Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/27ZHxVfcZC00myY7ZwYEIpqsfAY.roa
File: 27ZHxVfcZC00myY7ZwYEIpqsfAY.roa (raw, json)
Hash identifier: lQhkFiM63rsYDFY/u1/DuZaOVCbmah8UFuuqku+Vdtw=
Subject key identifier: DB:B6:47:C5:57:DC:64:2D:34:9B:26:3B:67:06:04:22:9A:AC:7C:06
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 01878624C8660A3F83EBA39B453AD18F659B
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/27ZHxVfcZC00myY7ZwYEIpqsfAY.roa
Signing time: Sat 15 Apr 2023 18:19:30 +0000
ROA not before: Sat 15 Apr 2023 18:19:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200476
IP address blocks: 185.217.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:86:24:c8:66:0a:3f:83:eb:a3:9b:45:3a:d1:8f:65:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Apr 15 18:19:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbb647c557dc642d349b263b670604229aac7c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:0b:03:c9:ae:0f:20:da:de:83:0e:4e:64:
56:c9:02:c4:05:30:6a:20:f4:20:56:7c:7b:6d:5b:
b3:e0:1a:d3:98:89:50:4f:3d:09:a0:f5:34:90:f3:
22:b8:97:01:51:4d:13:2b:98:ad:f7:d6:94:3d:bd:
05:5f:23:8f:53:e9:e7:58:3c:21:b6:73:6a:0a:17:
d0:cb:53:b5:37:bf:0d:a1:00:d5:f9:d9:32:1d:5d:
7c:26:52:23:7d:bf:50:84:6c:22:65:20:84:fc:9b:
92:9c:e1:a5:b1:b9:51:46:48:75:57:1e:ea:41:8b:
7a:7a:0c:2d:ad:33:a9:b9:5e:39:58:c6:1e:20:8a:
da:e0:7a:e5:10:df:42:17:eb:df:a0:bc:cd:79:c1:
00:8b:64:81:52:4b:ec:01:23:c3:e2:5b:78:0e:8e:
be:13:32:ec:1a:7b:ae:d8:1a:28:20:bf:07:60:7e:
97:bb:75:d6:2d:3f:1e:1b:1c:c0:3f:e1:a6:fa:31:
35:9f:4d:4c:ab:2d:9b:00:d1:35:3e:92:59:9e:49:
15:dd:49:32:09:43:73:76:60:60:f9:19:97:90:45:
8f:8c:66:23:9b:a3:1e:ba:95:fa:85:ff:7a:a3:53:
9c:67:2b:3e:74:83:7c:66:ee:9d:d1:26:2c:71:53:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B6:47:C5:57:DC:64:2D:34:9B:26:3B:67:06:04:22:9A:AC:7C:06
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/27ZHxVfcZC00myY7ZwYEIpqsfAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:71:5a:87:49:e3:24:ee:da:01:ad:03:76:00:bb:49:b7:23:
30:cb:68:f6:31:ed:0f:8b:c5:17:2e:ed:dc:08:5e:13:50:97:
7a:56:de:b3:b7:22:a1:88:d0:e0:4e:d8:bf:9d:eb:af:c6:0b:
85:75:38:f7:67:a7:3b:c2:60:a9:5d:08:d4:c5:ad:d4:3d:81:
62:aa:76:3b:a9:61:c5:69:84:2c:1d:bd:33:c8:e2:22:19:52:
3e:b7:af:1a:0f:c4:03:4a:07:f0:0f:62:37:20:69:83:21:25:
3e:21:56:ac:5d:e7:a1:69:00:23:22:24:27:08:3c:32:02:6c:
b9:0f:33:d1:27:f5:b4:49:59:f4:8b:b9:2b:5e:71:0a:fc:19:
c9:df:0d:ee:92:0b:3b:87:dd:3d:cb:6c:2e:60:fc:80:ef:14:
59:b2:14:36:b0:a5:53:7b:fb:fb:be:7d:17:9c:1b:3b:d0:1c:
5c:c0:8b:2d:e1:6e:76:84:12:38:1a:63:a3:d8:75:b6:4d:22:
e8:f0:3f:64:8c:5a:42:89:18:5a:95:e6:03:6c:5e:99:5a:57:
52:c8:0f:c1:62:d0:9c:39:6f:a4:1e:a0:a5:11:cd:55:0a:8e:
13:b9:25:03:dd:46:f7:56:7d:76:74:74:6e:50:4a:30:39:58:
ba:d0:56:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeGJMhmCj+D66ObRTrRj2WbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2FhYWJiMjNjZDI0NWJmYTgyOGZiMDI1MjFkNjQ0YzZk
NWI1NjYwHhcNMjMwNDE1MTgxOTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmI2NDdjNTU3ZGM2NDJkMzQ5YjI2M2I2NzA2MDQyMjlhYWM3YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUULA8muDyDa3oMOTmRWyQLEBTBq
IPQgVnx7bVuz4BrTmIlQTz0JoPU0kPMiuJcBUU0TK5it99aUPb0FXyOPU+nnWDwh
tnNqChfQy1O1N78NoQDV+dkyHV18JlIjfb9QhGwiZSCE/JuSnOGlsblRRkh1Vx7q
QYt6egwtrTOpuV45WMYeIIra4HrlEN9CF+vfoLzNecEAi2SBUkvsASPD4lt4Do6+
EzLsGnuu2BooIL8HYH6Xu3XWLT8eGxzAP+Gm+jE1n01Mqy2bANE1PpJZnkkV3Uky
CUNzdmBg+RmXkEWPjGYjm6MeupX6hf96o1OcZys+dIN8Zu6d0SYscVNEwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNu2R8VX3GQtNJsmO2cGBCKarHwGMB8GA1UdIwQY
MBaAFKt6qrsjzSRb+oKPsCUh1kTG1bVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMt
OWVhZDgxZGEyZTQ0LzEvMjdaSHhWZmNaQzAwbXlZN1p3WUVJcHFzZkFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMtOWVhZDgxZGEyZTQ0
LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudklMA0G
CSqGSIb3DQEBCwUAA4IBAQB7cVqHSeMk7toBrQN2ALtJtyMwy2j2Me0Pi8UXLu3c
CF4TUJd6Vt6ztyKhiNDgTti/neuvxguFdTj3Z6c7wmCpXQjUxa3UPYFiqnY7qWHF
aYQsHb0zyOIiGVI+t68aD8QDSgfwD2I3IGmDISU+IVasXeehaQAjIiQnCDwyAmy5
DzPRJ/W0SVn0i7krXnEK/BnJ3w3ukgs7h909y2wuYPyA7xRZshQ2sKVTe/v7vn0X
nBs70BxcwIst4W52hBI4GmOj2HW2TSLo8D9kjFpCiRhaleYDbF6ZWldSyA/BYtCc
OW+kHqClEc1VCo4TuSUD3Ub3Vn12dHRuUEowOVi60FY+
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:35:30 2025 by rpki-client