Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/1-WpxoBFxcKtMBG1rqsr-bpKQCuQ.roa
File: 1-WpxoBFxcKtMBG1rqsr-bpKQCuQ.roa (raw, json)
Hash identifier: VrnZ/9KDiRqS73qj36bf1stVe14yuZn+zIh4Bgemllg=
Subject key identifier: F9:6A:71:A0:11:71:70:AB:4C:04:6D:6B:AA:CA:FE:6E:92:90:0A:E4
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 0101F8
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/1-WpxoBFxcKtMBG1rqsr-bpKQCuQ.roa
Signing time: Tue 29 Mar 2022 08:54:48 +0000
ROA not before: Tue 29 Mar 2022 08:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202005
IP address blocks: 185.77.186.0/24 maxlen: 24
185.77.185.0/24 maxlen: 24
185.77.184.0/24 maxlen: 24
185.77.184.0/22 maxlen: 22
185.77.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66040 (0x101f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Mar 29 08:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f96a71a0117170ab4c046d6baacafe6e92900ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:c6:14:3d:2a:8f:0d:3a:de:0b:e1:72:fa:
a9:20:8c:30:5c:b3:bc:b0:cd:58:1c:03:93:89:fb:
c7:84:05:ec:35:98:d3:c0:0b:b5:c1:06:d3:6a:fc:
9a:fc:e8:07:39:79:5f:17:b7:3a:6f:5e:7f:d4:a9:
8a:65:5f:82:38:c6:43:69:85:d7:4d:16:80:09:f2:
e1:c8:fd:7c:c6:19:3d:05:86:a8:43:29:7a:e4:6f:
6e:87:c0:e1:cd:5f:60:bc:02:e5:55:94:20:f0:96:
04:d0:f7:ed:0f:8e:49:2b:22:a5:70:f1:e1:3a:b1:
85:63:0e:2c:fa:55:b0:7c:81:cf:0b:71:dc:bd:34:
2c:3d:66:8b:4c:16:67:da:f5:7d:2f:28:82:ba:c0:
59:9b:3c:ef:9c:a5:65:1b:c3:ea:be:a9:8e:88:09:
4a:d8:ca:c7:9d:52:3e:2d:88:12:77:b3:bc:be:f2:
8a:fa:8a:67:6f:58:b1:08:96:fc:5e:38:8f:a0:7d:
b7:e1:49:ee:99:2c:36:38:d7:f4:b2:55:fc:cc:61:
4b:fb:dd:7e:d3:41:63:b7:b0:ee:40:1c:4c:61:46:
3c:1e:37:64:cd:ac:10:55:e8:57:37:32:06:5b:8e:
77:b7:96:6a:ad:81:8b:25:32:27:d2:07:29:90:0e:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6A:71:A0:11:71:70:AB:4C:04:6D:6B:AA:CA:FE:6E:92:90:0A:E4
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/1-WpxoBFxcKtMBG1rqsr-bpKQCuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.184.0/22
Signature Algorithm: sha256WithRSAEncryption
61:08:1b:0e:0a:b9:23:66:e2:af:a6:61:e2:9f:b1:12:4f:61:
d0:23:4e:3c:22:50:e9:0e:04:36:44:99:7e:58:38:5d:2e:b5:
e9:7b:4a:7c:d5:eb:0a:8d:1c:4c:4e:5a:61:76:d8:37:c2:f8:
44:59:42:32:27:c3:f3:ca:de:e7:b7:01:50:e3:50:63:a4:b6:
bb:23:06:4b:e1:cc:13:4e:4c:81:ed:95:42:6a:90:88:66:fd:
d4:e2:24:90:3e:8b:e9:3c:c0:32:ca:f1:12:f0:ba:b0:2a:5b:
fe:20:eb:b7:14:90:13:01:04:47:54:e0:63:98:e1:f1:65:60:
2a:ee:8f:3e:2a:eb:67:09:61:06:b5:2f:b3:c8:a3:b4:8c:42:
16:53:43:0a:68:6b:79:78:63:e1:3a:08:19:3f:57:dc:f2:1f:
ef:81:a5:2b:67:1f:bf:b6:c6:4b:2f:91:9d:39:f4:0f:26:c1:
56:8f:69:81:4d:92:7a:a5:7d:7d:ba:5a:5f:98:2a:6b:62:45:
10:e7:68:d6:fe:04:6a:ce:37:5e:d1:54:e2:38:33:4a:f8:de:
66:40:95:78:8b:ab:9f:f0:c5:6c:7f:c7:b5:dd:55:c5:3f:b9:
f2:e7:7e:0c:90:8f:cf:90:0c:ce:ad:1c:87:a1:12:07:ef:c1:
bd:e4:3a:0f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDAQH4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZm
YzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZiNmI3ZjMwHhcNMjIwMzI5
MDg1NDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmOTZhNzFhMDExNzE3
MGFiNGMwNDZkNmJhYWNhZmU2ZTkyOTAwYWU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAudrGFD0qjw063gvhcvqpIIwwXLO8sM1YHAOTifvHhAXsNZjT
wAu1wQbTavya/OgHOXlfF7c6b15/1KmKZV+COMZDaYXXTRaACfLhyP18xhk9BYao
Qyl65G9uh8DhzV9gvALlVZQg8JYE0PftD45JKyKlcPHhOrGFYw4s+lWwfIHPC3Hc
vTQsPWaLTBZn2vV9LyiCusBZmzzvnKVlG8PqvqmOiAlK2MrHnVI+LYgSd7O8vvKK
+opnb1ixCJb8XjiPoH234UnumSw2ONf0slX8zGFL+91+00Fjt7DuQBxMYUY8Hjdk
zawQVehXNzIGW453t5ZqrYGLJTIn0gcpkA693wIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFPlqcaARcXCrTARta6rK/m6SkArkMB8GA1UdIwQYMBaAFP/Eznik0Yym7zEI
9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
XzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCBjgYIKwYBBQUHAQsEgYEw
fzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZlLzEv
MS1XcHhvQkZ4Y0t0TUJHMXJxc3ItYnBLUUN1US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
MTc5MTRiLWNhNjMtNDk4MC04NzQwLThkMTA2NDgzZTM2ZS8xL184VE9lS1RSakti
dk1RajBvMldRYmFhMnRfTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlNuDANBgkqhkiG9w0BAQsFAAOC
AQEAYQgbDgq5I2bir6Zh4p+xEk9h0CNOPCJQ6Q4ENkSZflg4XS616XtKfNXrCo0c
TE5aYXbYN8L4RFlCMifD88re57cBUONQY6S2uyMGS+HME05Mge2VQmqQiGb91OIk
kD6L6TzAMsrxEvC6sCpb/iDrtxSQEwEER1TgY5jh8WVgKu6PPirrZwlhBrUvs8ij
tIxCFlNDCmhreXhj4ToIGT9X3PIf74GlK2cfv7bGSy+RnTn0DybBVo9pgU2SeqV9
fbpaX5gqa2JFEOdo1v4Eas43XtFU4jgzSvjeZkCVeIurn/DFbH/Htd1VxT+58ud+
DJCPz5AMzq0ch6ESB+/BveQ6Dw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:11:21 2025 by rpki-client