Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/7NJaqX5cntIF3muh07u0gOPpxy4.roa
File: 7NJaqX5cntIF3muh07u0gOPpxy4.roa (raw, json)
Hash identifier: oYn5Ne6FfLoJPkL6dylQ85pVh7O3mITdX3/pSyBQv/I=
Subject key identifier: EC:D2:5A:A9:7E:5C:9E:D2:05:DE:6B:A1:D3:BB:B4:80:E3:E9:C7:2E
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 1B5BA353
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/7NJaqX5cntIF3muh07u0gOPpxy4.roa
Signing time: Sat 01 Jan 2022 08:54:19 +0000
ROA not before: Sat 01 Jan 2022 08:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60890
IP address blocks: 185.24.64.0/24 maxlen: 24
2a04:2b00:a006::/48 maxlen: 48
2a04:2b00:13cc::/48 maxlen: 48
2a04:2b00:a034::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458990419 (0x1b5ba353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 08:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecd25aa97e5c9ed205de6ba1d3bbb480e3e9c72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:c1:cf:ae:ef:86:24:89:49:46:d0:19:a8:
81:13:73:5d:b6:dc:30:01:ec:b4:79:5d:04:e4:db:
0a:3e:6e:a3:8c:ba:da:81:d7:dc:79:e8:20:14:18:
74:9c:30:6c:f6:ab:d6:7c:4c:c9:a2:f2:ff:6f:1d:
47:cd:3c:fe:a4:0a:2e:ea:ce:e1:e4:3c:73:79:36:
35:60:f0:20:ca:71:36:f0:b8:6b:32:d3:8a:3d:2f:
d8:60:4e:be:d9:7b:24:01:d5:84:0d:b5:e5:56:0a:
50:48:f6:92:eb:d0:94:b3:72:d0:2c:ba:7a:e9:1a:
d8:c5:d0:bc:fd:55:e1:0d:10:ca:51:c9:e5:37:a6:
2f:74:cd:9f:8e:91:6b:80:b9:b7:76:53:aa:40:ac:
e1:42:72:3a:9e:a7:22:99:ac:4b:3d:51:d0:1a:c0:
29:d8:47:ee:eb:8c:4c:92:ad:45:35:ba:c5:e2:40:
5b:0d:6e:7c:42:5c:b4:9b:73:e2:f2:3f:7c:c5:eb:
b8:43:20:f6:46:08:e1:45:56:98:76:06:a1:ee:8f:
20:5a:b8:59:86:25:41:eb:39:7c:22:e4:e7:64:fe:
c8:2d:34:86:98:b6:db:0e:55:5e:eb:4d:4c:b8:0f:
1d:4c:ac:76:f5:54:f9:13:7c:74:41:f7:67:fb:d8:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D2:5A:A9:7E:5C:9E:D2:05:DE:6B:A1:D3:BB:B4:80:E3:E9:C7:2E
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/7NJaqX5cntIF3muh07u0gOPpxy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.64.0/24
IPv6:
2a04:2b00:13cc::/48
2a04:2b00:a006::/48
2a04:2b00:a034::/48
Signature Algorithm: sha256WithRSAEncryption
81:90:6f:75:7b:4d:64:0c:d4:35:ae:3a:19:ad:26:7d:19:8f:
fa:ac:1e:21:dc:b2:3d:d0:a9:28:cb:d2:c7:45:cc:b4:8b:6c:
d5:ea:b6:a2:94:c8:8f:15:6a:01:d1:19:de:d9:9c:15:75:a9:
db:bb:b3:f7:d8:fe:92:33:04:00:00:04:40:a4:db:0d:92:df:
55:f1:5e:1d:0c:5c:57:a1:af:c5:87:f6:b5:ae:cf:94:11:38:
fa:fc:00:d7:a1:43:4d:e0:e1:ce:d8:ec:02:12:5b:0c:1c:61:
26:1d:5e:3b:e7:3b:ce:c6:50:b6:43:63:aa:c6:d6:d3:ea:f9:
f2:43:ba:1a:3f:c6:73:6e:19:67:ab:e6:3c:12:db:2a:19:2e:
46:71:89:1a:d8:0d:16:e4:92:f4:cf:9b:d5:2d:0b:be:6f:c1:
92:91:31:fc:61:78:72:7e:52:b6:76:2d:19:47:02:f8:f5:84:
fa:23:7c:0d:67:47:b3:4d:48:68:7e:90:51:4e:24:e0:c5:5a:
b7:89:e1:eb:28:71:3b:56:f0:09:60:55:6a:18:4f:d9:e7:4f:
f3:f0:3e:52:7b:a8:78:2a:f8:51:6c:f0:a9:cb:e5:fa:82:4c:
29:01:ea:21:49:41:b6:5e:8a:e6:e4:87:a1:ba:c5:28:86:1e:
98:f5:fd:f0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIEG1ujUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Nzc2YWZiNzRmYWQ1YmFmMGE2MTgwYjQ5NTEwZDhiODQ5N2RmOGQzMB4XDTIyMDEw
MTA4NTQxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWNkMjVhYTk3ZTVj
OWVkMjA1ZGU2YmExZDNiYmI0ODBlM2U5YzcyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIfuwc+u74YkiUlG0BmogRNzXbbcMAHstHldBOTbCj5uo4y6
2oHX3HnoIBQYdJwwbPar1nxMyaLy/28dR808/qQKLurO4eQ8c3k2NWDwIMpxNvC4
azLTij0v2GBOvtl7JAHVhA215VYKUEj2kuvQlLNy0Cy6euka2MXQvP1V4Q0QylHJ
5TemL3TNn46Ra4C5t3ZTqkCs4UJyOp6nIpmsSz1R0BrAKdhH7uuMTJKtRTW6xeJA
Ww1ufEJctJtz4vI/fMXruEMg9kYI4UVWmHYGoe6PIFq4WYYlQes5fCLk52T+yC00
hpi22w5VXutNTLgPHUysdvVU+RN8dEH3Z/vYPNECAwEAAaOCAiwwggIoMB0GA1Ud
DgQWBBTs0lqpflye0gXea6HTu7SA4+nHLjAfBgNVHSMEGDAWgBRHdq+3T61brwph
gLSVENi4SX340zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1IzYXZ0MC10VzY4S1lZQzBsUkRZdUVsOS1OTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvZjcxY2MyLWI3MWQtNDY2OC04NjYxLTA1MzhlOTVmM2YxMi8x
LzdOSmFxWDVjbnRJRjNtdWgwN3UwZ09QcHh5NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
ZjcxY2MyLWI3MWQtNDY2OC04NjYxLTA1MzhlOTVmM2YxMi8xL1IzYXZ0MC10VzY4
S1lZQzBsUkRZdUVsOS1OTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwDAQCAAEwBgMEALkYQDAhBAIAAjAbAwcAKgQrABPM
AwcAKgQrAKAGAwcAKgQrAKA0MA0GCSqGSIb3DQEBCwUAA4IBAQCBkG91e01kDNQ1
rjoZrSZ9GY/6rB4h3LI90Kkoy9LHRcy0i2zV6railMiPFWoB0Rne2ZwVdanbu7P3
2P6SMwQAAARApNsNkt9V8V4dDFxXoa/Fh/a1rs+UETj6/ADXoUNN4OHO2OwCElsM
HGEmHV475zvOxlC2Q2OqxtbT6vnyQ7oaP8Zzbhlnq+Y8EtsqGS5GcYka2A0W5JL0
z5vVLQu+b8GSkTH8YXhyflK2di0ZRwL49YT6I3wNZ0ezTUhofpBRTiTgxVq3ieHr
KHE7VvAJYFVqGE/Z50/z8D5Se6h4KvhRbPCpy+X6gkwpAeohSUG2Xorm5IehusUo
hh6Y9f3w
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:13 2025 by rpki-client