Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/_bv0BND3TXahInuYxMXhjz-ff6Y.roa
File: _bv0BND3TXahInuYxMXhjz-ff6Y.roa (raw, json)
Hash identifier: dUmtq917TMZvEJ6Qd7mnfc8T5GWBtEdWUE81UT0UbDs=
Subject key identifier: FD:BB:F4:04:D0:F7:4D:76:A1:22:7B:98:C4:C5:E1:8F:3F:9F:7F:A6
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 06F8B427
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/_bv0BND3TXahInuYxMXhjz-ff6Y.roa
Signing time: Sat 01 Jan 2022 01:54:14 +0000
ROA not before: Sat 01 Jan 2022 01:54:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204824
IP address blocks: 185.218.48.0/22 maxlen: 23
2a0b:d340::/29 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116962343 (0x6f8b427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jan 1 01:54:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdbbf404d0f74d76a1227b98c4c5e18f3f9f7fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:cd:4e:10:de:99:2c:36:3f:ac:01:94:3d:
c7:bc:c6:4e:35:52:25:0a:7d:91:de:9a:d0:f3:41:
32:06:d7:85:29:d8:c0:8e:db:4f:cf:ae:ed:f0:3d:
31:b6:b2:29:27:6e:0e:c5:42:c2:0c:3d:a4:23:49:
9f:a9:81:15:3c:95:85:5b:60:bf:27:7f:58:8a:de:
2c:55:e3:b6:4f:0e:97:b3:20:67:df:f9:ee:16:a3:
4b:88:90:5f:2e:d6:02:5e:29:24:a4:ec:06:ba:10:
14:a0:df:a4:e8:87:c4:09:55:dc:17:2b:31:1f:e5:
76:c4:e8:33:2b:c1:19:bf:77:63:fd:2d:b2:77:16:
f4:5a:7c:19:f0:1a:f2:60:f0:05:9e:04:14:a7:ac:
c7:02:9d:4f:ac:eb:ce:e0:a6:09:27:c7:1a:e9:7f:
1f:76:00:5e:5c:d2:06:5c:0d:26:d9:45:21:1d:f4:
bc:a1:5b:6a:e1:43:fc:51:0d:9a:84:35:db:7f:13:
f0:89:10:0d:13:cd:a8:45:e1:bb:cc:cc:bc:c2:f1:
56:cc:61:0f:f6:30:5f:38:ca:82:99:ca:2d:de:da:
ab:3e:f8:04:3e:00:64:45:ea:80:60:77:f4:86:3b:
8e:c3:fe:a2:0c:8d:04:51:5f:03:89:e2:28:f4:9f:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BB:F4:04:D0:F7:4D:76:A1:22:7B:98:C4:C5:E1:8F:3F:9F:7F:A6
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/_bv0BND3TXahInuYxMXhjz-ff6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.48.0/22
IPv6:
2a0b:d340::/29
Signature Algorithm: sha256WithRSAEncryption
e2:27:62:21:c9:81:80:98:61:00:02:22:94:a8:71:39:e3:30:
ed:7b:38:8e:c3:96:a8:ea:bf:71:4c:c3:41:58:75:cb:9a:75:
6f:c7:f4:d1:70:a2:7e:8d:e8:46:a0:8e:84:3e:7f:02:e5:45:
1e:41:60:43:b4:63:3e:f7:cb:80:ff:fd:c3:45:b5:6a:ea:4c:
f9:ea:f8:a9:d5:05:ea:f8:31:8b:f5:d5:53:f3:bd:29:54:13:
48:b3:36:a8:89:ad:24:ab:bb:11:28:e5:ea:0e:c1:c6:8f:2f:
d5:d9:e1:9c:64:ad:19:5e:0c:8c:f0:5b:33:74:4e:76:6c:0a:
e2:98:ec:d5:bf:9e:8b:ce:09:00:7d:17:87:fa:c3:b7:6d:41:
0b:6f:f9:f4:d7:13:3c:1c:6f:e4:a2:bd:84:12:f0:e0:c3:30:
05:32:e5:e6:0b:68:18:e0:ae:29:48:96:e4:14:53:dd:84:e0:
3d:0c:de:ba:cd:cd:09:cd:84:bb:0f:8a:31:92:d4:20:26:5d:
47:e4:13:48:d6:93:cb:ec:e2:c7:cf:20:50:76:e8:ef:8b:f1:
29:7f:34:34:3d:fd:46:df:27:9e:0a:4c:5b:c8:df:54:8e:e2:
8b:e3:75:0d:93:c8:ed:44:97:7f:1a:1a:19:0e:df:84:99:36:
47:81:a0:1a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBvi0JzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjM2OGU3MDI2OWRlNjYwY2JjMTRkZjljNzYzYjAxODc4OGExZmZjMB4XDTIyMDEw
MTAxNTQxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmRiYmY0MDRkMGY3
NGQ3NmExMjI3Yjk4YzRjNWUxOGYzZjlmN2ZhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMzozU4Q3pksNj+sAZQ9x7zGTjVSJQp9kd6a0PNBMgbXhSnY
wI7bT8+u7fA9MbayKSduDsVCwgw9pCNJn6mBFTyVhVtgvyd/WIreLFXjtk8Ol7Mg
Z9/57hajS4iQXy7WAl4pJKTsBroQFKDfpOiHxAlV3BcrMR/ldsToMyvBGb93Y/0t
sncW9Fp8GfAa8mDwBZ4EFKesxwKdT6zrzuCmCSfHGul/H3YAXlzSBlwNJtlFIR30
vKFbauFD/FENmoQ1238T8IkQDRPNqEXhu8zMvMLxVsxhD/YwXzjKgpnKLd7aqz74
BD4AZEXqgGB39IY7jsP+ogyNBFFfA4niKPSfMGcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBT9u/QE0PdNdqEie5jExeGPP59/pjAfBgNVHSMEGDAWgBQbNo5wJp3mYMvB
TfnHY7AYeIof/DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0d6YU9jQ2FkNW1ETHdVMzV4Mk93R0hpS0hfdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvZjY1OTYwLWIwM2MtNDk4Yy1iNmQ1LTYwOTUxZTk3NTg4Yy8x
L19idjBCTkQzVFhhaEludVl4TVhoanotZmY2WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
ZjY1OTYwLWIwM2MtNDk4Yy1iNmQ1LTYwOTUxZTk3NTg4Yy8xL0d6YU9jQ2FkNW1E
THdVMzV4Mk93R0hpS0hfdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArnaMDANBAIAAjAHAwUDKgvTQDAN
BgkqhkiG9w0BAQsFAAOCAQEA4idiIcmBgJhhAAIilKhxOeMw7Xs4jsOWqOq/cUzD
QVh1y5p1b8f00XCifo3oRqCOhD5/AuVFHkFgQ7RjPvfLgP/9w0W1aupM+er4qdUF
6vgxi/XVU/O9KVQTSLM2qImtJKu7ESjl6g7Bxo8v1dnhnGStGV4MjPBbM3ROdmwK
4pjs1b+ei84JAH0Xh/rDt21BC2/59NcTPBxv5KK9hBLw4MMwBTLl5gtoGOCuKUiW
5BRT3YTgPQzeus3NCc2Euw+KMZLUICZdR+QTSNaTy+zix88gUHbo74vxKX80ND39
Rt8nngpMW8jfVI7ii+N1DZPI7USXfxoaGQ7fhJk2R4GgGg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:45 2025 by rpki-client