Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/cFuzoZtiihGPMFy4Ve-npk4eb68.roa
File: cFuzoZtiihGPMFy4Ve-npk4eb68.roa (raw, json)
Hash identifier: fCUdZPPomiK1DXu9833BhcNtV6ZEklTCfbT9MzvXP6E=
Subject key identifier: 70:5B:B3:A1:9B:62:8A:11:8F:30:5C:B8:55:EF:A7:A6:4E:1E:6F:AF
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 0185735EFA8671749D18CD63FC7C3C35F904
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/cFuzoZtiihGPMFy4Ve-npk4eb68.roa
Signing time: Mon 02 Jan 2023 16:44:42 +0000
ROA not before: Mon 02 Jan 2023 16:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200698
IP address blocks: 185.212.108.0/22 maxlen: 24
185.164.32.0/22 maxlen: 24
185.99.0.0/22 maxlen: 24
2a00:8620::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5e:fa:86:71:74:9d:18:cd:63:fc:7c:3c:35:f9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Jan 2 16:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=705bb3a19b628a118f305cb855efa7a64e1e6faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:99:3e:c6:63:7a:37:28:4d:a5:e7:fa:e0:
f5:d6:5d:8f:cd:0c:09:38:5d:d1:e8:d7:18:df:a3:
84:24:9d:d0:e1:a9:44:12:76:33:8c:3a:47:08:b0:
80:16:d0:3e:69:1b:72:cb:90:82:76:51:5e:1b:dc:
4e:9f:0d:50:37:7d:8a:94:61:27:18:01:28:65:6c:
bf:9e:45:4f:51:bd:68:94:d8:b2:5f:8f:8d:66:4b:
8a:54:ab:28:75:f0:33:f8:44:a3:99:b5:1f:0d:b8:
f6:6b:ed:c7:67:56:dd:b2:9a:58:5b:10:f6:16:7b:
8e:fa:0d:aa:45:a4:0b:c6:c7:84:1d:92:d1:49:85:
d5:99:84:02:97:60:4e:d4:8c:f7:a1:39:77:77:a6:
85:b1:2f:4c:65:68:97:31:68:94:17:11:fd:29:37:
ed:5e:f9:e6:62:65:be:3e:06:9e:16:68:ac:d4:57:
c6:6b:ac:d1:54:ee:59:3b:49:ed:56:5a:76:f8:35:
1c:41:3e:49:fe:97:09:15:c1:1e:f7:c6:37:2b:4c:
35:2c:89:cb:e2:86:74:0e:89:05:da:3c:4f:d5:4a:
ae:38:7f:6f:73:6e:a8:fd:40:50:5b:04:c5:cc:d5:
7b:f0:c7:59:a2:9a:9a:02:6a:b0:0f:7e:bf:15:08:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:B3:A1:9B:62:8A:11:8F:30:5C:B8:55:EF:A7:A6:4E:1E:6F:AF
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/cFuzoZtiihGPMFy4Ve-npk4eb68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.0.0/22
185.164.32.0/22
185.212.108.0/22
IPv6:
2a00:8620::/32
Signature Algorithm: sha256WithRSAEncryption
a8:7d:ee:1b:8e:be:e8:d8:73:6b:01:e6:73:cd:f4:44:e3:4c:
2e:8c:a1:33:fe:de:9d:33:14:82:ea:d0:f2:fa:02:b8:5b:f5:
4e:91:59:09:ec:e1:d1:41:7e:ae:a8:ec:81:17:1f:2b:60:ba:
6f:e2:70:fc:71:20:4d:86:2b:58:08:59:0d:c3:aa:f6:76:a0:
e8:9f:68:25:21:be:1b:38:cc:d1:c1:40:69:4b:6d:07:b7:64:
b6:89:e6:38:1e:fd:6e:5d:f5:63:59:dd:1a:46:c7:d1:c6:ec:
b8:86:d5:43:2e:2a:55:59:5c:36:fd:79:51:ca:ce:78:4b:03:
e9:ab:f3:25:83:2e:27:ec:ee:b1:4c:61:f8:c3:de:5a:40:91:
57:09:20:39:19:9f:bb:07:ad:ca:b6:dd:f0:00:aa:cf:40:ad:
a4:54:b3:e4:b3:f2:61:69:dd:f4:2e:05:7c:84:19:42:37:8d:
b4:88:6b:e0:0d:60:85:43:31:fd:b2:d7:2e:7c:66:1b:48:b3:
63:05:8c:d5:70:e4:5d:e7:f2:ab:c2:56:ae:f0:ca:07:f2:ef:
27:5d:b6:e6:d8:4a:d8:b5:c1:a1:c7:f1:42:f3:7b:df:21:99:
f9:43:53:db:63:17:fc:be:c0:91:2f:dd:5d:1e:4a:c6:a8:78:
b6:a5:17:84
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVzXvqGcXSdGM1j/Hw8NfkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZGU4NWM2ODRmY2ZmODNlYzQxNDhhYjVmNmY2N2NkMTUw
NGY5M2QwHhcNMjMwMTAyMTY0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDViYjNhMTliNjI4YTExOGYzMDVjYjg1NWVmYTdhNjRlMWU2ZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBGZPsZjejcoTaXn+uD11l2PzQwJ
OF3R6NcY36OEJJ3Q4alEEnYzjDpHCLCAFtA+aRtyy5CCdlFeG9xOnw1QN32KlGEn
GAEoZWy/nkVPUb1olNiyX4+NZkuKVKsodfAz+ESjmbUfDbj2a+3HZ1bdsppYWxD2
FnuO+g2qRaQLxseEHZLRSYXVmYQCl2BO1Iz3oTl3d6aFsS9MZWiXMWiUFxH9KTft
XvnmYmW+PgaeFmis1FfGa6zRVO5ZO0ntVlp2+DUcQT5J/pcJFcEe98Y3K0w1LInL
4oZ0DokF2jxP1UquOH9vc26o/UBQWwTFzNV78MdZopqaAmqwD36/FQiLoQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHBbs6GbYooRjzBcuFXvp6ZOHm+vMB8GA1UdIwQY
MBaAFJfehcaE/P+D7EFIq19vZ80VBPk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYjQ1MjYtZTBlZi00ZTIyLThmZjkt
NTAzMGQwYWU2ZWJjLzEvY0Z1em9adGlpaEdQTUZ5NFZlLW5wazRlYjY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kYjQ1MjYtZTBlZi00ZTIyLThmZjktNTAzMGQwYWU2ZWJj
LzEvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuWMAAwQC
uaQgAwQCudRsMA0EAgACMAcDBQAqAIYgMA0GCSqGSIb3DQEBCwUAA4IBAQCofe4b
jr7o2HNrAeZzzfRE40wujKEz/t6dMxSC6tDy+gK4W/VOkVkJ7OHRQX6uqOyBFx8r
YLpv4nD8cSBNhitYCFkNw6r2dqDon2glIb4bOMzRwUBpS20Ht2S2ieY4Hv1uXfVj
Wd0aRsfRxuy4htVDLipVWVw2/XlRys54SwPpq/Mlgy4n7O6xTGH4w95aQJFXCSA5
GZ+7B63Ktt3wAKrPQK2kVLPks/Jhad30LgV8hBlCN420iGvgDWCFQzH9stcufGYb
SLNjBYzVcORd5/Krwlau8MoH8u8nXbbm2ErYtcGhx/FC83vfIZn5Q1PbYxf8vsCR
L91dHkrGqHi2pReE
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:47:04 2025 by rpki-client