Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/hPY4E7VnSrdq05Kb0gN-ZB7XBrE.roa
File: hPY4E7VnSrdq05Kb0gN-ZB7XBrE.roa (raw, json)
Hash identifier: +p7rwbJMcSWokIaSc+oPOL07Vjl66a5xSZwVmDTNbI8=
Subject key identifier: 84:F6:38:13:B5:67:4A:B7:6A:D3:92:9B:D2:03:7E:64:1E:D7:06:B1
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 02733193
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/hPY4E7VnSrdq05Kb0gN-ZB7XBrE.roa
Signing time: Sat 01 Jan 2022 03:59:35 +0000
ROA not before: Sat 01 Jan 2022 03:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207280
IP address blocks: 83.136.223.0/24 maxlen: 32
2a10:f00::/48 maxlen: 128
2a10:f00:1::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41103763 (0x2733193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Jan 1 03:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84f63813b5674ab76ad3929bd2037e641ed706b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:fd:e8:69:f6:4a:d4:47:3d:89:15:fe:b5:
1e:52:d3:9f:26:48:b3:9c:1c:bc:29:ca:4e:fd:78:
e6:41:1f:b1:f0:6e:12:8c:61:b6:20:15:bc:a4:f5:
c3:c6:7a:00:b9:8b:61:67:85:47:ef:27:21:e7:1c:
91:a0:90:40:6e:3a:6f:15:d5:d7:58:fb:e8:ac:09:
6a:b8:11:8c:84:ed:c9:64:ae:ec:92:2f:95:3b:87:
18:0f:9d:58:6a:fe:c9:52:bf:73:c6:45:9b:80:06:
95:63:62:80:48:b6:e6:7b:d8:8a:62:cc:d1:2d:fa:
23:ad:ee:2f:e5:2d:e9:1d:9f:af:29:57:ca:5c:9f:
19:ad:cb:44:05:c8:ce:c1:00:eb:a3:8c:3f:05:39:
f0:4a:b9:4a:07:d0:0d:1e:9f:1b:84:86:e2:f1:ad:
7b:db:c3:ba:0a:56:53:9e:31:fb:c1:56:22:b6:24:
c6:0d:e9:70:c1:63:49:85:e5:44:d6:a0:b2:19:e2:
ea:35:ab:ff:f5:bb:3c:6f:ae:7d:b4:a0:e4:99:73:
e3:8d:d6:ee:0e:c9:f1:83:15:f6:6a:79:22:31:e1:
c8:15:22:6f:dd:b9:e8:19:a3:ef:4f:95:f1:8f:1c:
c1:44:6d:29:7c:e9:98:bf:db:ce:ba:e9:e9:66:c8:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F6:38:13:B5:67:4A:B7:6A:D3:92:9B:D2:03:7E:64:1E:D7:06:B1
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/hPY4E7VnSrdq05Kb0gN-ZB7XBrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.223.0/24
IPv6:
2a10:f00::/47
Signature Algorithm: sha256WithRSAEncryption
55:6c:1d:fd:bf:b0:93:c2:13:5b:0d:a7:04:e3:f0:c1:dc:04:
8a:d5:f6:ae:36:83:ab:8c:a9:41:5d:98:26:60:a1:ea:fb:ac:
ba:a8:54:47:44:a9:21:18:90:0b:e7:ef:99:6d:ad:5f:32:40:
79:f7:0b:ef:89:a7:fc:e6:bf:bf:a7:33:eb:8c:8d:e9:fb:da:
13:3e:a6:d7:e3:27:ce:44:92:95:4e:0e:c5:13:9f:2a:0d:e6:
c9:fb:c9:bd:aa:26:06:ad:38:64:5b:31:67:18:75:6e:78:3d:
02:a3:7a:17:5c:4b:10:02:92:9e:f9:10:2e:2b:be:3c:d8:80:
35:99:71:51:94:8c:2f:64:a3:2f:98:c1:76:12:bc:c6:4b:1d:
23:1b:a7:78:64:57:65:fe:f7:46:24:46:63:a8:77:aa:f7:c4:
a1:76:17:3c:dd:38:63:4f:64:65:4d:25:5b:14:c9:d7:87:c5:
7f:c2:b5:94:d5:b6:63:61:76:01:51:75:77:1b:b3:8a:bf:c0:
89:33:65:3e:4f:c3:6c:77:71:99:44:26:5c:2e:0c:7f:97:2c:
fc:12:93:5c:e9:a0:da:6c:f4:be:66:b0:52:40:bf:96:50:dd:
e8:16:2b:ec:da:c3:42:9e:43:e6:ce:8c:65:39:ca:3c:be:50:
b3:68:8f:f2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEAnMxkzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2ZhODY4NjNjNTU4NjU3MDA2MzRlMTEzNWU2MTdlNDA3OWFmOGI5MB4XDTIyMDEw
MTAzNTkzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODRmNjM4MTNiNTY3
NGFiNzZhZDM5MjliZDIwMzdlNjQxZWQ3MDZiMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALkK/ehp9krURz2JFf61HlLTnyZIs5wcvCnKTv145kEfsfBu
EoxhtiAVvKT1w8Z6ALmLYWeFR+8nIecckaCQQG46bxXV11j76KwJargRjITtyWSu
7JIvlTuHGA+dWGr+yVK/c8ZFm4AGlWNigEi25nvYimLM0S36I63uL+Ut6R2frylX
ylyfGa3LRAXIzsEA66OMPwU58Eq5SgfQDR6fG4SG4vGte9vDugpWU54x+8FWIrYk
xg3pcMFjSYXlRNagshni6jWr//W7PG+ufbSg5Jlz443W7g7J8YMV9mp5IjHhyBUi
b9256Bmj70+V8Y8cwURtKXzpmL/bzrrp6WbIO8UCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSE9jgTtWdKt2rTkpvSA35kHtcGsTAfBgNVHSMEGDAWgBTc+oaGPFWGVwBj
ThE15hfkB5r4uTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNQcUdoanhWaGxjQVkwNFJOZVlYNUFlYS1May5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzYvNzA3NmEyLTI5NWYtNDVlYy1iN2M4LWM1YzljNjg5Yjc0NS8x
L2hQWTRFN1ZuU3JkcTA1S2IwZ04tWkI3WEJyRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYv
NzA3NmEyLTI5NWYtNDVlYy1iN2M4LWM1YzljNjg5Yjc0NS8xLzNQcUdoanhWaGxj
QVkwNFJOZVlYNUFlYS1May5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFOI3zAPBAIAAjAJAwcBKhAPAAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBVbB39v7CTwhNbDacE4/DB3ASK1fauNoOrjKlB
XZgmYKHq+6y6qFRHRKkhGJAL5++Zba1fMkB59wvviaf85r+/pzPrjI3p+9oTPqbX
4yfORJKVTg7FE58qDebJ+8m9qiYGrThkWzFnGHVueD0Co3oXXEsQApKe+RAuK748
2IA1mXFRlIwvZKMvmMF2ErzGSx0jG6d4ZFdl/vdGJEZjqHeq98Shdhc83ThjT2Rl
TSVbFMnXh8V/wrWU1bZjYXYBUXV3G7OKv8CJM2U+T8Nsd3GZRCZcLgx/lyz8EpNc
6aDabPS+ZrBSQL+WUN3oFivs2sNCnkPmzoxlOco8vlCzaI/y
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:16 2025 by rpki-client