Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/qTUgVPbSWCMRrnCr6fvgePyszbc.roa
File: qTUgVPbSWCMRrnCr6fvgePyszbc.roa (raw, json)
Hash identifier: kxoytNO1t75gcNhtIwf+hK5R6QZ9wmjiBQcMY3xYxxs=
Subject key identifier: A9:35:20:54:F6:D2:58:23:11:AE:70:AB:E9:FB:E0:78:FC:AC:CD:B7
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 01856F799D10A661CAB12A2DEC57868479C8
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/qTUgVPbSWCMRrnCr6fvgePyszbc.roa
Signing time: Sun 01 Jan 2023 22:35:19 +0000
ROA not before: Sun 01 Jan 2023 22:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57786
IP address blocks: 185.129.93.0/24 maxlen: 24
185.129.94.0/24 maxlen: 24
185.129.92.0/24 maxlen: 24
185.129.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:9d:10:a6:61:ca:b1:2a:2d:ec:57:86:84:79:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 1 22:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9352054f6d2582311ae70abe9fbe078fcaccdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:f0:72:4b:2b:e7:69:c5:b4:53:c9:05:6d:
76:df:50:4b:16:a1:59:34:95:07:bc:3d:a6:71:3c:
ca:a2:75:c2:94:85:27:08:af:30:64:45:13:e2:5d:
f7:d7:c3:5b:88:a6:08:53:fe:68:8c:46:68:70:b8:
7a:0f:ce:cd:1c:fc:cf:46:25:47:12:4c:c0:96:e2:
10:ae:ed:27:a7:88:a2:c2:a3:13:dc:03:d2:c8:7a:
6a:3f:48:08:62:56:84:eb:22:78:ed:ac:2f:90:c2:
59:9f:59:ed:76:97:07:63:7e:10:5d:06:fb:4a:a3:
7f:9c:96:de:b3:88:d7:4f:9b:46:0a:ca:c6:2d:49:
f6:2a:de:f1:c1:8d:f5:b0:eb:f5:77:35:d6:63:39:
0b:12:28:0f:5e:f2:15:e8:64:96:81:51:14:a3:1a:
70:ed:94:72:4d:9c:24:c9:06:29:d4:c4:81:31:d6:
3e:7a:df:df:4e:d4:a4:fe:74:a6:37:36:25:1c:d1:
2a:fd:86:8b:76:6c:1b:63:77:e9:6d:65:3c:a8:76:
86:42:04:ab:de:f1:e0:52:e6:8e:c6:f3:a5:73:cc:
f2:b6:c3:fb:ea:ef:a6:a7:04:c6:3d:b3:f6:24:d9:
2c:f7:64:a1:88:52:0f:5c:67:6b:09:08:29:bb:f4:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:35:20:54:F6:D2:58:23:11:AE:70:AB:E9:FB:E0:78:FC:AC:CD:B7
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/qTUgVPbSWCMRrnCr6fvgePyszbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.92.0/22
Signature Algorithm: sha256WithRSAEncryption
81:18:2f:32:90:8c:cb:32:92:c3:7a:2e:a8:b8:63:8c:cb:f4:
55:51:99:ae:8d:2e:34:44:04:3c:6f:40:28:c7:33:d7:24:ec:
4d:0d:37:5e:f2:aa:ce:1c:0e:94:5e:da:e3:0d:db:1f:4d:d8:
58:0b:df:94:d2:90:8a:9d:b5:ad:54:76:2c:ed:04:ca:a6:17:
7d:dc:0c:88:d8:6a:1d:63:7e:d8:90:c4:8b:16:89:58:70:4b:
c3:11:72:53:31:1c:32:0d:f4:b0:1a:4b:5e:0c:75:ab:1f:d0:
ae:73:78:9b:d8:b7:c7:57:d5:e9:09:d2:36:5c:22:90:55:88:
fd:f6:18:1b:20:a3:15:a1:a5:ed:68:b6:0c:9a:79:f8:1f:04:
8c:e3:95:48:e5:4e:20:3d:35:30:cf:bd:04:77:f8:91:cd:35:
81:8b:08:24:9f:49:24:3f:43:2d:bc:bd:56:7e:79:16:cb:09:
6a:f1:9d:df:a6:fc:67:b3:5b:1e:55:cf:a9:62:c6:01:f3:15:
3b:32:64:b5:0e:f4:56:47:14:58:63:a4:03:45:70:06:f8:2c:
72:1c:72:3b:88:72:b8:a6:14:e0:20:e9:7a:38:03:9b:bf:7a:
bb:13:43:3c:e4:94:77:5e:3e:43:b3:5b:ef:d7:b3:5b:b4:12:
15:00:a4:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVveZ0QpmHKsSot7FeGhHnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3
MzVkN2QwHhcNMjMwMTAxMjIzNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTM1MjA1NGY2ZDI1ODIzMTFhZTcwYWJlOWZiZTA3OGZjYWNjZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCXwcksr52nFtFPJBW1231BLFqFZ
NJUHvD2mcTzKonXClIUnCK8wZEUT4l3318NbiKYIU/5ojEZocLh6D87NHPzPRiVH
EkzAluIQru0np4iiwqMT3APSyHpqP0gIYlaE6yJ47awvkMJZn1ntdpcHY34QXQb7
SqN/nJbes4jXT5tGCsrGLUn2Kt7xwY31sOv1dzXWYzkLEigPXvIV6GSWgVEUoxpw
7ZRyTZwkyQYp1MSBMdY+et/fTtSk/nSmNzYlHNEq/YaLdmwbY3fpbWU8qHaGQgSr
3vHgUuaOxvOlc8zytsP76u+mpwTGPbP2JNks92ShiFIPXGdrCQgpu/SnNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKk1IFT20lgjEa5wq+n74Hj8rM23MB8GA1UdIwQY
MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt
YzdkMTk5MzBkNjZkLzEvcVRVZ1ZQYlNXQ01Scm5DcjZmdmdlUHlzemJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk
LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYFcMA0G
CSqGSIb3DQEBCwUAA4IBAQCBGC8ykIzLMpLDei6ouGOMy/RVUZmujS40RAQ8b0Ao
xzPXJOxNDTde8qrOHA6UXtrjDdsfTdhYC9+U0pCKnbWtVHYs7QTKphd93AyI2God
Y37YkMSLFolYcEvDEXJTMRwyDfSwGkteDHWrH9Cuc3ib2LfHV9XpCdI2XCKQVYj9
9hgbIKMVoaXtaLYMmnn4HwSM45VI5U4gPTUwz70Ed/iRzTWBiwgkn0kkP0MtvL1W
fnkWywlq8Z3fpvxns1seVc+pYsYB8xU7MmS1DvRWRxRYY6QDRXAG+CxyHHI7iHK4
phTgIOl6OAObv3q7E0M85JR3Xj5Ds1vv17NbtBIVAKRG
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:10 2025 by rpki-client