Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/IisCWiZFlnfxbCe4ly4b76ykUI4.roa
File: IisCWiZFlnfxbCe4ly4b76ykUI4.roa (raw, json)
Hash identifier: RJQ+kcRC1eaxXJHU/WmeXyG54F/MoGZDd/cdK5wEKEQ=
Subject key identifier: 22:2B:02:5A:26:45:96:77:F1:6C:27:B8:97:2E:1B:EF:AC:A4:50:8E
Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial: 01856DD4230D5BB433768FC3BC55F6EF5645
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/IisCWiZFlnfxbCe4ly4b76ykUI4.roa
Signing time: Sun 01 Jan 2023 14:54:57 +0000
ROA not before: Sun 01 Jan 2023 14:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 185.132.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:23:0d:5b:b4:33:76:8f:c3:bc:55:f6:ef:56:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Validity
Not Before: Jan 1 14:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=222b025a26459677f16c27b8972e1befaca4508e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:b6:0b:fc:ab:0d:69:f4:6c:50:3e:ea:ca:
81:98:0a:00:e2:71:92:a9:f0:5d:3a:68:f7:40:e1:
a1:e3:75:d2:3b:c2:df:b8:9a:6f:2c:1f:e3:f3:8f:
a7:f0:2d:06:f0:d0:b0:5b:68:96:77:29:29:83:ed:
1f:28:76:8b:25:5a:00:ae:66:72:23:bc:59:18:e1:
0e:b3:c6:07:31:41:14:93:a6:28:47:65:21:8c:e6:
d4:e1:6f:97:f4:8a:0c:55:c5:16:47:77:f3:2a:37:
1b:eb:8f:e6:1b:d8:1a:3f:26:ff:2a:d2:f2:53:fe:
d7:e3:d7:46:e5:44:40:29:7e:8d:15:34:37:35:52:
9e:1b:ad:6c:bb:0c:d3:85:87:9a:fd:b1:14:82:83:
00:90:53:e3:13:04:be:8b:8a:fb:cb:d0:61:bc:be:
e7:c5:ba:17:5a:72:01:3b:f7:63:1b:35:37:be:c8:
ac:7e:d7:1c:ae:e5:d4:68:71:b6:7f:1d:99:ee:12:
03:01:0a:7f:33:60:c8:0f:3e:64:7e:66:0c:38:06:
19:49:a1:48:46:c6:b2:61:72:53:59:c8:69:6a:a6:
75:39:9c:4d:f0:b3:3d:f4:4d:f8:f2:a6:aa:2f:1e:
3a:85:6e:1d:78:22:76:a6:5f:f8:41:7b:80:18:c2:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2B:02:5A:26:45:96:77:F1:6C:27:B8:97:2E:1B:EF:AC:A4:50:8E
X509v3 Authority Key Identifier:
keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/IisCWiZFlnfxbCe4ly4b76ykUI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.148.0/24
Signature Algorithm: sha256WithRSAEncryption
32:14:c1:48:5b:28:2e:11:c8:3a:76:8d:a2:ad:a2:96:0b:95:
e5:d6:7e:d4:3f:71:22:21:18:1b:ed:34:9d:15:65:96:09:56:
50:09:1f:a5:7a:6c:45:c5:1c:18:79:5c:fd:44:ec:88:c8:1b:
f7:21:b2:0e:a9:ee:d5:0e:c9:11:10:22:8b:4f:97:2c:05:cc:
08:00:a0:1e:ae:ca:78:35:c5:e2:15:eb:08:ed:57:0a:e1:4f:
b1:c5:ca:91:d5:3d:73:13:db:cf:b9:27:9a:9c:22:b3:35:cd:
27:a6:3a:a0:43:f4:f7:6e:9e:73:54:36:c3:59:41:e1:38:28:
3e:ad:29:e4:fb:01:bc:e7:75:ab:7c:9e:2f:ff:56:6b:a7:cb:
f6:75:f5:88:88:75:12:a7:1f:cd:ea:71:eb:69:cd:07:d3:45:
01:23:5f:71:ab:5a:88:46:e1:54:5c:8e:35:d4:ab:7a:db:c7:
f0:05:2a:b9:29:a4:6d:45:2e:16:64:5e:4d:a3:4d:41:c3:43:
c2:2e:4a:0a:96:29:2b:d8:e1:0a:01:7a:43:38:37:26:6c:7b:
60:5d:25:34:17:d6:66:bf:17:f0:cc:a1:6c:28:be:d8:c6:61:
da:0e:09:a0:af:40:8b:e2:9b:f9:3b:e8:55:90:5f:9e:e4:6b:
1b:65:0b:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt1CMNW7Qzdo/DvFX271ZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjQ2MTE2YTExZjExZjUxZmM5YTFkMjI1YTBiZmNlZmRi
ZWQ3ODYwHhcNMjMwMTAxMTQ1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjJiMDI1YTI2NDU5Njc3ZjE2YzI3Yjg5NzJlMWJlZmFjYTQ1MDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXO2C/yrDWn0bFA+6sqBmAoA4nGS
qfBdOmj3QOGh43XSO8LfuJpvLB/j84+n8C0G8NCwW2iWdykpg+0fKHaLJVoArmZy
I7xZGOEOs8YHMUEUk6YoR2UhjObU4W+X9IoMVcUWR3fzKjcb64/mG9gaPyb/KtLy
U/7X49dG5URAKX6NFTQ3NVKeG61suwzThYea/bEUgoMAkFPjEwS+i4r7y9BhvL7n
xboXWnIBO/djGzU3vsisftccruXUaHG2fx2Z7hIDAQp/M2DIDz5kfmYMOAYZSaFI
RsayYXJTWchpaqZ1OZxN8LM99E348qaqLx46hW4deCJ2pl/4QXuAGMLWrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCIrAlomRZZ38WwnuJcuG++spFCOMB8GA1UdIwQY
MBaAFD70YRahHxH1H8mh0iWgv879vteGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMt
NjdiYTdhMjE1NjMwLzEvSWlzQ1dpWkZsbmZ4YkNlNGx5NGI3NnlrVUk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMtNjdiYTdhMjE1NjMw
LzEvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYSUMA0G
CSqGSIb3DQEBCwUAA4IBAQAyFMFIWyguEcg6do2iraKWC5Xl1n7UP3EiIRgb7TSd
FWWWCVZQCR+lemxFxRwYeVz9ROyIyBv3IbIOqe7VDskRECKLT5csBcwIAKAersp4
NcXiFesI7VcK4U+xxcqR1T1zE9vPuSeanCKzNc0npjqgQ/T3bp5zVDbDWUHhOCg+
rSnk+wG853WrfJ4v/1Zrp8v2dfWIiHUSpx/N6nHrac0H00UBI19xq1qIRuFUXI41
1Kt628fwBSq5KaRtRS4WZF5No01Bw0PCLkoKlikr2OEKAXpDODcmbHtgXSU0F9Zm
vxfwzKFsKL7YxmHaDgmgr0CL4pv5O+hVkF+e5GsbZQtt
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:08 2025 by rpki-client