Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/jDiXONjg30lVMZ_XpBwLm2Yu8kI.roa
File: jDiXONjg30lVMZ_XpBwLm2Yu8kI.roa (raw, json)
Hash identifier: VrXt9FB9RDp8HPYPPxSbf4okdZ//LhH2u/Fp6QeqrFE=
Subject key identifier: 8C:38:97:38:D8:E0:DF:49:55:31:9F:D7:A4:1C:0B:9B:66:2E:F2:42
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE66D53DED88BAD95E7C6AFFD2C009D
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/jDiXONjg30lVMZ_XpBwLm2Yu8kI.roa
Signing time: Sun 01 Jan 2023 10:35:18 +0000
ROA not before: Sun 01 Jan 2023 10:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202737
IP address blocks: 185.60.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:6d:53:de:d8:8b:ad:95:e7:c6:af:fd:2c:00:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c389738d8e0df4955319fd7a41c0b9b662ef242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:7c:ff:0f:eb:48:7e:1e:bc:f9:81:4d:c5:
ee:b1:c0:bd:e6:aa:46:b3:d7:17:d0:62:55:e8:ad:
76:ca:85:19:53:a0:2f:59:51:96:df:91:b8:a3:35:
66:07:b1:fa:d5:f5:aa:3d:03:7f:65:00:31:52:18:
37:6a:8e:fe:02:2a:f6:49:9e:8b:18:1a:af:09:34:
d5:5b:c0:5c:fc:36:18:69:fb:a0:5b:d4:e4:05:92:
db:34:9c:21:1d:17:84:5b:85:d1:e3:fb:2d:6e:d0:
46:64:32:dc:29:e4:42:96:f8:bb:7f:29:45:ac:e0:
d2:2c:1e:b8:2f:4c:b6:92:de:d4:da:38:25:51:36:
da:12:17:75:e9:b6:33:42:78:49:dc:f3:5c:8c:54:
c6:27:fe:b4:f7:2d:fd:64:fd:7e:34:bc:13:7f:78:
d5:37:eb:c5:06:0d:78:7d:da:4c:aa:09:f4:ba:78:
c6:d5:65:9c:8a:b4:70:77:08:ba:1a:7a:44:99:05:
41:fd:41:d1:75:f1:58:9c:1b:97:7a:b1:24:e5:67:
0a:c1:19:20:a3:66:e9:2c:77:1c:e3:49:2b:66:c4:
e4:0f:1a:68:1d:7a:34:4b:b8:8d:0d:17:da:61:d5:
ce:12:aa:d3:00:1e:19:66:4b:32:5f:21:c8:e2:57:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:97:38:D8:E0:DF:49:55:31:9F:D7:A4:1C:0B:9B:66:2E:F2:42
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/jDiXONjg30lVMZ_XpBwLm2Yu8kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.65.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:59:40:40:ec:6c:68:28:54:1c:84:3c:4e:28:0f:79:32:30:
42:f9:d6:68:5d:45:11:ee:bb:8b:71:83:06:48:91:57:25:f2:
e4:ca:58:5a:d5:22:e3:34:87:26:f6:4d:83:06:54:3f:e9:62:
1d:14:c9:06:b7:aa:b0:73:fa:15:db:ae:6f:cb:a6:4e:c4:b8:
fc:f1:6e:a7:00:d2:2d:12:74:9f:37:9c:8e:1f:8a:9d:6d:22:
72:f2:4d:77:52:a0:2a:32:45:5a:03:12:36:1e:54:a2:f1:86:
5a:16:ca:a7:35:0c:ee:e9:93:9d:03:3b:d4:40:31:ab:2e:56:
c5:35:32:07:5c:1d:ac:d0:39:41:1a:86:e3:cf:14:39:ca:54:
f4:db:34:f1:5b:e3:bb:c7:da:04:ad:05:aa:62:10:71:2b:cf:
e5:3f:2d:48:34:a3:54:c4:ff:14:34:4a:a1:4a:eb:47:df:63:
6f:d9:f6:84:30:75:f3:4a:de:eb:cf:f5:f5:ec:2e:4c:b0:f2:
5e:4d:e9:47:92:23:16:d2:e6:77:35:57:88:79:10:cf:c1:2b:
43:7d:56:5a:89:7d:c9:d3:60:cb:ff:0c:bb:92:bb:3f:18:5f:
ec:12:7f:af:54:ab:74:74:04:a2:10:f0:3b:31:cf:d9:3a:91:
5b:5e:1a:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs5m1T3tiLrZXnxq/9LACdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjMwMTAxMTAzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzM4OTczOGQ4ZTBkZjQ5NTUzMTlmZDdhNDFjMGI5YjY2MmVmMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBF8/w/rSH4evPmBTcXuscC95qpG
s9cX0GJV6K12yoUZU6AvWVGW35G4ozVmB7H61fWqPQN/ZQAxUhg3ao7+Air2SZ6L
GBqvCTTVW8Bc/DYYafugW9TkBZLbNJwhHReEW4XR4/stbtBGZDLcKeRClvi7fylF
rODSLB64L0y2kt7U2jglUTbaEhd16bYzQnhJ3PNcjFTGJ/609y39ZP1+NLwTf3jV
N+vFBg14fdpMqgn0unjG1WWcirRwdwi6GnpEmQVB/UHRdfFYnBuXerEk5WcKwRkg
o2bpLHcc40krZsTkDxpoHXo0S7iNDRfaYdXOEqrTAB4ZZksyXyHI4le+awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIw4lzjY4N9JVTGf16QcC5tmLvJCMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvakRpWE9OamczMGxWTVpfWHBCd0xtMll1OGtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTxBMA0G
CSqGSIb3DQEBCwUAA4IBAQBNWUBA7GxoKFQchDxOKA95MjBC+dZoXUUR7ruLcYMG
SJFXJfLkylha1SLjNIcm9k2DBlQ/6WIdFMkGt6qwc/oV265vy6ZOxLj88W6nANIt
EnSfN5yOH4qdbSJy8k13UqAqMkVaAxI2HlSi8YZaFsqnNQzu6ZOdAzvUQDGrLlbF
NTIHXB2s0DlBGobjzxQ5ylT02zTxW+O7x9oErQWqYhBxK8/lPy1INKNUxP8UNEqh
SutH32Nv2faEMHXzSt7rz/X17C5MsPJeTelHkiMW0uZ3NVeIeRDPwStDfVZaiX3J
02DL/wy7krs/GF/sEn+vVKt0dASiEPA7Mc/ZOpFbXho6
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:19 2025 by rpki-client