Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/2N63Y8t9zGm6q3bKLwn-WqMUX3w.roa
File: 2N63Y8t9zGm6q3bKLwn-WqMUX3w.roa (raw, json)
Hash identifier: hh27MUctdIKLX1hmEivOcCl3o/C2rLQSuxTOBNRridY=
Subject key identifier: D8:DE:B7:63:CB:7D:CC:69:BA:AB:76:CA:2F:09:FE:5A:A3:14:5F:7C
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 01856C4A393B9E7CDFE30297DA21DFC2EA33
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/2N63Y8t9zGm6q3bKLwn-WqMUX3w.roa
Signing time: Sun 01 Jan 2023 07:44:41 +0000
ROA not before: Sun 01 Jan 2023 07:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206324
IP address blocks: 185.189.144.0/22 maxlen: 23
2a0b:ed80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:39:3b:9e:7c:df:e3:02:97:da:21:df:c2:ea:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Jan 1 07:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8deb763cb7dcc69baab76ca2f09fe5aa3145f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:5d:85:d6:e7:67:36:7b:e3:18:41:02:f1:
e4:8a:6f:58:4e:05:ff:49:36:bf:d3:e9:25:d3:24:
eb:24:ce:3b:a8:85:87:e0:79:3c:10:3e:10:aa:70:
9c:b2:d4:52:40:de:e1:6c:44:98:2c:db:54:35:2d:
29:bc:9d:bb:68:83:0b:6c:71:d2:f9:61:df:ac:8c:
7b:d8:b9:e4:c8:28:a6:1d:e5:a6:e6:7e:75:8d:cb:
50:a5:9d:78:77:6e:51:36:e8:6b:da:9f:ec:18:8b:
2c:b1:d3:7e:27:10:d1:3e:08:9b:2c:7f:52:64:42:
7f:b0:a1:f7:72:ef:00:92:de:97:d4:a0:38:34:ba:
b7:b0:1d:ed:a7:2d:22:e6:65:1a:1b:0d:a5:18:b2:
20:82:87:fd:6e:0f:1a:a9:b6:01:1a:d2:50:83:bc:
f0:47:30:da:ec:b6:83:d8:ba:19:57:d2:94:d6:f0:
00:29:60:aa:15:81:47:43:00:63:40:35:62:e3:2d:
0d:44:c4:c6:57:d6:66:09:51:2e:46:a3:b6:9a:8d:
a2:8f:0c:7e:ed:ad:82:a4:61:f1:4b:48:92:95:52:
4d:8d:de:aa:4d:bc:63:e4:b4:17:d1:25:23:3d:e6:
e4:0a:c1:f6:c0:b0:34:d8:42:6e:d3:30:9a:69:6f:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DE:B7:63:CB:7D:CC:69:BA:AB:76:CA:2F:09:FE:5A:A3:14:5F:7C
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/2N63Y8t9zGm6q3bKLwn-WqMUX3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.144.0/22
IPv6:
2a0b:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
15:d0:34:98:75:a6:3d:3f:41:12:7e:d9:b1:70:ef:b3:e9:84:
5a:3b:47:0c:78:57:65:0f:a7:ca:3b:36:7b:14:f0:50:a5:eb:
15:71:d9:34:a1:4e:50:2f:67:7c:03:33:91:9f:fa:0a:c2:b6:
d8:2e:5f:79:e4:43:0d:cc:15:49:a7:81:5d:c1:02:ce:ef:4c:
ad:1d:4a:90:7e:39:c5:53:5c:26:11:8c:9c:f3:98:47:6e:7b:
6e:94:d1:a5:eb:61:35:80:6e:b3:ab:4d:38:c6:33:90:f1:f1:
e1:a8:b0:f6:7e:4e:4f:b8:84:de:9a:df:ea:ab:72:83:98:c4:
22:24:ad:dc:8d:d9:76:6d:ac:25:4d:7e:ff:bb:23:fd:7d:dd:
e1:62:7f:50:b6:d0:fe:1f:d5:a2:d3:c1:c2:fe:d1:e1:68:08:
59:f9:d3:38:58:4a:11:5f:60:f3:8e:e5:5c:f2:a8:b5:39:fc:
ef:cd:c9:f3:95:b8:21:01:1c:3c:28:72:c8:a0:4b:92:a0:bf:
b2:f0:67:61:8f:9f:ce:c5:1c:32:5e:a8:65:df:aa:aa:e2:8a:
c7:b0:1f:1a:66:3b:61:1e:3a:67:26:ab:9b:67:dd:49:21:f6:
a3:29:db:57:64:bc:db:51:d9:45:66:cb:7a:05:1e:ac:70:37:
d5:c3:cb:e7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsSjk7nnzf4wKX2iHfwuozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MzdjN2Y1NWI4Y2YwZTc0YTVkZTA5MDMyOWFkOWI3Mjhj
NmFkNzcwHhcNMjMwMTAxMDc0NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGRlYjc2M2NiN2RjYzY5YmFhYjc2Y2EyZjA5ZmU1YWEzMTQ1ZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwRdhdbnZzZ74xhBAvHkim9YTgX/
STa/0+kl0yTrJM47qIWH4Hk8ED4QqnCcstRSQN7hbESYLNtUNS0pvJ27aIMLbHHS
+WHfrIx72LnkyCimHeWm5n51jctQpZ14d25RNuhr2p/sGIsssdN+JxDRPgibLH9S
ZEJ/sKH3cu8Akt6X1KA4NLq3sB3tpy0i5mUaGw2lGLIggof9bg8aqbYBGtJQg7zw
RzDa7LaD2LoZV9KU1vAAKWCqFYFHQwBjQDVi4y0NRMTGV9ZmCVEuRqO2mo2ijwx+
7a2CpGHxS0iSlVJNjd6qTbxj5LQX0SUjPebkCsH2wLA02EJu0zCaaW+rYQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNjet2PLfcxpuqt2yi8J/lqjFF98MB8GA1UdIwQY
MBaAFJk3x/VbjPDnSl3gkDKa2bcoxq13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYt
Yjc1ZWY1NjM3MjBjLzEvMk42M1k4dDl6R202cTNiS0x3bi1XcU1VWDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYtYjc1ZWY1NjM3MjBj
LzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub2QMA0E
AgACMAcDBQMqC+2AMA0GCSqGSIb3DQEBCwUAA4IBAQAV0DSYdaY9P0ESftmxcO+z
6YRaO0cMeFdlD6fKOzZ7FPBQpesVcdk0oU5QL2d8AzORn/oKwrbYLl955EMNzBVJ
p4FdwQLO70ytHUqQfjnFU1wmEYyc85hHbntulNGl62E1gG6zq004xjOQ8fHhqLD2
fk5PuITemt/qq3KDmMQiJK3cjdl2bawlTX7/uyP9fd3hYn9QttD+H9Wi08HC/tHh
aAhZ+dM4WEoRX2DzjuVc8qi1OfzvzcnzlbghARw8KHLIoEuSoL+y8Gdhj5/OxRwy
Xqhl36qq4orHsB8aZjthHjpnJqubZ91JIfajKdtXZLzbUdlFZst6BR6scDfVw8vn
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:53 2025 by rpki-client