Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/eezxmKxQLa7FCyfdSGfXZZRLsNE.roa
File: eezxmKxQLa7FCyfdSGfXZZRLsNE.roa (raw, json)
Hash identifier: /+/Sz88ZDPbKsPgCCqKBKS7fY4ayV8KzUJ0KlX/pUmY=
Subject key identifier: 79:EC:F1:98:AC:50:2D:AE:C5:0B:27:DD:48:67:D7:65:94:4B:B0:D1
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 01857094F435E0ACF051BA0F8F5036B14FDF
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/eezxmKxQLa7FCyfdSGfXZZRLsNE.roa
Signing time: Mon 02 Jan 2023 03:44:48 +0000
ROA not before: Mon 02 Jan 2023 03:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205561
IP address blocks: 185.160.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f4:35:e0:ac:f0:51:ba:0f:8f:50:36:b1:4f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Jan 2 03:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79ecf198ac502daec50b27dd4867d765944bb0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:fe:66:81:db:d1:1e:48:58:5b:06:fa:4e:
c1:ef:3d:01:5e:6c:c7:52:a1:92:47:2d:2c:58:2f:
fa:c6:4e:0f:bb:97:d6:d5:52:bc:8f:cb:16:a5:08:
b0:40:31:c5:e7:f5:ad:e9:42:97:66:cb:34:36:9d:
a8:c0:a8:84:0d:5d:70:13:11:3c:d5:e4:da:36:ed:
ff:f7:c4:e6:57:fc:b9:d9:77:dd:30:4a:92:70:b1:
f6:a0:3b:45:e1:3b:e2:0f:80:cc:23:d3:43:49:db:
03:71:97:d0:0e:71:b7:71:e2:38:80:ea:d1:d1:2d:
c2:b9:97:af:92:81:c8:64:59:fa:31:9f:d3:ef:8c:
a9:64:6e:1d:15:0b:84:b5:2a:df:76:b4:12:6c:3b:
a9:41:56:48:94:40:3f:13:0f:8b:27:c5:0c:07:c8:
6b:50:ad:54:d7:73:5a:a4:78:86:01:1d:83:23:e3:
15:82:25:4d:d5:80:30:15:5e:f6:61:c6:67:4d:7f:
19:95:64:7a:f2:91:f5:02:1b:0a:34:a5:50:4b:6a:
97:61:9c:6d:84:85:13:73:cc:58:b9:11:12:c2:91:
b8:23:4e:32:ed:81:6a:d0:f0:fd:42:df:e7:f8:6a:
d1:7f:38:03:98:e4:94:ae:04:63:82:86:c9:fa:ce:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:F1:98:AC:50:2D:AE:C5:0B:27:DD:48:67:D7:65:94:4B:B0:D1
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/eezxmKxQLa7FCyfdSGfXZZRLsNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:da:c4:ff:66:0d:08:2c:4d:73:92:3b:7e:da:69:65:9d:e2:
34:0e:88:2c:20:ba:64:37:b8:49:4b:4f:90:79:23:fc:52:11:
bc:17:29:ce:21:e6:fa:4b:80:ed:d1:52:f8:ef:70:24:db:2b:
1c:cc:a7:12:fe:f9:0a:ec:7c:43:7a:a2:e4:2a:ac:0e:89:97:
d2:c1:44:24:10:b2:2a:5f:d8:aa:1f:bf:a9:54:7e:90:86:c7:
78:c9:38:e4:3c:88:34:1d:be:58:55:d2:7b:bc:d8:80:5d:44:
55:d3:07:8d:20:f5:6f:ab:7e:31:d1:fd:53:61:ae:06:0e:47:
d7:59:88:14:b9:aa:b3:e2:d1:fd:2c:4c:14:64:36:82:81:42:
72:3d:7e:02:d3:70:34:70:81:ce:81:a7:46:91:9d:b5:83:b9:
c4:85:0c:9f:9d:0e:8d:bf:5b:0b:0a:75:1a:f8:32:57:3a:7d:
02:c4:5b:3e:91:0e:f8:18:59:26:8d:00:fd:65:59:0f:0a:23:
aa:77:d3:54:36:ac:13:70:b9:19:22:a5:2a:4c:c6:02:3c:f3:
ad:2b:6b:70:32:83:87:c6:fb:47:4f:ab:d0:1e:06:72:07:7b:
bc:04:c9:b1:9b:1e:eb:da:e6:47:27:b8:b1:37:c7:7b:ba:9b:
db:72:49:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlPQ14KzwUboPj1A2sU/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDJmYTJjNWJhMjg5MjA0NWU3Y2Q1MGE1YWRmZDU0ZDZk
YmI4YzIwHhcNMjMwMTAyMDM0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWVjZjE5OGFjNTAyZGFlYzUwYjI3ZGQ0ODY3ZDc2NTk0NGJiMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R7+ZoHb0R5IWFsG+k7B7z0BXmzH
UqGSRy0sWC/6xk4Pu5fW1VK8j8sWpQiwQDHF5/Wt6UKXZss0Np2owKiEDV1wExE8
1eTaNu3/98TmV/y52XfdMEqScLH2oDtF4TviD4DMI9NDSdsDcZfQDnG3ceI4gOrR
0S3CuZevkoHIZFn6MZ/T74ypZG4dFQuEtSrfdrQSbDupQVZIlEA/Ew+LJ8UMB8hr
UK1U13NapHiGAR2DI+MVgiVN1YAwFV72YcZnTX8ZlWR68pH1AhsKNKVQS2qXYZxt
hIUTc8xYuRESwpG4I04y7YFq0PD9Qt/n+GrRfzgDmOSUrgRjgobJ+s45xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHns8ZisUC2uxQsn3Uhn12WUS7DRMB8GA1UdIwQY
MBaAFH0C+ixbookgRefNUKWt/VTW27jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUt
ODEwMzlmM2NmM2ZkLzEvZWV6eG1LeFFMYTdGQ3lmZFNHZlhaWlJMc05FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUtODEwMzlmM2NmM2Zk
LzEvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaDcMA0G
CSqGSIb3DQEBCwUAA4IBAQCN2sT/Zg0ILE1zkjt+2mllneI0DogsILpkN7hJS0+Q
eSP8UhG8FynOIeb6S4Dt0VL473Ak2ysczKcS/vkK7HxDeqLkKqwOiZfSwUQkELIq
X9iqH7+pVH6Qhsd4yTjkPIg0Hb5YVdJ7vNiAXURV0weNIPVvq34x0f1TYa4GDkfX
WYgUuaqz4tH9LEwUZDaCgUJyPX4C03A0cIHOgadGkZ21g7nEhQyfnQ6Nv1sLCnUa
+DJXOn0CxFs+kQ74GFkmjQD9ZVkPCiOqd9NUNqwTcLkZIqUqTMYCPPOtK2twMoOH
xvtHT6vQHgZyB3u8BMmxmx7r2uZHJ7ixN8d7upvbckkP
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:38 2025 by rpki-client