Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/aNWcEjmyXFcgNKr0ADa-xIDEV1A.roa
File: aNWcEjmyXFcgNKr0ADa-xIDEV1A.roa (raw, json)
Hash identifier: dvCanX73A/oIRM4MRimzbC9Ox8deAp5zpU093sICh8g=
Subject key identifier: 68:D5:9C:12:39:B2:5C:57:20:34:AA:F4:00:36:BE:C4:80:C4:57:50
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 0A728B27
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/aNWcEjmyXFcgNKr0ADa-xIDEV1A.roa
Signing time: Thu 19 May 2022 10:59:29 +0000
ROA not before: Thu 19 May 2022 10:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8280
IP address blocks: 185.82.37.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175278887 (0xa728b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: May 19 10:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68d59c1239b25c572034aaf40036bec480c45750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:39:57:b6:35:c9:a7:1d:12:a2:b4:29:7c:
19:cd:75:73:9e:44:8d:4a:1c:04:a7:e0:2a:f4:61:
ab:81:7c:d3:f4:f2:d1:e0:6f:55:d3:33:34:c0:1a:
e3:26:7f:0a:3f:31:59:9a:a9:34:bf:90:d0:5a:77:
8c:08:0a:58:db:56:d5:6b:8f:95:07:42:1c:35:9a:
3e:16:68:20:49:41:ad:06:63:3b:4b:cf:ca:d9:2a:
47:b9:76:e5:fb:9b:20:51:ed:06:9b:cc:87:37:c1:
eb:5c:28:8e:53:c4:f9:17:a2:61:b7:6f:47:79:72:
7d:a4:33:c7:3a:fd:76:23:1a:34:b7:10:1e:2e:4e:
ec:18:c8:ec:c1:86:d4:bc:49:cd:9f:43:38:fe:1c:
2d:b3:52:22:c2:17:6d:54:d1:b0:07:3f:43:a1:98:
45:f7:f1:7f:0e:25:04:87:ad:dc:50:4d:a7:f2:05:
5e:a0:10:9b:51:dd:7f:bb:39:c1:89:fb:9a:48:bb:
fe:af:e0:09:72:98:29:b3:66:4a:0d:3d:10:b6:5e:
7a:4c:11:22:d7:ea:25:27:db:e2:6e:65:90:54:8c:
ba:ea:da:65:58:94:b9:36:22:8d:52:99:ce:b6:51:
4a:8b:f1:39:48:7c:fb:b4:a9:8c:09:b0:94:66:62:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D5:9C:12:39:B2:5C:57:20:34:AA:F4:00:36:BE:C4:80:C4:57:50
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/aNWcEjmyXFcgNKr0ADa-xIDEV1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.37.0/24
Signature Algorithm: sha256WithRSAEncryption
59:56:80:19:e0:6e:f2:08:20:11:19:9d:19:49:97:5a:da:9d:
54:a4:c8:1c:d3:eb:48:cd:92:60:a4:6e:31:b6:c0:2a:f3:b1:
81:78:38:94:76:e8:a1:a7:c9:52:78:4d:af:99:15:77:81:ce:
0c:d0:c8:60:8f:82:46:36:d4:ee:5a:b3:29:90:aa:a5:f3:ea:
be:00:ca:4f:c7:5c:0b:a7:72:35:eb:9d:19:8f:ee:9d:fb:57:
50:21:ff:91:92:65:4d:70:60:83:29:77:41:5e:b8:be:ba:35:
55:ee:bf:f6:9a:1b:8e:10:de:4d:2f:f1:8b:dc:92:9a:47:93:
86:a2:bc:08:b6:74:c1:b8:6f:1e:bf:f4:0d:83:dd:21:03:be:
2e:01:14:f4:af:a3:23:e5:74:a5:b4:ed:aa:1f:ea:7c:37:05:
10:fe:7a:0e:7f:1d:70:fa:c2:ec:e5:9f:a3:9f:bb:7a:19:a1:
bc:43:a6:88:36:de:6a:e3:8a:b3:7c:01:94:a2:35:d1:3b:10:
c4:02:3a:e6:fb:d3:76:8a:8e:bc:62:e8:de:fa:70:56:a2:75:
d3:f6:49:7f:c1:53:92:cf:7d:9b:e7:84:86:4a:2e:b6:dc:17:
2e:1f:21:76:02:cb:7b:dc:bb:93:de:86:a1:7d:80:08:39:4b:
d3:0c:e2:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECnKLJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzkyMDQyMGY3MjJmN2Q3ZjNjNGIyNWE4MGUxN2Q3MjkwMTcxMTgwMB4XDTIyMDUx
OTEwNTkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjhkNTljMTIzOWIy
NWM1NzIwMzRhYWY0MDAzNmJlYzQ4MGM0NTc1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKd7OVe2NcmnHRKitCl8Gc11c55EjUocBKfgKvRhq4F80/Ty
0eBvVdMzNMAa4yZ/Cj8xWZqpNL+Q0Fp3jAgKWNtW1WuPlQdCHDWaPhZoIElBrQZj
O0vPytkqR7l25fubIFHtBpvMhzfB61wojlPE+ReiYbdvR3lyfaQzxzr9diMaNLcQ
Hi5O7BjI7MGG1LxJzZ9DOP4cLbNSIsIXbVTRsAc/Q6GYRffxfw4lBIet3FBNp/IF
XqAQm1Hdf7s5wYn7mki7/q/gCXKYKbNmSg09ELZeekwRItfqJSfb4m5lkFSMuura
ZViUuTYijVKZzrZRSovxOUh8+7SpjAmwlGZiGX0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRo1ZwSObJcVyA0qvQANr7EgMRXUDAfBgNVHSMEGDAWgBRnkgQg9yL31/PE
slqA4X1ykBcRgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1SUVJUGNpOTlmenhMSmFnT0Y5Y3BBWEVZQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODIvMjdjYTE2LWY0NmItNGY4ZS1iOTJlLTVlZDA4OWMxYWZlZC8x
L2FOV2NFam15WEZjZ05LcjBBRGEteElERVYxQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIv
MjdjYTE2LWY0NmItNGY4ZS1iOTJlLTVlZDA4OWMxYWZlZC8xL1o1SUVJUGNpOTlm
enhMSmFnT0Y5Y3BBWEVZQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlSJTANBgkqhkiG9w0BAQsFAAOC
AQEAWVaAGeBu8gggERmdGUmXWtqdVKTIHNPrSM2SYKRuMbbAKvOxgXg4lHbooafJ
UnhNr5kVd4HODNDIYI+CRjbU7lqzKZCqpfPqvgDKT8dcC6dyNeudGY/unftXUCH/
kZJlTXBggyl3QV64vro1Ve6/9pobjhDeTS/xi9ySmkeThqK8CLZ0wbhvHr/0DYPd
IQO+LgEU9K+jI+V0pbTtqh/qfDcFEP56Dn8dcPrC7OWfo5+7ehmhvEOmiDbeauOK
s3wBlKI10TsQxAI65vvTdoqOvGLo3vpwVqJ10/ZJf8FTks99m+eEhkouttwXLh8h
dgLLe9y7k96GoX2ACDlL0wzisw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:35 2025 by rpki-client