Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/wHcQo8zBcGavS6OEQrihmpTKDPc.roa
File: wHcQo8zBcGavS6OEQrihmpTKDPc.roa (raw, json)
Hash identifier: 3GPQJsCOhQcpiycY6+DeXO/7dzsCQOPi7jsPvg/9Y/M=
Subject key identifier: C0:77:10:A3:CC:C1:70:66:AF:4B:A3:84:42:B8:A1:9A:94:CA:0C:F7
Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial: 14396B6F
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/wHcQo8zBcGavS6OEQrihmpTKDPc.roa
Signing time: Sat 01 Jan 2022 06:02:02 +0000
ROA not before: Sat 01 Jan 2022 06:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204028
IP address blocks: 185.118.199.0/24 maxlen: 24
185.118.196.0/24 maxlen: 24
185.118.196.0/22 maxlen: 24
213.170.142.0/24 maxlen: 24
185.118.197.0/24 maxlen: 24
185.118.198.0/24 maxlen: 24
2a06:9500::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339307375 (0x14396b6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Validity
Not Before: Jan 1 06:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c07710a3ccc17066af4ba38442b8a19a94ca0cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:7d:b1:5d:7d:aa:9a:9c:b1:58:f6:76:b5:
2b:75:5b:ed:9c:ee:25:d4:1d:db:1a:16:e9:62:82:
e2:7a:b7:3d:d5:23:75:da:88:cc:dd:ee:b4:fe:f0:
56:92:2f:dd:d6:6b:ac:e5:ca:02:47:56:da:3f:36:
c5:61:ab:26:1c:d4:3d:1e:fc:45:ce:73:34:81:f4:
06:79:0a:93:58:1e:58:f8:c7:75:25:ba:5d:cf:d9:
86:07:a2:d1:8a:ce:5f:68:a2:37:8e:b0:c6:25:b2:
91:cb:0a:c7:b2:8e:cc:c8:bc:8c:89:17:aa:18:1d:
3d:df:5c:0b:32:f5:ed:21:9a:08:ea:b1:77:84:13:
49:22:63:a5:40:c3:87:70:99:44:ac:22:a8:50:f0:
ec:bb:01:84:36:52:fc:06:c0:9b:7d:49:c8:ca:95:
e8:3d:d4:b0:c6:6a:55:c1:f0:86:86:e4:4b:b1:4d:
de:dd:ae:21:cb:0a:e0:36:c4:38:f4:01:f5:e0:20:
ad:df:18:c1:a5:c5:39:68:70:97:f7:25:f9:ad:9a:
72:c2:47:63:ba:2d:4e:d6:0f:ac:ac:4c:e9:92:d5:
4d:db:ca:66:4b:2f:3e:cf:1c:bc:f0:24:3a:e7:67:
f3:a4:a4:59:57:e6:bb:62:b1:da:80:0d:48:e9:87:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:77:10:A3:CC:C1:70:66:AF:4B:A3:84:42:B8:A1:9A:94:CA:0C:F7
X509v3 Authority Key Identifier:
keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/wHcQo8zBcGavS6OEQrihmpTKDPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.196.0/22
213.170.142.0/24
IPv6:
2a06:9500::/29
Signature Algorithm: sha256WithRSAEncryption
81:25:d6:79:33:67:f3:81:3e:ae:25:e0:c2:34:6f:89:a4:b1:
64:eb:45:3f:4f:fe:bc:8c:9e:31:2b:83:a4:a1:2c:bd:f2:9c:
ea:ef:d6:50:0c:f1:c3:8e:cf:f1:f5:a9:b4:da:6d:75:85:28:
3a:20:cf:19:aa:af:d9:8c:12:25:62:d1:d0:cf:03:78:f7:bb:
02:24:8b:5c:81:35:c8:6c:f7:e7:04:6d:1b:e9:ad:cc:6c:d3:
99:94:fb:ad:62:34:8c:8f:b5:8f:97:65:b0:94:5e:89:b5:fc:
b1:be:2d:d2:fc:34:a4:b9:1e:89:a4:ae:27:36:5d:03:7a:26:
84:57:3b:45:54:c8:8d:d0:ac:68:5a:45:c3:c8:85:79:70:c5:
cd:63:bd:5a:b4:e1:06:33:66:4d:3d:f6:d9:14:b7:9a:ae:23:
d6:9e:1a:b5:6f:c3:6d:65:b4:c7:53:43:dc:ff:be:81:b5:31:
bb:10:dd:01:b9:4c:8f:05:24:10:64:73:bc:52:08:b7:05:d2:
83:24:fe:9d:69:51:a1:b0:80:fe:9b:19:06:3b:39:c3:61:c2:
df:05:e5:ee:2d:19:28:3e:b3:ff:bf:25:93:88:12:7a:d7:e8:
55:c0:a3:f8:16:21:4a:ad:1a:11:5d:73:47:ce:a4:c2:5a:ec:
8e:47:aa:9e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEFDlrbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YTM2ZDY3OGM0YmJjYWMyNGFlNmJlYTlhMjRjOTk1YzQ4ZDU5M2YwMB4XDTIyMDEw
MTA2MDIwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzA3NzEwYTNjY2Mx
NzA2NmFmNGJhMzg0NDJiOGExOWE5NGNhMGNmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlZfbFdfaqanLFY9na1K3Vb7ZzuJdQd2xoW6WKC4nq3PdUj
ddqIzN3utP7wVpIv3dZrrOXKAkdW2j82xWGrJhzUPR78Rc5zNIH0BnkKk1geWPjH
dSW6Xc/Zhgei0YrOX2iiN46wxiWykcsKx7KOzMi8jIkXqhgdPd9cCzL17SGaCOqx
d4QTSSJjpUDDh3CZRKwiqFDw7LsBhDZS/AbAm31JyMqV6D3UsMZqVcHwhobkS7FN
3t2uIcsK4DbEOPQB9eAgrd8YwaXFOWhwl/cl+a2acsJHY7otTtYPrKxM6ZLVTdvK
ZksvPs8cvPAkOudn86SkWVfmu2Kx2oANSOmHVtUCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTAdxCjzMFwZq9Lo4RCuKGalMoM9zAfBgNVHSMEGDAWgBQqNtZ4xLvKwkrm
vqmiTJlcSNWT8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tqYldlTVM3eXNKSzVyNnBva3laWEVqVmtfQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvYTAxZmQzLWE4NjctNDJjNi05YTBlLWRmNjUxYjk2NmIyYi8x
L3dIY1FvOHpCY0dhdlM2T0VRcmlobXBUS0RQYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
YTAxZmQzLWE4NjctNDJjNi05YTBlLWRmNjUxYjk2NmIyYi8xL0tqYldlTVM3eXNK
SzVyNnBva3laWEVqVmtfQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArl2xAMEANWqjjANBAIAAjAHAwUD
KgaVADANBgkqhkiG9w0BAQsFAAOCAQEAgSXWeTNn84E+riXgwjRviaSxZOtFP0/+
vIyeMSuDpKEsvfKc6u/WUAzxw47P8fWptNptdYUoOiDPGaqv2YwSJWLR0M8DePe7
AiSLXIE1yGz35wRtG+mtzGzTmZT7rWI0jI+1j5dlsJReibX8sb4t0vw0pLkeiaSu
JzZdA3omhFc7RVTIjdCsaFpFw8iFeXDFzWO9WrThBjNmTT322RS3mq4j1p4atW/D
bWW0x1ND3P++gbUxuxDdAblMjwUkEGRzvFIItwXSgyT+nWlRobCA/psZBjs5w2HC
3wXl7i0ZKD6z/78lk4gSetfoVcCj+BYhSq0aEV1zR86kwlrsjkeqng==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:09 2025 by rpki-client