Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/sswgbKLM6rNgQ7BeSH-WUUwSuWI.roa
File: sswgbKLM6rNgQ7BeSH-WUUwSuWI.roa (raw, json)
Hash identifier: dG0TXwhepBXfVgwEdpDq0bZYQV5LPZN3HbjwiOPiwBk=
Subject key identifier: B2:CC:20:6C:A2:CC:EA:B3:60:43:B0:5E:48:7F:96:51:4C:12:B9:62
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 0B0399EA
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/sswgbKLM6rNgQ7BeSH-WUUwSuWI.roa
Signing time: Thu 24 Mar 2022 12:55:00 +0000
ROA not before: Thu 24 Mar 2022 12:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209990
IP address blocks: 185.23.202.0/23 maxlen: 23
194.34.224.0/22 maxlen: 24
2a0d:f9c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184785386 (0xb0399ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Mar 24 12:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2cc206ca2cceab36043b05e487f96514c12b962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:ea:15:2e:88:27:af:d4:cd:ed:bc:a5:83:
e4:96:d4:a9:a2:e5:d1:cc:1b:19:87:2e:45:46:b6:
c3:77:8c:79:99:ca:6c:52:6f:d6:b7:b3:49:90:41:
74:e0:9f:a5:c1:3e:1d:35:33:a5:fc:c1:9c:ab:32:
29:98:4e:e8:0e:9e:c0:7a:c4:ca:34:c4:3c:77:5c:
28:a3:fa:55:57:8f:b2:a4:0d:33:69:fd:be:39:34:
5b:a5:56:fd:cc:ec:72:6b:d0:3c:3a:8b:94:1b:72:
ab:0a:2b:48:96:ca:c0:5b:42:fe:1a:4a:e5:f9:21:
14:cb:dd:83:81:81:25:28:e7:68:d3:19:bd:28:f1:
9c:6f:dc:ee:5b:bb:e8:68:e2:e3:40:75:02:42:0f:
40:96:b1:c2:e2:eb:ab:66:de:76:69:bf:16:a7:1a:
bf:f5:63:93:64:7d:da:6e:de:bf:28:92:df:4e:df:
6b:ad:ad:e9:31:37:52:87:0d:fa:7d:32:05:fe:e2:
d2:70:9b:b2:46:2b:f2:4d:69:75:93:76:f2:9a:15:
c5:ab:8a:d7:76:0e:db:f1:eb:87:55:74:a1:76:eb:
f1:e8:2e:fa:e2:19:15:ba:32:05:66:5c:8f:70:df:
b1:38:57:f1:55:3f:21:62:42:fd:8e:b2:86:7e:f1:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:20:6C:A2:CC:EA:B3:60:43:B0:5E:48:7F:96:51:4C:12:B9:62
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/sswgbKLM6rNgQ7BeSH-WUUwSuWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.202.0/23
194.34.224.0/22
IPv6:
2a0d:f9c0::/29
Signature Algorithm: sha256WithRSAEncryption
ba:9d:e4:5c:91:02:3b:54:5a:f0:99:1b:e6:08:00:1a:19:4d:
d5:77:03:86:97:04:44:b9:44:28:20:2a:91:40:61:7d:bf:2d:
b3:6c:de:d8:c2:2b:29:bf:f2:96:ba:7b:b9:28:8e:cc:95:3c:
ba:47:cf:37:50:1e:64:a8:74:52:6c:70:46:1d:90:c7:a8:a2:
40:42:b6:59:9b:33:7b:8b:0c:da:0c:6c:c0:6b:23:a4:dd:86:
e5:ef:ca:e1:df:ea:21:54:62:9c:c1:3e:5d:01:3a:67:5a:a7:
af:91:d2:b9:86:a8:df:3e:3c:13:83:bb:6f:f3:0d:2e:ad:6a:
15:4e:81:ad:c0:6d:b1:86:28:81:b2:be:ad:1e:c9:d9:ef:01:
5d:85:f3:cf:dc:65:a1:5e:51:09:07:1e:a9:c4:fd:4f:2f:d6:
66:d6:a6:87:36:2e:b7:b9:3f:af:58:6f:b5:89:65:81:1c:4f:
60:2a:7d:96:1a:47:3f:66:51:ff:6f:55:3e:d3:18:fb:3e:13:
5f:e8:22:10:d7:03:2a:65:e1:cb:e8:d0:ad:15:5e:a2:7a:44:
e1:8d:f9:4e:68:56:79:ad:5a:3c:d8:63:43:9a:99:2b:8e:4e:
93:21:a7:9f:72:6c:2b:c5:d1:f6:0c:f3:5d:cd:38:46:b1:bf:
2f:84:d4:40
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECwOZ6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NDNlMWJhOTFjNTY5YThiMjFhNmQyZDY3ZjVkYmJkNmMwNGU0M2VhMB4XDTIyMDMy
NDEyNTUwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjJjYzIwNmNhMmNj
ZWFiMzYwNDNiMDVlNDg3Zjk2NTE0YzEyYjk2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJj6hUuiCev1M3tvKWD5JbUqaLl0cwbGYcuRUa2w3eMeZnK
bFJv1rezSZBBdOCfpcE+HTUzpfzBnKsyKZhO6A6ewHrEyjTEPHdcKKP6VVePsqQN
M2n9vjk0W6VW/czscmvQPDqLlBtyqworSJbKwFtC/hpK5fkhFMvdg4GBJSjnaNMZ
vSjxnG/c7lu76Gji40B1AkIPQJaxwuLrq2bedmm/Fqcav/Vjk2R92m7evyiS307f
a62t6TE3UocN+n0yBf7i0nCbskYr8k1pdZN28poVxauK13YO2/Hrh1V0oXbr8egu
+uIZFboyBWZcj3DfsThX8VU/IWJC/Y6yhn7xu6ECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSyzCBsoszqs2BDsF5If5ZRTBK5YjAfBgNVHSMEGDAWgBRkPhupHFaaiyGm
0tZ/XbvWwE5D6jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pENGJxUnhXbW9zaHB0TFdmMTI3MXNCT1Etby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODMvYWNhOTEyLTllOGQtNDc0OS05NWUwLWZlYTBhZmYzNTlmNS8x
L3Nzd2diS0xNNnJOZ1E3QmVTSC1XVVV3U3VXSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMv
YWNhOTEyLTllOGQtNDc0OS05NWUwLWZlYTBhZmYzNTlmNS8xL1pENGJxUnhXbW9z
aHB0TFdmMTI3MXNCT1Etby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAbkXygMEAsIi4DANBAIAAjAHAwUD
Kg35wDANBgkqhkiG9w0BAQsFAAOCAQEAup3kXJECO1Ra8Jkb5ggAGhlN1XcDhpcE
RLlEKCAqkUBhfb8ts2ze2MIrKb/ylrp7uSiOzJU8ukfPN1AeZKh0UmxwRh2Qx6ii
QEK2WZsze4sM2gxswGsjpN2G5e/K4d/qIVRinME+XQE6Z1qnr5HSuYao3z48E4O7
b/MNLq1qFU6BrcBtsYYogbK+rR7J2e8BXYXzz9xloV5RCQceqcT9Ty/WZtamhzYu
t7k/r1hvtYllgRxPYCp9lhpHP2ZR/29VPtMY+z4TX+giENcDKmXhy+jQrRVeonpE
4Y35TmhWea1aPNhjQ5qZK45OkyGnn3JsK8XR9gzzXc04RrG/L4TUQA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:36 2025 by rpki-client