Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/C2SwrOVNMFy-nxLfJqjXpNDaxxU.roa
File: C2SwrOVNMFy-nxLfJqjXpNDaxxU.roa (raw, json)
Hash identifier: mxameXe6OAu4SR/cIMC7H8OPvGuVLoDPFV1kuZTRf6c=
Subject key identifier: 0B:64:B0:AC:E5:4D:30:5C:BE:9F:12:DF:26:A8:D7:A4:D0:DA:C7:15
Certificate issuer: /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial: 0188CE7E9E13800194C1EC7F2ABF4E65E989
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/C2SwrOVNMFy-nxLfJqjXpNDaxxU.roa
Signing time: Sun 18 Jun 2023 12:33:04 +0000
ROA not before: Sun 18 Jun 2023 12:33:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200046
IP address blocks: 185.38.60.0/22 maxlen: 22
45.8.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ce:7e:9e:13:80:01:94:c1:ec:7f:2a:bf:4e:65:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
Validity
Not Before: Jun 18 12:33:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b64b0ace54d305cbe9f12df26a8d7a4d0dac715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:fd:4c:d2:7c:1c:a5:a0:07:18:1e:d4:5a:
81:32:c9:be:32:d1:88:4c:87:e7:63:23:f4:8c:0c:
d1:b7:da:28:55:78:ce:0e:f7:dc:c5:0f:01:48:31:
3f:12:5c:b2:e8:51:8c:92:e6:20:ce:70:54:63:4c:
cc:dc:21:dc:42:63:40:51:d9:14:d1:71:90:d1:14:
bc:88:2b:28:cc:5c:aa:c7:73:b7:54:ed:b3:48:a6:
4e:94:a1:bf:3c:6e:9a:ba:fe:e0:26:3a:07:b5:63:
9f:39:b3:d7:ea:cf:c7:61:3b:14:bf:a9:76:d4:d9:
51:76:14:b1:64:1f:0f:f3:16:1c:ad:92:33:3a:a3:
55:c1:f6:fd:8f:5a:89:d7:59:54:f8:7f:96:e9:e7:
1d:75:e5:ff:48:b6:80:85:55:63:9e:99:d1:7e:6f:
e2:d4:ac:b4:5a:59:99:61:55:88:47:5a:51:c7:1e:
e1:ba:66:ad:bb:c7:f1:7e:e6:5d:6b:6d:16:e2:59:
4c:0f:0f:ab:31:eb:5a:58:48:07:6c:0d:f1:fa:3d:
18:79:76:4d:5b:cd:b8:4f:0f:bc:84:fb:bb:07:d7:
4b:48:e3:96:c9:c2:1f:6d:98:16:92:2e:78:ef:d7:
1b:7c:97:98:e4:2f:81:cf:56:47:05:3c:44:a1:f6:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:B0:AC:E5:4D:30:5C:BE:9F:12:DF:26:A8:D7:A4:D0:DA:C7:15
X509v3 Authority Key Identifier:
keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/C2SwrOVNMFy-nxLfJqjXpNDaxxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.27.0/24
185.38.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:0b:cd:76:2c:e1:b1:04:de:7d:22:c0:7b:8b:03:85:c2:cd:
ac:fa:ce:5d:b9:54:a4:a9:39:7d:e9:63:86:15:af:e7:68:05:
e9:a0:cb:8a:66:7c:e3:40:9c:f5:80:ac:b7:f1:44:ee:be:3d:
6f:4a:3b:20:f6:ee:45:08:e6:ab:c8:50:ed:2f:77:04:f9:37:
e0:d8:5e:50:19:de:59:5a:0a:be:f1:6b:47:a9:1d:02:9a:f6:
43:cc:98:81:6e:75:03:1c:57:9c:61:3c:1a:2c:20:0e:24:69:
eb:2a:1e:8d:c7:64:aa:d1:b7:da:b1:89:2b:c7:fe:32:36:8a:
a6:21:f0:c3:84:81:f1:55:0b:5e:0d:28:e5:2d:1f:e9:cd:16:
e1:21:3e:60:9a:69:67:c0:f9:86:d3:e7:7e:51:3f:e3:37:83:
29:ba:fb:a5:d0:f1:ad:a4:92:d0:91:7c:8d:c5:63:80:28:26:
4d:d9:72:79:92:c8:6d:78:5f:80:7a:05:fe:5c:e9:d8:3f:34:
94:66:f3:df:21:b2:10:ae:7f:f8:21:fe:9c:04:48:e3:e7:83:
55:f6:84:02:8f:66:bf:b3:24:ba:68:07:05:0e:3a:d3:29:f7:
bb:85:a1:38:3c:67:08:c9:d7:06:2d:9c:16:c1:3e:41:3f:26:
1a:32:42:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjOfp4TgAGUwex/Kr9OZemJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDEzMDI0NTUyOTQyY2VhZjY4YzY3ZTAxMjhkZmY0Yjll
Zjc0OWMwHhcNMjMwNjE4MTIzMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjY0YjBhY2U1NGQzMDVjYmU5ZjEyZGYyNmE4ZDdhNGQwZGFjNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqz9TNJ8HKWgBxge1FqBMsm+MtGI
TIfnYyP0jAzRt9ooVXjODvfcxQ8BSDE/Elyy6FGMkuYgznBUY0zM3CHcQmNAUdkU
0XGQ0RS8iCsozFyqx3O3VO2zSKZOlKG/PG6auv7gJjoHtWOfObPX6s/HYTsUv6l2
1NlRdhSxZB8P8xYcrZIzOqNVwfb9j1qJ11lU+H+W6ecddeX/SLaAhVVjnpnRfm/i
1Ky0WlmZYVWIR1pRxx7humatu8fxfuZda20W4llMDw+rMetaWEgHbA3x+j0YeXZN
W824Tw+8hPu7B9dLSOOWycIfbZgWki5479cbfJeY5C+Bz1ZHBTxEofY/fwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAtksKzlTTBcvp8S3yao16TQ2scVMB8GA1UdIwQY
MBaAFBUBMCRVKULOr2jGfgEo3/S573ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NTg1MmItZmE3ZS00YWQ3LWIzZWIt
NzBmYzRiMDhmMDBiLzEvQzJTd3JPVk5NRnktbnhMZkpxalhwTkRheHhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82NTg1MmItZmE3ZS00YWQ3LWIzZWItNzBmYzRiMDhmMDBi
LzEvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQgbAwQC
uSY8MA0GCSqGSIb3DQEBCwUAA4IBAQBrC812LOGxBN59IsB7iwOFws2s+s5duVSk
qTl96WOGFa/naAXpoMuKZnzjQJz1gKy38UTuvj1vSjsg9u5FCOaryFDtL3cE+Tfg
2F5QGd5ZWgq+8WtHqR0CmvZDzJiBbnUDHFecYTwaLCAOJGnrKh6Nx2Sq0bfasYkr
x/4yNoqmIfDDhIHxVQteDSjlLR/pzRbhIT5gmmlnwPmG0+d+UT/jN4Mpuvul0PGt
pJLQkXyNxWOAKCZN2XJ5kshteF+AegX+XOnYPzSUZvPfIbIQrn/4If6cBEjj54NV
9oQCj2a/syS6aAcFDjrTKfe7haE4PGcIydcGLZwWwT5BPyYaMkIT
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:49 2025 by rpki-client