Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/K1bcbtQyrJawSqFToOQ9bPkJjPA.roa
File: K1bcbtQyrJawSqFToOQ9bPkJjPA.roa (raw, json)
Hash identifier: HL4uuduUb9ZXiZjdW6nnhFSVXTkNKj9D115R52KgQqc=
Subject key identifier: 2B:56:DC:6E:D4:32:AC:96:B0:4A:A1:53:A0:E4:3D:6C:F9:09:8C:F0
Certificate issuer: /CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Certificate serial: 01856D0A88EEC144E79363F6360A219E8C65
Authority key identifier: B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/K1bcbtQyrJawSqFToOQ9bPkJjPA.roa
Signing time: Sun 01 Jan 2023 11:14:44 +0000
ROA not before: Sun 01 Jan 2023 11:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48095
IP address blocks: 185.204.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:88:ee:c1:44:e7:93:63:f6:36:0a:21:9e:8c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Validity
Not Before: Jan 1 11:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b56dc6ed432ac96b04aa153a0e43d6cf9098cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:29:32:fb:87:72:f0:bd:7f:e3:3d:33:56:
8d:07:68:80:a9:c6:5d:93:16:42:a5:b0:38:74:69:
ee:dd:ad:d3:33:83:83:e6:dc:50:46:cb:85:88:9b:
ff:e6:b8:1d:bd:cf:a7:98:85:dd:02:b9:76:65:96:
c9:97:5b:c2:fd:f6:7c:9b:64:69:cc:5f:fc:a7:b6:
2f:b7:7e:dc:b5:b2:63:8a:e7:d4:2a:e6:51:e5:ee:
96:a5:81:05:6e:93:5e:cd:08:09:5c:2a:04:b8:a5:
2c:6f:cf:4a:5e:02:20:f8:f5:ba:21:70:88:b8:ff:
9b:47:5b:0b:cf:bd:7a:56:da:ea:a6:8a:eb:34:9e:
64:d6:71:ad:29:e1:f9:ca:31:73:61:9b:a6:ef:bf:
42:52:0a:d2:20:57:cd:66:95:10:db:61:52:30:6e:
56:ef:3d:c8:1e:0f:6a:53:cd:5c:d2:bd:27:90:01:
b6:a8:45:45:7d:b1:e1:bb:7d:32:91:d9:e0:1f:76:
5e:22:ac:70:df:fe:a4:73:1b:02:3f:aa:55:58:07:
8b:3c:66:28:bd:a8:48:05:3d:77:d0:78:53:bc:ef:
d2:8a:c5:f2:ad:43:64:cd:f1:99:b0:88:7a:0f:2f:
16:f7:a1:3c:f7:cf:ac:63:18:f6:c8:a6:d8:0b:30:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:DC:6E:D4:32:AC:96:B0:4A:A1:53:A0:E4:3D:6C:F9:09:8C:F0
X509v3 Authority Key Identifier:
keyid:B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/K1bcbtQyrJawSqFToOQ9bPkJjPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:b0:9c:6e:5c:b3:d4:2b:c1:51:f0:73:1c:2a:48:c1:d8:49:
fc:90:a8:44:7f:22:82:bb:bc:9a:0a:7b:9b:6a:bf:12:7a:0e:
e3:43:25:c1:25:5c:cf:2a:e7:00:e2:fa:63:85:56:4d:51:02:
08:10:cb:84:62:0d:ff:6b:8b:fd:46:b1:c4:6f:ba:ef:c2:06:
03:fd:ca:5e:1d:f5:1a:f2:39:37:49:22:ac:01:85:ef:53:e0:
04:b3:09:c2:a8:83:41:13:e7:10:3a:b2:ae:b5:7f:89:a2:0b:
af:c4:25:1b:ee:35:8c:3e:90:d2:3c:a3:3e:1a:17:ee:90:00:
f0:0d:a7:bc:0b:8c:4e:43:df:be:ff:10:c2:ed:7b:0e:95:a7:
6b:ef:a7:41:4c:7f:31:aa:3d:1e:41:3d:97:a2:27:82:02:50:
41:75:48:d7:c6:6e:31:30:35:b0:a4:5e:32:f2:a4:20:4b:df:
79:3f:5f:64:e6:ea:4d:6c:ec:0b:6e:c1:7c:ce:56:4b:89:af:
39:1f:6f:54:57:63:91:09:6f:8a:e9:1c:10:c4:8f:d6:79:f0:
b7:d9:cf:ac:17:3e:c2:30:d6:4c:68:9f:dc:01:cc:30:b9:cf:
cd:ad:d1:da:13:c9:cb:6c:a2:d6:3d:34:97:36:57:e4:5c:8e:
44:c4:22:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCojuwUTnk2P2NgohnoxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzM2RjZDIwYjVhZTk1YzE3MmQzMmVkNzI5ZWJmMzA2MTk3
YjIzZTcwHhcNMjMwMTAxMTExNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjU2ZGM2ZWQ0MzJhYzk2YjA0YWExNTNhMGU0M2Q2Y2Y5MDk4Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQUpMvuHcvC9f+M9M1aNB2iAqcZd
kxZCpbA4dGnu3a3TM4OD5txQRsuFiJv/5rgdvc+nmIXdArl2ZZbJl1vC/fZ8m2Rp
zF/8p7Yvt37ctbJjiufUKuZR5e6WpYEFbpNezQgJXCoEuKUsb89KXgIg+PW6IXCI
uP+bR1sLz716VtrqporrNJ5k1nGtKeH5yjFzYZum779CUgrSIFfNZpUQ22FSMG5W
7z3IHg9qU81c0r0nkAG2qEVFfbHhu30ykdngH3ZeIqxw3/6kcxsCP6pVWAeLPGYo
vahIBT130HhTvO/SisXyrUNkzfGZsIh6Dy8W96E898+sYxj2yKbYCzB1TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCtW3G7UMqyWsEqhU6DkPWz5CYzwMB8GA1UdIwQY
MBaAFLM9zSC1rpXBctMu1ynr8wYZeyPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ozTklMV3VsY0Z5MHk3WEtldnpCaGw3SS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wYWMzYmEtNTRkMy00OTFmLTkwNDgt
NTU1YTE5ODMzZDhlLzEvSzFiY2J0UXlySmF3U3FGVG9PUTliUGtKalBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wYWMzYmEtNTRkMy00OTFmLTkwNDgtNTU1YTE5ODMzZDhl
LzEvc3ozTklMV3VsY0Z5MHk3WEtldnpCaGw3SS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucyUMA0G
CSqGSIb3DQEBCwUAA4IBAQBMsJxuXLPUK8FR8HMcKkjB2En8kKhEfyKCu7yaCnub
ar8Seg7jQyXBJVzPKucA4vpjhVZNUQIIEMuEYg3/a4v9RrHEb7rvwgYD/cpeHfUa
8jk3SSKsAYXvU+AEswnCqINBE+cQOrKutX+JoguvxCUb7jWMPpDSPKM+GhfukADw
Dae8C4xOQ9++/xDC7XsOladr76dBTH8xqj0eQT2XoieCAlBBdUjXxm4xMDWwpF4y
8qQgS995P19k5upNbOwLbsF8zlZLia85H29UV2ORCW+K6RwQxI/WefC32c+sFz7C
MNZMaJ/cAcwwuc/NrdHaE8nLbKLWPTSXNlfkXI5ExCI5
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:40 2025 by rpki-client