Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/nZMVqku5lk7hc9ug95QhfRdYLxw.roa
File: nZMVqku5lk7hc9ug95QhfRdYLxw.roa (raw, json)
Hash identifier: nHejTF+fqkHztG2EF8NyAhk+XtGlo9EkHF+Eu5iU1UI=
Subject key identifier: 9D:93:15:AA:4B:B9:96:4E:E1:73:DB:A0:F7:94:21:7D:17:58:2F:1C
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 7D672D
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/nZMVqku5lk7hc9ug95QhfRdYLxw.roa
Signing time: Sat 01 Jan 2022 00:54:51 +0000
ROA not before: Sat 01 Jan 2022 00:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210318
IP address blocks: 185.37.233.0/24 maxlen: 24
185.37.232.0/24 maxlen: 24
185.37.234.0/24 maxlen: 24
185.37.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8218413 (0x7d672d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Jan 1 00:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d9315aa4bb9964ee173dba0f794217d17582f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:5d:b6:ff:55:51:ed:24:30:9e:0e:ab:dd:
38:e1:9b:6f:b3:02:54:d9:65:e2:70:76:63:2b:19:
f6:ea:13:13:7c:c7:4f:7f:32:e6:b4:1d:65:20:b5:
df:ab:49:0f:44:34:bd:59:3c:4f:c1:c9:74:15:c9:
d9:06:5b:c1:1c:9e:c9:fc:a1:71:9b:ea:5d:df:9d:
42:f5:66:4a:8d:bb:08:f0:ea:8a:89:cc:ab:81:f6:
ba:db:a6:96:f0:78:d3:39:90:61:83:fd:f1:1e:f6:
4d:b9:88:58:5b:8b:27:db:4f:2f:fc:9e:3a:43:47:
fc:ef:ad:73:1c:a9:30:6a:31:22:f5:41:73:5a:2b:
7f:9d:c3:e9:fe:83:c8:ef:3d:19:62:7f:6a:d1:3a:
5b:4f:cb:57:50:98:6e:d7:14:e3:3f:f7:14:f7:51:
5b:fc:18:42:38:1f:70:42:35:fc:02:ce:0e:e6:e9:
51:d2:6f:76:8f:25:15:58:54:ac:57:fc:37:bc:b8:
08:a4:e0:c3:29:70:15:91:b5:cd:de:77:51:1b:ac:
f6:c1:67:24:2a:c2:ce:2b:6c:b6:f6:ad:02:a6:65:
9b:9a:c5:04:ac:cb:ae:36:e5:11:be:b3:6c:d3:a4:
aa:74:de:51:7c:77:5e:12:01:fe:86:11:12:d8:4b:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:93:15:AA:4B:B9:96:4E:E1:73:DB:A0:F7:94:21:7D:17:58:2F:1C
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/nZMVqku5lk7hc9ug95QhfRdYLxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.232.0/22
Signature Algorithm: sha256WithRSAEncryption
62:79:72:5f:6a:58:9f:46:0f:41:3b:b7:37:76:b7:e6:fb:45:
e7:3a:0b:40:18:2f:d2:4c:df:87:93:f8:91:13:b3:57:d3:c9:
96:44:ae:85:e8:73:40:4c:ae:0b:3e:09:51:05:c4:2b:97:9c:
94:45:29:a3:fb:ef:4d:dd:0a:89:13:25:27:6d:ad:f3:60:fc:
e5:79:fc:71:8a:fb:dd:3d:5d:f7:e7:8a:12:7c:30:1b:93:ef:
07:2e:14:31:42:78:23:91:3b:08:be:63:9b:5f:81:9a:eb:5b:
4e:5d:31:07:56:b0:6f:bc:c7:d6:68:7d:d2:15:fa:26:4f:f7:
48:44:e5:d5:a4:5e:a2:80:bc:53:1e:ce:90:49:e1:8c:af:ee:
f0:a9:e6:27:dc:3f:a9:0a:76:14:7d:d4:40:b7:f4:54:97:f6:
5e:26:5e:b0:12:3e:25:8a:57:7e:19:ff:eb:b4:7d:b8:a7:6d:
37:d2:77:81:b0:43:0c:96:fd:98:1b:cc:a9:cb:88:cc:7a:39:
84:f2:76:f5:84:51:84:92:d9:6f:6f:65:a5:0e:9b:2b:9c:3c:
88:51:1b:b1:2e:9a:d3:13:be:b1:bf:d2:58:9d:2f:6d:da:3c:
cb:1a:0e:f2:76:a0:b9:c6:0a:e2:3e:6c:54:54:3c:9f:9b:e3:
b7:f1:40:c6
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDfWctMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
YTU5YjdmYjRlMDM0ZjY3Nzc1ZjI4NzVlZmJmYzllZmYyNDdlOGUwHhcNMjIwMTAx
MDA1NDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5ZDkzMTVhYTRiYjk5
NjRlZTE3M2RiYTBmNzk0MjE3ZDE3NTgyZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqwNdtv9VUe0kMJ4Oq9044ZtvswJU2WXicHZjKxn26hMTfMdP
fzLmtB1lILXfq0kPRDS9WTxPwcl0FcnZBlvBHJ7J/KFxm+pd351C9WZKjbsI8OqK
icyrgfa626aW8HjTOZBhg/3xHvZNuYhYW4sn208v/J46Q0f8761zHKkwajEi9UFz
Wit/ncPp/oPI7z0ZYn9q0TpbT8tXUJhu1xTjP/cU91Fb/BhCOB9wQjX8As4O5ulR
0m92jyUVWFSsV/w3vLgIpODDKXAVkbXN3ndRG6z2wWckKsLOK2y29q0CpmWbmsUE
rMuuNuURvrNs06SqdN5RfHdeEgH+hhES2Es07wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJ2TFapLuZZO4XPboPeUIX0XWC8cMB8GA1UdIwQYMBaAFHSlm3+04DT2d3Xy
h177/J7/JH6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2ItYWQzMmVmNDlkNDE5LzEv
blpNVnFrdTVsazdoYzl1Zzk1UWhmUmRZTHh3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8y
YjE5NWUtMGFiYS00N2Q0LThlM2ItYWQzMmVmNDlkNDE5LzEvZEtXYmY3VGdOUFoz
ZGZLSFh2djhudjhrZm80LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSXoMA0GCSqGSIb3DQEBCwUAA4IB
AQBieXJfalifRg9BO7c3drfm+0XnOgtAGC/STN+Hk/iRE7NX08mWRK6F6HNATK4L
PglRBcQrl5yURSmj++9N3QqJEyUnba3zYPzlefxxivvdPV3354oSfDAbk+8HLhQx
QngjkTsIvmObX4Ga61tOXTEHVrBvvMfWaH3SFfomT/dIROXVpF6igLxTHs6QSeGM
r+7wqeYn3D+pCnYUfdRAt/RUl/ZeJl6wEj4lild+Gf/rtH24p2030neBsEMMlv2Y
G8ypy4jMejmE8nb1hFGEktlvb2WlDpsrnDyIURuxLprTE76xv9JYnS9t2jzLGg7y
dqC5xgriPmxUVDyfm+O38UDG
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:27:16 2025 by rpki-client