Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/MFvbJQzljA9uGEwTatXtRrSc_Z4.roa
File: MFvbJQzljA9uGEwTatXtRrSc_Z4.roa (raw, json)
Hash identifier: Xa1i8vnQL7QEjY5jqrpRJoAGn/JDxdaU4gWhgCIx4ko=
Subject key identifier: 30:5B:DB:25:0C:E5:8C:0F:6E:18:4C:13:6A:D5:ED:46:B4:9C:FD:9E
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 01856FD5318E1D59CF3FF2900B121CD99F9D
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/MFvbJQzljA9uGEwTatXtRrSc_Z4.roa
Signing time: Mon 02 Jan 2023 00:15:20 +0000
ROA not before: Mon 02 Jan 2023 00:15:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61423
IP address blocks: 185.202.132.0/24 maxlen: 24
2a0a:d6c0:9::/48 maxlen: 48
2a0a:d6c0:4::/48 maxlen: 48
2a0a:d6c0:efef::/48 maxlen: 48
2a0a:d6c0:efff::/48 maxlen: 48
2a0a:d6c0:8::/48 maxlen: 48
2a0a:d6c0:3::/48 maxlen: 48
2a0a:d6c0:eff3::/48 maxlen: 48
2a0a:d6c0:13::/48 maxlen: 48
2a0a:d6c0:11::/48 maxlen: 48
2a0a:d6c0:eff1::/48 maxlen: 48
2a0a:d6c0:7::/48 maxlen: 48
2a0a:d6c0:eff2::/48 maxlen: 48
2a0a:d6c0:2::/48 maxlen: 48
2a0a:d6c0:5::/48 maxlen: 48
2a0a:d6c0::/48 maxlen: 48
2a0a:d6c0:10::/48 maxlen: 48
2a0a:d6c0:eff0::/48 maxlen: 48
2a0a:d6c0:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:31:8e:1d:59:cf:3f:f2:90:0b:12:1c:d9:9f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 00:15:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=305bdb250ce58c0f6e184c136ad5ed46b49cfd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:e5:3a:d3:85:4c:cc:f9:e7:7a:6a:1a:b2:
89:41:d1:2a:6e:75:53:ef:8e:29:79:d9:e9:52:d8:
c0:fd:6d:a2:38:7c:e5:1f:a5:90:94:0e:95:a6:a2:
df:0c:7a:3b:15:c0:04:bc:d4:92:f7:b8:b7:89:c0:
94:df:f2:aa:1c:4d:d9:3c:23:dd:21:14:70:25:a0:
59:2f:9a:d6:65:42:ac:5c:5a:b8:cd:38:f4:a3:a2:
10:7a:ad:1e:9c:87:5e:73:f4:b9:a7:04:c9:03:a2:
11:88:1c:e3:f5:58:5c:b1:bf:fa:15:07:a3:99:db:
a9:b6:e5:6c:a8:fe:89:66:41:60:93:14:5d:00:69:
e7:b4:b0:94:7f:25:f6:c0:9f:3d:73:fc:37:87:1e:
00:de:b1:9d:28:69:95:11:75:1c:f9:63:e4:a2:ff:
91:6e:45:39:30:47:23:66:62:e6:da:ee:22:d9:d2:
0c:09:6f:22:ea:b2:66:13:0a:cf:6f:4b:44:3a:0d:
eb:02:88:82:46:6c:c2:f9:8a:8a:01:5b:55:06:e9:
d0:ad:ff:2a:fd:74:de:8b:b4:11:d0:6f:3e:cf:2c:
61:53:1f:00:98:a1:ff:5f:79:14:1b:2b:3b:d5:5a:
be:92:db:4d:14:a4:dd:81:13:3e:b7:1d:bf:8e:2a:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5B:DB:25:0C:E5:8C:0F:6E:18:4C:13:6A:D5:ED:46:B4:9C:FD:9E
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/MFvbJQzljA9uGEwTatXtRrSc_Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.132.0/24
IPv6:
2a0a:d6c0::/48
2a0a:d6c0:2::-2a0a:d6c0:9:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:10::/47
2a0a:d6c0:13::/48
2a0a:d6c0:efef::-2a0a:d6c0:eff3:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:efff::/48
Signature Algorithm: sha256WithRSAEncryption
bf:9d:f3:1e:5a:05:e8:d3:8d:d8:d6:66:8d:ee:80:b1:04:16:
6f:88:a2:92:96:79:81:2d:59:43:d5:d4:6d:7c:8f:88:ac:6a:
10:66:09:75:7d:54:7e:6d:89:ba:5d:a3:2e:71:14:cb:2e:99:
e5:a4:80:f8:c4:d4:9b:9e:8d:3a:c6:fc:55:c9:da:79:b0:8c:
77:c0:cb:42:0c:47:d6:3f:96:85:fa:0f:57:25:f0:af:ca:df:
05:f7:6e:5b:c5:b6:e7:42:97:9b:e8:46:1f:b5:e6:42:1c:1d:
90:e5:58:45:03:d4:b3:1d:c3:78:c8:40:bb:c8:42:3b:ea:0b:
c6:98:5b:38:96:62:db:c3:55:2a:09:a9:c5:7e:cc:05:db:b3:
8d:39:3e:0c:f2:6c:99:1c:f3:3c:50:9d:bf:d6:4c:95:c8:d9:
0b:82:0b:e8:63:31:48:ba:a6:a5:89:7a:54:53:1e:33:28:8c:
cf:32:b2:1e:a7:4d:35:d1:0d:0f:80:7a:90:c5:23:88:2f:ce:
13:50:2e:76:ca:89:ad:18:c6:03:be:f7:b0:2b:3b:7e:df:01:
7f:6a:d1:81:da:27:d1:ca:89:68:d8:91:70:e1:1f:f3:60:6f:
44:c8:50:ed:42:e3:3a:58:06:4a:57:fd:2b:df:6c:59:eb:75:
3f:96:3f:2d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYVv1TGOHVnPP/KQCxIc2Z+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm
OGNiZDgwHhcNMjMwMTAyMDAxNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDViZGIyNTBjZTU4YzBmNmUxODRjMTM2YWQ1ZWQ0NmI0OWNmZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngnlOtOFTMz553pqGrKJQdEqbnVT
744pednpUtjA/W2iOHzlH6WQlA6VpqLfDHo7FcAEvNSS97i3icCU3/KqHE3ZPCPd
IRRwJaBZL5rWZUKsXFq4zTj0o6IQeq0enIdec/S5pwTJA6IRiBzj9Vhcsb/6FQej
mduptuVsqP6JZkFgkxRdAGnntLCUfyX2wJ89c/w3hx4A3rGdKGmVEXUc+WPkov+R
bkU5MEcjZmLm2u4i2dIMCW8i6rJmEwrPb0tEOg3rAoiCRmzC+YqKAVtVBunQrf8q
/XTei7QR0G8+zyxhUx8AmKH/X3kUGys71Vq+kttNFKTdgRM+tx2/jiok0wIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFDBb2yUM5YwPbhhME2rV7Ua0nP2eMB8GA1UdIwQY
MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt
NjA5YTQ4YjJiMTRkLzEvTUZ2YkpRemxqQTl1R0V3VGF0WHRSclNjX1o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk
LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjAMBAIAATAGAwQAucqEMFIE
AgACMEwDBwAqCtbAAAAwEgMHASoK1sAAAgMHASoK1sAACAMHASoK1sAAEAMHACoK
1sAAEzASAwcAKgrWwO/vAwcCKgrWwO/wAwcAKgrWwO//MA0GCSqGSIb3DQEBCwUA
A4IBAQC/nfMeWgXo043Y1maN7oCxBBZviKKSlnmBLVlD1dRtfI+IrGoQZgl1fVR+
bYm6XaMucRTLLpnlpID4xNSbno06xvxVydp5sIx3wMtCDEfWP5aF+g9XJfCvyt8F
925bxbbnQpeb6EYfteZCHB2Q5VhFA9SzHcN4yEC7yEI76gvGmFs4lmLbw1UqCanF
fswF27ONOT4M8myZHPM8UJ2/1kyVyNkLggvoYzFIuqaliXpUUx4zKIzPMrIep001
0Q0PgHqQxSOIL84TUC52yomtGMYDvvewKzt+3wF/atGB2ifRyolo2JFw4R/zYG9E
yFDtQuM6WAZKV/0r32xZ63U/lj8t
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:08 2025 by rpki-client