Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/g16o0p0EGoZ9H7J-QW4qN8ZDp0U.roa
File: g16o0p0EGoZ9H7J-QW4qN8ZDp0U.roa (raw, json)
Hash identifier: MBB0xw1Q6qV/BQjejgrKKW9TirnwyDJWKOZh6Kn/U0Y=
Subject key identifier: 83:5E:A8:D2:9D:04:1A:86:7D:1F:B2:7E:41:6E:2A:37:C6:43:A7:45
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 03447F66
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/g16o0p0EGoZ9H7J-QW4qN8ZDp0U.roa
Signing time: Tue 24 May 2022 20:09:13 +0000
ROA not before: Tue 24 May 2022 20:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206289
IP address blocks: 91.217.191.0/24 maxlen: 25
185.189.250.0/23 maxlen: 23
185.189.248.0/24 maxlen: 24
185.189.248.0/22 maxlen: 22
185.189.248.0/23 maxlen: 23
185.189.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54820710 (0x3447f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: May 24 20:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=835ea8d29d041a867d1fb27e416e2a37c643a745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:0e:aa:06:ca:00:8c:31:1f:af:48:60:1c:
78:d3:cd:3f:1d:28:ef:a3:9a:67:d3:15:08:5e:45:
00:d9:67:af:46:7d:50:7a:58:d5:04:57:dc:93:32:
58:75:81:bf:ad:b2:c4:0a:22:b7:8b:89:4d:69:f7:
f3:5a:48:f1:0f:be:00:93:37:90:32:7b:18:27:77:
9e:50:d4:b1:6b:c8:8f:2a:5e:83:32:0c:71:c3:5e:
c4:c2:31:c5:61:66:ca:86:a7:04:01:dc:36:28:8e:
27:a8:93:be:b4:77:f0:c2:ca:cd:39:66:cc:73:88:
8e:4e:e9:44:b1:45:5f:1b:5f:ea:d5:c7:a1:50:14:
6a:cb:18:d7:ce:24:56:69:76:44:be:90:cf:d5:b0:
4b:23:cb:20:8c:f8:e9:ba:c4:7b:cb:e4:6d:b5:a9:
dc:22:b1:71:06:d0:af:28:dc:19:40:a1:4f:44:3d:
c5:04:03:20:02:ce:3e:65:dd:af:26:a3:12:77:ba:
2b:82:e3:5b:77:29:c4:5b:47:50:e2:04:6d:20:99:
cb:3c:27:0a:09:51:ec:01:82:0e:38:f3:7a:4e:82:
8e:fc:88:80:1a:ae:0d:8d:33:4f:f1:73:23:1c:ed:
51:1f:f1:63:48:09:80:80:6b:a5:20:c6:8b:13:72:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5E:A8:D2:9D:04:1A:86:7D:1F:B2:7E:41:6E:2A:37:C6:43:A7:45
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/g16o0p0EGoZ9H7J-QW4qN8ZDp0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.191.0/24
185.189.248.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:c4:76:10:5f:ad:9e:25:fc:fc:e2:b4:3e:bf:fe:2d:c7:17:
56:1a:e3:f8:ee:a8:e3:f2:6a:30:bd:3b:68:6e:fb:95:85:df:
c9:b2:19:a8:a2:17:53:fb:7b:89:d8:3c:a5:8a:02:61:9f:1b:
99:f3:ce:b9:2d:61:a7:a3:87:21:97:df:70:5e:f6:89:ce:89:
88:87:4a:2b:e1:be:20:89:31:e5:52:a8:0d:de:ca:8d:12:a0:
78:90:72:03:65:42:aa:7e:7a:a8:5d:6f:74:40:33:d3:f2:25:
02:8e:89:16:d9:7b:b0:62:c4:f2:e0:4f:d1:04:9b:da:d5:9b:
50:cb:11:c7:7e:38:a3:4c:7c:9d:47:c6:4c:a0:e4:cb:1f:3c:
87:22:95:97:52:a4:e0:c9:f3:8e:86:85:2d:61:61:d8:b0:da:
33:19:c7:59:e8:a0:08:82:ba:e3:eb:30:90:dc:55:0f:45:95:
ca:a0:fc:ca:f4:7b:6e:b3:b4:3c:93:f5:0f:b3:66:8b:19:96:
c9:25:06:0d:dd:fa:cf:4e:8c:a1:f6:15:b0:86:68:e3:78:f1:
28:da:19:90:92:a8:65:97:50:60:f9:22:c0:c4:c8:7a:52:86:
2a:13:92:74:0c:46:32:a9:e4:de:d5:98:46:7b:39:e2:ba:c6:
b5:dc:15:bb
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA0R/ZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NjdhYzUyMzFhMGQ3YmM1ODI0NTkwYTBiMmY2MjFlZGU5ODQ3NzBjMB4XDTIyMDUy
NDIwMDkxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODM1ZWE4ZDI5ZDA0
MWE4NjdkMWZiMjdlNDE2ZTJhMzdjNjQzYTc0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKlJDqoGygCMMR+vSGAceNPNPx0o76OaZ9MVCF5FANlnr0Z9
UHpY1QRX3JMyWHWBv62yxAoit4uJTWn381pI8Q++AJM3kDJ7GCd3nlDUsWvIjype
gzIMccNexMIxxWFmyoanBAHcNiiOJ6iTvrR38MLKzTlmzHOIjk7pRLFFXxtf6tXH
oVAUassY184kVml2RL6Qz9WwSyPLIIz46brEe8vkbbWp3CKxcQbQryjcGUChT0Q9
xQQDIALOPmXdryajEne6K4LjW3cpxFtHUOIEbSCZyzwnCglR7AGCDjjzek6CjvyI
gBquDY0zT/FzIxztUR/xY0gJgIBrpSDGixNyyrsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSDXqjSnQQahn0fsn5Bbio3xkOnRTAfBgNVHSMEGDAWgBQWesUjGg17xYJF
kKCy9iHt6YR3DDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZuckZJeG9OZThXQ1JaQ2dzdlloN2VtRWR3dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvNjE3MzhlLTM5NzctNDk1ZS1iYTFhLTgwMzVmMmRmYzFmNC8x
L2cxNm8wcDBFR29aOUg3Si1RVzRxTjhaRHAwVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
NjE3MzhlLTM5NzctNDk1ZS1iYTFhLTgwMzVmMmRmYzFmNC8xL0ZuckZJeG9OZThX
Q1JaQ2dzdlloN2VtRWR3dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvZvwMEArm9+DANBgkqhkiG9w0B
AQsFAAOCAQEAv8R2EF+tniX8/OK0Pr/+LccXVhrj+O6o4/JqML07aG77lYXfybIZ
qKIXU/t7idg8pYoCYZ8bmfPOuS1hp6OHIZffcF72ic6JiIdKK+G+IIkx5VKoDd7K
jRKgeJByA2VCqn56qF1vdEAz0/IlAo6JFtl7sGLE8uBP0QSb2tWbUMsRx344o0x8
nUfGTKDkyx88hyKVl1Kk4MnzjoaFLWFh2LDaMxnHWeigCIK64+swkNxVD0WVyqD8
yvR7brO0PJP1D7NmixmWySUGDd36z06MofYVsIZo43jxKNoZkJKoZZdQYPkiwMTI
elKGKhOSdAxGMqnk3tWYRns54rrGtdwVuw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:41 2025 by rpki-client