Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/dDI2AR1PEaBEQmlDq2-0DSeiTh8.roa
File: dDI2AR1PEaBEQmlDq2-0DSeiTh8.roa (raw, json)
Hash identifier: Z10qQTWfXm9cDLMBiulPD5b47v6l3krpwPo1uDfZKbM=
Subject key identifier: 74:32:36:01:1D:4F:11:A0:44:42:69:43:AB:6F:B4:0D:27:A2:4E:1F
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 0185166A794108D6430D33551F448489BFBE
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/dDI2AR1PEaBEQmlDq2-0DSeiTh8.roa
Signing time: Thu 15 Dec 2022 15:32:34 +0000
ROA not before: Thu 15 Dec 2022 15:32:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211918
IP address blocks: 185.235.140.0/24 maxlen: 24
2a0d:6480::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:16:6a:79:41:08:d6:43:0d:33:55:1f:44:84:89:bf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: Dec 15 15:32:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=743236011d4f11a044426943ab6fb40d27a24e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bf:79:2c:a3:e6:e0:52:0b:8d:b6:9d:d4:87:
4f:3e:b2:d7:1b:ec:2b:32:69:e6:ba:2b:fe:aa:5a:
ca:7a:08:96:d2:fe:4b:19:00:c6:42:50:e3:4a:f8:
22:94:5e:6c:c4:54:e6:49:59:96:ff:72:d0:f1:32:
92:d8:02:92:15:4a:53:97:24:9e:7b:a3:66:e2:cc:
b1:01:45:2c:cd:fc:ca:4c:d7:0e:70:f0:90:15:55:
13:f2:ae:ae:fd:aa:8c:4f:96:14:05:5f:8c:e7:1c:
a0:6d:63:73:b2:97:a5:a5:d4:77:7d:40:eb:8d:cc:
08:84:ae:7d:1d:c7:c5:c8:0c:2e:e9:e5:95:64:0d:
5e:6c:17:f6:8c:a4:fc:6d:8e:97:d2:2f:71:ea:ff:
5d:15:95:e9:ba:f8:14:10:be:50:d8:f2:7a:ec:7c:
34:90:98:99:45:26:58:6e:96:53:fd:82:7d:cb:8a:
11:52:e2:fc:a4:a2:6c:e0:bd:d5:b9:cb:90:94:66:
14:a8:cc:73:2f:c0:6a:b2:d8:0c:3e:15:70:14:f2:
18:83:d2:d9:81:10:2f:95:ff:29:d6:f5:8c:1e:a2:
4e:14:83:83:c3:d7:75:48:fa:02:ba:64:1a:58:01:
de:fe:d7:ba:47:80:62:03:f1:71:6f:3b:ea:81:83:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:36:01:1D:4F:11:A0:44:42:69:43:AB:6F:B4:0D:27:A2:4E:1F
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/dDI2AR1PEaBEQmlDq2-0DSeiTh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.140.0/24
IPv6:
2a0d:6480::/29
Signature Algorithm: sha256WithRSAEncryption
6c:11:c6:91:e1:6f:4b:85:3b:a5:d2:09:ff:50:3b:41:a5:9e:
98:ac:c4:4e:9d:f5:83:ed:0c:99:3b:98:51:d9:d3:c8:22:1c:
50:8d:3f:e9:4d:0f:40:ee:5f:51:e2:28:18:ec:60:32:85:3d:
c0:1e:0e:c0:82:ac:2e:3e:01:39:d3:6e:f4:54:46:f2:85:b0:
a5:01:39:60:c7:8a:b3:f5:73:86:63:ae:76:de:31:c6:ba:75:
38:ec:73:49:50:e8:37:1a:75:41:65:c8:96:df:02:45:c1:57:
e9:f2:c6:83:e2:cc:98:01:5f:bc:a2:79:9d:d1:cc:45:d3:28:
b0:a3:f8:f9:a4:da:17:5e:8c:09:7c:61:26:fc:5d:27:4d:59:
d3:4e:a9:24:27:64:a4:d8:0d:3a:20:52:74:29:33:1c:8d:e5:
92:98:67:c5:ce:c6:aa:38:6c:97:f1:a8:ba:38:b9:e2:99:7d:
14:90:23:39:4f:4f:fa:8b:28:c8:f1:17:7a:59:3b:45:d8:2d:
b2:5a:f3:9c:54:1c:94:a6:7a:a6:43:1d:33:bb:e9:73:74:aa:
95:a6:d0:cd:ae:5e:87:df:24:25:22:6f:17:5b:f3:39:bb:15:
b8:d4:15:0c:90:6c:b4:28:96:18:45:ae:82:d1:40:ad:f9:2c:
94:b9:8a:96
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYUWanlBCNZDDTNVH0SEib++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj
NTNiMDUwHhcNMjIxMjE1MTUzMjM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDMyMzYwMTFkNGYxMWEwNDQ0MjY5NDNhYjZmYjQwZDI3YTI0ZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3795LKPm4FILjbad1IdPPrLXG+wr
Mmnmuiv+qlrKegiW0v5LGQDGQlDjSvgilF5sxFTmSVmW/3LQ8TKS2AKSFUpTlySe
e6Nm4syxAUUszfzKTNcOcPCQFVUT8q6u/aqMT5YUBV+M5xygbWNzspelpdR3fUDr
jcwIhK59HcfFyAwu6eWVZA1ebBf2jKT8bY6X0i9x6v9dFZXpuvgUEL5Q2PJ67Hw0
kJiZRSZYbpZT/YJ9y4oRUuL8pKJs4L3VucuQlGYUqMxzL8BqstgMPhVwFPIYg9LZ
gRAvlf8p1vWMHqJOFIODw9d1SPoCumQaWAHe/te6R4BiA/FxbzvqgYO9PQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHQyNgEdTxGgREJpQ6tvtA0nok4fMB8GA1UdIwQY
MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt
NzU4Y2E0ZDQ4YmMyLzEvZERJMkFSMVBFYUJFUW1sRHEyLTBEU2VpVGg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy
LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAueuMMA0E
AgACMAcDBQMqDWSAMA0GCSqGSIb3DQEBCwUAA4IBAQBsEcaR4W9LhTul0gn/UDtB
pZ6YrMROnfWD7QyZO5hR2dPIIhxQjT/pTQ9A7l9R4igY7GAyhT3AHg7AgqwuPgE5
0270VEbyhbClATlgx4qz9XOGY6523jHGunU47HNJUOg3GnVBZciW3wJFwVfp8saD
4syYAV+8onmd0cxF0yiwo/j5pNoXXowJfGEm/F0nTVnTTqkkJ2Sk2A06IFJ0KTMc
jeWSmGfFzsaqOGyX8ai6OLnimX0UkCM5T0/6iyjI8Rd6WTtF2C2yWvOcVByUpnqm
Qx0zu+lzdKqVptDNrl6H3yQlIm8XW/M5uxW41BUMkGy0KJYYRa6C0UCt+SyUuYqW
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:54 2025 by rpki-client