Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/vQUnANsppfZoe1VTEa2LyjvOoTg.roa
File: vQUnANsppfZoe1VTEa2LyjvOoTg.roa (raw, json)
Hash identifier: cCelkFtJhb3wxtWd+yq9Ix9sTqM3ssgRtfpxpBZvUNc=
Subject key identifier: BD:05:27:00:DB:29:A5:F6:68:7B:55:53:11:AD:8B:CA:3B:CE:A1:38
Certificate issuer: /CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
Certificate serial: F16136
Authority key identifier: E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/vQUnANsppfZoe1VTEa2LyjvOoTg.roa
Signing time: Sat 01 Jan 2022 12:54:41 +0000
ROA not before: Sat 01 Jan 2022 12:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210780
IP address blocks: 185.252.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15819062 (0xf16136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
Validity
Not Before: Jan 1 12:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd052700db29a5f6687b555311ad8bca3bcea138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:1b:8a:6a:29:c1:b0:c1:25:48:29:23:74:
49:d5:f6:e6:55:39:72:19:e3:a6:22:80:da:53:9d:
d5:56:8b:95:48:0b:b7:25:6c:cf:8c:b8:3e:17:2f:
5b:cc:3b:f4:4b:6b:d7:9b:66:ae:42:2e:1a:81:56:
b6:be:23:99:cc:a7:d3:23:56:1d:7c:37:c3:8d:ea:
b1:50:7a:b2:2d:2f:72:9c:b4:26:a3:0f:b4:3e:1f:
a0:cb:76:b9:fe:3a:ad:78:c7:ff:ff:a8:4a:1a:c5:
09:b9:02:1f:91:88:4d:c9:5a:1c:a0:4b:c5:91:89:
35:f4:ee:e7:af:af:09:5c:ea:17:f4:ca:cf:77:6e:
82:7d:9c:55:69:db:67:7d:6d:9a:b9:19:dd:a9:cd:
00:c4:6b:ce:c0:37:9e:58:7b:5d:c1:f9:5c:8d:81:
c8:4c:9a:ea:c0:12:4e:47:19:6d:ce:7d:0a:de:5e:
f5:3d:95:be:22:74:52:35:73:7b:43:7a:86:75:a2:
2b:a3:0f:23:9a:e2:1d:3c:97:77:49:f5:09:ed:9e:
ff:18:93:6a:45:c1:4c:dc:e5:5b:99:9e:2f:b7:a0:
94:10:3f:8f:65:49:42:fb:e6:a5:7e:96:ed:21:40:
c9:1d:33:00:2f:00:fc:d6:00:81:1f:49:b7:14:a9:
51:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:27:00:DB:29:A5:F6:68:7B:55:53:11:AD:8B:CA:3B:CE:A1:38
X509v3 Authority Key Identifier:
keyid:E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/vQUnANsppfZoe1VTEa2LyjvOoTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:01:dd:4a:da:cb:76:9b:a3:17:6a:fd:87:d9:01:be:81:03:
4d:6d:35:3c:a6:fa:b1:fd:42:63:79:b0:f7:32:5e:bc:1c:9c:
66:05:1e:5d:38:f4:94:e8:30:9c:f2:dc:2b:e4:f2:55:88:dc:
28:54:ed:69:12:b2:d5:81:c8:47:a4:80:f1:2e:08:e5:bd:a1:
75:8f:75:25:df:95:bc:93:9f:91:1d:79:5e:3b:08:03:46:80:
fe:3b:1d:f9:97:5e:e1:f6:f1:7f:08:3a:6f:32:7b:37:3f:a5:
c3:b3:03:74:9d:78:ea:38:48:32:f5:5d:62:e0:9a:50:bf:29:
00:81:7f:52:8b:18:52:9e:a7:36:7c:1c:5c:aa:bd:0d:4c:43:
a8:83:6e:61:ed:7f:9c:10:25:11:05:0f:48:66:c0:68:13:45:
19:36:60:ca:7b:3e:25:33:bc:3f:5b:51:68:6c:5a:39:75:b5:
00:d6:ff:08:bd:37:ec:ec:60:d8:90:87:06:64:6f:ea:3d:de:
bf:06:c8:87:32:40:2e:98:96:90:9b:bd:76:bf:0c:21:cd:b7:
39:2a:24:7c:66:55:30:d4:22:a6:52:4d:cf:93:0d:cd:d3:2f:
49:6c:be:c2:59:c6:50:e2:61:80:1c:46:9d:fc:f9:cd:ec:19:
95:ee:51:00
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPFhNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NDQ1NzYzNmU1YWQ2NmUxZjBmYmIyYzEwZGYyOTA5NWU2M2U5OTJmMB4XDTIyMDEw
MTEyNTQ0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmQwNTI3MDBkYjI5
YTVmNjY4N2I1NTUzMTFhZDhiY2EzYmNlYTEzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALR8G4pqKcGwwSVIKSN0SdX25lU5chnjpiKA2lOd1VaLlUgL
tyVsz4y4PhcvW8w79Etr15tmrkIuGoFWtr4jmcyn0yNWHXw3w43qsVB6si0vcpy0
JqMPtD4foMt2uf46rXjH//+oShrFCbkCH5GITclaHKBLxZGJNfTu56+vCVzqF/TK
z3dugn2cVWnbZ31tmrkZ3anNAMRrzsA3nlh7XcH5XI2ByEya6sASTkcZbc59Ct5e
9T2VviJ0UjVze0N6hnWiK6MPI5riHTyXd0n1Ce2e/xiTakXBTNzlW5meL7eglBA/
j2VJQvvmpX6W7SFAyR0zAC8A/NYAgR9JtxSpUc8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS9BScA2yml9mh7VVMRrYvKO86hODAfBgNVHSMEGDAWgBTkRXY25a1m4fD7
ssEN8pCV5j6ZLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVFVjJOdVd0WnVIdy03TEJEZktRbGVZLW1TOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjEvOGM5ZjE5LWE3MDAtNDgzMi1iZTIxLWIwZDVlOGJlODUzYy8x
L3ZRVW5BTnNwcGZab2UxVlRFYTJMeWp2T29UZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEv
OGM5ZjE5LWE3MDAtNDgzMi1iZTIxLWIwZDVlOGJlODUzYy8xLzVFVjJOdVd0WnVI
dy03TEJEZktRbGVZLW1TOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn81jANBgkqhkiG9w0BAQsFAAOC
AQEAFQHdStrLdpujF2r9h9kBvoEDTW01PKb6sf1CY3mw9zJevBycZgUeXTj0lOgw
nPLcK+TyVYjcKFTtaRKy1YHIR6SA8S4I5b2hdY91Jd+VvJOfkR15XjsIA0aA/jsd
+Zde4fbxfwg6bzJ7Nz+lw7MDdJ146jhIMvVdYuCaUL8pAIF/UosYUp6nNnwcXKq9
DUxDqINuYe1/nBAlEQUPSGbAaBNFGTZgyns+JTO8P1tRaGxaOXW1ANb/CL037Oxg
2JCHBmRv6j3evwbIhzJALpiWkJu9dr8MIc23OSokfGZVMNQiplJNz5MNzdMvSWy+
wlnGUOJhgBxGnfz5zewZle5RAA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:32 2025 by rpki-client