Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/D8AU41yblfeprPS41gnU2TpstbA.roa
File: D8AU41yblfeprPS41gnU2TpstbA.roa (raw, json)
Hash identifier: ZhQ8w7qO2nQDlbCl62ipEe3zU3EBNrA4SgvDvFgSm+M=
Subject key identifier: 0F:C0:14:E3:5C:9B:95:F7:A9:AC:F4:B8:D6:09:D4:D9:3A:6C:B5:B0
Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Certificate serial: 074A185C
Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/D8AU41yblfeprPS41gnU2TpstbA.roa
Signing time: Sat 01 Jan 2022 08:54:50 +0000
ROA not before: Sat 01 Jan 2022 08:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203649
IP address blocks: 185.128.58.0/24 maxlen: 24
185.128.56.0/24 maxlen: 24
185.128.57.0/24 maxlen: 24
185.128.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122296412 (0x74a185c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Validity
Not Before: Jan 1 08:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fc014e35c9b95f7a9acf4b8d609d4d93a6cb5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:81:79:60:df:4b:ae:24:e7:a7:c5:39:fe:3a:
7c:e5:f6:7b:36:4b:5f:ff:10:7b:a8:47:0d:22:3f:
8c:d3:28:c4:1d:75:50:a8:27:73:39:0d:4e:c0:a4:
b6:f5:88:dd:d0:74:7d:12:21:b1:9d:35:83:19:78:
c5:36:e4:02:22:95:b0:7d:2f:79:69:5e:fa:be:9b:
19:00:bc:fb:0d:20:6c:a8:1f:59:6b:e1:18:d3:56:
63:de:e5:b8:b3:a6:b6:cb:3f:67:01:f7:f8:f9:ae:
2a:7f:21:62:5e:9c:15:b9:15:81:c5:f8:aa:4d:d7:
4d:bb:70:b5:e3:85:cf:51:fe:fa:de:ca:0c:38:ed:
c1:9b:32:2a:fe:17:45:23:0c:6c:2f:48:2b:b7:d5:
54:15:57:d4:52:55:5f:b7:67:01:25:ff:13:31:fc:
62:5d:a0:f7:ea:57:9e:8e:85:6e:7b:b2:b0:88:e7:
c1:8d:9f:38:48:09:9c:00:82:fa:93:41:8d:c9:69:
56:5a:3e:11:7e:92:cb:eb:61:53:ec:a4:0e:14:29:
23:a0:a5:f3:cb:da:f2:95:75:4c:a0:a1:df:3c:88:
c6:b2:1e:f9:d8:59:3e:b4:a4:43:2f:29:c1:08:21:
20:54:48:5e:58:21:bb:1a:af:ee:0b:f8:8b:f2:24:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C0:14:E3:5C:9B:95:F7:A9:AC:F4:B8:D6:09:D4:D9:3A:6C:B5:B0
X509v3 Authority Key Identifier:
keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/D8AU41yblfeprPS41gnU2TpstbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.56.0/22
Signature Algorithm: sha256WithRSAEncryption
83:3f:fd:d4:5b:21:d1:ce:c3:4b:f7:c1:a3:7b:95:ef:7e:24:
4a:40:78:d2:c7:74:d2:6c:21:c8:2a:dd:00:bf:ff:4b:96:7b:
0d:47:ef:ba:45:68:5a:0e:17:17:72:76:42:9a:0b:da:15:1f:
68:fb:81:81:63:ac:a3:fd:5e:92:17:59:e1:76:7e:76:dc:84:
3b:ee:2f:28:89:6b:8e:9e:f7:ee:7a:e6:b2:14:00:e7:f0:ff:
2e:3c:ba:54:bf:94:ae:44:8b:84:5e:9c:78:a3:ec:21:fd:aa:
db:f1:39:54:a3:4a:fc:c6:46:a1:9c:d6:ae:8e:e7:19:c5:ef:
2f:66:c6:03:b3:35:d5:13:23:b9:f8:6f:47:2a:7a:8e:7f:a0:
dd:00:fa:6d:b1:b5:3d:e7:1c:be:a0:10:c8:d8:fc:92:40:7b:
11:28:5f:bf:01:f0:92:31:eb:e1:ed:ed:e6:a0:a9:be:95:d6:
ff:15:1f:78:aa:e2:02:2d:61:02:79:6b:83:e2:70:9e:ce:cf:
78:90:8e:39:21:54:c9:1d:4c:e7:29:b4:8d:e6:9c:b7:4e:36:
ae:73:c4:a3:3c:10:3d:d0:c6:c9:09:9d:dc:a3:8f:47:41:a8:
ff:3d:41:00:46:87:36:7e:48:32:95:10:c8:bb:9f:87:9e:f3:
de:67:a5:08
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB0oYXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MjgzOGQxZjNiMjMxYmY3MmU0NTNkZDc4YzRiNTBhYzAwOWZmN2YxMB4XDTIyMDEw
MTA4NTQ1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGZjMDE0ZTM1Yzli
OTVmN2E5YWNmNGI4ZDYwOWQ0ZDkzYTZjYjViMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPWBeWDfS64k56fFOf46fOX2ezZLX/8Qe6hHDSI/jNMoxB11
UKgnczkNTsCktvWI3dB0fRIhsZ01gxl4xTbkAiKVsH0veWle+r6bGQC8+w0gbKgf
WWvhGNNWY97luLOmtss/ZwH3+PmuKn8hYl6cFbkVgcX4qk3XTbtwteOFz1H++t7K
DDjtwZsyKv4XRSMMbC9IK7fVVBVX1FJVX7dnASX/EzH8Yl2g9+pXno6FbnuysIjn
wY2fOEgJnACC+pNBjclpVlo+EX6Sy+thU+ykDhQpI6Cl88va8pV1TKCh3zyIxrIe
+dhZPrSkQy8pwQghIFRIXlghuxqv7gv4i/Ik0+sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQPwBTjXJuV96ms9LjWCdTZOmy1sDAfBgNVHSMEGDAWgBTCg40fOyMb9y5F
PdeMS1CsAJ/38TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dvT05IenNqR19jdVJUM1hqRXRRckFDZjlfRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvMzY2NzQ2LWMzMDYtNDA4YS1iYTdlLTJiM2M2NGY5ZjlhYi8x
L0Q4QVU0MXlibGZlcHJQUzQxZ25VMlRwc3RiQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
MzY2NzQ2LWMzMDYtNDA4YS1iYTdlLTJiM2M2NGY5ZjlhYi8xL3dvT05IenNqR19j
dVJUM1hqRXRRckFDZjlfRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmAODANBgkqhkiG9w0BAQsFAAOC
AQEAgz/91Fsh0c7DS/fBo3uV734kSkB40sd00mwhyCrdAL//S5Z7DUfvukVoWg4X
F3J2QpoL2hUfaPuBgWOso/1ekhdZ4XZ+dtyEO+4vKIlrjp737nrmshQA5/D/Ljy6
VL+UrkSLhF6ceKPsIf2q2/E5VKNK/MZGoZzWro7nGcXvL2bGA7M11RMjufhvRyp6
jn+g3QD6bbG1PeccvqAQyNj8kkB7EShfvwHwkjHr4e3t5qCpvpXW/xUfeKriAi1h
Anlrg+Jwns7PeJCOOSFUyR1M5ym0jeact042rnPEozwQPdDGyQmd3KOPR0Go/z1B
AEaHNn5IMpUQyLufh57z3melCA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:19 2025 by rpki-client