Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/mACp0V1BmRzRT2dpNe7pzqfG66Q.roa
File: mACp0V1BmRzRT2dpNe7pzqfG66Q.roa (raw, json)
Hash identifier: YeGE+W5xRvUjfJhMhhWbxUkYEajh88r28CtDCiJ4zps=
Subject key identifier: 98:00:A9:D1:5D:41:99:1C:D1:4F:67:69:35:EE:E9:CE:A7:C6:EB:A4
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 07EE4EA8
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/mACp0V1BmRzRT2dpNe7pzqfG66Q.roa
Signing time: Sat 01 Jan 2022 03:51:49 +0000
ROA not before: Sat 01 Jan 2022 03:51:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206512
IP address blocks: 185.165.78.0/24 maxlen: 24
185.165.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133058216 (0x7ee4ea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 1 03:51:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9800a9d15d41991cd14f676935eee9cea7c6eba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:94:73:5e:fd:5d:ed:2d:2c:9c:ab:5f:43:
4b:d6:a7:2e:8d:58:3d:10:c5:8c:e5:76:13:07:ff:
d8:af:de:31:b3:47:df:04:5c:bc:83:11:fc:bf:6d:
8c:61:2d:15:4d:7e:f4:4b:0d:ca:e1:a0:b8:f1:3f:
c2:95:17:db:14:b4:f0:d9:1b:82:a3:ee:13:07:70:
d7:f5:ed:ed:9f:2b:59:d3:c3:8b:f4:ee:b0:44:7b:
95:d6:40:a9:26:05:db:ad:4e:4f:fb:d3:03:42:b5:
ef:9d:8c:04:62:bf:3c:9a:1b:09:e9:65:1b:c9:96:
75:9f:75:2c:55:07:a4:76:e9:5a:30:24:28:cf:72:
ef:3e:bb:02:1d:3f:77:2b:c9:12:b0:24:2e:86:3c:
8c:dd:45:3c:98:8a:03:6e:5c:ea:12:97:63:79:1f:
5b:51:b8:5e:59:9c:f0:89:42:95:30:53:d1:5b:90:
61:59:ae:4c:e3:c5:82:98:ab:5c:ce:ca:bc:75:38:
96:94:40:fc:af:d3:aa:28:ca:0e:65:1a:5d:2a:f1:
5c:2e:b0:31:b1:65:b9:c6:10:28:21:82:7a:5c:f4:
02:90:09:4d:a8:e4:23:3a:83:6d:ec:d1:6b:6d:4e:
fa:ee:d5:43:8e:e5:dc:d7:4b:03:28:51:d4:4e:93:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:A9:D1:5D:41:99:1C:D1:4F:67:69:35:EE:E9:CE:A7:C6:EB:A4
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/mACp0V1BmRzRT2dpNe7pzqfG66Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.78.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:69:c4:59:03:01:dc:92:33:27:e9:71:b5:06:5f:39:4e:9b:
5d:98:13:cb:a4:ed:2d:b5:9f:ab:f7:a2:36:8b:da:a0:29:23:
9d:fc:e7:48:1f:a5:aa:c5:8a:7b:34:8d:01:ef:c8:99:f4:be:
9d:70:bf:1d:05:f1:2d:68:dc:d8:d5:68:77:77:87:2a:6d:b7:
82:2e:05:a1:58:30:93:2e:c1:7b:ab:c1:3b:b4:db:e1:37:69:
64:24:d7:a9:76:00:59:82:ba:4f:e6:07:96:1f:aa:f8:5e:e5:
79:b4:b3:09:5c:ea:91:9f:d3:54:9f:97:af:93:5d:6c:15:c0:
33:b7:28:64:fe:52:33:98:6c:9c:38:60:06:af:f9:86:5d:de:
d2:e9:21:cd:10:72:a3:93:15:09:6e:02:c6:54:bf:c1:66:3f:
94:53:79:7b:f8:8c:db:c0:c8:b1:e4:32:28:eb:02:e9:a9:ef:
46:43:0c:58:58:d0:cb:a7:0b:65:55:5a:fd:fb:99:b5:2b:de:
dd:d1:d5:d8:2c:8d:e4:c9:da:f8:73:d7:e0:10:bc:5a:30:9f:
d0:10:c4:a7:e2:93:39:2c:81:eb:e7:89:3c:bb:58:87:e8:ac:
65:9a:db:6b:17:2d:8e:c9:e3:66:0e:a2:59:a7:75:f4:b7:e8:
9b:04:3d:33
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB+5OqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NzZkZDlkYWQ3NTg3N2Y3ZDI4ZDE0ZTA4ZGM1NWIxMzMwYmQxM2I3MB4XDTIyMDEw
MTAzNTE0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTgwMGE5ZDE1ZDQx
OTkxY2QxNGY2NzY5MzVlZWU5Y2VhN2M2ZWJhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAItolHNe/V3tLSycq19DS9anLo1YPRDFjOV2Ewf/2K/eMbNH
3wRcvIMR/L9tjGEtFU1+9EsNyuGguPE/wpUX2xS08NkbgqPuEwdw1/Xt7Z8rWdPD
i/TusER7ldZAqSYF261OT/vTA0K1752MBGK/PJobCellG8mWdZ91LFUHpHbpWjAk
KM9y7z67Ah0/dyvJErAkLoY8jN1FPJiKA25c6hKXY3kfW1G4Xlmc8IlClTBT0VuQ
YVmuTOPFgpirXM7KvHU4lpRA/K/TqijKDmUaXSrxXC6wMbFlucYQKCGCelz0ApAJ
TajkIzqDbezRa21O+u7VQ47l3NdLAyhR1E6T/TUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSYAKnRXUGZHNFPZ2k17unOp8brpDAfBgNVHSMEGDAWgBSnbdna11h399KN
FOCNxVsTML0TtzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3AyM1oydGRZZF9mU2pSVGdqY1ZiRXpDOUU3Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODkvZDAwODg5LWU1Y2EtNDA5MC1hNmE0LTJhYzZmZjc1YmViMC8x
L21BQ3AwVjFCbVJ6UlQyZHBOZTdwenFmRzY2US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkv
ZDAwODg5LWU1Y2EtNDA5MC1hNmE0LTJhYzZmZjc1YmViMC8xL3AyM1oydGRZZF9m
U2pSVGdqY1ZiRXpDOUU3Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbmlTjANBgkqhkiG9w0BAQsFAAOC
AQEArWnEWQMB3JIzJ+lxtQZfOU6bXZgTy6TtLbWfq/eiNovaoCkjnfznSB+lqsWK
ezSNAe/ImfS+nXC/HQXxLWjc2NVod3eHKm23gi4FoVgwky7Be6vBO7Tb4TdpZCTX
qXYAWYK6T+YHlh+q+F7lebSzCVzqkZ/TVJ+Xr5NdbBXAM7coZP5SM5hsnDhgBq/5
hl3e0ukhzRByo5MVCW4CxlS/wWY/lFN5e/iM28DIseQyKOsC6anvRkMMWFjQy6cL
ZVVa/fuZtSve3dHV2CyN5Mna+HPX4BC8WjCf0BDEp+KTOSyB6+eJPLtYh+isZZrb
axctjsnjZg6iWad19LfomwQ9Mw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 23:39:07 2025 by rpki-client