Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/1-0tr3CV3zXmgdM-v1cxH8lPJPX4.roa
File: 1-0tr3CV3zXmgdM-v1cxH8lPJPX4.roa (raw, json)
Hash identifier: Qc12sKmCJFprTvt3QYzLHqibvelrVxSECnKCkAqWWPo=
Subject key identifier: FB:4B:6B:DC:25:77:CD:79:A0:74:CF:AF:D5:CC:47:F2:53:C9:3D:7E
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 0D45B910
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/1-0tr3CV3zXmgdM-v1cxH8lPJPX4.roa
Signing time: Sat 01 Jan 2022 02:51:15 +0000
ROA not before: Sat 01 Jan 2022 02:51:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60574
IP address blocks: 185.28.156.0/22 maxlen: 22
192.162.168.0/22 maxlen: 22
2a00:9e20::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222673168 (0xd45b910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Jan 1 02:51:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb4b6bdc2577cd79a074cfafd5cc47f253c93d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:49:73:f0:a1:5a:78:03:59:b9:ea:9e:80:
22:5d:6d:f9:c4:4e:20:d9:09:c9:2d:da:ab:4d:09:
c7:34:b9:90:fd:26:f2:66:ca:9f:a1:4d:ef:f6:05:
8f:0d:a5:5a:b5:0f:e0:2f:b3:9f:0b:37:3d:de:a4:
ce:00:8d:84:54:54:86:62:45:4b:b3:ef:6b:48:a5:
62:c8:cb:ae:d3:4d:95:31:39:a4:72:3c:ce:26:33:
4f:92:65:4b:41:a1:63:a7:9d:17:e4:2e:1d:40:e2:
d7:96:92:03:c5:cd:e5:f0:4c:d2:df:fb:be:c3:21:
3d:ae:e3:24:47:c7:d0:fb:0b:58:11:ed:a6:3e:95:
60:5b:e2:47:91:71:68:5c:a6:5c:8c:1d:80:ca:f9:
dd:5b:8c:a7:bd:ff:74:e6:59:fb:7f:46:a8:ed:80:
9a:a5:d5:1c:cb:db:28:04:3b:f5:04:47:60:7f:5e:
34:bd:83:b8:e7:89:f8:4d:08:a8:ab:4c:62:04:98:
2d:6e:1e:da:b3:dd:72:de:60:e0:39:4d:81:7f:95:
e6:5b:1d:45:ef:19:ce:50:4d:6f:dc:a8:34:b5:d1:
7b:6e:43:7f:14:42:f3:12:bd:93:22:5e:ad:22:36:
5b:8d:82:c3:dd:cb:fc:47:3c:06:61:d0:20:e0:2f:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4B:6B:DC:25:77:CD:79:A0:74:CF:AF:D5:CC:47:F2:53:C9:3D:7E
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/1-0tr3CV3zXmgdM-v1cxH8lPJPX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.156.0/22
192.162.168.0/22
IPv6:
2a00:9e20::/32
Signature Algorithm: sha256WithRSAEncryption
50:cb:82:33:c3:13:7e:2a:d9:28:91:fd:88:c3:f9:69:c6:9e:
c5:a6:0b:98:2d:88:52:70:35:07:2f:8d:eb:78:ca:0e:da:3b:
71:d9:79:16:53:d4:1e:85:f9:08:ca:94:b5:51:d7:be:77:bb:
51:df:af:e5:09:ea:0d:cb:70:f3:f9:c9:8f:c3:0e:58:ab:3d:
d0:75:4f:a1:da:c2:eb:de:55:e6:52:0c:68:d1:6c:e7:47:a1:
ad:97:c7:62:6e:2b:74:2c:5b:2a:d9:b1:12:2c:f8:9b:b1:a3:
79:c3:69:77:00:6e:93:0c:13:26:d5:23:87:a9:e0:21:7f:06:
64:16:8b:26:2c:77:bb:89:0d:e5:4a:29:97:d8:e6:42:92:17:
9d:b1:91:57:15:6b:15:1f:ce:88:67:f7:80:73:71:26:02:0f:
e1:7c:da:f1:ab:b4:14:81:f7:88:2d:a5:70:47:66:b7:68:06:
29:06:a9:b4:65:7b:f0:0a:f9:b9:ac:57:59:ef:70:59:d3:31:
94:a5:74:20:ff:f3:b6:5b:d3:85:cb:cd:8e:1b:b5:4a:f8:8a:
d5:49:06:c4:52:b2:f8:c6:e2:fb:6a:de:e8:14:75:8c:44:90:
20:6d:9a:1a:38:21:3f:03:5f:f2:2f:72:26:2d:42:48:86:d0:
0e:72:e7:57
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEDUW5EDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZDhmN2ViNGQyNTQ4ZjljY2JmM2NiMzhlNzAyYTE5MGMxMTc0MmY1MB4XDTIyMDEw
MTAyNTExNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmI0YjZiZGMyNTc3
Y2Q3OWEwNzRjZmFmZDVjYzQ3ZjI1M2M5M2Q3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjoSXPwoVp4A1m56p6AIl1t+cROINkJyS3aq00JxzS5kP0m
8mbKn6FN7/YFjw2lWrUP4C+znws3Pd6kzgCNhFRUhmJFS7Pva0ilYsjLrtNNlTE5
pHI8ziYzT5JlS0GhY6edF+QuHUDi15aSA8XN5fBM0t/7vsMhPa7jJEfH0PsLWBHt
pj6VYFviR5FxaFymXIwdgMr53VuMp73/dOZZ+39GqO2AmqXVHMvbKAQ79QRHYH9e
NL2DuOeJ+E0IqKtMYgSYLW4e2rPdct5g4DlNgX+V5lsdRe8ZzlBNb9yoNLXRe25D
fxRC8xK9kyJerSI2W42Cw93L/Ec8BmHQIOAv6W8CAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBT7S2vcJXfNeaB0z6/VzEfyU8k9fjAfBgNVHSMEGDAWgBSNj3600lSPnMvz
yzjnAqGQwRdC9TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pZOS10TkpVajV6TDg4czQ1d0toa01FWFF2VS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvYzI2MWViLWM3Y2QtNDU0ZC04NGE2LWFmZDI3MmRkMGZiNS8x
LzEtMHRyM0NWM3pYbWdkTS12MWN4SDhsUEpQWDQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5
L2MyNjFlYi1jN2NkLTQ1NGQtODRhNi1hZmQyNzJkZDBmYjUvMS9qWTktdE5KVWo1
ekw4OHM0NXdLaGtNRVhRdlUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
NAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAK5HJwDBALAoqgwDQQCAAIwBwMF
ACoAniAwDQYJKoZIhvcNAQELBQADggEBAFDLgjPDE34q2SiR/YjD+WnGnsWmC5gt
iFJwNQcvjet4yg7aO3HZeRZT1B6F+QjKlLVR1753u1Hfr+UJ6g3LcPP5yY/DDlir
PdB1T6HawuveVeZSDGjRbOdHoa2Xx2JuK3QsWyrZsRIs+Juxo3nDaXcAbpMMEybV
I4ep4CF/BmQWiyYsd7uJDeVKKZfY5kKSF52xkVcVaxUfzohn94BzcSYCD+F82vGr
tBSB94gtpXBHZrdoBikGqbRle/AK+bmsV1nvcFnTMZSldCD/87Zb04XLzY4btUr4
itVJBsRSsvjG4vtq3ugUdYxEkCBtmho4IT8DX/IvciYtQkiG0A5y51c=
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:12:20 2025 by rpki-client