Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/SJ7CYmGLY32vJ5bpVrjhWa43Rd8.roa
File: SJ7CYmGLY32vJ5bpVrjhWa43Rd8.roa (raw, json)
Hash identifier: zVkMqyUD7eJrxKy25Lvh47dPgjeCHLipEjf2K6GMtEU=
Subject key identifier: 48:9E:C2:62:61:8B:63:7D:AF:27:96:E9:56:B8:E1:59:AE:37:45:DF
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 0EFA34AA
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/SJ7CYmGLY32vJ5bpVrjhWa43Rd8.roa
Signing time: Sat 01 Jan 2022 11:56:41 +0000
ROA not before: Sat 01 Jan 2022 11:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197075
IP address blocks: 185.49.56.0/22 maxlen: 24
185.203.124.0/22 maxlen: 24
2a0a:e6c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251278506 (0xefa34aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Jan 1 11:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=489ec262618b637daf2796e956b8e159ae3745df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:90:03:92:5a:31:7d:b1:90:22:8b:8c:4c:
b9:8c:ea:6a:c1:10:d1:12:34:77:49:f2:3c:a5:06:
64:19:f7:fd:28:50:89:27:50:7b:65:80:0a:3d:6a:
fa:d7:13:60:e3:c6:fc:7d:65:56:0e:e8:51:8a:8e:
72:e9:be:e7:dd:0c:72:39:11:e8:4f:70:f3:5e:af:
00:b4:80:5b:80:6d:b4:9b:a2:40:c4:6e:9b:9d:ea:
fe:1d:87:c8:9f:c5:4e:c8:6c:81:0e:3b:cd:ca:a7:
dc:e4:59:e1:53:ba:dc:6e:24:d8:a9:b9:f1:e0:73:
b7:63:22:cb:7c:3c:fd:2a:af:97:d6:91:d8:c6:e5:
6b:9c:af:a4:3a:2c:63:6b:bd:ed:e3:ff:7c:85:be:
e7:d9:81:f6:b0:a7:7d:06:c0:20:97:0b:7c:17:55:
4b:07:f9:d0:e0:3d:98:1e:28:af:e6:d4:20:06:3f:
90:9d:75:90:23:8b:9f:30:02:8b:aa:5b:f8:94:b8:
4b:5a:5e:0b:fe:80:fb:8c:af:b9:87:d9:5d:ab:4d:
58:6e:a2:dd:e3:30:d4:5c:36:14:f2:c3:c8:89:f2:
d5:d7:74:50:06:a4:c0:fa:9b:76:9a:3a:40:e4:d4:
07:ef:52:59:89:d4:5b:44:91:64:c4:bb:86:da:c1:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9E:C2:62:61:8B:63:7D:AF:27:96:E9:56:B8:E1:59:AE:37:45:DF
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/SJ7CYmGLY32vJ5bpVrjhWa43Rd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.56.0/22
185.203.124.0/22
IPv6:
2a0a:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
01:25:99:8a:37:1e:55:64:b1:e2:7d:78:b5:e6:44:c8:08:a2:
3d:63:ef:8a:89:cf:9a:6b:60:bb:e1:40:a6:d6:df:17:94:3d:
86:f0:c8:c8:e4:df:38:b4:1b:60:62:8f:9c:11:89:a0:cc:17:
a6:f3:b5:67:61:b7:6a:73:21:d0:40:ff:12:7e:77:5a:ae:9d:
ae:9c:8c:bd:18:ac:75:69:4c:96:dd:c9:10:7a:fd:be:f4:d8:
4e:07:93:46:1d:09:5e:85:0b:ba:cd:61:18:34:11:2c:ac:d0:
dc:a2:6b:f0:b7:2b:e2:09:e7:55:b9:8a:98:32:5d:76:53:3c:
5c:17:02:64:24:55:54:2c:a9:ff:be:36:d4:8e:ab:ad:03:1f:
9e:a5:76:ec:fc:d6:bc:91:1c:2f:ea:d6:0b:3a:b9:b4:89:7e:
9b:64:f7:6f:85:fd:41:db:e6:95:9b:e8:4a:e0:00:2f:89:d7:
da:fd:b4:7b:d2:a7:f6:5d:e8:b1:bb:d2:48:07:52:71:e5:c9:
a4:4b:14:8a:a3:fb:6b:66:4b:8e:32:62:53:7c:d5:fb:7f:ba:
2b:7b:3b:2b:d6:1a:e3:dd:2a:18:28:41:da:72:2d:92:d1:93:
22:28:aa:20:fd:c7:05:00:1e:95:93:dc:a4:d8:41:e3:d0:fd:
6b:d1:9f:9c
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEDvo0qjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZThlNjBiYjExMTA4N2QwODAzZmMzZmNjNGFmMzI3YWE4NWMwYjgxMB4XDTIyMDEw
MTExNTY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDg5ZWMyNjI2MThi
NjM3ZGFmMjc5NmU5NTZiOGUxNTlhZTM3NDVkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJmokAOSWjF9sZAii4xMuYzqasEQ0RI0d0nyPKUGZBn3/ShQ
iSdQe2WACj1q+tcTYOPG/H1lVg7oUYqOcum+590McjkR6E9w816vALSAW4BttJui
QMRum53q/h2HyJ/FTshsgQ47zcqn3ORZ4VO63G4k2Km58eBzt2Miy3w8/Sqvl9aR
2Mbla5yvpDosY2u97eP/fIW+59mB9rCnfQbAIJcLfBdVSwf50OA9mB4or+bUIAY/
kJ11kCOLnzACi6pb+JS4S1peC/6A+4yvuYfZXatNWG6i3eMw1Fw2FPLDyIny1dd0
UAakwPqbdpo6QOTUB+9SWYnUW0SRZMS7htrBJ60CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRInsJiYYtjfa8nlulWuOFZrjdF3zAfBgNVHSMEGDAWgBTejmC7ERCH0IA/
w/zErzJ6qFwLgTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNvNWd1eEVRaDlDQVA4UDh4Szh5ZXFoY0M0RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjMvMmM5ODgzLWYxMDgtNGZlZC1iNDE2LWE2ZjUzNGMzMDdmMS8x
L1NKN0NZbUdMWTMydko1YnBWcmpoV2E0M1JkOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMv
MmM5ODgzLWYxMDgtNGZlZC1iNDE2LWE2ZjUzNGMzMDdmMS8xLzNvNWd1eEVRaDlD
QVA4UDh4Szh5ZXFoY0M0RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArkxOAMEArnLfDANBAIAAjAHAwUD
KgrmwDANBgkqhkiG9w0BAQsFAAOCAQEAASWZijceVWSx4n14teZEyAiiPWPvionP
mmtgu+FAptbfF5Q9hvDIyOTfOLQbYGKPnBGJoMwXpvO1Z2G3anMh0ED/En53Wq6d
rpyMvRisdWlMlt3JEHr9vvTYTgeTRh0JXoULus1hGDQRLKzQ3KJr8Lcr4gnnVbmK
mDJddlM8XBcCZCRVVCyp/7421I6rrQMfnqV27PzWvJEcL+rWCzq5tIl+m2T3b4X9
QdvmlZvoSuAAL4nX2v20e9Kn9l3osbvSSAdSceXJpEsUiqP7a2ZLjjJiU3zV+3+6
K3s7K9Ya490qGChB2nItktGTIiiqIP3HBQAelZPcpNhB49D9a9GfnA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:34 2025 by rpki-client