Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/8vW5qFHt5h0Z_j9SxLlGOyXI_zQ.roa
File: 8vW5qFHt5h0Z_j9SxLlGOyXI_zQ.roa (raw, json)
Hash identifier: WUXhHSqFqZ+d0Ox8ekH6lmWltPEFL0G8e5iMU2RRt5I=
Subject key identifier: F2:F5:B9:A8:51:ED:E6:1D:19:FE:3F:52:C4:B9:46:3B:25:C8:FF:34
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 018663A277F2B652CDF7D20EA32C5C3C03CC
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/8vW5qFHt5h0Z_j9SxLlGOyXI_zQ.roa
Signing time: Sat 18 Feb 2023 08:27:17 +0000
ROA not before: Sat 18 Feb 2023 08:27:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3170
IP address blocks: 185.208.88.0/22 maxlen: 24
2a0b:32c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:a2:77:f2:b6:52:cd:f7:d2:0e:a3:2c:5c:3c:03:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Feb 18 08:27:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2f5b9a851ede61d19fe3f52c4b9463b25c8ff34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:85:c8:47:f6:27:20:82:f6:4e:00:41:2b:
7b:77:a9:d2:b3:e7:8e:1f:9f:ae:3a:db:31:a0:df:
37:00:86:47:9e:03:79:4c:dd:f4:64:7a:64:cc:08:
8b:96:ca:82:5a:45:d6:e1:e3:6f:f7:5d:29:67:52:
c0:41:1a:15:54:31:8e:18:14:62:08:8b:4f:e0:88:
ea:bc:6e:71:74:09:f9:3a:cf:34:ee:e8:f7:48:10:
fb:94:e1:63:6b:f2:64:ab:67:71:37:e8:11:ff:55:
5d:34:8f:f8:ae:f6:a0:e6:f6:79:14:8d:7f:fa:ad:
bd:b0:9d:d5:30:53:9a:3d:bf:ef:f7:23:fc:da:5d:
14:3b:dc:37:14:f2:07:31:2b:f0:60:06:32:52:03:
7f:0e:1a:f2:bb:94:a1:0f:91:a2:fc:2e:cd:f0:8f:
20:f9:b3:59:c7:c3:c9:f2:ee:78:78:e1:53:82:48:
c5:9b:0c:f8:cd:2f:75:51:1c:41:4e:a5:35:49:70:
60:96:f2:d3:da:fc:dc:f5:de:9a:c9:d4:7f:ac:30:
87:a7:02:bc:35:bc:af:35:d2:be:6d:96:64:77:af:
a3:16:e7:a4:95:8a:1b:f4:d9:af:a9:07:58:9d:20:
66:17:c3:4a:18:f9:d4:a9:a1:af:70:80:ca:79:17:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F5:B9:A8:51:ED:E6:1D:19:FE:3F:52:C4:B9:46:3B:25:C8:FF:34
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/8vW5qFHt5h0Z_j9SxLlGOyXI_zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.88.0/22
IPv6:
2a0b:32c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:e9:5e:d7:ed:62:5b:55:09:f7:46:4d:77:4f:54:75:d1:c9:
a9:89:33:a0:19:c3:ac:da:5d:84:ff:bd:bf:33:cd:bf:ca:85:
1c:b2:02:d7:96:ba:b2:3d:f4:d6:7c:97:e8:78:e3:b1:a2:5c:
70:a6:d1:e0:e3:1b:73:0a:a5:7a:6f:9a:a9:2d:b1:dd:36:01:
9b:08:40:a0:62:a5:3e:24:e4:7b:78:1c:87:e7:c7:38:47:74:
8a:13:0a:78:7e:bc:2c:29:ce:5a:8c:56:01:81:4f:55:43:14:
e1:d6:d2:0b:71:d1:aa:30:c9:ad:c0:bd:ee:a3:b4:ec:e3:f4:
5c:cc:a6:4e:b0:72:7b:a0:63:b0:32:d6:83:93:b0:95:59:8d:
20:cc:9f:32:14:24:3a:16:c6:0f:39:53:fe:16:37:f3:02:3a:
8c:4d:be:29:a9:12:68:21:d0:12:b3:00:71:f4:3b:f4:4d:0c:
55:1a:a9:e2:cf:d5:b9:fd:74:69:05:44:d9:33:04:c0:b7:ac:
02:ae:5f:5c:90:00:e7:cf:8c:5b:33:35:86:8d:e1:79:2e:ef:
d6:69:b8:19:74:2e:b1:ad:54:fb:33:9b:b0:17:ac:db:13:03:
80:18:99:e6:11:df:ae:b5:42:c6:c8:f4:b7:bf:d6:d1:f5:3c:
a6:ed:f4:15
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYZjonfytlLN99IOoyxcPAPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjM0ZjE0NTg2ZTM5OWNkMzgwMmQ5Yzg4YjFlNjdkOGRk
YjAzYTgwHhcNMjMwMjE4MDgyNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmY1YjlhODUxZWRlNjFkMTlmZTNmNTJjNGI5NDYzYjI1YzhmZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2aFyEf2JyCC9k4AQSt7d6nSs+eO
H5+uOtsxoN83AIZHngN5TN30ZHpkzAiLlsqCWkXW4eNv910pZ1LAQRoVVDGOGBRi
CItP4IjqvG5xdAn5Os807uj3SBD7lOFja/Jkq2dxN+gR/1VdNI/4rvag5vZ5FI1/
+q29sJ3VMFOaPb/v9yP82l0UO9w3FPIHMSvwYAYyUgN/Dhryu5ShD5Gi/C7N8I8g
+bNZx8PJ8u54eOFTgkjFmwz4zS91URxBTqU1SXBglvLT2vzc9d6aydR/rDCHpwK8
NbyvNdK+bZZkd6+jFueklYob9NmvqQdYnSBmF8NKGPnUqaGvcIDKeRfyeQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPL1uahR7eYdGf4/UsS5RjslyP80MB8GA1UdIwQY
MBaAFGZjTxRYbjmc04AtnIix5n2N2wOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDct
MTcxZGI0NjkwYzBhLzEvOHZXNXFGSHQ1aDBaX2o5U3hMbEdPeVhJX3pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDctMTcxZGI0NjkwYzBh
LzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudBYMA0E
AgACMAcDBQMqCzLAMA0GCSqGSIb3DQEBCwUAA4IBAQCP6V7X7WJbVQn3Rk13T1R1
0cmpiTOgGcOs2l2E/72/M82/yoUcsgLXlrqyPfTWfJfoeOOxolxwptHg4xtzCqV6
b5qpLbHdNgGbCECgYqU+JOR7eByH58c4R3SKEwp4frwsKc5ajFYBgU9VQxTh1tIL
cdGqMMmtwL3uo7Ts4/RczKZOsHJ7oGOwMtaDk7CVWY0gzJ8yFCQ6FsYPOVP+Fjfz
AjqMTb4pqRJoIdASswBx9Dv0TQxVGqniz9W5/XRpBUTZMwTAt6wCrl9ckADnz4xb
MzWGjeF5Lu/WabgZdC6xrVT7M5uwF6zbEwOAGJnmEd+utULGyPS3v9bR9Tym7fQV
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:33 2025 by rpki-client