Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/fUXbzPcHE5latNZpyQfVO9Os_64.roa
File: fUXbzPcHE5latNZpyQfVO9Os_64.roa (raw, json)
Hash identifier: DBN6xq7345JBS63XsnbGzFH0s5lCkZIrEdtGdl4do6Y=
Subject key identifier: 7D:45:DB:CC:F7:07:13:99:5A:B4:D6:69:C9:07:D5:3B:D3:AC:FF:AE
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 01856F26CBECFF56AE7EA48F27FB26DC3254
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/fUXbzPcHE5latNZpyQfVO9Os_64.roa
Signing time: Sun 01 Jan 2023 21:04:51 +0000
ROA not before: Sun 01 Jan 2023 21:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209299
IP address blocks: 185.192.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:cb:ec:ff:56:ae:7e:a4:8f:27:fb:26:dc:32:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Jan 1 21:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d45dbccf70713995ab4d669c907d53bd3acffae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:40:76:d1:64:0a:e7:14:0b:4b:13:3f:53:
08:de:50:38:e9:dc:88:45:5f:96:ed:1e:39:92:39:
f7:65:3c:7e:c9:62:00:47:41:1b:f0:ea:2e:f0:d6:
92:9a:84:8c:cf:0d:90:6d:76:6e:35:99:ab:43:6f:
d8:32:9c:63:3b:90:1f:ef:c5:c3:db:0c:b2:0c:ab:
73:ed:d8:ac:57:a8:85:89:3f:09:fd:fd:83:24:6c:
4e:d1:b7:e8:fd:85:8d:81:f6:c8:69:e0:2b:9f:fd:
b1:23:c3:77:26:88:c2:bf:aa:e4:17:13:4f:41:6f:
6f:96:d6:6c:8a:7d:45:a4:1c:de:7a:8a:b1:a7:fa:
61:2b:74:dd:27:53:c2:e9:32:38:2a:00:f7:91:55:
b6:57:b5:ab:74:30:68:af:e2:37:ca:16:6b:86:39:
f6:e6:89:80:9a:22:08:df:32:1d:6b:95:5d:81:d0:
36:8d:c6:50:4f:75:bc:1a:2f:9b:f2:ca:6c:81:f6:
21:21:24:60:be:b0:12:6c:fb:9e:04:69:32:e5:ec:
e4:00:72:0f:97:f9:62:4d:02:b9:dd:f3:85:ca:5d:
68:d3:cf:8a:88:3f:b1:80:21:89:5e:70:ea:b8:69:
c5:56:89:4e:b7:55:1b:65:f9:f2:17:fc:6a:74:ae:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:45:DB:CC:F7:07:13:99:5A:B4:D6:69:C9:07:D5:3B:D3:AC:FF:AE
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/fUXbzPcHE5latNZpyQfVO9Os_64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:d9:d4:1a:2d:c8:35:10:6f:9f:9e:d0:af:f0:ce:7a:c4:b0:
aa:c6:bc:76:d4:6f:0b:2e:ab:cc:39:fd:c4:4e:ce:00:5f:60:
17:48:21:b8:e5:48:da:9d:63:d8:bb:19:53:05:7e:3f:92:b0:
2a:f9:2b:0d:1d:40:30:1a:a3:28:b7:4a:dc:92:ba:a4:3a:ac:
48:bd:95:44:4d:df:be:a5:00:14:c5:ec:52:6c:f6:01:93:7b:
3a:8a:9e:d5:2c:ea:08:85:2e:f2:a5:e6:fb:9f:05:10:50:4b:
04:f9:36:41:65:bc:47:07:c4:6a:a2:45:b6:83:8e:93:d1:74:
ba:63:65:4b:20:df:d5:73:cf:e4:e1:28:7c:e1:04:95:aa:99:
32:aa:a9:e7:58:57:3d:2d:97:d5:a6:45:ca:3f:7e:10:f4:13:
c1:d7:d1:28:f6:a8:44:e4:d9:84:fb:08:02:c9:25:5c:23:81:
a4:a1:4b:d2:c0:06:0d:6d:d7:b1:23:0d:b6:94:b0:e0:92:f3:
9e:a6:b0:89:98:43:f4:46:57:59:ef:bf:93:12:3e:89:fd:7e:
bd:7e:31:b4:01:58:5b:a2:3e:8f:41:fe:46:53:92:8b:ea:39:
a5:48:4e:bc:d2:da:2b:47:19:ed:5c:8e:79:ba:b0:02:80:b8:
3c:4e:1b:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvJsvs/1aufqSPJ/sm3DJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmVmNTczMDA1MGM3MjBmOGM3OTA0NjZlYjhiOGE0OGVm
YmU3NDkwHhcNMjMwMTAxMjEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDQ1ZGJjY2Y3MDcxMzk5NWFiNGQ2NjljOTA3ZDUzYmQzYWNmZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3ZAdtFkCucUC0sTP1MI3lA46dyI
RV+W7R45kjn3ZTx+yWIAR0Eb8Oou8NaSmoSMzw2QbXZuNZmrQ2/YMpxjO5Af78XD
2wyyDKtz7disV6iFiT8J/f2DJGxO0bfo/YWNgfbIaeArn/2xI8N3JojCv6rkFxNP
QW9vltZsin1FpBzeeoqxp/phK3TdJ1PC6TI4KgD3kVW2V7WrdDBor+I3yhZrhjn2
5omAmiII3zIda5VdgdA2jcZQT3W8Gi+b8spsgfYhISRgvrASbPueBGky5ezkAHIP
l/liTQK53fOFyl1o08+KiD+xgCGJXnDquGnFVolOt1UbZfnyF/xqdK6R1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1F28z3BxOZWrTWackH1TvTrP+uMB8GA1UdIwQY
MBaAFHNu9XMAUMcg+MeQRm64uKSO++dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMt
M2FlNGY5Y2YyNjgzLzEvZlVYYnpQY0hFNWxhdE5acHlRZlZPOU9zXzY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMtM2FlNGY5Y2YyNjgz
LzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucAPMA0G
CSqGSIb3DQEBCwUAA4IBAQDB2dQaLcg1EG+fntCv8M56xLCqxrx21G8LLqvMOf3E
Ts4AX2AXSCG45UjanWPYuxlTBX4/krAq+SsNHUAwGqMot0rckrqkOqxIvZVETd++
pQAUxexSbPYBk3s6ip7VLOoIhS7ypeb7nwUQUEsE+TZBZbxHB8RqokW2g46T0XS6
Y2VLIN/Vc8/k4Sh84QSVqpkyqqnnWFc9LZfVpkXKP34Q9BPB19Eo9qhE5NmE+wgC
ySVcI4GkoUvSwAYNbdexIw22lLDgkvOeprCJmEP0RldZ77+TEj6J/X69fjG0AVhb
oj6PQf5GU5KL6jmlSE680torRxntXI55urACgLg8ThsV
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:35 2025 by rpki-client