Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/5trPGc6djaKOmugkgbOFgovQ6gk.roa
File: 5trPGc6djaKOmugkgbOFgovQ6gk.roa (raw, json)
Hash identifier: NcQlHQ3XpD5vi55eHoLu4uRCcX2nHIaSbAPIOslgD8k=
Subject key identifier: E6:DA:CF:19:CE:9D:8D:A2:8E:9A:E8:24:81:B3:85:82:8B:D0:EA:09
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 018570C2AF18A58AD5EBB70E0EB7E561C737
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/5trPGc6djaKOmugkgbOFgovQ6gk.roa
Signing time: Mon 02 Jan 2023 04:34:45 +0000
ROA not before: Mon 02 Jan 2023 04:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12357
IP address blocks: 185.111.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:af:18:a5:8a:d5:eb:b7:0e:0e:b7:e5:61:c7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Jan 2 04:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6dacf19ce9d8da28e9ae82481b385828bd0ea09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:51:17:81:81:3d:14:d8:af:b1:76:7e:ca:
1c:55:2b:c8:3f:b9:76:87:2d:25:4b:f0:55:4d:67:
42:3d:e3:8f:ec:af:fe:81:80:42:64:53:07:ac:a4:
26:d5:e8:8e:df:01:8e:77:d6:3b:e7:4e:7a:06:b6:
ca:e0:fb:db:5f:96:f3:48:3a:89:d6:60:65:f4:85:
78:8c:b7:f1:16:de:b4:07:5d:49:4b:84:05:38:ae:
df:7f:3c:05:f0:9a:14:f4:f0:0a:db:fd:d0:6f:94:
3e:44:da:5e:a3:b2:a8:6c:c3:11:8f:14:71:f6:73:
d3:d0:a2:90:5b:52:ef:24:97:65:f0:82:21:82:b0:
3f:e9:f1:f4:df:c9:69:a1:b1:3e:c7:0f:c3:5f:fe:
d2:e8:c8:0e:69:e0:81:8e:61:0d:44:84:f3:5e:91:
25:38:9c:77:ab:87:cf:88:f0:4b:f7:1a:31:65:d0:
fc:ca:8a:f6:e8:40:c0:14:4e:8f:ea:f7:4e:de:22:
97:1a:74:e1:7e:b2:ff:3d:3d:2e:1a:ff:ec:f8:64:
64:77:0c:43:16:b6:c3:27:82:4c:20:c4:c8:f5:c2:
78:4d:0b:20:38:47:19:83:95:32:77:bb:d2:03:e7:
1a:95:8b:57:a3:32:17:48:6f:99:50:93:07:c4:e4:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DA:CF:19:CE:9D:8D:A2:8E:9A:E8:24:81:B3:85:82:8B:D0:EA:09
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/5trPGc6djaKOmugkgbOFgovQ6gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:70:3b:33:4c:36:52:ab:43:b0:9f:56:83:0e:55:51:49:86:
99:f0:df:eb:59:bd:9f:9b:61:cd:5c:e7:a8:1e:bc:3e:75:71:
b8:8a:22:6a:ca:a1:0b:91:84:46:a8:5f:8d:01:80:0e:df:bc:
d3:6e:6c:46:0e:e3:1a:d8:e8:9d:c6:86:31:06:f1:4c:28:d6:
81:35:0c:e4:69:5d:b4:08:df:fa:c9:53:ae:2a:1c:38:f3:09:
03:37:da:c2:cf:11:0b:16:96:27:4d:6e:0f:2e:1b:95:98:c5:
66:00:79:ec:49:96:39:aa:a1:a1:b2:14:20:a9:96:55:c5:92:
88:db:ed:cf:f0:9a:6d:cb:ef:59:92:dd:31:00:60:d2:f6:6b:
d0:10:e1:86:18:ca:d1:1f:b4:3b:79:dd:66:3d:5e:46:df:27:
8c:ff:a7:af:e0:e5:48:a4:b0:ce:d2:70:91:12:11:6f:0a:11:
cd:64:54:f3:97:7a:9a:2d:f8:b7:0b:62:d1:ae:3e:77:20:14:
cc:c5:a4:52:14:b9:82:a2:48:9e:e7:0b:11:20:2d:0b:56:f9:
4a:6f:e4:82:2d:a4:34:4e:f5:e7:17:9c:44:6a:64:5c:c4:03:
f7:24:6f:cf:f9:25:19:a3:78:42:5b:e8:4f:ea:7b:34:6e:cb:
28:5b:8f:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwwq8YpYrV67cODrflYcc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTc1ODAyZTdlZmI4NjUzZTNhZjU5Y2JmMWJjMDY1Mzhi
Y2E2NzEwHhcNMjMwMTAyMDQzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmRhY2YxOWNlOWQ4ZGEyOGU5YWU4MjQ4MWIzODU4MjhiZDBlYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIBRF4GBPRTYr7F2fsocVSvIP7l2
hy0lS/BVTWdCPeOP7K/+gYBCZFMHrKQm1eiO3wGOd9Y75056BrbK4PvbX5bzSDqJ
1mBl9IV4jLfxFt60B11JS4QFOK7ffzwF8JoU9PAK2/3Qb5Q+RNpeo7KobMMRjxRx
9nPT0KKQW1LvJJdl8IIhgrA/6fH038lpobE+xw/DX/7S6MgOaeCBjmENRITzXpEl
OJx3q4fPiPBL9xoxZdD8yor26EDAFE6P6vdO3iKXGnThfrL/PT0uGv/s+GRkdwxD
FrbDJ4JMIMTI9cJ4TQsgOEcZg5Uyd7vSA+calYtXozIXSG+ZUJMHxOSNGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObazxnOnY2ijproJIGzhYKL0OoJMB8GA1UdIwQY
MBaAFKjnWALn77hlPjr1nL8bwGU4vKZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjkt
NDExZjU4MzdmZWZhLzEvNXRyUEdjNmRqYUtPbXVna2diT0Znb3ZRNmdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjktNDExZjU4MzdmZWZh
LzEvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW/8MA0G
CSqGSIb3DQEBCwUAA4IBAQAtcDszTDZSq0Own1aDDlVRSYaZ8N/rWb2fm2HNXOeo
Hrw+dXG4iiJqyqELkYRGqF+NAYAO37zTbmxGDuMa2OidxoYxBvFMKNaBNQzkaV20
CN/6yVOuKhw48wkDN9rCzxELFpYnTW4PLhuVmMVmAHnsSZY5qqGhshQgqZZVxZKI
2+3P8Jpty+9Zkt0xAGDS9mvQEOGGGMrRH7Q7ed1mPV5G3yeM/6ev4OVIpLDO0nCR
EhFvChHNZFTzl3qaLfi3C2LRrj53IBTMxaRSFLmCokie5wsRIC0LVvlKb+SCLaQ0
TvXnF5xEamRcxAP3JG/P+SUZo3hCW+hP6ns0bssoW48D
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:00 2025 by rpki-client