Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/2jaFWF7UgYUACTInzjVcO34SaFQ.roa
File: 2jaFWF7UgYUACTInzjVcO34SaFQ.roa (raw, json)
Hash identifier: TmCRyOoLaCHCKiGz/ODw6bYhH0plHPsUucQixFnVblU=
Subject key identifier: DA:36:85:58:5E:D4:81:85:00:09:32:27:CE:35:5C:3B:7E:12:68:54
Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial: 0185711532533B6F0329958A3BAF53CE27D7
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/2jaFWF7UgYUACTInzjVcO34SaFQ.roa
Signing time: Mon 02 Jan 2023 06:04:52 +0000
ROA not before: Mon 02 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48809
IP address blocks: 185.148.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:32:53:3b:6f:03:29:95:8a:3b:af:53:ce:27:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Validity
Not Before: Jan 2 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da3685585ed4818500093227ce355c3b7e126854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:cc:03:c4:07:21:54:d6:ee:83:30:3c:82:
e2:60:91:08:d2:dc:f4:1a:02:df:a2:2d:07:46:c3:
65:f3:ba:ac:28:b8:40:8e:6a:54:c4:5e:55:f2:3e:
31:bb:6f:77:9b:dd:53:54:b1:14:ec:8a:00:72:ae:
9c:46:9b:41:45:2c:d9:3e:1d:9a:47:19:d7:56:ae:
2b:8b:a5:c8:95:0c:96:1e:e6:d1:c5:45:27:dc:15:
59:4b:a9:26:f1:77:86:c4:b2:aa:09:4b:b0:cb:32:
77:81:65:e1:db:f5:01:9f:ff:b3:15:bb:aa:97:92:
96:56:6f:83:35:71:ae:04:34:b7:97:4a:db:40:e1:
6a:12:1a:bc:8e:8a:37:c3:6b:16:03:e0:d5:4c:04:
cd:c3:bc:0c:8b:56:d7:c7:fd:74:93:82:a0:88:50:
39:ff:ad:11:e9:0e:ce:94:a2:cc:82:26:a7:15:e9:
be:71:55:8a:87:ec:8e:05:55:53:5a:5a:0c:e1:5f:
d6:15:7d:88:77:a0:d8:2c:0f:54:02:ee:c0:d8:28:
77:e7:ad:46:1a:0d:75:89:b2:77:13:25:79:94:d7:
9c:8c:0f:bf:b3:e7:8e:0a:e7:c0:40:43:a1:78:ae:
4b:57:fd:7b:6d:d7:cf:1a:7f:2c:a7:dd:75:59:c9:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:85:58:5E:D4:81:85:00:09:32:27:CE:35:5C:3B:7E:12:68:54
X509v3 Authority Key Identifier:
keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/2jaFWF7UgYUACTInzjVcO34SaFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.78.0/24
Signature Algorithm: sha256WithRSAEncryption
39:41:4c:48:6f:40:70:fb:c0:07:ba:bd:0a:34:83:f3:ab:f7:
76:41:4d:7a:42:dc:88:6d:5d:9e:d6:c6:4b:20:7f:26:2c:73:
a1:88:5e:fe:a1:5e:58:7d:4f:f9:05:02:06:42:33:ce:99:eb:
ca:b9:3c:3f:89:11:3b:e9:d9:d8:ff:cd:0e:24:40:e8:3a:e6:
e9:9b:f4:fb:c6:8b:d3:27:64:38:5d:30:a2:cb:53:f2:37:12:
c1:5d:bd:89:87:c9:7c:4c:80:e8:90:a6:af:0b:93:45:6b:5e:
d1:96:20:87:1c:d2:21:0e:c3:fd:09:0e:a8:55:d0:41:c6:a9:
69:b2:94:29:d3:b4:6e:cc:57:2f:f3:40:f5:ca:02:24:05:16:
13:c2:59:1f:3b:1f:84:0a:0b:23:d0:8c:04:4f:a7:24:aa:95:
d5:d6:d4:fe:2d:0e:44:37:d7:55:72:fe:53:02:ce:80:db:b0:
6d:68:c1:f5:4e:5e:ce:83:0c:68:e7:3c:35:3b:a2:09:59:b7:
f0:88:cf:8e:e0:ad:17:ba:21:a7:15:b1:ef:99:02:d9:5c:d0:
52:88:3e:ca:ee:8c:83:39:c5:48:18:d0:87:4e:12:45:d2:e4:
22:19:ea:28:d6:e7:69:54:18:1e:1c:66:f7:70:64:2f:c4:d0:
e8:20:47:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxFTJTO28DKZWKO69TzifXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYTNkYTZkMGZhZmQyN2QwMWI3NDcwM2JiMzlkOGMxMTVl
ODY0MTIwHhcNMjMwMTAyMDYwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTM2ODU1ODVlZDQ4MTg1MDAwOTMyMjdjZTM1NWMzYjdlMTI2ODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc/MA8QHIVTW7oMwPILiYJEI0tz0
GgLfoi0HRsNl87qsKLhAjmpUxF5V8j4xu293m91TVLEU7IoAcq6cRptBRSzZPh2a
RxnXVq4ri6XIlQyWHubRxUUn3BVZS6km8XeGxLKqCUuwyzJ3gWXh2/UBn/+zFbuq
l5KWVm+DNXGuBDS3l0rbQOFqEhq8joo3w2sWA+DVTATNw7wMi1bXx/10k4KgiFA5
/60R6Q7OlKLMgianFem+cVWKh+yOBVVTWloM4V/WFX2Id6DYLA9UAu7A2Ch3561G
Gg11ibJ3EyV5lNecjA+/s+eOCufAQEOheK5LV/17bdfPGn8sp911WclZKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNo2hVhe1IGFAAkyJ841XDt+EmhUMB8GA1UdIwQY
MBaAFDGj2m0Pr9J9AbdHA7s52MEV6GQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYt
NmNkNGM5ODBhNTIzLzEvMmphRldGN1VnWVVBQ1RJbnpqVmNPMzRTYUZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYtNmNkNGM5ODBhNTIz
LzEvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZROMA0G
CSqGSIb3DQEBCwUAA4IBAQA5QUxIb0Bw+8AHur0KNIPzq/d2QU16QtyIbV2e1sZL
IH8mLHOhiF7+oV5YfU/5BQIGQjPOmevKuTw/iRE76dnY/80OJEDoOubpm/T7xovT
J2Q4XTCiy1PyNxLBXb2Jh8l8TIDokKavC5NFa17RliCHHNIhDsP9CQ6oVdBBxqlp
spQp07RuzFcv80D1ygIkBRYTwlkfOx+ECgsj0IwET6ckqpXV1tT+LQ5EN9dVcv5T
As6A27BtaMH1Tl7Ogwxo5zw1O6IJWbfwiM+O4K0XuiGnFbHvmQLZXNBSiD7K7oyD
OcVIGNCHThJF0uQiGeoo1udpVBgeHGb3cGQvxNDoIEd9
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:39 2025 by rpki-client