Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/MreBhci4yVXAqNSoppchuf4ccPo.roa
File: MreBhci4yVXAqNSoppchuf4ccPo.roa (raw, json)
Hash identifier: dtB0vu3IixecghHGDfsRFXKX8aF1aw65VWOCWPw5owA=
Subject key identifier: 32:B7:81:85:C8:B8:C9:55:C0:A8:D4:A8:A6:97:21:B9:FE:1C:70:FA
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 018239C3B408A710AADF6DA96CAAB7C0A1A0
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/MreBhci4yVXAqNSoppchuf4ccPo.roa
Signing time: Tue 26 Jul 2022 09:08:23 +0000
ROA not before: Tue 26 Jul 2022 09:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3302
IP address blocks: 185.169.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:c3:b4:08:a7:10:aa:df:6d:a9:6c:aa:b7:c0:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Jul 26 09:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32b78185c8b8c955c0a8d4a8a69721b9fe1c70fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:e9:4f:30:53:dd:4b:e5:f2:2a:5e:82:6b:
2a:71:2e:8e:d8:78:43:55:b7:cd:b2:36:2b:ad:7f:
09:12:d3:3f:fa:bb:0b:00:5f:8a:79:98:28:03:e0:
62:bb:a9:a9:80:6a:4c:ac:2d:8d:4b:99:ae:31:cb:
c0:b8:8c:95:87:85:8a:29:92:b0:bf:57:d0:43:4f:
df:6c:77:70:74:4c:a5:0a:35:a9:e8:04:6f:4b:90:
39:f4:ec:5d:12:78:b9:9f:e7:cc:26:62:7e:7f:a6:
ca:4f:6b:e3:ac:20:67:10:1e:f6:c6:e5:45:d6:1a:
e6:e1:a3:7b:01:f3:c4:43:16:67:1f:18:24:11:83:
11:f6:bc:50:0e:ba:a3:f9:39:b5:28:6d:b4:32:de:
0e:98:e4:c5:e7:70:38:04:0c:74:01:5c:19:16:c9:
c7:9b:6e:81:90:c8:e5:da:4f:6c:ca:59:3c:ca:63:
f3:df:32:da:25:d8:47:b9:15:46:b3:43:b0:cd:13:
0d:df:ee:a7:30:a3:26:21:f7:b7:52:fe:7f:28:8d:
f1:22:74:3e:f8:95:a8:47:c7:61:32:4b:51:59:fb:
32:e3:77:3c:37:41:63:42:a3:d9:72:1a:31:c1:80:
eb:81:2e:36:08:c3:b8:bb:77:ba:ec:44:55:d6:94:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:81:85:C8:B8:C9:55:C0:A8:D4:A8:A6:97:21:B9:FE:1C:70:FA
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/MreBhci4yVXAqNSoppchuf4ccPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.176.0/22
Signature Algorithm: sha256WithRSAEncryption
05:2f:0a:1c:f0:76:f7:1d:25:a4:6e:80:4a:96:9c:7c:dc:d8:
f7:27:ec:37:26:b0:7f:1b:e4:29:79:a1:0f:b3:0b:37:98:4c:
25:78:d2:ab:d1:84:d6:03:23:f3:05:3a:98:db:6c:46:ba:1b:
02:00:bc:dc:20:0a:54:b8:1d:1e:82:35:fd:9b:b6:7d:a1:3b:
0f:33:06:20:e6:99:f9:56:e0:68:83:6c:f7:89:5a:61:39:66:
e1:08:6a:0c:3e:1a:d6:7f:08:80:13:90:c0:28:bb:de:bd:9e:
32:54:b7:fb:02:fb:e5:aa:85:a7:60:5a:64:25:49:5b:36:91:
48:88:73:b8:b5:30:78:95:2d:6f:ce:01:f1:e5:79:e4:78:38:
de:54:4b:24:58:d5:ac:90:fa:a2:3d:35:70:2f:d3:77:07:79:
f7:3f:1d:fc:d4:7b:e9:26:f6:4f:e6:66:1d:a1:25:97:fa:e8:
a1:fb:cf:34:b6:6f:a8:ed:9c:61:44:5b:2e:6a:7a:58:1a:7f:
4c:de:5f:ee:d6:f6:c1:f7:b5:d9:65:e4:e3:31:76:8a:79:d6:
5f:58:c2:90:7d:ee:8a:5f:98:3d:85:91:74:e2:3e:80:0c:77:
30:7d:74:0a:cd:38:b1:5b:2a:6b:79:85:c4:d7:71:35:52:93:
93:f3:0b:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYI5w7QIpxCq322pbKq3wKGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmQ1ZmZiY2U2YmY4NzA3ZmEzZTU5NjdlMGQzOGI0NTVk
OWQ0ZTEwHhcNMjIwNzI2MDkwODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmI3ODE4NWM4YjhjOTU1YzBhOGQ0YThhNjk3MjFiOWZlMWM3MGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAPpTzBT3Uvl8ipegmsqcS6O2HhD
VbfNsjYrrX8JEtM/+rsLAF+KeZgoA+Biu6mpgGpMrC2NS5muMcvAuIyVh4WKKZKw
v1fQQ0/fbHdwdEylCjWp6ARvS5A59OxdEni5n+fMJmJ+f6bKT2vjrCBnEB72xuVF
1hrm4aN7AfPEQxZnHxgkEYMR9rxQDrqj+Tm1KG20Mt4OmOTF53A4BAx0AVwZFsnH
m26BkMjl2k9sylk8ymPz3zLaJdhHuRVGs0OwzRMN3+6nMKMmIfe3Uv5/KI3xInQ+
+JWoR8dhMktRWfsy43c8N0FjQqPZchoxwYDrgS42CMO4u3e67ERV1pSvAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDK3gYXIuMlVwKjUqKaXIbn+HHD6MB8GA1UdIwQY
MBaAFCa9X/vOa/hwf6Plln4NOLRV2dThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMt
ZThjNTU5YzcxZDY2LzEvTXJlQmhjaTR5VlhBcU5Tb3BwY2h1ZjRjY1BvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMtZThjNTU5YzcxZDY2
LzEvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuamwMA0G
CSqGSIb3DQEBCwUAA4IBAQAFLwoc8Hb3HSWkboBKlpx83Nj3J+w3JrB/G+QpeaEP
sws3mEwleNKr0YTWAyPzBTqY22xGuhsCALzcIApUuB0egjX9m7Z9oTsPMwYg5pn5
VuBog2z3iVphOWbhCGoMPhrWfwiAE5DAKLvevZ4yVLf7AvvlqoWnYFpkJUlbNpFI
iHO4tTB4lS1vzgHx5XnkeDjeVEskWNWskPqiPTVwL9N3B3n3Px381HvpJvZP5mYd
oSWX+uih+880tm+o7ZxhRFsuanpYGn9M3l/u1vbB97XZZeTjMXaKedZfWMKQfe6K
X5g9hZF04j6ADHcwfXQKzTixWypreYXE13E1UpOT8wtJ
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:29 2025 by rpki-client