Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/h4dldu2x75Zy9Xs9X9TsKCqXIZ0.roa
File: h4dldu2x75Zy9Xs9X9TsKCqXIZ0.roa (raw, json)
Hash identifier: nwNCZJ/MMDAvCwUNlEfFoDIOrSWbg8zRqtgPkX/TKMU=
Subject key identifier: 87:87:65:76:ED:B1:EF:96:72:F5:7B:3D:5F:D4:EC:28:2A:97:21:9D
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 01856F26CB27C197A31E3FBD00EEBFFA9297
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/h4dldu2x75Zy9Xs9X9TsKCqXIZ0.roa
Signing time: Sun 01 Jan 2023 21:04:51 +0000
ROA not before: Sun 01 Jan 2023 21:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42977
IP address blocks: 185.192.14.0/24 maxlen: 24
185.192.12.0/24 maxlen: 24
185.192.13.0/24 maxlen: 24
2a0a:25c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:cb:27:c1:97:a3:1e:3f:bd:00:ee:bf:fa:92:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Jan 1 21:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87876576edb1ef9672f57b3d5fd4ec282a97219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:6f:72:e5:c7:20:76:fa:d3:a6:e6:4d:72:
82:3a:49:6b:af:a5:d5:f8:4d:9a:78:78:08:e5:db:
03:f2:cf:cc:a4:fd:41:ee:4e:c8:5f:72:d0:54:22:
cf:a9:69:53:6f:6a:09:f5:c8:8a:74:f3:fa:06:8b:
50:c6:6b:8a:23:6d:9a:b6:2e:bd:e5:9a:a5:66:00:
fb:b1:f5:b2:e6:d0:cc:22:2c:53:29:7b:69:70:81:
75:42:38:e4:05:4e:eb:29:df:1c:3e:07:9f:84:e3:
d9:24:00:d5:5a:69:c8:59:ab:1a:0a:bf:1d:16:f1:
61:41:b1:6b:57:e8:a0:73:3a:6c:98:0d:d0:aa:44:
d3:2b:1c:99:63:b6:b7:e7:7b:7c:a4:a7:2f:e0:d4:
4d:95:80:05:9c:82:d6:78:61:31:8a:18:39:5c:f0:
c1:ce:aa:f8:d4:e4:93:fa:1f:f7:fb:0c:14:4f:45:
05:b3:e2:60:60:2c:61:0b:cd:ea:a9:2c:11:87:86:
10:aa:97:de:ff:91:34:34:3e:a7:15:51:df:66:73:
90:34:34:6b:0d:5f:89:a0:8a:67:a8:9d:25:0c:aa:
bb:5c:f2:cf:aa:04:be:81:9f:75:e2:2f:42:35:51:
5d:dd:d0:bf:f9:7c:59:ce:25:ce:ca:52:ec:48:3a:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:87:65:76:ED:B1:EF:96:72:F5:7B:3D:5F:D4:EC:28:2A:97:21:9D
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/h4dldu2x75Zy9Xs9X9TsKCqXIZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.12.0-185.192.14.255
IPv6:
2a0a:25c0::/29
Signature Algorithm: sha256WithRSAEncryption
d7:d6:93:2a:f8:89:fc:4f:62:df:dd:d3:2f:9d:6e:82:dd:46:
7d:3e:eb:6f:ff:d9:15:96:86:35:65:50:7d:27:21:8a:27:de:
2c:93:88:7c:9b:2b:52:bc:49:ac:f0:2e:1b:91:e0:23:c5:78:
58:9b:6c:aa:7e:eb:18:3d:5d:cf:6f:12:5a:2c:18:bf:92:12:
f7:e5:d2:90:c0:87:9c:3f:d6:9d:37:70:9a:2d:6a:b6:29:d0:
af:2f:c6:fa:50:9e:45:16:af:76:79:09:ac:40:38:79:8a:2b:
fe:99:1c:14:8a:35:d4:13:17:04:7e:0b:53:7a:20:5e:56:69:
8e:c8:a6:19:33:08:90:dd:cc:83:22:35:b5:40:95:c0:39:40:
77:64:03:3d:5e:32:9d:c6:7e:e4:4f:df:d9:5f:cd:b6:1e:9e:
a8:c6:c6:51:4a:b8:08:f4:59:c8:6f:fd:c2:ee:43:fd:8f:2a:
3d:08:c3:0b:bc:3a:e3:cd:ef:a0:04:8b:f8:cd:0a:6c:c8:fe:
d8:b8:14:8f:05:43:d8:22:4e:56:57:10:1a:74:72:f9:79:f6:
f1:e7:a6:0e:a7:ea:40:c2:4e:3f:58:77:9f:44:28:b5:a3:7a:
7f:11:92:fe:42:c6:e7:b0:20:d8:a7:01:04:55:37:55:77:f4:
fe:90:c5:4d
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVvJssnwZejHj+9AO6/+pKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmVmNTczMDA1MGM3MjBmOGM3OTA0NjZlYjhiOGE0OGVm
YmU3NDkwHhcNMjMwMTAxMjEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Nzg3NjU3NmVkYjFlZjk2NzJmNTdiM2Q1ZmQ0ZWMyODJhOTcyMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bdvcuXHIHb606bmTXKCOklrr6XV
+E2aeHgI5dsD8s/MpP1B7k7IX3LQVCLPqWlTb2oJ9ciKdPP6BotQxmuKI22ati69
5ZqlZgD7sfWy5tDMIixTKXtpcIF1QjjkBU7rKd8cPgefhOPZJADVWmnIWasaCr8d
FvFhQbFrV+igczpsmA3QqkTTKxyZY7a353t8pKcv4NRNlYAFnILWeGExihg5XPDB
zqr41OST+h/3+wwUT0UFs+JgYCxhC83qqSwRh4YQqpfe/5E0ND6nFVHfZnOQNDRr
DV+JoIpnqJ0lDKq7XPLPqgS+gZ914i9CNVFd3dC/+XxZziXOylLsSDpvyQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFIeHZXbtse+WcvV7PV/U7CgqlyGdMB8GA1UdIwQY
MBaAFHNu9XMAUMcg+MeQRm64uKSO++dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMt
M2FlNGY5Y2YyNjgzLzEvaDRkbGR1Mng3NVp5OVhzOVg5VHNLQ3FYSVowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMtM2FlNGY5Y2YyNjgz
LzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5wAwD
BAC5wA4wDQQCAAIwBwMFAyoKJcAwDQYJKoZIhvcNAQELBQADggEBANfWkyr4ifxP
Yt/d0y+dboLdRn0+62//2RWWhjVlUH0nIYon3iyTiHybK1K8SazwLhuR4CPFeFib
bKp+6xg9Xc9vElosGL+SEvfl0pDAh5w/1p03cJotarYp0K8vxvpQnkUWr3Z5CaxA
OHmKK/6ZHBSKNdQTFwR+C1N6IF5WaY7IphkzCJDdzIMiNbVAlcA5QHdkAz1eMp3G
fuRP39lfzbYenqjGxlFKuAj0Wchv/cLuQ/2PKj0Iwwu8OuPN76AEi/jNCmzI/ti4
FI8FQ9giTlZXEBp0cvl59vHnpg6n6kDCTj9Yd59EKLWjen8Rkv5CxuewINinAQRV
N1V39P6QxU0=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:53:57 2025 by rpki-client