Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/hWtyUa57a5727roc0HfmwBPCHus.roa
File: hWtyUa57a5727roc0HfmwBPCHus.roa (raw, json)
Hash identifier: TSp30lDyXRdvUGgLyeZmxYKniqbiqAVZ+LktEuM02HY=
Subject key identifier: 85:6B:72:51:AE:7B:6B:9E:F6:EE:BA:1C:D0:77:E6:C0:13:C2:1E:EB
Certificate issuer: /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Certificate serial: 083EEFF7
Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/hWtyUa57a5727roc0HfmwBPCHus.roa
Signing time: Sat 01 Jan 2022 10:57:36 +0000
ROA not before: Sat 01 Jan 2022 10:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61408
IP address blocks: 185.35.191.0/24 maxlen: 24
185.35.190.0/23 maxlen: 23
185.35.190.0/24 maxlen: 24
185.35.189.0/24 maxlen: 24
185.35.188.0/24 maxlen: 24
185.35.188.0/23 maxlen: 23
185.35.188.0/22 maxlen: 22
5.56.2.0/24 maxlen: 24
5.56.3.0/24 maxlen: 24
5.56.4.0/22 maxlen: 22
5.56.2.0/23 maxlen: 23
5.56.1.0/24 maxlen: 24
5.56.0.0/21 maxlen: 21
5.56.0.0/22 maxlen: 22
5.56.0.0/23 maxlen: 23
5.56.0.0/24 maxlen: 24
5.56.4.0/23 maxlen: 23
5.56.4.0/24 maxlen: 24
5.56.7.0/24 maxlen: 24
5.56.6.0/24 maxlen: 24
5.56.6.0/23 maxlen: 23
5.56.5.0/24 maxlen: 24
2a03:30c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138342391 (0x83eeff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Validity
Not Before: Jan 1 10:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=856b7251ae7b6b9ef6eeba1cd077e6c013c21eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:ce:66:15:28:cb:01:5e:2f:c6:4a:fc:20:
49:9d:e9:4a:5e:a5:4b:22:95:0c:c4:7c:88:4f:f0:
c5:af:d6:10:b3:72:b2:88:58:be:d6:65:b8:5b:6b:
fd:b3:1d:80:08:b2:23:b2:90:35:5d:72:37:09:e4:
f8:7a:6d:5b:cc:ef:44:7c:8a:83:91:51:10:0f:0f:
ec:99:4c:cb:55:e9:46:01:37:e2:48:13:cf:ff:8d:
28:4d:02:89:20:09:78:fb:f9:fa:bf:85:df:d1:b0:
00:36:1c:12:68:a7:0f:c7:bf:e6:52:e7:f5:f4:e3:
e9:05:29:18:98:e6:b0:39:a7:53:cb:02:61:92:80:
76:d3:ad:04:91:58:b0:d2:54:a7:88:3a:2c:bb:40:
14:12:1a:41:8a:a3:32:c0:4c:1f:19:e6:0f:95:63:
cb:ab:cc:fa:77:80:5f:56:2e:56:8f:70:54:ac:4f:
97:89:a2:87:7d:f9:cf:6e:74:c4:3f:19:60:2a:7e:
9c:71:74:58:a1:9e:1b:90:38:54:40:13:31:a6:3d:
e5:02:1e:c2:a9:00:92:b8:9b:60:6c:1f:f7:0d:b7:
c2:3c:b1:ae:f8:bf:cd:20:96:17:df:50:9a:11:a5:
dd:55:10:97:b9:47:f1:1f:1d:a3:76:56:43:eb:34:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:72:51:AE:7B:6B:9E:F6:EE:BA:1C:D0:77:E6:C0:13:C2:1E:EB
X509v3 Authority Key Identifier:
keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/hWtyUa57a5727roc0HfmwBPCHus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.0.0/21
185.35.188.0/22
IPv6:
2a03:30c0::/32
Signature Algorithm: sha256WithRSAEncryption
02:2b:ea:ed:49:38:6c:5a:39:e3:d3:31:a9:63:2e:bd:e5:9e:
ea:78:6c:e0:05:9d:1a:80:ca:74:e0:e5:1b:a7:80:0a:ac:86:
a9:2e:3e:69:a1:e2:9b:07:91:1f:83:ff:1f:ae:be:ab:ec:aa:
77:95:0c:0b:4c:45:96:57:c1:72:2e:ff:10:39:08:41:43:b7:
16:4e:8f:cd:a0:0a:09:ce:99:e9:af:39:a2:8b:81:80:6c:de:
23:77:d5:16:9a:48:9e:99:b3:46:bc:f5:9b:75:c7:e6:28:13:
c9:45:34:84:50:7e:48:13:f8:46:90:1a:94:0e:3a:ac:a7:5d:
1b:eb:f6:1b:9c:f0:f2:06:9e:0f:c0:e3:1e:67:e2:7b:59:1b:
40:8d:a3:36:f4:40:42:fd:5c:27:53:c1:18:2a:91:36:f1:e5:
23:d3:cd:85:71:33:ca:d4:2d:6d:66:8d:bc:bd:57:53:63:6b:
a1:2d:57:f2:68:ae:d5:d6:20:ec:78:41:d0:f3:a8:a0:bc:15:
2c:a0:e1:3a:6e:d3:b0:e5:46:c6:e6:48:94:20:7e:c8:55:f4:
59:8c:28:40:68:97:f7:1a:7e:f9:7e:e2:dd:23:d7:c8:59:d8:
11:75:0d:41:36:5b:11:41:a8:15:82:28:ea:e4:78:cb:f0:2a:
bf:e4:9e:6e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECD7v9zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzRkOTY2ZDAwYWZiYzM5YjU5NThiYzFhNmVkNTc5M2ZmYzBjNTRkMB4XDTIyMDEw
MTEwNTczNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODU2YjcyNTFhZTdi
NmI5ZWY2ZWViYTFjZDA3N2U2YzAxM2MyMWVlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxbzmYVKMsBXi/GSvwgSZ3pSl6lSyKVDMR8iE/wxa/WELNy
sohYvtZluFtr/bMdgAiyI7KQNV1yNwnk+HptW8zvRHyKg5FREA8P7JlMy1XpRgE3
4kgTz/+NKE0CiSAJePv5+r+F39GwADYcEminD8e/5lLn9fTj6QUpGJjmsDmnU8sC
YZKAdtOtBJFYsNJUp4g6LLtAFBIaQYqjMsBMHxnmD5Vjy6vM+neAX1YuVo9wVKxP
l4mih335z250xD8ZYCp+nHF0WKGeG5A4VEATMaY95QIewqkAkribYGwf9w23wjyx
rvi/zSCWF99QmhGl3VUQl7lH8R8do3ZWQ+s0wrcCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSFa3JRrntrnvbuuhzQd+bAE8Ie6zAfBgNVHSMEGDAWgBSDTZZtAK+8ObWV
i8Gm7VeT/8DFTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2cwMldiUUN2dkRtMWxZdkJwdTFYa19fQXhVMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDQvODgzMGE0LTZjODMtNDMzOC1iYWZkLWI1ZDFlOTAyMzEwYS8x
L2hXdHlVYTU3YTU3Mjdyb2MwSGZtd0JQQ0h1cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQv
ODgzMGE0LTZjODMtNDMzOC1iYWZkLWI1ZDFlOTAyMzEwYS8xL2cwMldiUUN2dkRt
MWxZdkJwdTFYa19fQXhVMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAwU4AAMEArkjvDANBAIAAjAHAwUA
KgMwwDANBgkqhkiG9w0BAQsFAAOCAQEAAivq7Uk4bFo549MxqWMuveWe6nhs4AWd
GoDKdODlG6eACqyGqS4+aaHimweRH4P/H66+q+yqd5UMC0xFllfBci7/EDkIQUO3
Fk6PzaAKCc6Z6a85oouBgGzeI3fVFppInpmzRrz1m3XH5igTyUU0hFB+SBP4RpAa
lA46rKddG+v2G5zw8gaeD8DjHmfie1kbQI2jNvRAQv1cJ1PBGCqRNvHlI9PNhXEz
ytQtbWaNvL1XU2NroS1X8miu1dYg7HhB0POooLwVLKDhOm7TsOVGxuZIlCB+yFX0
WYwoQGiX9xp++X7i3SPXyFnYEXUNQTZbEUGoFYIo6uR4y/Aqv+Sebg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:47 2025 by rpki-client