Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/0UP-wOXL1s-M2HGADJRHpva6j3s.roa
File: 0UP-wOXL1s-M2HGADJRHpva6j3s.roa (raw, json)
Hash identifier: /IxhK+Bc+WV8zZnPO3jJE5DBUcCWvg/YbQ84SLTSu+Q=
Subject key identifier: D1:43:FE:C0:E5:CB:D6:CF:8C:D8:71:80:0C:94:47:A6:F6:BA:8F:7B
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 0185718321D3EB9E445C708321D896E4E7B8
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/0UP-wOXL1s-M2HGADJRHpva6j3s.roa
Signing time: Mon 02 Jan 2023 08:04:57 +0000
ROA not before: Mon 02 Jan 2023 08:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211091
IP address blocks: 185.188.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:21:d3:eb:9e:44:5c:70:83:21:d8:96:e4:e7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Jan 2 08:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d143fec0e5cbd6cf8cd871800c9447a6f6ba8f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:54:31:88:9c:91:de:10:91:5e:36:32:ff:00:
6d:91:e2:c8:f3:7d:fb:c9:1b:b8:9a:c1:5b:04:15:
4e:04:a1:02:34:86:bf:f0:c4:72:fe:c4:9d:dd:45:
7a:26:35:7f:f4:82:ef:8b:bf:d5:1f:ba:83:20:ef:
66:69:58:6b:75:ed:15:39:30:bb:d1:d1:55:08:3b:
bb:0c:b4:33:24:d1:81:ac:ae:ab:e4:84:2c:16:12:
6f:a2:5c:34:9f:b5:38:ea:05:be:cf:9a:75:19:91:
c0:36:ed:61:ba:f3:82:52:46:a1:26:00:a6:3f:2d:
90:47:9f:99:f0:2c:bb:bf:92:e5:d9:91:82:f4:5e:
59:c1:e5:3a:bb:34:de:6b:a8:c1:6d:80:8a:a7:e4:
2e:d5:98:eb:70:f7:52:f7:3f:b2:07:e3:c5:b8:28:
66:0e:fb:e5:50:f6:f3:91:8c:03:0a:eb:29:62:76:
40:21:51:f5:ac:5e:d4:64:59:9b:fe:1e:58:83:e8:
35:3e:17:23:5f:53:f0:1d:01:8a:4a:33:10:b6:a9:
9c:06:66:be:b8:cc:41:52:3d:5e:21:fd:fc:05:06:
59:6b:33:77:56:39:77:b5:be:1b:31:52:c7:d7:a3:
65:be:e6:14:d1:bd:c4:28:85:38:d0:38:3e:39:3b:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:43:FE:C0:E5:CB:D6:CF:8C:D8:71:80:0C:94:47:A6:F6:BA:8F:7B
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/0UP-wOXL1s-M2HGADJRHpva6j3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f4:4b:e9:40:ac:b7:4f:35:3f:84:14:b9:61:24:4f:d5:5f:
f9:79:9a:11:7d:47:b4:e3:6d:fa:b1:00:6e:79:1e:93:bf:9a:
e3:16:32:58:af:af:dd:8a:51:11:7a:3d:5f:b4:fc:73:d1:6e:
47:62:9f:53:80:12:cf:7b:a5:97:56:7a:80:89:8f:4d:38:a1:
cc:eb:f3:16:b9:b9:35:b1:0b:6a:42:91:71:4a:80:7c:40:b7:
d9:ae:8c:83:4d:38:b5:8a:e3:3f:1c:f9:a1:6f:ef:2e:58:9f:
f9:94:1a:6e:c1:ce:12:7f:09:d1:4b:6e:c2:bf:a2:85:f7:09:
a1:80:bd:66:2f:f8:dd:aa:8d:85:1e:41:9e:04:9e:79:f4:e3:
06:e6:f4:23:0b:cd:9b:b2:4b:03:39:13:0b:bb:a6:a5:4a:5c:
2a:57:20:9c:3c:a0:a1:da:91:bc:3a:c7:fc:ea:bc:f8:b9:14:
1f:6e:67:b4:0f:84:d1:be:a2:72:91:8b:95:a8:1b:f5:60:a9:
05:e2:2c:c1:12:d5:23:4c:64:45:a7:c6:1f:da:62:ba:2f:c3:
90:f6:d7:42:a8:19:47:bf:f3:3e:10:13:52:19:66:55:55:ae:
ac:2d:48:df:b6:4b:cb:2a:a2:68:47:19:fb:a4:c2:22:07:d4:
2b:53:0b:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxgyHT655EXHCDIdiW5Oe4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NWUwNDZlN2QzOTNjMTRmY2JhZWU3ZjFjNDM5ODBlM2Rh
MTFmYjEwHhcNMjMwMTAyMDgwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTQzZmVjMGU1Y2JkNmNmOGNkODcxODAwYzk0NDdhNmY2YmE4ZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VQxiJyR3hCRXjYy/wBtkeLI8337
yRu4msFbBBVOBKECNIa/8MRy/sSd3UV6JjV/9ILvi7/VH7qDIO9maVhrde0VOTC7
0dFVCDu7DLQzJNGBrK6r5IQsFhJvolw0n7U46gW+z5p1GZHANu1huvOCUkahJgCm
Py2QR5+Z8Cy7v5Ll2ZGC9F5ZweU6uzTea6jBbYCKp+Qu1ZjrcPdS9z+yB+PFuChm
DvvlUPbzkYwDCuspYnZAIVH1rF7UZFmb/h5Yg+g1PhcjX1PwHQGKSjMQtqmcBma+
uMxBUj1eIf38BQZZazN3Vjl3tb4bMVLH16NlvuYU0b3EKIU40Dg+OTtj7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNFD/sDly9bPjNhxgAyUR6b2uo97MB8GA1UdIwQY
MBaAFNleBG59OTwU/LrufxxDmA49oR+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAt
Nzg4YzViNzU3NTRiLzEvMFVQLXdPWEwxcy1NMkhHQURKUkhwdmE2ajNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAtNzg4YzViNzU3NTRi
LzEvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubwqMA0G
CSqGSIb3DQEBCwUAA4IBAQAO9EvpQKy3TzU/hBS5YSRP1V/5eZoRfUe04236sQBu
eR6Tv5rjFjJYr6/dilERej1ftPxz0W5HYp9TgBLPe6WXVnqAiY9NOKHM6/MWubk1
sQtqQpFxSoB8QLfZroyDTTi1iuM/HPmhb+8uWJ/5lBpuwc4SfwnRS27Cv6KF9wmh
gL1mL/jdqo2FHkGeBJ559OMG5vQjC82bsksDORMLu6alSlwqVyCcPKCh2pG8Osf8
6rz4uRQfbme0D4TRvqJykYuVqBv1YKkF4izBEtUjTGRFp8Yf2mK6L8OQ9tdCqBlH
v/M+EBNSGWZVVa6sLUjftkvLKqJoRxn7pMIiB9QrUwvc
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:21 2025 by rpki-client