Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/DA7SDzqChHiYMGyF32jGuVWZlhY.roa
File: DA7SDzqChHiYMGyF32jGuVWZlhY.roa (raw, json)
Hash identifier: 5LG1swg/zxUL6yM9ohGk6mZz1DlHgp0efNTyRZXIoLM=
Subject key identifier: 0C:0E:D2:0F:3A:82:84:78:98:30:6C:85:DF:68:C6:B9:55:99:96:16
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 018A17DF234409AB25760F529516FEA24A17
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/DA7SDzqChHiYMGyF32jGuVWZlhY.roa
Signing time: Mon 21 Aug 2023 11:33:34 +0000
ROA not before: Mon 21 Aug 2023 11:33:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 185.114.104.0/22 maxlen: 24
185.56.212.0/22 maxlen: 24
45.137.208.0/22 maxlen: 24
81.201.208.0/20 maxlen: 24
2a00:e900::/29 maxlen: 48
2a01:4400::/32 maxlen: 48
2a02:5120::/32 maxlen: 48
2a0b:fd82::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:df:23:44:09:ab:25:76:0f:52:95:16:fe:a2:4a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Aug 21 11:33:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c0ed20f3a82847898306c85df68c6b955999616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:78:1f:64:81:33:91:29:78:b3:e4:cc:9b:
c1:08:5e:0d:d1:24:f6:46:56:b8:07:3f:5d:ef:da:
31:c7:95:70:dd:1c:7f:35:7a:4b:56:1d:eb:51:bd:
84:a4:f2:0b:89:d8:d3:73:71:a3:ca:f3:bb:84:d1:
73:02:27:fe:3f:15:9b:91:20:ce:2f:5e:3a:21:52:
9a:99:c2:03:70:68:c3:9c:8b:97:7f:c0:35:0b:3c:
61:0e:68:f5:35:20:a1:36:c4:af:09:56:8b:4c:67:
fe:38:eb:a2:2a:93:7a:0b:a9:a7:c8:04:1e:77:3c:
9a:ff:38:eb:00:4d:ac:13:30:f0:4c:f3:db:d7:74:
ff:dd:47:c6:bd:f4:69:ef:1b:68:c4:1b:d2:60:e9:
9e:af:65:82:b9:61:fa:8e:c3:d7:51:96:ed:ab:4e:
67:85:e9:4f:32:2c:85:9a:b6:8d:8e:8f:ea:3b:4c:
96:0b:ad:6d:b2:f3:90:3e:5c:22:05:3a:3b:52:8c:
9e:0d:d6:bb:ef:ab:16:01:3f:77:e8:5a:7b:50:ea:
49:c6:a2:25:c3:69:46:1d:62:b4:6e:b3:23:43:14:
50:6c:f8:4c:60:c6:69:58:38:db:72:0c:f3:e9:83:
bb:7a:0e:b1:33:d3:96:9c:a6:5c:23:aa:a6:bf:93:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:D2:0F:3A:82:84:78:98:30:6C:85:DF:68:C6:B9:55:99:96:16
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/DA7SDzqChHiYMGyF32jGuVWZlhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.208.0/22
81.201.208.0/20
185.56.212.0/22
185.114.104.0/22
IPv6:
2a00:e900::/29
2a01:4400::/32
2a02:5120::/32
2a0b:fd82::/32
Signature Algorithm: sha256WithRSAEncryption
8a:c3:40:32:e8:2c:1f:cc:5b:68:b9:d7:87:65:98:c3:36:44:
eb:12:9b:ec:6f:a4:88:d1:f1:94:40:bd:35:ff:ab:0c:8d:64:
da:15:bb:9d:16:77:95:75:fb:4f:fb:c1:c0:46:e7:a1:11:aa:
4e:cf:e7:2f:22:ba:a5:71:3a:a2:65:05:9e:1e:a9:cb:b1:18:
82:4a:e7:6d:3b:41:fa:05:0f:ef:7e:07:f1:38:07:92:96:cc:
83:8c:23:e3:10:0d:dc:39:d4:74:0a:a6:f0:ea:df:ad:6d:f5:
52:16:c2:b6:41:35:6c:c1:fd:4a:97:8a:60:fc:d1:4c:f5:5d:
bc:0d:0e:20:8e:41:f1:f9:67:8d:38:fc:e0:69:a5:07:4e:08:
ea:1c:a5:31:e1:0f:9f:20:9c:ce:a6:d4:dd:72:e3:2d:0c:63:
c7:17:dd:b9:2d:72:4e:a3:e1:ba:fb:44:a7:58:6c:50:da:41:
3e:b0:9b:03:27:c6:bd:94:53:db:d9:9a:44:14:37:b3:49:73:
15:31:0b:a0:20:18:82:f6:04:14:1e:04:e1:dd:37:80:9d:27:
28:8f:33:be:a5:96:f9:ee:e8:5c:b6:a6:99:d0:0a:e5:e3:3f:
7b:a0:3c:b7:b2:e8:8e:20:53:08:28:e4:ef:4c:98:90:4f:20:
97:70:9d:66
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYoX3yNECasldg9SlRb+okoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj
NDE1ZDUwHhcNMjMwODIxMTEzMzM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzBlZDIwZjNhODI4NDc4OTgzMDZjODVkZjY4YzZiOTU1OTk5NjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHZ4H2SBM5EpeLPkzJvBCF4N0ST2
Rla4Bz9d79oxx5Vw3Rx/NXpLVh3rUb2EpPILidjTc3GjyvO7hNFzAif+PxWbkSDO
L146IVKamcIDcGjDnIuXf8A1CzxhDmj1NSChNsSvCVaLTGf+OOuiKpN6C6mnyAQe
dzya/zjrAE2sEzDwTPPb13T/3UfGvfRp7xtoxBvSYOmer2WCuWH6jsPXUZbtq05n
helPMiyFmraNjo/qO0yWC61tsvOQPlwiBTo7UoyeDda776sWAT936Fp7UOpJxqIl
w2lGHWK0brMjQxRQbPhMYMZpWDjbcgzz6YO7eg6xM9OWnKZcI6qmv5OXVQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFAwO0g86goR4mDBshd9oxrlVmZYWMB8GA1UdIwQY
MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt
OGZkMzk0YjUzNTdjLzEvREE3U0R6cUNoSGlZTUd5RjMyakd1VldabGhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj
LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAeBAIAATAYAwQCLYnQAwQE
UcnQAwQCuTjUAwQCuXJoMCIEAgACMBwDBQMqAOkAAwUAKgFEAAMFACoCUSADBQAq
C/2CMA0GCSqGSIb3DQEBCwUAA4IBAQCKw0Ay6CwfzFtoudeHZZjDNkTrEpvsb6SI
0fGUQL01/6sMjWTaFbudFneVdftP+8HARuehEapOz+cvIrqlcTqiZQWeHqnLsRiC
SudtO0H6BQ/vfgfxOAeSlsyDjCPjEA3cOdR0Cqbw6t+tbfVSFsK2QTVswf1Kl4pg
/NFM9V28DQ4gjkHx+WeNOPzgaaUHTgjqHKUx4Q+fIJzOptTdcuMtDGPHF925LXJO
o+G6+0SnWGxQ2kE+sJsDJ8a9lFPb2ZpEFDezSXMVMQugIBiC9gQUHgTh3TeAnSco
jzO+pZb57uhctqaZ0Arl4z97oDy3suiOIFMIKOTvTJiQTyCXcJ1m
-----END CERTIFICATE-----
Generated at Wed May 7 15:33:09 2025 by rpki-client