Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/zuvBAQn83yQwT3VMtL5F5b0rJ1Y.roa
File: zuvBAQn83yQwT3VMtL5F5b0rJ1Y.roa (raw, json)
Hash identifier: NWbFcP97nBrrveov925zsxDGJFoClV4b/bV6QtvP3bw=
Subject key identifier: CE:EB:C1:01:09:FC:DF:24:30:4F:75:4C:B4:BE:45:E5:BD:2B:27:56
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 01856F824F9D1200984018D7D945B4EC6903
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/zuvBAQn83yQwT3VMtL5F5b0rJ1Y.roa
Signing time: Sun 01 Jan 2023 22:44:49 +0000
ROA not before: Sun 01 Jan 2023 22:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211768
IP address blocks: 185.86.188.0/22 maxlen: 24
193.148.188.0/24 maxlen: 24
185.124.192.0/22 maxlen: 24
193.19.128.0/22 maxlen: 24
2a06:b500::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:4f:9d:12:00:98:40:18:d7:d9:45:b4:ec:69:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jan 1 22:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceebc10109fcdf24304f754cb4be45e5bd2b2756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:64:23:af:91:a9:f8:ab:c9:c9:85:e3:37:
dd:08:ca:18:63:f0:cf:b3:44:8b:f1:18:7b:a1:b8:
93:17:04:a7:56:7f:a5:5e:5a:b2:e4:97:ed:9c:81:
34:07:b7:e4:6b:8e:f2:82:c2:89:36:50:ed:3a:45:
8f:9e:0e:88:85:3f:02:71:39:f3:ee:a6:e0:97:07:
fe:e7:83:d7:da:e5:e4:93:fb:09:d1:89:eb:d2:a5:
48:57:d3:0d:c2:b3:da:3f:7c:17:45:23:ed:0a:15:
53:7a:15:8e:9a:12:0a:44:01:52:92:e4:1f:24:6c:
a0:f4:38:92:31:23:f4:17:5f:5c:20:f4:f0:cf:79:
7b:60:f6:f8:cf:d3:86:26:81:b4:90:ce:17:d6:15:
ca:0a:4c:c7:7c:9a:85:2a:5f:a0:a1:2b:52:09:39:
d3:6b:93:41:09:7f:51:98:06:32:f2:c2:f9:f8:5a:
4a:85:99:ed:38:e6:22:6c:e5:62:19:0a:69:88:06:
05:b9:6b:98:13:01:a5:84:e9:f7:dc:db:df:f9:90:
1c:1f:34:d9:dd:bf:64:4c:a0:f1:f6:93:26:5c:d6:
30:56:e9:d5:61:e0:15:47:4c:4d:a1:6b:3b:ad:38:
7f:61:42:92:96:3c:5c:6f:74:e5:64:8d:e4:35:9d:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EB:C1:01:09:FC:DF:24:30:4F:75:4C:B4:BE:45:E5:BD:2B:27:56
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/zuvBAQn83yQwT3VMtL5F5b0rJ1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.188.0/22
185.124.192.0/22
193.19.128.0/22
193.148.188.0/24
IPv6:
2a06:b500::/29
Signature Algorithm: sha256WithRSAEncryption
84:50:1f:fe:1d:6d:a1:e4:f9:d8:f9:70:48:08:d3:ea:08:db:
32:fb:53:04:1b:21:f4:0b:11:49:29:8a:a6:da:31:24:01:5d:
fd:c2:5e:c2:f0:0e:ca:67:3a:59:e4:65:11:f2:41:c3:b1:8e:
47:8b:e8:18:28:85:e2:d3:fa:3c:6d:2a:53:72:3c:84:04:c9:
b7:b6:e2:93:48:61:66:0e:90:ee:6a:c8:fb:b2:f8:2e:2c:66:
3e:6d:05:b0:93:0e:c7:b0:51:2c:2c:c5:9b:49:7c:7e:c5:b1:
2b:e4:ee:e4:53:89:13:8f:f0:ab:f9:f7:68:34:bd:75:5f:c3:
5c:ec:7f:51:b9:05:2f:0c:0e:68:3c:74:13:39:3b:3d:1e:08:
5e:05:7d:90:7e:1d:79:af:3d:60:c4:a9:be:e1:80:e8:e6:d3:
7f:94:e5:4f:0b:27:58:0f:74:87:12:4b:51:c5:3c:90:23:57:
cd:ba:33:73:bf:35:16:db:ad:8f:55:31:3a:62:b9:f7:15:29:
c7:65:95:b2:4b:c3:19:bd:64:28:0f:42:54:63:8d:8a:b1:b9:
ee:9c:3a:ab:ca:cb:03:5a:71:a1:37:29:2a:ee:65:47:f3:8d:
a8:4f:a9:fd:be:82:a3:5a:21:a2:f0:b0:63:b4:7e:ab:27:56:
75:3d:4a:b9
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVvgk+dEgCYQBjX2UW07GkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjYwYjIzZmUzYjg2NDJkNmJmNDc1ZjhlYjdmY2FkOWQx
M2M0MTMwHhcNMjMwMTAxMjI0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWViYzEwMTA5ZmNkZjI0MzA0Zjc1NGNiNGJlNDVlNWJkMmIyNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+lkI6+RqfirycmF4zfdCMoYY/DP
s0SL8Rh7obiTFwSnVn+lXlqy5JftnIE0B7fka47ygsKJNlDtOkWPng6IhT8CcTnz
7qbglwf+54PX2uXkk/sJ0Ynr0qVIV9MNwrPaP3wXRSPtChVTehWOmhIKRAFSkuQf
JGyg9DiSMSP0F19cIPTwz3l7YPb4z9OGJoG0kM4X1hXKCkzHfJqFKl+goStSCTnT
a5NBCX9RmAYy8sL5+FpKhZntOOYibOViGQppiAYFuWuYEwGlhOn33Nvf+ZAcHzTZ
3b9kTKDx9pMmXNYwVunVYeAVR0xNoWs7rTh/YUKSljxcb3TlZI3kNZ0V9wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFM7rwQEJ/N8kME91TLS+ReW9KydWMB8GA1UdIwQY
MBaAFJJmCyP+O4ZC1r9HX463/K2dE8QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWIt
MTNlZjFjNDU1Y2M0LzEvenV2QkFRbjgzeVF3VDNWTXRMNUY1YjBySjFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWItMTNlZjFjNDU1Y2M0
LzEva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuVa8AwQC
uXzAAwQCwROAAwQAwZS8MA0EAgACMAcDBQMqBrUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCEUB/+HW2h5PnY+XBICNPqCNsy+1MEGyH0CxFJKYqm2jEkAV39wl7C8A7KZzpZ
5GUR8kHDsY5Hi+gYKIXi0/o8bSpTcjyEBMm3tuKTSGFmDpDuasj7svguLGY+bQWw
kw7HsFEsLMWbSXx+xbEr5O7kU4kTj/Cr+fdoNL11X8Nc7H9RuQUvDA5oPHQTOTs9
HgheBX2Qfh15rz1gxKm+4YDo5tN/lOVPCydYD3SHEktRxTyQI1fNujNzvzUW262P
VTE6Yrn3FSnHZZWyS8MZvWQoD0JUY42KsbnunDqryssDWnGhNykq7mVH842oT6n9
voKjWiGi8LBjtH6rJ1Z1PUq5
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:48 2025 by rpki-client