Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/1-d7w2TgNW7MQOWe9ehhxXxC4Xmc.roa
File: 1-d7w2TgNW7MQOWe9ehhxXxC4Xmc.roa (raw, json)
Hash identifier: G4fJ3jfD/MMWtCzk+zgtS1C/E3YtkjSWsTEDJQGXyhY=
Subject key identifier: F9:DE:F0:D9:38:0D:5B:B3:10:39:67:BD:7A:18:71:5F:10:B8:5E:67
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 01856FF0524128507FF283F53D07E4674A55
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/1-d7w2TgNW7MQOWe9ehhxXxC4Xmc.roa
Signing time: Mon 02 Jan 2023 00:44:58 +0000
ROA not before: Mon 02 Jan 2023 00:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51392
IP address blocks: 185.157.208.0/24 maxlen: 24
185.157.211.0/24 maxlen: 24
185.157.210.0/24 maxlen: 24
185.157.209.0/24 maxlen: 24
2a03:afe2::/32 maxlen: 32
2a03:afe1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:52:41:28:50:7f:f2:83:f5:3d:07:e4:67:4a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jan 2 00:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9def0d9380d5bb3103967bd7a18715f10b85e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:65:f3:4a:77:c6:b6:b4:19:64:a5:bd:e2:
e3:cb:ad:41:27:b8:c5:8a:21:2a:a9:ec:53:30:57:
ad:9c:31:4f:5f:24:73:cc:c5:31:67:d5:3e:4f:fc:
e0:e2:e6:6f:04:11:4a:95:3f:64:f4:0e:cd:1d:d0:
3b:dd:51:3a:bb:77:f2:b8:92:32:f3:fb:99:ff:06:
83:83:94:ca:14:71:9c:11:59:8b:a1:8a:8b:9e:5d:
a5:7e:a5:cc:65:e5:c6:d9:45:3e:09:bd:3d:ba:e9:
00:c3:88:e1:d6:aa:77:0b:f5:58:3f:e4:9c:6c:46:
ab:e1:18:da:19:17:22:ad:ce:c8:73:5b:ca:e4:d3:
75:7a:7b:f2:d6:87:76:b6:22:e1:b4:ee:ff:1e:80:
8f:e3:a2:37:86:30:e6:ef:8f:91:6e:a7:80:dc:1c:
88:a1:b7:37:a6:b3:fe:cc:6c:3b:24:f6:c1:15:40:
d5:8c:43:c3:03:b9:61:a5:73:8d:76:4c:90:21:15:
7c:89:d9:40:69:70:d9:02:cc:6b:c3:22:97:50:a4:
cd:95:6f:f4:86:b3:d7:70:dc:e0:13:f6:59:41:5f:
23:e4:2c:17:e6:a1:7d:3e:23:97:2d:20:f0:5a:38:
be:00:85:0c:63:93:7f:e5:b3:99:10:4c:44:e5:f9:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:F0:D9:38:0D:5B:B3:10:39:67:BD:7A:18:71:5F:10:B8:5E:67
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/1-d7w2TgNW7MQOWe9ehhxXxC4Xmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.208.0/22
IPv6:
2a03:afe1::-2a03:afe2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d7:4b:da:79:ac:a3:bc:de:1f:73:36:bf:4d:80:3b:26:25:f5:
2c:aa:58:c0:d5:1f:a1:08:e4:44:e0:a4:b0:c9:25:75:d9:bb:
a0:2d:53:d0:2a:64:84:26:55:89:c0:29:16:c8:28:ac:d9:ee:
07:31:38:a5:bc:1d:7f:24:1a:43:aa:a9:bd:a6:0c:50:1f:0a:
88:61:b3:a6:71:4c:aa:b5:65:63:c7:54:5f:aa:39:60:19:c7:
2c:80:a0:db:ec:11:61:8e:6b:18:5d:75:0f:05:66:03:96:64:
44:bf:48:80:b4:83:96:c4:d6:23:69:f4:9a:60:d8:0a:a1:68:
a2:54:ca:9a:f6:52:25:ef:6f:bb:c0:bc:e5:11:15:de:1f:d6:
6f:8f:a3:79:74:a6:43:9b:a9:69:d4:2b:d0:ce:a1:53:2a:4c:
76:eb:62:92:69:54:26:e6:3d:39:c0:dc:64:65:b8:ed:eb:52:
b0:5b:79:10:db:c6:55:72:30:4c:a4:42:10:f6:c5:cd:cf:54:
39:7c:f8:91:52:1a:95:c6:eb:1c:c7:04:87:d4:ff:d5:73:ca:
73:88:28:35:1e:24:34:34:54:ec:d8:20:d6:72:ab:09:ef:23:
50:09:7b:91:21:4c:d7:73:16:49:89:e7:64:b1:2f:a2:94:83:
fa:d8:a7:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVv8FJBKFB/8oP1PQfkZ0pVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMGYzOWUyY2FhZThlMmNmMTRiY2M0MWIyM2YzYzg2ZTFh
NzIwZjgwHhcNMjMwMTAyMDA0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWRlZjBkOTM4MGQ1YmIzMTAzOTY3YmQ3YTE4NzE1ZjEwYjg1ZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjtl80p3xra0GWSlveLjy61BJ7jF
iiEqqexTMFetnDFPXyRzzMUxZ9U+T/zg4uZvBBFKlT9k9A7NHdA73VE6u3fyuJIy
8/uZ/waDg5TKFHGcEVmLoYqLnl2lfqXMZeXG2UU+Cb09uukAw4jh1qp3C/VYP+Sc
bEar4RjaGRcirc7Ic1vK5NN1envy1od2tiLhtO7/HoCP46I3hjDm74+RbqeA3ByI
obc3prP+zGw7JPbBFUDVjEPDA7lhpXONdkyQIRV8idlAaXDZAsxrwyKXUKTNlW/0
hrPXcNzgE/ZZQV8j5CwX5qF9PiOXLSDwWji+AIUMY5N/5bOZEExE5fmXyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPne8Nk4DVuzEDlnvXoYcV8QuF5nMB8GA1UdIwQY
MBaAFE4POeLKro4s8UvMQbI/PIbhpyD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMt
MWIwOGY3ZjUwMTVkLzEvMS1kN3cyVGdOVzdNUU9XZTllaGh4WHhDNFhtYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjQvZDVlM2NjLWMxY2QtNGQ2OC1iZWMzLTFiMDhmN2Y1MDE1
ZC8xL1RnODU0c3F1aml6eFM4eEJzajg4aHVHbklQZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwDAQCAAEwBgMEArmd0DAW
BAIAAjAQMA4DBQAqA6/hAwUAKgOv4jANBgkqhkiG9w0BAQsFAAOCAQEA10vaeayj
vN4fcza/TYA7JiX1LKpYwNUfoQjkROCksMklddm7oC1T0CpkhCZVicApFsgorNnu
BzE4pbwdfyQaQ6qpvaYMUB8KiGGzpnFMqrVlY8dUX6o5YBnHLICg2+wRYY5rGF11
DwVmA5ZkRL9IgLSDlsTWI2n0mmDYCqFoolTKmvZSJe9vu8C85REV3h/Wb4+jeXSm
Q5upadQr0M6hUypMdutikmlUJuY9OcDcZGW47etSsFt5ENvGVXIwTKRCEPbFzc9U
OXz4kVIalcbrHMcEh9T/1XPKc4goNR4kNDRU7Ngg1nKrCe8jUAl7kSFM13MWSYnn
ZLEvopSD+tinRA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:41 2025 by rpki-client