsT/sdVxvzs0C
j4pSdlackin420afDSJWRJuuTHJYiJo8T2xOy/BSxhHNECjZhYgMw45/bQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOQHEBdEImOq0K+aOVEVlfVn6MU/MB8GA1UdIwQY
MBaAFBwtN1WjUBucsNXrqkmeXqFJvPCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTkt
OWVjZTBiMjU2NThlLzEvNUFjUUYwUWlZNnJRcjVvNVVSV1Y5V2ZveFQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTktOWVjZTBiMjU2NThl
LzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQsoAwQC
uSrYMA0EAgACMAcDBQAqA2jAMA0GCSqGSIb3DQEBCwUAA4IBAQAyiPkmjl+PpLkN
hNbXfIJf3J9lk5LDh0UnYD/PWstIJUw3IJryApkBReZXYJYw11GftZx4Vj6VTURE
H/cQ6LhSC71iu8n36Mx0uITSK7aXOZ4Y/QmdHLcSTw1sFLKjwSBuclA7XKK8uxmM
+uJUS7BZCrCY2GByTWnoICcXpryOrV4uzO8jFHfqG/XGCMwW9g+JND12HSXbyn3C
frPeMP0mKflGsmWhK/CJ+DzpTHsyfcFGQXYMMpRfFkcwM6zHalKtmkp6K9i833EB
krO8wet2bafYN1k9Nc4HshQLvMApMNQZ59QfsoXcNjEooDOir816v3RvfRjTtI3k
Iy8Y5iW/
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:31 2025 by rpki-client