Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/OuX8IPyQme6CRX-QPkqzONKEP8s.roa
File: OuX8IPyQme6CRX-QPkqzONKEP8s.roa (raw, json)
Hash identifier: zcl95L/6AuntH+2UxIUiUqKedeEQq2SsD79wf0ap1X0=
Subject key identifier: 3A:E5:FC:20:FC:90:99:EE:82:45:7F:90:3E:4A:B3:38:D2:84:3F:CB
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 01874B5BBA204A3AC1C14F05C48B7AF3CC3E
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/OuX8IPyQme6CRX-QPkqzONKEP8s.roa
Signing time: Tue 04 Apr 2023 08:21:55 +0000
ROA not before: Tue 04 Apr 2023 08:21:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39172
IP address blocks: 185.53.60.0/24 maxlen: 24
185.53.61.0/24 maxlen: 24
185.53.62.0/24 maxlen: 24
185.53.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:5b:ba:20:4a:3a:c1:c1:4f:05:c4:8b:7a:f3:cc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Apr 4 08:21:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ae5fc20fc9099ee82457f903e4ab338d2843fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:fc:9b:6b:ab:4e:6d:2d:39:0e:27:7f:68:
ee:4a:71:4c:9f:e1:d1:11:3f:23:3e:dc:70:f4:88:
4a:0b:88:f8:7c:e4:68:73:47:a7:7c:ac:70:90:2b:
ea:67:d5:23:a4:6a:42:9b:e0:58:ab:ec:9a:7d:e1:
5d:b5:a4:28:66:b0:dc:b0:70:e1:8d:47:b2:d8:c0:
ad:57:ff:f1:d8:7f:39:e9:5b:49:6d:35:e8:c9:43:
5b:b0:54:bd:29:da:68:3d:e7:f6:2b:07:0b:28:a5:
06:4a:47:93:e5:1d:99:b4:8a:4b:2d:80:8a:42:c4:
48:2c:af:eb:7d:bf:ee:fe:07:72:19:82:0e:77:7b:
28:89:4d:96:50:a1:82:b9:a0:40:f3:7d:96:73:a2:
1e:42:d8:20:62:1f:0b:8c:8b:07:86:0c:2b:06:71:
45:18:f5:a8:b1:db:03:3d:61:22:38:7f:36:8f:82:
4e:49:10:a4:22:a2:c1:d6:53:49:f9:82:8d:11:e2:
8d:13:13:03:b6:d5:38:c3:e3:dc:cc:b7:04:29:b6:
01:fa:46:59:c5:54:fe:46:a5:13:e5:fb:91:45:29:
11:80:4c:50:48:d0:b5:a0:32:0f:4d:b2:39:d4:43:
a1:1d:a0:90:21:76:1d:20:0a:70:3c:c8:12:a6:50:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E5:FC:20:FC:90:99:EE:82:45:7F:90:3E:4A:B3:38:D2:84:3F:CB
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/OuX8IPyQme6CRX-QPkqzONKEP8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.60.0/22
Signature Algorithm: sha256WithRSAEncryption
12:41:d5:7c:39:dc:72:96:a0:50:d9:f2:7f:29:f7:1b:fc:e8:
ca:b9:f6:d8:6e:33:f6:74:ba:5b:64:55:35:0e:c3:e5:0a:e2:
9c:e9:bc:04:e6:3d:d6:96:2d:93:ad:64:77:81:92:cc:24:b8:
b5:31:69:f8:4b:47:ea:b9:de:a8:27:2e:95:63:8b:e4:b4:25:
ee:fa:d6:9d:da:bd:08:38:77:b1:79:a8:51:2c:77:c8:e0:4e:
72:92:e8:99:d2:a0:c4:1a:f0:21:d5:c8:b7:62:7d:41:33:dd:
5d:54:bd:f6:9d:9d:27:a7:ea:2a:28:7d:76:9e:22:b0:86:ef:
78:80:fd:b9:11:f6:bb:ef:47:f9:bf:25:b4:fc:23:15:cd:06:
e2:91:d4:f1:ff:6f:8d:33:c2:79:26:dc:d7:3d:96:0b:ae:92:
cc:17:7d:34:9a:1f:85:1d:ea:9a:ed:b6:2a:33:51:d5:8c:56:
2e:8d:15:f5:0e:70:8d:6a:97:52:a3:ab:ef:bb:11:c1:a7:43:
5c:62:ca:68:39:76:3a:0a:3d:e1:c9:cc:8b:6c:a4:71:71:00:
b3:64:95:10:e2:47:d9:d9:cf:9b:a8:d7:7f:0c:41:a0:db:61:
71:3f:8e:47:29:45:f4:7b:de:b5:6b:c1:6d:15:85:85:f3:6e:
6d:a7:dd:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdLW7ogSjrBwU8FxIt688w+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWFiNWY4OGIxY2Q3NzI4ZjE3N2NjODZlMzNiY2ViOWUy
MjE0YjIwHhcNMjMwNDA0MDgyMTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWU1ZmMyMGZjOTA5OWVlODI0NTdmOTAzZTRhYjMzOGQyODQzZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue78m2urTm0tOQ4nf2juSnFMn+HR
ET8jPtxw9IhKC4j4fORoc0enfKxwkCvqZ9UjpGpCm+BYq+yafeFdtaQoZrDcsHDh
jUey2MCtV//x2H856VtJbTXoyUNbsFS9KdpoPef2KwcLKKUGSkeT5R2ZtIpLLYCK
QsRILK/rfb/u/gdyGYIOd3soiU2WUKGCuaBA832Wc6IeQtggYh8LjIsHhgwrBnFF
GPWosdsDPWEiOH82j4JOSRCkIqLB1lNJ+YKNEeKNExMDttU4w+PczLcEKbYB+kZZ
xVT+RqUT5fuRRSkRgExQSNC1oDIPTbI51EOhHaCQIXYdIApwPMgSplAfKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDrl/CD8kJnugkV/kD5KszjShD/LMB8GA1UdIwQY
MBaAFD4atfiLHNdyjxd8yG4zvOueIhSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWIt
ZmQ5OGZkNzBmMzRmLzEvT3VYOElQeVFtZTZDUlgtUVBrcXpPTktFUDhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWItZmQ5OGZkNzBmMzRm
LzEvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTU8MA0G
CSqGSIb3DQEBCwUAA4IBAQASQdV8OdxylqBQ2fJ/Kfcb/OjKufbYbjP2dLpbZFU1
DsPlCuKc6bwE5j3Wli2TrWR3gZLMJLi1MWn4S0fqud6oJy6VY4vktCXu+tad2r0I
OHexeahRLHfI4E5ykuiZ0qDEGvAh1ci3Yn1BM91dVL32nZ0np+oqKH12niKwhu94
gP25Efa770f5vyW0/CMVzQbikdTx/2+NM8J5JtzXPZYLrpLMF300mh+FHeqa7bYq
M1HVjFYujRX1DnCNapdSo6vvuxHBp0NcYspoOXY6Cj3hycyLbKRxcQCzZJUQ4kfZ
2c+bqNd/DEGg22FxP45HKUX0e961a8FtFYWF825tp93k
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:05 2025 by rpki-client