Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/trsJ2FRMIQfO_ufOCrsT9tqnkP8.roa
File: trsJ2FRMIQfO_ufOCrsT9tqnkP8.roa (raw, json)
Hash identifier: Em2IReZMp6Ss0gOhs3GP5fH+0cLhZGQcDxcekPmWbzQ=
Subject key identifier: B6:BB:09:D8:54:4C:21:07:CE:FE:E7:CE:0A:BB:13:F6:DA:A7:90:FF
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 11746157
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/trsJ2FRMIQfO_ufOCrsT9tqnkP8.roa
Signing time: Mon 20 Jun 2022 08:56:44 +0000
ROA not before: Mon 20 Jun 2022 08:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204007
IP address blocks: 185.185.216.0/24 maxlen: 24
185.185.219.0/24 maxlen: 24
185.185.216.0/22 maxlen: 22
185.185.218.0/24 maxlen: 24
185.185.217.0/24 maxlen: 24
2a0b:6580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292839767 (0x11746157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Jun 20 08:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6bb09d8544c2107cefee7ce0abb13f6daa790ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:c4:25:7f:17:2c:ac:1f:2b:59:e8:de:66:
63:27:09:c3:19:fd:27:42:70:d7:71:70:67:85:9a:
8d:51:01:ff:49:40:b5:63:32:a2:65:bd:10:e0:24:
f3:98:c6:14:95:33:d4:d6:5d:44:91:e3:4b:ae:91:
6d:26:7a:9b:7b:55:9a:7a:01:24:97:a4:3d:cf:83:
63:40:03:45:c7:db:d9:0f:84:94:b9:ec:36:d8:a8:
3c:13:ca:6c:a9:cb:ae:cc:26:df:cc:36:c6:f7:92:
ad:6b:fb:17:82:19:e4:e9:29:e4:49:9f:d0:9a:d8:
cc:8b:fa:63:bc:9b:3f:b8:b2:03:8e:f5:5a:84:bf:
b2:8c:e4:cb:86:ce:68:5a:c3:93:3c:05:87:a7:a6:
6d:cf:c8:c7:14:3f:d5:ee:07:65:bf:16:fe:89:12:
6a:be:16:f7:8f:f0:7b:89:29:43:79:00:b4:a1:65:
30:10:7e:c5:ff:7a:98:80:92:81:d6:35:bb:db:01:
a1:26:41:15:89:48:42:7c:2e:c3:1b:1e:5e:1e:ad:
1e:b7:fb:a9:c5:c0:cf:4e:6a:3b:17:ce:bc:f0:71:
b1:c3:8f:34:83:9b:aa:b1:67:a6:cf:b1:40:51:7c:
b4:d0:c9:4a:9b:cb:6b:6d:07:13:67:f1:47:8c:fb:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BB:09:D8:54:4C:21:07:CE:FE:E7:CE:0A:BB:13:F6:DA:A7:90:FF
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/trsJ2FRMIQfO_ufOCrsT9tqnkP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.216.0/22
IPv6:
2a0b:6580::/29
Signature Algorithm: sha256WithRSAEncryption
cb:09:33:33:f2:9b:61:06:70:85:92:8e:aa:52:a0:e9:c1:90:
99:5a:45:99:39:4c:70:1c:a8:d4:1f:be:aa:40:5d:3a:59:2d:
2e:83:4b:08:e8:7f:3b:c5:c0:26:49:6d:ea:95:c3:04:b8:fd:
61:50:63:33:a7:76:a9:a8:e2:2e:76:a5:ce:69:45:03:57:60:
ce:e8:e3:13:2e:a4:5e:01:b0:c4:17:df:78:03:28:8a:0c:01:
60:84:0d:bb:98:ec:3c:d3:0e:bf:a7:32:44:76:38:4c:2b:60:
b8:d8:a5:2e:4a:1e:97:cb:9e:5e:be:f0:25:7f:fe:34:9e:7e:
ef:4d:88:1b:14:2a:dc:9a:88:89:2a:a8:ca:f1:45:77:b1:26:
3a:cd:93:0b:08:7c:27:b9:98:7a:8f:c5:37:87:4a:fb:fe:60:
b6:e4:d9:89:76:dc:77:c8:68:22:13:32:0b:03:a3:79:d7:71:
0e:e6:c3:19:f0:9b:8c:c7:1d:25:7a:9a:3d:37:58:f3:9c:a8:
f0:c9:54:82:12:73:8d:4c:24:7a:88:15:88:6f:4b:68:b7:a6:
dc:97:53:6c:0f:eb:c0:3e:de:ee:e3:5b:0f:0f:1b:71:b8:71:
57:80:69:ef:5d:8c:6b:03:de:24:9b:68:1a:e7:49:92:38:96:
14:e8:f5:2b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEEXRhVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YTU0YjZlNWZjY2EzMDhiMzZkYzhmMTY3NjA2YjJkNjU5ODM5Y2YxMB4XDTIyMDYy
MDA4NTY0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZiYjA5ZDg1NDRj
MjEwN2NlZmVlN2NlMGFiYjEzZjZkYWE3OTBmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM47xCV/FyysHytZ6N5mYycJwxn9J0Jw13FwZ4WajVEB/0lA
tWMyomW9EOAk85jGFJUz1NZdRJHjS66RbSZ6m3tVmnoBJJekPc+DY0ADRcfb2Q+E
lLnsNtioPBPKbKnLrswm38w2xveSrWv7F4IZ5Okp5Emf0JrYzIv6Y7ybP7iyA471
WoS/sozky4bOaFrDkzwFh6embc/IxxQ/1e4HZb8W/okSar4W94/we4kpQ3kAtKFl
MBB+xf96mICSgdY1u9sBoSZBFYlIQnwuwxseXh6tHrf7qcXAz05qOxfOvPBxscOP
NIObqrFnps+xQFF8tNDJSpvLa20HE2fxR4z7PU8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBS2uwnYVEwhB87+584KuxP22qeQ/zAfBgNVHSMEGDAWgBS6VLbl/Mowizbc
jxZ2BrLWWYOc8TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VsUzI1ZnpLTUlzMjNJOFdkZ2F5MWxtRG5QRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvNzhiMTkwLThhMDItNGNiOC1iNDg0LTUyNmY3Y2M1MjliNy8x
L3Ryc0oyRlJNSVFmT191Zk9DcnNUOXRxbmtQOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
NzhiMTkwLThhMDItNGNiOC1iNDg0LTUyNmY3Y2M1MjliNy8xL3VsUzI1ZnpLTUlz
MjNJOFdkZ2F5MWxtRG5QRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArm52DANBAIAAjAHAwUDKgtlgDAN
BgkqhkiG9w0BAQsFAAOCAQEAywkzM/KbYQZwhZKOqlKg6cGQmVpFmTlMcByo1B++
qkBdOlktLoNLCOh/O8XAJklt6pXDBLj9YVBjM6d2qajiLnalzmlFA1dgzujjEy6k
XgGwxBffeAMoigwBYIQNu5jsPNMOv6cyRHY4TCtguNilLkoel8ueXr7wJX/+NJ5+
702IGxQq3JqIiSqoyvFFd7EmOs2TCwh8J7mYeo/FN4dK+/5gtuTZiXbcd8hoIhMy
CwOjeddxDubDGfCbjMcdJXqaPTdY85yo8MlUghJzjUwkeogViG9LaLem3JdTbA/r
wD7e7uNbDw8bcbhxV4Bp712MawPeJJtoGudJkjiWFOj1Kw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:40 2025 by rpki-client