Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/CIn_j6PUymi9UVALXcqDXV9GfIw.roa
File: CIn_j6PUymi9UVALXcqDXV9GfIw.roa (raw, json)
Hash identifier: msmnd1d36hn4EQrfiHbE/S3AJJDI36Eceht3Mq/wDSI=
Subject key identifier: 08:89:FF:8F:A3:D4:CA:68:BD:51:50:0B:5D:CA:83:5D:5F:46:7C:8C
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 0184612E71D443FD768B042A57AB299EB5A0
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/CIn_j6PUymi9UVALXcqDXV9GfIw.roa
Signing time: Thu 10 Nov 2022 10:55:44 +0000
ROA not before: Thu 10 Nov 2022 10:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.240.166.0/24 maxlen: 24
185.240.165.0/24 maxlen: 24
185.240.167.0/24 maxlen: 24
45.85.180.0/22 maxlen: 22
194.31.1.0/24 maxlen: 24
194.30.161.0/24 maxlen: 24
194.30.165.0/24 maxlen: 24
194.30.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:2e:71:d4:43:fd:76:8b:04:2a:57:ab:29:9e:b5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Nov 10 10:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0889ff8fa3d4ca68bd51500b5dca835d5f467c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9e:e0:95:89:42:f7:b6:c4:4a:c3:33:2f:56:
d4:f0:f1:4b:1d:cd:0e:3b:89:3b:4c:22:03:c8:a8:
5f:ae:13:ae:16:93:bd:d4:20:5c:4c:a1:43:f7:6a:
b7:f1:f6:7c:e0:7b:78:3f:29:f6:c1:55:ee:b9:f2:
a1:5d:97:82:32:f6:76:2e:a6:9c:53:56:0e:71:45:
87:21:45:30:53:cc:7f:1f:5b:b5:18:24:44:6a:ec:
7b:8c:6b:26:c9:c0:28:95:a0:95:87:71:4d:7c:7c:
09:f4:a2:54:05:64:0a:47:00:55:d9:57:6c:88:54:
01:f3:69:96:90:f6:49:02:76:62:34:68:7f:cc:f5:
4d:66:25:b4:36:3e:79:6f:bf:86:e0:7b:b5:e0:c5:
c2:1b:9c:cf:0c:6d:e2:0e:f2:1e:68:bc:30:40:21:
45:a0:85:27:fa:c8:c7:bb:df:f9:0a:a3:50:5f:be:
96:a6:5c:69:90:29:e2:0e:3d:27:b3:1a:02:0a:74:
a5:4f:24:df:8f:0c:6a:3d:de:82:bb:41:df:e8:58:
c9:86:a6:cc:83:2f:24:5a:4d:0a:2d:a9:7a:19:85:
70:9c:cc:6b:6c:d2:fd:c9:ea:73:b7:01:47:50:3b:
16:fb:0f:d2:44:86:09:b5:a8:3c:fc:86:7a:9e:b2:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:89:FF:8F:A3:D4:CA:68:BD:51:50:0B:5D:CA:83:5D:5F:46:7C:8C
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/CIn_j6PUymi9UVALXcqDXV9GfIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.180.0/22
185.240.165.0-185.240.167.255
194.30.161.0/24
194.30.165.0/24
194.30.183.0/24
194.31.1.0/24
Signature Algorithm: sha256WithRSAEncryption
72:19:a7:74:da:74:f1:ca:aa:1b:e8:bf:23:d5:8b:64:5b:2e:
34:cf:66:84:b3:ae:20:14:84:3b:8a:5f:8f:84:56:ad:18:78:
d5:79:6b:96:1c:1d:0d:e4:91:9d:bc:dc:c2:9d:f2:52:a4:fc:
ad:d6:59:51:ee:ee:f9:d7:86:cf:73:ff:dd:a0:37:fa:5e:13:
e5:70:42:18:39:11:a5:32:76:6a:0c:d0:6d:24:4a:a1:fb:6d:
e8:bc:11:bb:9a:66:d0:10:72:94:d0:b8:69:d7:07:60:39:03:
78:7d:a1:fb:d8:37:ff:65:c6:a6:75:dd:bf:54:2a:64:d1:ad:
82:c6:4d:85:54:97:f8:5c:32:d2:a5:e6:df:87:73:66:2a:51:
ad:61:74:4d:fa:2f:9e:be:fc:8a:fe:58:45:4e:8a:3f:05:01:
12:5c:1d:b9:08:5f:be:2e:c0:60:01:52:4d:21:50:e9:c9:ab:
49:54:91:6b:42:41:7f:d3:ed:65:a2:25:59:c8:fd:57:78:4a:
33:36:1a:de:80:8b:de:ab:12:1d:c8:08:f8:22:4b:58:4c:54:
42:3f:84:5e:91:92:32:fc:d9:8a:b0:0c:a9:0a:c9:07:57:7e:
69:24:bb:2f:ec:8a:5e:2b:d8:d5:32:f5:2d:a8:69:63:3d:92:
ac:c9:94:d9
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYRhLnHUQ/12iwQqV6spnrWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx
OWM0NDgwHhcNMjIxMTEwMTA1NTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODg5ZmY4ZmEzZDRjYTY4YmQ1MTUwMGI1ZGNhODM1ZDVmNDY3YzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p7glYlC97bESsMzL1bU8PFLHc0O
O4k7TCIDyKhfrhOuFpO91CBcTKFD92q38fZ84Ht4Pyn2wVXuufKhXZeCMvZ2Lqac
U1YOcUWHIUUwU8x/H1u1GCREaux7jGsmycAolaCVh3FNfHwJ9KJUBWQKRwBV2Vds
iFQB82mWkPZJAnZiNGh/zPVNZiW0Nj55b7+G4Hu14MXCG5zPDG3iDvIeaLwwQCFF
oIUn+sjHu9/5CqNQX76WplxpkCniDj0nsxoCCnSlTyTfjwxqPd6Cu0Hf6FjJhqbM
gy8kWk0KLal6GYVwnMxrbNL9yepztwFHUDsW+w/SRIYJtag8/IZ6nrKm0wIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFAiJ/4+j1MpovVFQC13Kg11fRnyMMB8GA1UdIwQY
MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt
YWQyZmRhNDc5ODhlLzEvQ0luX2o2UFV5bWk5VVZBTFhjcURYVjlHZkl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl
LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCLVW0MAwD
BAC58KUDBAO58KADBADCHqEDBADCHqUDBADCHrcDBADCHwEwDQYJKoZIhvcNAQEL
BQADggEBAHIZp3TadPHKqhvovyPVi2RbLjTPZoSzriAUhDuKX4+EVq0YeNV5a5Yc
HQ3kkZ283MKd8lKk/K3WWVHu7vnXhs9z/92gN/peE+VwQhg5EaUydmoM0G0kSqH7
bei8EbuaZtAQcpTQuGnXB2A5A3h9ofvYN/9lxqZ13b9UKmTRrYLGTYVUl/hcMtKl
5t+Hc2YqUa1hdE36L56+/Ir+WEVOij8FARJcHbkIX74uwGABUk0hUOnJq0lUkWtC
QX/T7WWiJVnI/Vd4SjM2Gt6Ai96rEh3ICPgiS1hMVEI/hF6RkjL82YqwDKkKyQdX
fmkkuy/sil4r2NUy9S2oaWM9kqzJlNk=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:07 2025 by rpki-client