Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/cj1QHpTgFKd-cbrul34BKQJ8hFc.roa
File: cj1QHpTgFKd-cbrul34BKQJ8hFc.roa (raw, json)
Hash identifier: PUIcZazmJl5uTMkvJvgmT0024qTGmqjPdoi+Syf+OPA=
Subject key identifier: 72:3D:50:1E:94:E0:14:A7:7E:71:BA:EE:97:7E:01:29:02:7C:84:57
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 0185729EFA2109DEF9F937A0E90A4CA0E73A
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/cj1QHpTgFKd-cbrul34BKQJ8hFc.roa
Signing time: Mon 02 Jan 2023 13:14:59 +0000
ROA not before: Mon 02 Jan 2023 13:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204431
IP address blocks: 185.249.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:fa:21:09:de:f9:f9:37:a0:e9:0a:4c:a0:e7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Jan 2 13:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=723d501e94e014a77e71baee977e0129027c8457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:30:00:22:26:88:14:36:82:4b:94:e5:49:
9a:7d:2a:89:2e:c2:b8:7c:03:a8:c2:d5:60:eb:b1:
d8:11:5b:41:54:ba:c8:ce:f2:cc:7b:b8:9a:0e:c2:
ee:78:5c:8f:59:9d:c9:b3:39:aa:37:e3:c3:d0:46:
a9:75:1b:3f:9c:67:7e:6b:62:79:03:99:13:1a:b5:
95:a9:e1:0f:02:13:be:73:5f:b2:6c:60:b3:b0:4c:
20:74:01:fd:b3:3b:d7:45:9c:f9:d2:da:e5:47:b9:
ed:4c:5e:9c:02:96:77:60:cd:a8:f7:50:bd:6f:91:
95:83:b1:80:7c:d0:bc:3f:94:a1:b0:b7:5b:a4:5f:
84:4e:97:43:da:62:19:0d:fc:fc:81:3d:7a:f3:e9:
f0:0f:7c:0f:88:d1:87:ab:2c:65:ff:83:ef:bb:e6:
5f:4d:93:d5:92:59:d0:51:b3:fd:50:25:6a:ad:2b:
05:03:90:82:a8:92:bb:9a:bc:f9:c4:81:8d:38:f1:
8d:2e:5f:17:e9:a3:ac:62:9d:fc:50:60:d0:d1:1d:
1f:70:cd:9d:83:67:b8:8d:99:7e:75:af:31:35:c3:
eb:88:7c:95:14:45:88:3c:6f:2f:5f:f3:02:75:53:
5c:cd:7c:f1:a6:b7:11:82:8c:e6:ed:bd:0a:76:c4:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:50:1E:94:E0:14:A7:7E:71:BA:EE:97:7E:01:29:02:7C:84:57
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/cj1QHpTgFKd-cbrul34BKQJ8hFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:06:ea:6c:19:df:5f:4b:2c:13:1d:94:75:ca:05:d2:f8:5a:
45:35:25:03:81:87:85:6a:3a:a8:c2:88:80:a1:2d:cc:24:12:
a6:25:ac:3c:77:dd:8a:fb:fe:4c:a0:88:8e:9f:d2:a2:db:27:
69:37:43:c5:96:f2:ae:ec:ca:b0:6a:68:ce:9d:30:86:0c:c4:
80:b8:5a:85:50:c3:fc:c6:c0:e7:18:ed:9d:ea:84:0c:5d:93:
dc:d5:4b:7c:ef:57:20:ee:39:4d:90:d3:a0:dc:07:2d:55:70:
e1:11:40:10:a5:b0:05:2c:62:bb:0b:1f:5e:04:be:f8:c4:0a:
be:9a:97:57:41:79:99:27:97:21:97:67:91:e0:02:5d:20:a4:
5d:c9:25:2a:0e:bd:9c:c2:19:ab:66:3b:e5:88:e9:2f:f1:01:
4e:cd:80:54:0d:b4:96:dd:f0:92:32:26:a0:2b:7f:80:06:16:
c8:ec:98:86:4c:df:5c:0c:dc:0a:d5:d3:9a:be:89:5c:b6:8c:
fa:df:eb:2f:05:ee:2a:0f:47:7f:5e:5a:32:66:15:83:86:b9:
c8:ed:7c:c0:56:26:eb:e7:16:6b:56:0d:13:72:29:80:3a:c6:
d6:3d:05:db:54:ae:9c:93:60:3e:85:d8:7b:1e:87:6a:3d:f2:
07:88:17:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVynvohCd75+Teg6QpMoOc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YWFhNTU1YTMyOWVkZDg2NjA2Y2MwZTNlMjk2YmQ0Nzhh
YzczZGUwHhcNMjMwMTAyMTMxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjNkNTAxZTk0ZTAxNGE3N2U3MWJhZWU5NzdlMDEyOTAyN2M4NDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB0wACImiBQ2gkuU5UmafSqJLsK4
fAOowtVg67HYEVtBVLrIzvLMe7iaDsLueFyPWZ3JszmqN+PD0EapdRs/nGd+a2J5
A5kTGrWVqeEPAhO+c1+ybGCzsEwgdAH9szvXRZz50trlR7ntTF6cApZ3YM2o91C9
b5GVg7GAfNC8P5ShsLdbpF+ETpdD2mIZDfz8gT168+nwD3wPiNGHqyxl/4Pvu+Zf
TZPVklnQUbP9UCVqrSsFA5CCqJK7mrz5xIGNOPGNLl8X6aOsYp38UGDQ0R0fcM2d
g2e4jZl+da8xNcPriHyVFEWIPG8vX/MCdVNczXzxprcRgozm7b0KdsR+FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHI9UB6U4BSnfnG67pd+ASkCfIRXMB8GA1UdIwQY
MBaAFJeqpVWjKe3YZgbMDj4pa9R4rHPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xMTk1YWItZWQ0MS00NTJmLWJjMjIt
N2ZkMGRlYWUzMmM1LzEvY2oxUUhwVGdGS2QtY2JydWwzNEJLUUo4aEZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xMTk1YWItZWQ0MS00NTJmLWJjMjItN2ZkMGRlYWUzMmM1
LzEvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufkQMA0G
CSqGSIb3DQEBCwUAA4IBAQAaBupsGd9fSywTHZR1ygXS+FpFNSUDgYeFajqowoiA
oS3MJBKmJaw8d92K+/5MoIiOn9Ki2ydpN0PFlvKu7MqwamjOnTCGDMSAuFqFUMP8
xsDnGO2d6oQMXZPc1Ut871cg7jlNkNOg3ActVXDhEUAQpbAFLGK7Cx9eBL74xAq+
mpdXQXmZJ5chl2eR4AJdIKRdySUqDr2cwhmrZjvliOkv8QFOzYBUDbSW3fCSMiag
K3+ABhbI7JiGTN9cDNwK1dOavolctoz63+svBe4qD0d/XloyZhWDhrnI7XzAVibr
5xZrVg0TcimAOsbWPQXbVK6ck2A+hdh7HodqPfIHiBe8
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:42 2025 by rpki-client