Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/QMoxiihQP-MtCRrBdGHiVj5Z768.roa
File: QMoxiihQP-MtCRrBdGHiVj5Z768.roa (raw, json)
Hash identifier: hVMT/8AK2BDv9XsYUXo/JuajseMWkT+3nhxw9mWqE1U=
Subject key identifier: 40:CA:31:8A:28:50:3F:E3:2D:09:1A:C1:74:61:E2:56:3E:59:EF:AF
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 0182AADE5A31CF7E6A46EE0A9CE5BCBCF4DD
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/QMoxiihQP-MtCRrBdGHiVj5Z768.roa
Signing time: Wed 17 Aug 2022 08:14:34 +0000
ROA not before: Wed 17 Aug 2022 08:14:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35332
IP address blocks: 185.151.96.0/22 maxlen: 24
87.236.0.0/21 maxlen: 24
194.5.181.0/24 maxlen: 24
77.242.112.0/20 maxlen: 24
188.92.56.0/21 maxlen: 24
37.235.112.0/21 maxlen: 24
208.88.128.0/22 maxlen: 24
185.113.212.0/22 maxlen: 24
139.28.200.0/22 maxlen: 24
2a00:a000::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:de:5a:31:cf:7e:6a:46:ee:0a:9c:e5:bc:bc:f4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Aug 17 08:14:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40ca318a28503fe32d091ac17461e2563e59efaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:82:d5:8a:ea:18:7d:fd:2e:74:c9:6d:27:09:
50:e5:11:66:63:e8:ea:7e:69:ae:ca:40:45:18:7c:
af:83:1c:53:20:3f:da:86:da:d3:47:d3:a0:a4:34:
8f:92:9d:3a:c4:54:aa:24:84:8b:c7:4e:da:5f:c1:
36:ac:1f:64:f2:be:36:cb:3b:d4:e6:01:72:67:b0:
8b:f2:e7:13:e8:13:94:21:3f:c1:ed:0d:3b:ed:65:
14:6b:ef:5a:ca:1e:04:a4:40:38:be:ac:f1:bb:08:
c0:2e:67:91:8e:36:ae:c3:64:53:1b:7f:61:0b:f1:
0e:c0:4a:27:b8:ff:4e:30:42:f3:1f:85:78:35:13:
5a:d5:40:3f:4f:6a:f9:22:7b:74:95:ef:a4:aa:3a:
df:21:88:85:d2:ed:92:5f:86:0e:f7:bc:82:ae:3c:
3b:92:12:fc:28:dd:8a:2f:88:fc:3d:4e:6d:8f:09:
9a:8a:f1:56:f6:a7:03:bd:e1:be:96:63:f0:f3:06:
d8:af:22:4c:78:ea:af:09:9f:4b:30:d1:af:51:a3:
50:e4:1f:25:32:a3:6a:9d:59:19:ee:1e:8f:2f:f5:
55:b4:ca:7c:a0:bc:ec:ab:f1:27:8f:58:39:ed:01:
21:60:25:74:56:65:3c:81:79:fa:b1:8b:50:90:ba:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CA:31:8A:28:50:3F:E3:2D:09:1A:C1:74:61:E2:56:3E:59:EF:AF
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/QMoxiihQP-MtCRrBdGHiVj5Z768.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.112.0/21
77.242.112.0/20
87.236.0.0/21
139.28.200.0/22
185.113.212.0/22
185.151.96.0/22
188.92.56.0/21
194.5.181.0/24
208.88.128.0/22
IPv6:
2a00:a000::/32
Signature Algorithm: sha256WithRSAEncryption
a0:c9:14:ec:95:18:38:85:bc:ef:f9:1d:3e:c7:97:bc:94:a9:
ee:d8:fa:78:ef:17:db:f3:10:91:81:2c:87:01:8a:48:d9:4e:
10:38:c4:20:40:18:31:aa:df:3e:07:83:5f:4f:a1:77:34:80:
c2:51:50:d9:2c:56:6f:b3:20:55:93:ba:98:9c:2d:36:ff:0a:
74:36:91:10:6f:52:35:46:29:bd:c3:f3:f3:1b:6f:19:03:67:
23:fa:33:f5:43:21:bc:a1:7e:c2:02:f5:81:c4:e6:1a:4a:3d:
85:8b:cb:f3:09:39:10:7d:49:0c:9e:70:9b:18:5f:d6:35:4e:
9b:6b:50:af:de:d6:70:04:f7:70:b3:ca:fb:53:89:51:e8:02:
bc:d0:e5:87:8b:df:25:a7:4a:cc:69:f9:4c:5f:a7:f1:b5:32:
e0:64:6e:02:2e:32:62:68:17:66:25:ed:a9:55:93:c8:54:7a:
4f:09:c1:f3:bc:81:3b:50:25:2b:7c:31:7d:a0:27:aa:2d:0d:
60:62:10:b2:e7:42:ea:40:83:9f:58:f3:80:36:a0:0f:8c:ce:
a6:96:01:75:2d:0f:b5:6c:35:4d:4f:32:b6:68:c2:30:b7:21:
b4:2f:d2:ad:d7:ec:69:9b:e6:a5:b6:ad:fd:f2:56:d2:4c:51:
c7:d0:ca:bd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYKq3loxz35qRu4KnOW8vPTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODA5YTdlNmNhMTRkMGExYTk3NjY3M2UwMzE5ZTM0ZTk1
NmVkM2QwHhcNMjIwODE3MDgxNDM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGNhMzE4YTI4NTAzZmUzMmQwOTFhYzE3NDYxZTI1NjNlNTllZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoLViuoYff0udMltJwlQ5RFmY+jq
fmmuykBFGHyvgxxTID/ahtrTR9OgpDSPkp06xFSqJISLx07aX8E2rB9k8r42yzvU
5gFyZ7CL8ucT6BOUIT/B7Q077WUUa+9ayh4EpEA4vqzxuwjALmeRjjauw2RTG39h
C/EOwEonuP9OMELzH4V4NRNa1UA/T2r5Int0le+kqjrfIYiF0u2SX4YO97yCrjw7
khL8KN2KL4j8PU5tjwmaivFW9qcDveG+lmPw8wbYryJMeOqvCZ9LMNGvUaNQ5B8l
MqNqnVkZ7h6PL/VVtMp8oLzsq/Enj1g57QEhYCV0VmU8gXn6sYtQkLospwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFEDKMYooUD/jLQkawXRh4lY+We+vMB8GA1UdIwQY
MBaAFL+Amn5soU0KGpdmc+AxnjTpVu09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAt
M2ZkZmI0MTQwZjI0LzEvUU1veGlpaFFQLU10Q1JyQmRHSGlWajVaNzY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAtM2ZkZmI0MTQwZjI0
LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDJetwAwQE
TfJwAwQDV+wAAwQCixzIAwQCuXHUAwQCuZdgAwQDvFw4AwQAwgW1AwQC0FiAMA0E
AgACMAcDBQAqAKAAMA0GCSqGSIb3DQEBCwUAA4IBAQCgyRTslRg4hbzv+R0+x5e8
lKnu2Pp47xfb8xCRgSyHAYpI2U4QOMQgQBgxqt8+B4NfT6F3NIDCUVDZLFZvsyBV
k7qYnC02/wp0NpEQb1I1Rim9w/PzG28ZA2cj+jP1QyG8oX7CAvWBxOYaSj2Fi8vz
CTkQfUkMnnCbGF/WNU6ba1Cv3tZwBPdws8r7U4lR6AK80OWHi98lp0rMaflMX6fx
tTLgZG4CLjJiaBdmJe2pVZPIVHpPCcHzvIE7UCUrfDF9oCeqLQ1gYhCy50LqQIOf
WPOANqAPjM6mlgF1LQ+1bDVNTzK2aMIwtyG0L9Kt1+xpm+altq398lbSTFHH0Mq9
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:07:21 2025 by rpki-client