Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/eWjpqXevOn-WNRXb_eIEVbvmL6Q.roa
File: eWjpqXevOn-WNRXb_eIEVbvmL6Q.roa (raw, json)
Hash identifier: AhpHxjqCPavZ1Ph6eX74v6bVmFWtzskPDTKR6NmjU00=
Subject key identifier: 79:68:E9:A9:77:AF:3A:7F:96:35:15:DB:FD:E2:04:55:BB:E6:2F:A4
Certificate issuer: /CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Certificate serial: 02F13784
Authority key identifier: 8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/eWjpqXevOn-WNRXb_eIEVbvmL6Q.roa
Signing time: Sat 01 Jan 2022 05:04:37 +0000
ROA not before: Sat 01 Jan 2022 05:04:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204782
IP address blocks: 185.240.96.0/22 maxlen: 22
2a0c:7a80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49362820 (0x2f13784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Validity
Not Before: Jan 1 05:04:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7968e9a977af3a7f963515dbfde20455bbe62fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:fc:9c:a9:08:9c:b8:fc:41:f7:af:5c:05:
5a:b8:c6:e3:98:bb:ae:f5:f9:a9:7f:a8:51:0c:f6:
20:83:b3:e3:ea:b8:38:9a:d5:5b:1f:e6:75:c0:b7:
8f:52:37:ce:c0:dc:5e:50:b9:d6:4f:a9:81:ac:95:
aa:8e:59:e2:f6:52:7d:4b:10:76:6d:5c:71:98:73:
bf:76:9f:2c:84:36:c8:b7:ef:06:cd:2e:65:2a:49:
44:a8:ad:ac:cd:07:70:b7:6a:a7:0f:ce:02:63:81:
1d:1b:3c:f4:38:b9:79:bf:52:14:17:62:05:94:f5:
d5:64:4a:b6:99:88:c9:37:31:42:d0:9f:cc:24:3b:
c2:81:94:26:19:65:bb:fb:5a:8c:d9:8c:c4:15:30:
ef:ba:e1:7f:74:07:3c:26:76:45:e1:fa:26:bc:a9:
05:05:a5:ee:f9:1b:ab:a7:63:75:6a:07:21:76:5e:
c5:ec:1b:17:7e:a9:88:5d:8e:71:ff:76:d4:14:18:
32:89:71:87:08:55:ba:a5:0b:12:48:cb:d8:79:0d:
d5:dd:66:e2:63:4c:27:2f:f0:da:55:d4:d7:ec:0a:
2d:87:d6:f2:61:8f:42:d6:ab:40:89:64:bf:97:74:
f8:06:6f:0e:db:6f:29:15:31:09:e6:4d:a6:4a:a2:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:68:E9:A9:77:AF:3A:7F:96:35:15:DB:FD:E2:04:55:BB:E6:2F:A4
X509v3 Authority Key Identifier:
keyid:8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/eWjpqXevOn-WNRXb_eIEVbvmL6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.96.0/22
IPv6:
2a0c:7a80::/29
Signature Algorithm: sha256WithRSAEncryption
1d:8b:d0:40:26:ae:6b:58:72:44:57:61:d4:36:b3:83:ab:47:
45:ae:85:4d:18:ad:2b:07:ce:ee:26:cf:38:d8:2f:4c:48:0c:
eb:b4:f4:2c:df:f2:f5:6a:d5:d0:c6:25:6f:8c:af:64:92:c6:
61:9b:a8:66:64:6b:91:7c:0c:56:f6:2c:d4:f2:06:cf:16:8f:
ed:8c:18:f6:cc:37:91:6f:ae:c8:f6:4c:59:f6:4f:23:04:b4:
36:a5:7b:b1:aa:a8:d6:c0:3f:ec:e9:53:d7:a4:36:87:27:07:
69:14:0a:4c:fc:f5:78:83:0e:61:d2:87:1c:0a:78:1f:b2:5f:
62:f4:f4:6d:4f:fa:42:5c:29:74:31:07:c9:cd:57:79:4b:f9:
20:31:9c:ed:a1:09:9d:e5:53:1e:23:89:08:38:f3:32:e3:76:
d9:c7:50:99:41:ee:1a:b4:80:1d:19:d0:77:e2:76:71:30:36:
5c:2c:82:97:e6:4b:77:22:21:ba:6a:73:91:90:d5:ae:a4:8c:
7a:10:46:26:af:39:a9:37:b7:7a:67:6a:f8:aa:f8:da:6a:ce:
23:ba:cb:b6:fc:e1:4d:52:5e:06:ba:52:b1:f1:f5:92:7e:ac:
d2:47:a3:7c:40:21:d1:89:84:6e:05:43:7e:7c:18:9b:e5:4a:
60:25:2f:26
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAvE3hDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YjIxZmZhZGU5MzBiZDFmZDJlMTc4OGNmZjQwN2Q5ZDM0MTM0ZTE3MB4XDTIyMDEw
MTA1MDQzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzk2OGU5YTk3N2Fm
M2E3Zjk2MzUxNWRiZmRlMjA0NTViYmU2MmZhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJXv/JypCJy4/EH3r1wFWrjG45i7rvX5qX+oUQz2IIOz4+q4
OJrVWx/mdcC3j1I3zsDcXlC51k+pgayVqo5Z4vZSfUsQdm1ccZhzv3afLIQ2yLfv
Bs0uZSpJRKitrM0HcLdqpw/OAmOBHRs89Di5eb9SFBdiBZT11WRKtpmIyTcxQtCf
zCQ7woGUJhllu/tajNmMxBUw77rhf3QHPCZ2ReH6JrypBQWl7vkbq6djdWoHIXZe
xewbF36piF2Ocf921BQYMolxhwhVuqULEkjL2HkN1d1m4mNMJy/w2lXU1+wKLYfW
8mGPQtarQIlkv5d0+AZvDttvKRUxCeZNpkqicrUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBR5aOmpd686f5Y1Fdv94gRVu+YvpDAfBgNVHSMEGDAWgBSLIf+t6TC9H9Lh
eIz/QH2dNBNOFzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2l5SF9yZWt3dlJfUzRYaU1fMEI5blRRVFRoYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvOWNlMGViLTNhYmEtNGIzNi1iN2M0LTQyNWM1MWQ3ODg4Yi8x
L2VXanBxWGV2T24tV05SWGJfZUlFVmJ2bUw2US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIv
OWNlMGViLTNhYmEtNGIzNi1iN2M0LTQyNWM1MWQ3ODg4Yi8xL2l5SF9yZWt3dlJf
UzRYaU1fMEI5blRRVFRoYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArnwYDANBAIAAjAHAwUDKgx6gDAN
BgkqhkiG9w0BAQsFAAOCAQEAHYvQQCaua1hyRFdh1Dazg6tHRa6FTRitKwfO7ibP
ONgvTEgM67T0LN/y9WrV0MYlb4yvZJLGYZuoZmRrkXwMVvYs1PIGzxaP7YwY9sw3
kW+uyPZMWfZPIwS0NqV7saqo1sA/7OlT16Q2hycHaRQKTPz1eIMOYdKHHAp4H7Jf
YvT0bU/6QlwpdDEHyc1XeUv5IDGc7aEJneVTHiOJCDjzMuN22cdQmUHuGrSAHRnQ
d+J2cTA2XCyCl+ZLdyIhumpzkZDVrqSMehBGJq85qTe3emdq+Kr42mrOI7rLtvzh
TVJeBrpSsfH1kn6s0kejfEAh0YmEbgVDfnwYm+VKYCUvJg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:48 2025 by rpki-client