Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/uhN3b4viSxT2ljRuZ6fnWeMqEb8.roa
File: uhN3b4viSxT2ljRuZ6fnWeMqEb8.roa (raw, json)
Hash identifier: d/G23t7h+NE/jMw0Qu3ljGApJozT3cTTkbPKxE3+B3Q=
Subject key identifier: BA:13:77:6F:8B:E2:4B:14:F6:96:34:6E:67:A7:E7:59:E3:2A:11:BF
Certificate issuer: /CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Certificate serial: 0185719560EF9D93AB222ECE4F60B54B6BD7
Authority key identifier: 92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/uhN3b4viSxT2ljRuZ6fnWeMqEb8.roa
Signing time: Mon 02 Jan 2023 08:24:53 +0000
ROA not before: Mon 02 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64444
IP address blocks: 185.164.164.0/22 maxlen: 22
2a0a:a400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:60:ef:9d:93:ab:22:2e:ce:4f:60:b5:4b:6b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Validity
Not Before: Jan 2 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba13776f8be24b14f696346e67a7e759e32a11bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:d4:29:cc:ca:b1:23:84:5b:ef:0c:13:e6:
75:fe:f8:fa:99:8c:d3:91:68:33:e8:ee:34:95:ed:
bf:fc:ef:ac:cf:20:94:6e:e2:20:c4:5d:a7:bc:40:
84:14:5d:a0:1e:9c:21:04:1c:d9:3e:9d:8c:3d:38:
66:11:ce:df:73:8c:d6:b2:08:7a:72:1b:ed:32:6b:
1b:75:99:3f:84:4f:8e:89:bf:95:15:1a:06:8d:49:
d8:d9:71:50:e1:03:a9:92:a7:36:65:d9:a8:9e:34:
56:00:11:5c:ce:00:d0:93:ae:68:aa:88:01:6a:42:
d5:f3:4c:92:e5:0c:d2:d6:98:ab:1b:e7:da:b6:7c:
57:d3:3a:46:68:ca:c5:f4:11:51:8d:41:55:c7:c9:
5d:10:37:e4:8c:08:ed:d5:a7:e6:07:df:13:7e:ee:
35:9d:63:a3:1e:14:3a:da:c2:15:c8:ed:af:d9:2f:
29:f6:a2:bc:bd:ea:2a:33:1b:30:12:cc:a4:6d:ea:
a3:49:c3:65:cd:d5:74:d6:be:78:d7:3d:c6:dc:66:
0d:38:ca:b1:2e:2f:70:95:0e:dc:33:11:9e:70:69:
0d:71:21:88:43:82:40:35:9b:27:6b:be:4b:44:54:
b1:c7:2f:de:b2:55:9a:ff:a0:49:59:0e:76:6d:f5:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:77:6F:8B:E2:4B:14:F6:96:34:6E:67:A7:E7:59:E3:2A:11:BF
X509v3 Authority Key Identifier:
keyid:92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/uhN3b4viSxT2ljRuZ6fnWeMqEb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.164.0/22
IPv6:
2a0a:a400::/29
Signature Algorithm: sha256WithRSAEncryption
97:b0:13:ec:5b:41:f5:50:82:8d:d9:c1:d7:d3:70:68:48:be:
50:33:51:bb:84:08:57:a7:21:5e:e3:fc:81:d3:97:f9:ae:ee:
9c:c9:97:e5:61:02:29:0b:bd:03:0c:6d:d0:2e:6f:7b:1c:97:
ab:77:42:cd:b3:c5:94:05:14:23:d4:26:72:bc:c2:99:13:f9:
26:70:0a:25:93:35:e5:b8:c2:73:87:18:76:0a:9b:c1:66:c6:
70:93:04:24:84:84:fe:6f:19:c1:f9:a0:aa:fb:d7:b2:9c:f7:
00:c5:c9:6b:9b:32:9d:76:18:57:c6:b5:13:61:3d:ac:71:ff:
25:ef:8c:9a:2c:13:86:3c:65:16:7b:53:e4:aa:9a:a6:ac:1b:
25:ac:82:a9:0b:29:dc:36:79:ea:97:60:d0:f5:6b:ef:21:9f:
ab:0a:91:4c:2b:d6:9e:7e:9f:db:94:01:73:fd:f2:36:93:ef:
71:ce:7c:3c:e2:9b:9e:67:9b:93:4e:5a:84:d1:cf:91:40:b5:
fa:99:b0:12:0e:e1:08:c4:43:52:f0:23:1f:81:3c:ce:70:88:
60:c3:72:18:c0:1f:e3:a0:d4:60:a3:78:e9:e0:b6:25:e7:fd:
9e:20:2f:d9:cc:ea:1e:fe:96:38:59:38:f8:a0:ff:db:12:e0:
64:5b:6b:b9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxlWDvnZOrIi7OT2C1S2vXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTZkODRlNjRkNTVlYzgxMjQ3NmZiODA2ZjBmZTc1YTA4
YmZiMmIwHhcNMjMwMTAyMDgyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTEzNzc2ZjhiZTI0YjE0ZjY5NjM0NmU2N2E3ZTc1OWUzMmExMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZfUKczKsSOEW+8ME+Z1/vj6mYzT
kWgz6O40le2//O+szyCUbuIgxF2nvECEFF2gHpwhBBzZPp2MPThmEc7fc4zWsgh6
chvtMmsbdZk/hE+Oib+VFRoGjUnY2XFQ4QOpkqc2ZdmonjRWABFczgDQk65oqogB
akLV80yS5QzS1pirG+fatnxX0zpGaMrF9BFRjUFVx8ldEDfkjAjt1afmB98Tfu41
nWOjHhQ62sIVyO2v2S8p9qK8veoqMxswEsykbeqjScNlzdV01r541z3G3GYNOMqx
Li9wlQ7cMxGecGkNcSGIQ4JANZsna75LRFSxxy/eslWa/6BJWQ52bfXojwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLoTd2+L4ksU9pY0bmen51njKhG/MB8GA1UdIwQY
MBaAFJKW2E5k1V7IEkdvuAbw/nWgi/srMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BiWVRtVFZYc2dTUjItNEJ2RC1kYUNMLXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hNTRlYjEtMzNkZS00MDFmLTkzNWEt
ZjM0OTI4NDUwOWI3LzEvdWhOM2I0dmlTeFQybGpSdVo2Zm5XZU1xRWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hNTRlYjEtMzNkZS00MDFmLTkzNWEtZjM0OTI4NDUwOWI3
LzEva3BiWVRtVFZYc2dTUjItNEJ2RC1kYUNMLXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaSkMA0E
AgACMAcDBQMqCqQAMA0GCSqGSIb3DQEBCwUAA4IBAQCXsBPsW0H1UIKN2cHX03Bo
SL5QM1G7hAhXpyFe4/yB05f5ru6cyZflYQIpC70DDG3QLm97HJerd0LNs8WUBRQj
1CZyvMKZE/kmcAolkzXluMJzhxh2CpvBZsZwkwQkhIT+bxnB+aCq+9eynPcAxclr
mzKddhhXxrUTYT2scf8l74yaLBOGPGUWe1PkqpqmrBslrIKpCyncNnnql2DQ9Wvv
IZ+rCpFMK9aefp/blAFz/fI2k+9xznw84pueZ5uTTlqE0c+RQLX6mbASDuEIxENS
8CMfgTzOcIhgw3IYwB/joNRgo3jp4LYl5/2eIC/ZzOoe/pY4WTj4oP/bEuBkW2u5
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:34 2025 by rpki-client