Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/iWfKJvJwu0abiGqUmL8ho3FL5u0.roa
File: iWfKJvJwu0abiGqUmL8ho3FL5u0.roa (raw, json)
Hash identifier: fPRRvWyLoX4qHkINQIyF1dc22F2nImmOoD/IkRX+b/U=
Subject key identifier: 89:67:CA:26:F2:70:BB:46:9B:88:6A:94:98:BF:21:A3:71:4B:E6:ED
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 0185712790225C65E1C46BF0C1F5FC0AC21B
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/iWfKJvJwu0abiGqUmL8ho3FL5u0.roa
Signing time: Mon 02 Jan 2023 06:24:56 +0000
ROA not before: Mon 02 Jan 2023 06:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202758
IP address blocks: 185.155.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:90:22:5c:65:e1:c4:6b:f0:c1:f5:fc:0a:c2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 06:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8967ca26f270bb469b886a9498bf21a3714be6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:65:62:5d:27:69:5b:3e:36:c1:01:04:25:
c6:a2:e6:6e:ce:55:ec:4e:b7:00:b9:39:cf:00:08:
cb:2d:51:43:81:dc:28:e8:93:eb:0a:20:ff:c9:0d:
78:ba:45:a3:97:b6:2c:20:83:14:92:4f:0f:ba:6e:
f7:b1:af:16:b5:54:80:e5:16:7c:0d:71:ab:30:cb:
19:29:fc:e4:d1:0f:4a:e3:fc:ca:fe:64:b1:ab:8b:
8c:ac:70:be:34:2b:a4:b7:55:5d:12:11:60:4c:0c:
96:86:ca:4e:b5:4e:21:a5:41:d7:9e:21:49:73:91:
17:2f:ea:6b:47:e2:c0:b2:78:01:3e:4e:64:24:ec:
93:f5:8e:75:9f:09:5d:63:cc:40:ea:b1:04:f3:5d:
8e:5b:a4:29:f0:a4:22:36:93:a6:d3:f0:20:9e:86:
43:b1:f9:28:99:93:1c:fa:6e:77:10:c6:84:fa:db:
a6:e5:a7:e0:f9:8a:70:2a:0e:36:19:b0:a2:f3:4d:
a7:93:14:41:40:b6:a7:a0:27:1d:0a:38:32:1f:61:
4b:e3:d4:ba:cd:6d:74:1f:ba:16:b0:d8:f9:f6:b7:
4e:b0:9d:fc:fa:fa:30:45:dc:37:50:00:a2:f4:9b:
ba:56:ad:ed:fd:d4:29:6c:1d:9e:bf:f6:35:e4:1f:
83:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:67:CA:26:F2:70:BB:46:9B:88:6A:94:98:BF:21:A3:71:4B:E6:ED
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/iWfKJvJwu0abiGqUmL8ho3FL5u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.112.0/22
Signature Algorithm: sha256WithRSAEncryption
88:84:c4:d8:e2:f4:5d:02:9b:f8:1e:ee:79:66:1d:73:06:e7:
7d:b2:52:0c:97:f9:20:13:4e:a7:f3:ae:7e:2e:ec:09:b8:61:
cd:26:34:fd:d0:40:20:9f:1a:d4:06:e2:98:c8:a6:19:29:10:
e9:9f:f7:ba:f7:61:27:48:88:9c:da:25:0d:3c:94:4d:fa:34:
8f:a1:83:bc:3d:09:ef:2d:0e:be:31:ce:4a:0c:ec:93:37:70:
b4:76:41:49:ec:12:3b:38:f4:1b:2a:f5:55:11:e2:b5:16:04:
fa:82:76:bb:9e:9b:1c:1f:5c:ad:36:6f:79:6b:4f:bc:31:a4:
af:18:37:e5:4d:28:0e:4d:3a:e4:42:70:28:99:da:e8:ad:36:
2a:10:a0:c0:43:55:0b:94:33:92:06:12:8f:88:ba:f6:d0:2f:
d7:d2:9e:95:9c:60:63:04:b9:8a:df:43:4f:e5:57:1a:05:a1:
df:8d:9a:3c:cb:18:ba:9d:62:24:7d:9f:dd:bb:4f:14:40:7f:
99:50:8c:39:ac:90:11:f3:55:3e:9f:0d:aa:93:a9:28:5a:98:
73:1c:f8:67:60:e8:ce:49:1f:5d:83:2e:83:c0:ac:dd:80:53:
1e:ad:5c:47:49:5a:81:59:fa:7f:f7:78:80:5b:94:8d:b5:d2:
cd:e9:a1:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxJ5AiXGXhxGvwwfX8CsIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjMwMTAyMDYyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTY3Y2EyNmYyNzBiYjQ2OWI4ODZhOTQ5OGJmMjFhMzcxNGJlNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3tlYl0naVs+NsEBBCXGouZuzlXs
TrcAuTnPAAjLLVFDgdwo6JPrCiD/yQ14ukWjl7YsIIMUkk8Pum73sa8WtVSA5RZ8
DXGrMMsZKfzk0Q9K4/zK/mSxq4uMrHC+NCukt1VdEhFgTAyWhspOtU4hpUHXniFJ
c5EXL+prR+LAsngBPk5kJOyT9Y51nwldY8xA6rEE812OW6Qp8KQiNpOm0/AgnoZD
sfkomZMc+m53EMaE+tum5afg+YpwKg42GbCi802nkxRBQLanoCcdCjgyH2FL49S6
zW10H7oWsNj59rdOsJ38+vowRdw3UACi9Ju6Vq3t/dQpbB2ev/Y15B+DvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIlnyibycLtGm4hqlJi/IaNxS+btMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvaVdmS0p2Snd1MGFiaUdxVW1MOGhvM0ZMNXUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZtwMA0G
CSqGSIb3DQEBCwUAA4IBAQCIhMTY4vRdApv4Hu55Zh1zBud9slIMl/kgE06n865+
LuwJuGHNJjT90EAgnxrUBuKYyKYZKRDpn/e692EnSIic2iUNPJRN+jSPoYO8PQnv
LQ6+Mc5KDOyTN3C0dkFJ7BI7OPQbKvVVEeK1FgT6gna7npscH1ytNm95a0+8MaSv
GDflTSgOTTrkQnAomdrorTYqEKDAQ1ULlDOSBhKPiLr20C/X0p6VnGBjBLmK30NP
5VcaBaHfjZo8yxi6nWIkfZ/du08UQH+ZUIw5rJAR81U+nw2qk6koWphzHPhnYOjO
SR9dgy6DwKzdgFMerVxHSVqBWfp/93iAW5SNtdLN6aHq
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:31 2025 by rpki-client