Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/WOPq9d_BUBWM4dozmg7UWmVSHbA.roa
File: WOPq9d_BUBWM4dozmg7UWmVSHbA.roa (raw, json)
Hash identifier: NfNRH3lx1d+IHCl+r3aIwxYRuCnPEBkwSkSC7aOVXQw=
Subject key identifier: 58:E3:EA:F5:DF:C1:50:15:8C:E1:DA:33:9A:0E:D4:5A:65:52:1D:B0
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 188EF4F8
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/WOPq9d_BUBWM4dozmg7UWmVSHbA.roa
Signing time: Sat 01 Jan 2022 08:04:56 +0000
ROA not before: Sat 01 Jan 2022 08:04:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199849
IP address blocks: 185.44.112.0/24 maxlen: 24
185.44.113.0/24 maxlen: 24
185.44.114.0/24 maxlen: 24
185.44.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412022008 (0x188ef4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Jan 1 08:04:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58e3eaf5dfc150158ce1da339a0ed45a65521db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:c9:ab:4b:cf:65:c0:14:26:ad:4e:47:b4:
11:4e:64:e6:f3:e1:22:95:bc:f1:30:08:a6:12:45:
44:af:32:31:bc:3e:18:97:16:fa:ca:e4:05:ea:21:
da:27:7b:24:c9:43:c8:04:b4:55:27:ed:9e:0e:ba:
36:f2:90:c2:b3:30:37:77:ba:e2:de:b7:ee:71:1e:
7d:9a:99:41:7a:f5:13:62:10:b3:cf:38:3f:07:ef:
72:90:90:9b:c7:b1:b2:01:73:d2:0a:2e:fa:f8:87:
a3:15:ee:be:7e:55:16:44:5e:8e:06:3c:69:ab:72:
f4:d4:31:8d:83:44:49:3b:07:89:14:ec:bb:d1:a9:
99:9d:7e:2f:2f:c7:7b:ba:17:8b:6c:dd:72:4d:36:
e8:3d:9d:9a:4c:62:74:cc:f9:03:a8:cd:00:c8:e6:
b1:67:82:dc:b3:e0:79:c4:13:0a:bb:a0:c6:0a:5f:
31:03:b8:fc:c0:7c:b8:af:ad:30:5d:57:9e:48:1b:
96:e2:61:1e:3a:79:37:6c:58:22:e4:56:b9:2d:d4:
40:a2:be:6d:10:7b:20:7a:36:c6:be:58:95:0d:c9:
9c:8a:c9:64:61:86:82:ed:e8:cf:d9:3e:77:35:d4:
61:80:09:b6:26:44:6e:bb:a4:7e:ac:d5:d5:50:21:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E3:EA:F5:DF:C1:50:15:8C:E1:DA:33:9A:0E:D4:5A:65:52:1D:B0
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/WOPq9d_BUBWM4dozmg7UWmVSHbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.112.0/22
Signature Algorithm: sha256WithRSAEncryption
54:78:a9:82:f0:fc:33:5e:5b:48:2f:b6:19:58:3e:7b:a1:d5:
21:87:4b:73:b0:ee:8e:ae:14:ec:4f:f7:52:32:e9:ba:83:be:
ac:b6:b0:8d:c0:c9:4a:2f:73:cd:92:ea:d4:03:9e:b5:1a:98:
4e:33:de:21:cc:9a:54:be:5c:56:37:b0:c3:ae:2c:e3:c8:1a:
02:43:bc:9a:c2:c5:63:68:3a:ab:7d:28:ea:db:e3:8c:24:9c:
bc:b9:7e:19:a2:3f:5d:cf:2d:32:b3:af:fa:be:66:42:40:b1:
2e:12:28:1a:8a:b0:9d:17:02:d1:a6:56:54:6a:a5:7e:e4:01:
e5:a9:0b:44:64:e4:79:6b:2d:af:35:c0:1b:94:c0:99:cb:34:
3e:30:70:9c:8e:14:14:ce:84:c5:07:e0:7d:8f:00:72:6f:ac:
25:a6:42:c2:13:5c:87:0f:1b:3f:61:3e:ee:7e:d1:6e:b6:d8:
da:6f:3f:4d:e5:32:2c:1b:2a:e1:5e:9a:75:94:88:4e:67:64:
9b:f6:00:2b:01:23:46:88:f8:65:27:13:c9:32:a8:13:c4:09:
9d:48:19:c4:b7:45:44:d8:42:ad:9f:11:c8:73:99:18:24:3f:
a4:5d:dd:fe:25:72:c5:1c:73:34:e8:33:ac:6e:e7:dd:7e:89:
89:01:7a:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGI70+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZGM5YzFiNzE3MTU2YTE4YTM0ZDkzMjNiNjdhMGEwM2VkYTg1YWM5MB4XDTIyMDEw
MTA4MDQ1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNThlM2VhZjVkZmMx
NTAxNThjZTFkYTMzOWEwZWQ0NWE2NTUyMWRiMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJdnyatLz2XAFCatTke0EU5k5vPhIpW88TAIphJFRK8yMbw+
GJcW+srkBeoh2id7JMlDyAS0VSftng66NvKQwrMwN3e64t637nEefZqZQXr1E2IQ
s884PwfvcpCQm8exsgFz0gou+viHoxXuvn5VFkRejgY8aaty9NQxjYNESTsHiRTs
u9GpmZ1+Ly/He7oXi2zdck026D2dmkxidMz5A6jNAMjmsWeC3LPgecQTCrugxgpf
MQO4/MB8uK+tMF1XnkgbluJhHjp5N2xYIuRWuS3UQKK+bRB7IHo2xr5YlQ3JnIrJ
ZGGGgu3oz9k+dzXUYYAJtiZEbrukfqzV1VAhlBcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRY4+r138FQFYzh2jOaDtRaZVIdsDAfBgNVHSMEGDAWgBQNycG3FxVqGKNN
kyO2egoD7ahayTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RjbkJ0eGNWYWhpalRaTWp0bm9LQS0yb1dzay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTYvMmNiMGRjLWY3YzAtNGI2OC05MzkxLWVhNzQwZWMxZDFmNi8x
L1dPUHE5ZF9CVUJXTTRkb3ptZzdVV21WU0hiQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYv
MmNiMGRjLWY3YzAtNGI2OC05MzkxLWVhNzQwZWMxZDFmNi8xL0RjbkJ0eGNWYWhp
alRaTWp0bm9LQS0yb1dzay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkscDANBgkqhkiG9w0BAQsFAAOC
AQEAVHipgvD8M15bSC+2GVg+e6HVIYdLc7Dujq4U7E/3UjLpuoO+rLawjcDJSi9z
zZLq1AOetRqYTjPeIcyaVL5cVjeww64s48gaAkO8msLFY2g6q30o6tvjjCScvLl+
GaI/Xc8tMrOv+r5mQkCxLhIoGoqwnRcC0aZWVGqlfuQB5akLRGTkeWstrzXAG5TA
mcs0PjBwnI4UFM6ExQfgfY8Acm+sJaZCwhNchw8bP2E+7n7RbrbY2m8/TeUyLBsq
4V6adZSITmdkm/YAKwEjRoj4ZScTyTKoE8QJnUgZxLdFRNhCrZ8RyHOZGCQ/pF3d
/iVyxRxzNOgzrG7n3X6JiQF65A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:26 2025 by rpki-client