Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/MEHiitSseAx37jOQ_EeD3uAXzyM.roa
File: MEHiitSseAx37jOQ_EeD3uAXzyM.roa (raw, json)
Hash identifier: oCJFjzFap+Nf2btxNb2FDV2jLaZGTcb60v4ftisj1Vc=
Subject key identifier: 30:41:E2:8A:D4:AC:78:0C:77:EE:33:90:FC:47:83:DE:E0:17:CF:23
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 03308C
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/MEHiitSseAx37jOQ_EeD3uAXzyM.roa
Signing time: Tue 11 Jan 2022 10:57:11 +0000
ROA not before: Tue 11 Jan 2022 10:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39537
IP address blocks: 185.202.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209036 (0x3308c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jan 11 10:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3041e28ad4ac780c77ee3390fc4783dee017cf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:c7:be:07:43:5d:4b:39:0d:55:64:d2:7a:
90:6f:63:ef:50:4d:62:39:ac:d2:25:50:91:d0:61:
2b:7b:5c:a4:d2:9c:6e:c0:ec:7e:30:5c:4b:08:21:
ce:da:36:32:b5:ab:b1:35:8f:6c:4b:c1:44:8e:1b:
4c:36:cc:eb:2f:91:89:15:18:76:1a:d7:14:3b:cb:
d7:4b:a9:26:f4:53:ee:1b:6f:4d:64:0f:6d:49:a4:
63:f7:65:0b:ac:b5:12:16:58:b9:cf:14:81:dd:42:
32:9d:29:96:a1:ae:87:09:39:0f:39:67:fc:a6:ed:
7d:3e:9c:1a:76:95:bf:07:fd:0b:08:57:b4:17:a0:
10:de:b6:42:e4:ab:12:0f:ea:22:e0:48:c8:f9:05:
b4:99:4f:cd:29:82:58:53:3e:72:3a:da:b6:04:8c:
c0:97:2a:69:3e:a7:e2:bc:11:9a:48:58:e2:36:88:
07:02:e3:77:63:77:56:69:9c:be:9d:dc:b6:f1:0a:
02:a2:c9:3a:09:ec:fe:35:95:85:f2:6a:f1:d7:47:
4a:9f:33:e3:d2:e8:5c:29:2e:79:91:76:71:36:d0:
48:d9:e3:c3:13:37:86:ac:59:8e:6b:63:8a:fa:00:
7a:39:96:b5:7d:2e:03:97:10:5b:b9:cf:c5:49:0a:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:41:E2:8A:D4:AC:78:0C:77:EE:33:90:FC:47:83:DE:E0:17:CF:23
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/MEHiitSseAx37jOQ_EeD3uAXzyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:62:9f:f3:c5:f0:c6:bd:44:c1:3d:fc:0f:91:6d:37:ef:59:
fc:a5:cf:eb:7e:59:12:e2:94:3a:93:5c:f8:f6:95:a5:f1:41:
6b:21:a8:86:f1:b8:79:6b:d1:bc:54:3c:8c:35:1f:9f:37:42:
31:64:9c:4b:85:5a:89:b5:a2:4f:69:df:0d:c0:01:22:12:d6:
0a:55:ad:0d:d5:e6:6a:4f:f6:f2:ea:30:0a:db:01:5b:4d:36:
da:9a:91:ac:08:cd:ec:74:a5:a7:00:41:e9:fc:33:78:98:20:
23:1a:a4:95:33:1b:58:50:7d:bb:12:93:3f:06:e7:52:77:78:
45:5c:5d:45:3a:3b:1a:e7:b9:d6:7b:e4:d9:c0:49:16:cb:3d:
4d:6d:8c:19:21:cc:3e:69:c7:d7:5e:a2:a6:aa:24:0d:ee:5f:
46:eb:1a:b4:d9:9e:53:0c:f9:ae:98:fc:b2:e9:67:8c:70:51:
ea:2a:0a:b6:83:3e:a0:9a:a1:de:10:d1:39:8b:3b:1b:54:a8:
9a:2d:7c:57:d8:37:6b:62:37:9d:69:61:20:1a:11:b9:a8:ab:
79:20:37:c1:93:75:ba:8b:9f:dd:1d:2a:25:33:d3:27:f1:26:
9d:ca:10:ac:c3:d2:e8:75:c7:47:78:f5:d5:90:9c:0b:4f:00:
a8:a2:37:47
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAzCMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
YzVkYWQ1NDRkZjQ5NzE2MDg1ZWJlODBkYmU4MmViNjhhMjA5YzkwHhcNMjIwMTEx
MTA1NzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzMDQxZTI4YWQ0YWM3
ODBjNzdlZTMzOTBmYzQ3ODNkZWUwMTdjZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnovHvgdDXUs5DVVk0nqQb2PvUE1iOazSJVCR0GEre1yk0pxu
wOx+MFxLCCHO2jYytauxNY9sS8FEjhtMNszrL5GJFRh2GtcUO8vXS6km9FPuG29N
ZA9tSaRj92ULrLUSFli5zxSB3UIynSmWoa6HCTkPOWf8pu19PpwadpW/B/0LCFe0
F6AQ3rZC5KsSD+oi4EjI+QW0mU/NKYJYUz5yOtq2BIzAlyppPqfivBGaSFjiNogH
AuN3Y3dWaZy+ndy28QoCosk6Cez+NZWF8mrx10dKnzPj0uhcKS55kXZxNtBI2ePD
EzeGrFmOa2OK+gB6OZa1fS4DlxBbuc/FSQoHBwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFDBB4orUrHgMd+4zkPxHg97gF88jMB8GA1UdIwQYMBaAFGXF2tVE30lxYIXr
6A2+gutoognJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83Ny81Y2ZkMzgtNWUzNy00M2FmLWExYjAtYWQwMTJhZmY1MTcyLzEv
TUVIaWl0U3NlQXgzN2pPUV9FZUQzdUFYenlNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81
Y2ZkMzgtNWUzNy00M2FmLWExYjAtYWQwMTJhZmY1MTcyLzEvWmNYYTFVVGZTWEZn
aGV2b0RiNkM2MmlpQ2NrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucpzMA0GCSqGSIb3DQEBCwUAA4IB
AQAcYp/zxfDGvUTBPfwPkW0371n8pc/rflkS4pQ6k1z49pWl8UFrIaiG8bh5a9G8
VDyMNR+fN0IxZJxLhVqJtaJPad8NwAEiEtYKVa0N1eZqT/by6jAK2wFbTTbampGs
CM3sdKWnAEHp/DN4mCAjGqSVMxtYUH27EpM/BudSd3hFXF1FOjsa57nWe+TZwEkW
yz1NbYwZIcw+acfXXqKmqiQN7l9G6xq02Z5TDPmumPyy6WeMcFHqKgq2gz6gmqHe
ENE5izsbVKiaLXxX2DdrYjedaWEgGhG5qKt5IDfBk3W6i5/dHSolM9Mn8SadyhCs
w9LodcdHePXVkJwLTwCoojdH
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:01:28 2025 by rpki-client