Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/SUPs1Rv64Ebiq5JlIb-rsSWFt4s.roa
File: SUPs1Rv64Ebiq5JlIb-rsSWFt4s.roa (raw, json)
Hash identifier: CDTrt7uOSc7LzFSBB+KEXucIwgxNMcSbJVMlxJ/5Ttc=
Subject key identifier: 49:43:EC:D5:1B:FA:E0:46:E2:AB:92:65:21:BF:AB:B1:25:85:B7:8B
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 018506FA1F43E0EFDABB4AF29AB0A53EE0B8
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/SUPs1Rv64Ebiq5JlIb-rsSWFt4s.roa
Signing time: Mon 12 Dec 2022 15:35:33 +0000
ROA not before: Mon 12 Dec 2022 15:35:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7155
IP address blocks: 185.15.100.0/24 maxlen: 24
185.15.100.0/22 maxlen: 22
5.8.184.0/21 maxlen: 21
5.8.188.0/24 maxlen: 24
5.8.189.0/24 maxlen: 24
37.1.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:fa:1f:43:e0:ef:da:bb:4a:f2:9a:b0:a5:3e:e0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Dec 12 15:35:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4943ecd51bfae046e2ab926521bfabb12585b78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:4d:be:e4:b3:9c:a4:d6:0c:ed:f9:04:08:
8b:f6:b8:f9:58:77:b4:7e:42:42:68:9b:41:2d:38:
40:31:8a:47:1f:44:ed:71:06:b0:82:cf:13:c8:e3:
ef:d2:25:d7:22:7a:21:d4:cf:d3:6a:d8:95:65:04:
18:ce:17:37:aa:cc:7b:e5:78:b4:4d:c6:6e:b6:bf:
40:2b:cc:64:1a:38:ac:32:3a:ad:55:3f:b7:19:81:
e2:aa:5e:e5:46:98:c7:cc:95:14:b0:e8:2d:9d:12:
be:6b:d5:69:10:60:9d:0d:42:19:ac:53:c5:78:44:
4f:c3:10:83:22:c3:63:a3:12:99:ef:bd:9e:7f:c5:
b1:ef:34:65:ed:28:3f:8a:ba:17:e5:a7:2e:0b:e5:
14:64:19:ab:8a:ba:96:0f:81:67:0e:e6:fc:89:3b:
bf:b4:e2:f2:49:3c:6d:a6:5f:da:12:fd:0b:1e:d8:
56:ed:b8:56:d0:f9:7b:c6:e3:b4:93:1c:b0:19:a4:
82:a7:fa:59:3f:5c:cf:21:19:55:52:b2:97:aa:4e:
6b:54:e8:ca:2e:c5:a5:4f:c8:3d:42:1d:ee:48:d0:
29:5a:9d:2c:43:56:5f:02:50:9e:af:23:00:fe:74:
6f:c0:21:e9:df:84:19:7c:60:d9:d8:d4:43:f9:bb:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:43:EC:D5:1B:FA:E0:46:E2:AB:92:65:21:BF:AB:B1:25:85:B7:8B
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/SUPs1Rv64Ebiq5JlIb-rsSWFt4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.184.0/21
37.1.176.0/21
185.15.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:b2:c3:63:81:25:2f:08:3b:8a:9c:d2:d7:a3:4e:e4:be:0a:
8c:de:f6:13:0e:42:5a:1c:d6:5a:12:4e:55:bf:d4:a3:fc:aa:
0f:bd:f4:0f:10:5d:27:1d:97:6c:19:4e:35:00:c5:2d:08:ed:
b3:18:cb:9e:09:e2:e9:e3:7c:d5:eb:ec:29:21:7a:9e:59:f8:
3c:7a:46:76:ff:bf:41:54:66:91:1a:0e:de:fe:a8:05:aa:bd:
fa:df:dd:c3:bb:01:d5:dc:f7:3b:75:04:21:b2:de:d6:19:c0:
a4:92:6f:5d:5c:14:be:58:6d:b1:81:cc:8e:11:5e:48:4b:5e:
cb:f1:b6:04:4f:a5:df:18:d7:f1:05:f2:0c:64:12:f3:0c:49:
05:8e:f5:23:62:b0:31:e1:63:60:4a:8d:a7:2d:c6:45:3c:08:
3b:c7:e1:e7:5a:03:fd:8b:8b:1a:8a:a8:2c:23:51:6b:94:da:
8b:0e:ba:61:15:7f:4d:ab:e9:f4:50:1e:de:cf:0a:9d:78:35:
5f:80:b3:f3:48:6e:99:43:76:e4:5d:e3:1a:0f:b0:78:dd:39:
c7:62:f6:0a:56:94:e3:c9:fb:c3:e9:81:2d:29:7f:b8:7e:66:
1a:08:56:c4:af:00:97:0d:58:f6:21:62:49:80:16:73:af:bd:
df:23:e5:47
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYUG+h9D4O/au0rymrClPuC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0
MTEyNTcwHhcNMjIxMjEyMTUzNTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTQzZWNkNTFiZmFlMDQ2ZTJhYjkyNjUyMWJmYWJiMTI1ODViNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRpNvuSznKTWDO35BAiL9rj5WHe0
fkJCaJtBLThAMYpHH0TtcQawgs8TyOPv0iXXInoh1M/TatiVZQQYzhc3qsx75Xi0
TcZutr9AK8xkGjisMjqtVT+3GYHiql7lRpjHzJUUsOgtnRK+a9VpEGCdDUIZrFPF
eERPwxCDIsNjoxKZ772ef8Wx7zRl7Sg/iroX5acuC+UUZBmrirqWD4FnDub8iTu/
tOLySTxtpl/aEv0LHthW7bhW0Pl7xuO0kxywGaSCp/pZP1zPIRlVUrKXqk5rVOjK
LsWlT8g9Qh3uSNApWp0sQ1ZfAlCeryMA/nRvwCHp34QZfGDZ2NRD+bsUMQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFElD7NUb+uBG4quSZSG/q7ElhbeLMB8GA1UdIwQY
MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct
MjEwMGJmMGYxNDBhLzEvU1VQczFSdjY0RWJpcTVKbEliLXJzU1dGdDRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh
LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDBQi4AwQD
JQGwAwQCuQ9kMA0GCSqGSIb3DQEBCwUAA4IBAQCwssNjgSUvCDuKnNLXo07kvgqM
3vYTDkJaHNZaEk5Vv9Sj/KoPvfQPEF0nHZdsGU41AMUtCO2zGMueCeLp43zV6+wp
IXqeWfg8ekZ2/79BVGaRGg7e/qgFqr36393DuwHV3Pc7dQQhst7WGcCkkm9dXBS+
WG2xgcyOEV5IS17L8bYET6XfGNfxBfIMZBLzDEkFjvUjYrAx4WNgSo2nLcZFPAg7
x+HnWgP9i4saiqgsI1FrlNqLDrphFX9Nq+n0UB7ezwqdeDVfgLPzSG6ZQ3bkXeMa
D7B43TnHYvYKVpTjyfvD6YEtKX+4fmYaCFbErwCXDVj2IWJJgBZzr73fI+VH
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:13 2025 by rpki-client