Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/L4I2tZ_nGUErCy-lkTabIBSFiXc.roa
File: L4I2tZ_nGUErCy-lkTabIBSFiXc.roa (raw, json)
Hash identifier: ut3DDVHshs8iErzheUbVooF3GFobZh1fSWcyFaO0jAc=
Subject key identifier: 2F:82:36:B5:9F:E7:19:41:2B:0B:2F:A5:91:36:9B:20:14:85:89:77
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 0185727A1FC9CA37292C138AE35B1A793A51
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/L4I2tZ_nGUErCy-lkTabIBSFiXc.roa
Signing time: Mon 02 Jan 2023 12:34:44 +0000
ROA not before: Mon 02 Jan 2023 12:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206713
IP address blocks: 185.194.166.0/24 maxlen: 24
185.194.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:1f:c9:ca:37:29:2c:13:8a:e3:5b:1a:79:3a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: Jan 2 12:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f8236b59fe719412b0b2fa591369b2014858977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b1:e1:8d:c1:7d:58:3c:a3:9b:fb:3b:e3:79:
78:17:95:07:ca:98:03:ba:a9:9a:8b:25:5d:d1:84:
63:a7:26:ff:64:ab:03:0e:4d:21:20:34:f0:e6:01:
64:b0:56:db:e6:6b:ce:f9:27:5a:c1:18:c7:d5:9e:
bd:e5:ae:05:23:9d:83:7a:dd:57:be:87:74:cb:e7:
89:ef:c3:74:98:f3:2a:ed:90:b7:88:e4:ab:60:29:
11:7c:e8:07:03:a7:57:b7:e9:1c:01:30:cc:ab:28:
cf:d8:70:eb:b7:fc:77:9e:20:08:ab:54:41:b6:21:
11:dd:84:78:c2:4c:f7:c1:24:1e:b2:e5:83:40:4e:
dc:8a:5a:a0:71:48:8c:3f:55:1e:53:19:32:0f:f5:
3a:9a:a8:96:8e:43:a0:10:aa:91:20:5c:70:d7:d1:
a8:2e:35:aa:61:4e:23:54:4d:91:ff:c4:57:1f:2c:
ab:8b:a1:c7:56:82:a1:ad:71:78:0c:55:64:e5:7f:
e7:b0:45:09:14:90:27:e8:77:61:11:6c:e3:4a:d0:
cf:bb:11:2f:b9:bb:51:88:7f:df:5c:ae:ec:58:31:
be:43:d5:07:26:63:81:33:2a:c6:82:97:5f:21:99:
34:3f:c5:a7:6f:69:ed:b8:ba:be:f2:b3:b7:62:5e:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:82:36:B5:9F:E7:19:41:2B:0B:2F:A5:91:36:9B:20:14:85:89:77
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/L4I2tZ_nGUErCy-lkTabIBSFiXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.166.0/23
Signature Algorithm: sha256WithRSAEncryption
58:3f:44:ec:ae:ed:be:ac:ba:31:c1:3a:f9:1b:88:0a:a4:4a:
e4:37:8b:21:d3:48:a4:87:ae:b2:0b:25:07:1b:92:fc:80:17:
05:61:b4:ac:34:e7:e6:8d:9c:82:6b:1b:47:d8:0b:be:16:53:
dc:10:c8:c9:ab:15:0a:d8:68:a3:aa:93:99:91:a4:24:b1:9a:
6e:42:22:f4:8f:a4:2c:7f:a8:b5:33:63:9e:4b:fe:00:2a:55:
73:33:69:cc:a6:80:d0:a9:7a:04:e7:29:41:87:87:1a:d3:9c:
68:0f:5e:bb:b0:a3:25:d4:a7:a6:99:3b:c6:c9:45:4e:f8:ad:
1f:db:e3:66:c1:06:b0:bf:3a:14:f0:c5:ff:e8:50:fa:c5:81:
64:57:8a:d5:28:d7:c6:57:62:2e:09:42:44:ce:0a:b2:72:ac:
cd:ae:06:ad:0f:a1:64:09:eb:39:89:c9:57:34:ab:51:0d:9a:
93:b6:32:31:12:2b:13:06:1f:bf:e3:47:e3:07:fc:b6:eb:07:
11:d0:c5:85:f2:72:84:c0:8d:3a:47:f5:70:05:91:83:dd:17:
49:5e:09:a0:1e:6a:a9:8a:4b:d9:b0:3d:0c:51:e6:bc:4d:58:
2d:6f:d8:07:0f:9c:7d:09:97:69:2f:dd:51:5a:29:c3:10:b1:
ca:74:5d:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyeh/JyjcpLBOK41saeTpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZjM5ZTZlYjMxMzFlY2YzY2RkY2QwYzllMzc4YzM1MmRh
NDFmYzIwHhcNMjMwMTAyMTIzNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjgyMzZiNTlmZTcxOTQxMmIwYjJmYTU5MTM2OWIyMDE0ODU4OTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbHhjcF9WDyjm/s743l4F5UHypgD
uqmaiyVd0YRjpyb/ZKsDDk0hIDTw5gFksFbb5mvO+SdawRjH1Z695a4FI52Det1X
vod0y+eJ78N0mPMq7ZC3iOSrYCkRfOgHA6dXt+kcATDMqyjP2HDrt/x3niAIq1RB
tiER3YR4wkz3wSQesuWDQE7cilqgcUiMP1UeUxkyD/U6mqiWjkOgEKqRIFxw19Go
LjWqYU4jVE2R/8RXHyyri6HHVoKhrXF4DFVk5X/nsEUJFJAn6HdhEWzjStDPuxEv
ubtRiH/fXK7sWDG+Q9UHJmOBMyrGgpdfIZk0P8Wnb2ntuLq+8rO3Yl6j7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC+CNrWf5xlBKwsvpZE2myAUhYl3MB8GA1UdIwQY
MBaAFHvznm6zEx7PPN3NDJ43jDUtpB/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZV9PZWJyTVRIczg4M2MwTW5qZU1OUzJrSDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hMjE0YTUtNDQ0OS00NGFmLTg3ZmYt
Yzk2N2M5ZGI1NzUyLzEvTDRJMnRaX25HVUVyQ3ktbGtUYWJJQlNGaVhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hMjE0YTUtNDQ0OS00NGFmLTg3ZmYtYzk2N2M5ZGI1NzUy
LzEvZV9PZWJyTVRIczg4M2MwTW5qZU1OUzJrSDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucKmMA0G
CSqGSIb3DQEBCwUAA4IBAQBYP0Tsru2+rLoxwTr5G4gKpErkN4sh00ikh66yCyUH
G5L8gBcFYbSsNOfmjZyCaxtH2Au+FlPcEMjJqxUK2GijqpOZkaQksZpuQiL0j6Qs
f6i1M2OeS/4AKlVzM2nMpoDQqXoE5ylBh4ca05xoD167sKMl1KemmTvGyUVO+K0f
2+NmwQawvzoU8MX/6FD6xYFkV4rVKNfGV2IuCUJEzgqycqzNrgatD6FkCes5iclX
NKtRDZqTtjIxEisTBh+/40fjB/y26wcR0MWF8nKEwI06R/VwBZGD3RdJXgmgHmqp
ikvZsD0MUea8TVgtb9gHD5x9CZdpL91RWinDELHKdF02
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:04 2025 by rpki-client