Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/gB19pagYilsT9GMsTuQ6uOjGOvM.roa
File: gB19pagYilsT9GMsTuQ6uOjGOvM.roa (raw, json)
Hash identifier: TAl+LOOIUmvBwszcEARX9rKtROQZTo700Rv25FE+lGY=
Subject key identifier: 80:1D:7D:A5:A8:18:8A:5B:13:F4:63:2C:4E:E4:3A:B8:E8:C6:3A:F3
Certificate issuer: /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial: 1662DC7F
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/gB19pagYilsT9GMsTuQ6uOjGOvM.roa
Signing time: Sat 01 Jan 2022 01:00:59 +0000
ROA not before: Sat 01 Jan 2022 01:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25178
IP address blocks: 185.85.184.0/22 maxlen: 24
2a05:b100::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375577727 (0x1662dc7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Validity
Not Before: Jan 1 01:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=801d7da5a8188a5b13f4632c4ee43ab8e8c63af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:d2:99:9b:ce:c4:15:6d:a8:56:3a:16:17:
82:88:fc:3e:3f:8c:f6:95:03:c3:68:0c:11:7e:36:
e1:10:fc:82:95:8c:af:ca:b9:f9:e9:54:65:90:75:
ed:cc:94:9f:af:ba:6a:c3:6f:de:bf:3f:32:d8:c3:
8f:67:f6:74:12:7c:f4:75:9d:bb:51:46:41:13:b6:
85:5e:44:5a:e7:87:6c:54:f3:9d:77:8f:2c:97:e8:
51:a5:ce:90:67:a8:18:03:38:77:5a:18:0f:fb:03:
c7:3c:db:1b:57:a6:46:e3:1c:1d:7b:31:02:32:c2:
e5:c1:9b:81:c2:e3:d3:4f:a2:b7:30:7d:9d:f0:5c:
86:c1:9c:62:69:b9:f7:0f:c9:8f:6b:cd:45:b5:cd:
fc:99:be:eb:d9:3b:8d:a0:5a:73:47:9e:46:73:13:
ab:e6:17:0f:11:c9:c9:e9:51:a5:a0:33:58:c9:f9:
07:e4:f7:df:68:6e:02:5f:c6:7d:3d:f2:51:45:2c:
f5:a5:db:86:e8:9f:71:2e:92:79:ed:1f:14:50:73:
89:1e:2f:f9:95:bd:da:ba:e6:c0:8c:3d:ea:aa:19:
87:b7:ff:44:4d:04:ed:70:3e:ac:59:b6:3a:3a:fc:
99:de:86:9e:22:03:c4:2d:5c:5e:1b:30:ed:42:67:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:7D:A5:A8:18:8A:5B:13:F4:63:2C:4E:E4:3A:B8:E8:C6:3A:F3
X509v3 Authority Key Identifier:
keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/gB19pagYilsT9GMsTuQ6uOjGOvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.184.0/22
IPv6:
2a05:b100::/29
Signature Algorithm: sha256WithRSAEncryption
27:a4:41:5d:a4:66:8a:0c:80:2d:44:17:b3:ee:f2:39:69:b9:
1a:b4:dd:2f:90:43:28:a2:3a:b3:43:45:46:80:69:1d:2c:93:
32:ac:7e:cc:2a:26:1d:51:c3:99:bc:30:7c:51:8e:0b:e5:f2:
f7:72:32:10:b2:66:a4:40:9f:f4:eb:fe:ef:6e:1d:ca:65:b5:
1f:bb:67:07:ad:41:a3:23:d4:9c:01:44:fd:5f:a4:38:4c:10:
a0:2d:a5:0c:e0:28:32:11:77:b4:aa:b2:71:57:f8:d7:34:bc:
08:05:7f:6a:2a:99:45:1f:b3:60:6b:1a:6e:09:6c:a5:f2:7b:
96:be:a5:a5:d1:e4:0b:af:e0:02:e9:10:d4:9f:09:bf:a6:16:
38:62:01:9b:95:25:c5:cc:2e:fb:02:d7:ae:6a:9c:83:c6:8b:
d8:c4:45:91:69:22:a3:34:a2:63:a9:3e:5b:8a:e4:4a:be:7d:
97:18:3f:13:fe:44:8e:ca:8d:31:2e:dd:d9:fd:1f:b6:ba:93:
7b:53:03:b7:5b:04:bc:a3:a5:f2:5b:01:33:74:f4:89:f9:20:
3c:7f:8d:2d:e2:f2:70:a3:a3:e7:5f:f8:8b:02:10:dc:ba:2e:
4d:87:e5:ef:1f:41:5c:ca:72:11:ff:89:9f:99:ab:44:66:7b:
2e:38:37:45
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEFmLcfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MGZlZTE3NmY1MWNlOGZkODE0MjRmZjczYTU0MTczNDEyNzljMGYxMB4XDTIyMDEw
MTAxMDA1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODAxZDdkYTVhODE4
OGE1YjEzZjQ2MzJjNGVlNDNhYjhlOGM2M2FmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJYS0pmbzsQVbahWOhYXgoj8Pj+M9pUDw2gMEX424RD8gpWM
r8q5+elUZZB17cyUn6+6asNv3r8/MtjDj2f2dBJ89HWdu1FGQRO2hV5EWueHbFTz
nXePLJfoUaXOkGeoGAM4d1oYD/sDxzzbG1emRuMcHXsxAjLC5cGbgcLj00+itzB9
nfBchsGcYmm59w/Jj2vNRbXN/Jm+69k7jaBac0eeRnMTq+YXDxHJyelRpaAzWMn5
B+T332huAl/GfT3yUUUs9aXbhuifcS6See0fFFBziR4v+ZW92rrmwIw96qoZh7f/
RE0E7XA+rFm2Ojr8md6GniIDxC1cXhsw7UJnEUsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSAHX2lqBiKWxP0YyxO5Dq46MY68zAfBgNVHSMEGDAWgBRw/uF29Rzo/YFC
T/c6VBc0EnnA8TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NQN2hkdlVjNlAyQlFrXzNPbFFYTkJKNXdQRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvNGJlMjIyLTY0ODItNGRiOS05YTVmLTc1MmU5YjhiMDc1Ni8x
L2dCMTlwYWdZaWxzVDlHTXNUdVE2dU9qR092TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
NGJlMjIyLTY0ODItNGRiOS05YTVmLTc1MmU5YjhiMDc1Ni8xL2NQN2hkdlVjNlAy
QlFrXzNPbFFYTkJKNXdQRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlVuDANBAIAAjAHAwUDKgWxADAN
BgkqhkiG9w0BAQsFAAOCAQEAJ6RBXaRmigyALUQXs+7yOWm5GrTdL5BDKKI6s0NF
RoBpHSyTMqx+zComHVHDmbwwfFGOC+Xy93IyELJmpECf9Ov+724dymW1H7tnB61B
oyPUnAFE/V+kOEwQoC2lDOAoMhF3tKqycVf41zS8CAV/aiqZRR+zYGsabglspfJ7
lr6lpdHkC6/gAukQ1J8Jv6YWOGIBm5Ulxcwu+wLXrmqcg8aL2MRFkWkiozSiY6k+
W4rkSr59lxg/E/5EjsqNMS7d2f0ftrqTe1MDt1sEvKOl8lsBM3T0ifkgPH+NLeLy
cKOj51/4iwIQ3LouTYfl7x9BXMpyEf+Jn5mrRGZ7Ljg3RQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:18 2025 by rpki-client