Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/bKPNgOoyWxHwUJU-yhrp46_v5o4.roa
File: bKPNgOoyWxHwUJU-yhrp46_v5o4.roa (raw, json)
Hash identifier: SbwlHe0BaNAfAwNyl6wTddGW4v2Ll6UaCH4kOHih0xE=
Subject key identifier: 6C:A3:CD:80:EA:32:5B:11:F0:50:95:3E:CA:1A:E9:E3:AF:EF:E6:8E
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 01856C783EA2E34C6CC5F8FADEA258533E11
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/bKPNgOoyWxHwUJU-yhrp46_v5o4.roa
Signing time: Sun 01 Jan 2023 08:34:57 +0000
ROA not before: Sun 01 Jan 2023 08:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61429
IP address blocks: 81.23.240.0/23 maxlen: 23
185.6.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:3e:a2:e3:4c:6c:c5:f8:fa:de:a2:58:53:3e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Jan 1 08:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ca3cd80ea325b11f050953eca1ae9e3afefe68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:5f:b5:09:ad:05:08:aa:16:30:af:2b:c5:
88:b8:e9:f4:48:b7:79:7b:86:5b:5e:d1:84:3a:52:
0d:95:01:35:4b:e4:0b:d4:e5:b0:64:58:c2:82:65:
66:12:a8:b2:92:ba:e7:be:89:cb:2b:74:b6:fb:00:
66:a0:a0:c5:61:aa:0c:ab:49:e2:40:34:3f:71:5a:
e6:a5:2d:90:32:32:f2:45:81:5c:c5:df:09:2e:67:
0b:39:a7:72:6e:1b:5f:fc:ac:33:c0:ad:22:04:ea:
e5:42:5d:51:ec:2e:5c:7a:b5:1b:ee:c3:b7:b0:84:
4a:20:38:e8:39:e2:5b:60:b4:16:f1:a9:cf:8f:38:
40:1e:02:84:5a:e2:15:39:90:0c:0a:5c:d2:69:64:
8a:c8:27:97:d9:f6:21:5a:bf:eb:64:5d:2c:cf:50:
df:50:9a:4c:bd:13:cb:39:61:62:7e:4d:04:e3:44:
f8:3f:70:eb:f2:8e:71:f2:e4:8b:2e:85:32:fa:08:
45:44:91:14:42:fe:dc:87:03:77:99:f5:64:bb:c0:
e7:8d:0d:63:45:3d:65:cf:a2:2e:9e:97:7d:1f:48:
5b:da:ab:22:40:3a:af:2b:58:1c:b1:d5:29:14:ba:
45:50:ff:48:8d:b6:b8:d7:29:b1:f8:0c:b4:ef:e2:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:CD:80:EA:32:5B:11:F0:50:95:3E:CA:1A:E9:E3:AF:EF:E6:8E
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/bKPNgOoyWxHwUJU-yhrp46_v5o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.240.0/23
185.6.108.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:0b:b9:b1:48:bf:46:62:1f:0d:79:01:b6:5b:79:87:5d:6d:
d4:76:23:62:33:e3:2a:5b:54:9e:7b:36:36:e5:84:ad:e2:85:
e8:5f:49:f5:3b:f6:f0:8e:09:aa:45:6d:e7:eb:8d:64:2f:47:
fb:53:57:64:8b:1d:44:f8:b7:df:30:5d:6c:d6:58:19:dd:55:
fa:73:0f:c2:69:c3:29:53:fc:b2:f7:88:0e:cf:a8:60:85:95:
31:fc:ae:e2:aa:30:38:0b:6e:f0:04:e1:61:a9:47:fb:45:17:
b7:c9:32:57:2b:84:6b:6b:18:60:74:e0:0c:6b:30:e0:0d:6e:
11:0e:49:f1:15:a6:2b:10:b1:6d:c2:54:d0:c1:89:82:a3:66:
db:8d:38:47:79:ed:2b:28:2f:5c:a0:72:a7:d8:54:da:f4:0c:
dd:91:88:18:7c:c0:69:85:43:53:cf:60:bc:71:66:e9:f4:86:
39:4b:33:be:db:76:31:cc:64:e3:c0:dd:e9:ac:8b:98:32:00:
ca:df:0c:ad:30:c8:5d:90:35:a9:06:cc:bc:c5:9a:ea:da:41:
b8:46:5f:c4:2d:f2:87:2f:4d:13:c2:ef:c3:25:aa:22:fc:e8:
03:d6:3c:23:c2:03:68:9e:89:1d:4c:e5:8b:72:16:94:86:3d:
14:20:39:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVseD6i40xsxfj63qJYUz4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5
Y2RiZmUwHhcNMjMwMTAxMDgzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2EzY2Q4MGVhMzI1YjExZjA1MDk1M2VjYTFhZTllM2FmZWZlNjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvFftQmtBQiqFjCvK8WIuOn0SLd5
e4ZbXtGEOlINlQE1S+QL1OWwZFjCgmVmEqiykrrnvonLK3S2+wBmoKDFYaoMq0ni
QDQ/cVrmpS2QMjLyRYFcxd8JLmcLOadybhtf/KwzwK0iBOrlQl1R7C5cerUb7sO3
sIRKIDjoOeJbYLQW8anPjzhAHgKEWuIVOZAMClzSaWSKyCeX2fYhWr/rZF0sz1Df
UJpMvRPLOWFifk0E40T4P3Dr8o5x8uSLLoUy+ghFRJEUQv7chwN3mfVku8DnjQ1j
RT1lz6Iunpd9H0hb2qsiQDqvK1gcsdUpFLpFUP9Ijba41ymx+Ay07+ImNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGyjzYDqMlsR8FCVPsoa6eOv7+aOMB8GA1UdIwQY
MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt
ODczYzE4OWZjNDlmLzEvYktQTmdPb3lXeEh3VUpVLXlocnA0Nl92NW80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm
LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBURfwAwQC
uQZsMA0GCSqGSIb3DQEBCwUAA4IBAQBfC7mxSL9GYh8NeQG2W3mHXW3UdiNiM+Mq
W1SeezY25YSt4oXoX0n1O/bwjgmqRW3n641kL0f7U1dkix1E+LffMF1s1lgZ3VX6
cw/CacMpU/yy94gOz6hghZUx/K7iqjA4C27wBOFhqUf7RRe3yTJXK4RraxhgdOAM
azDgDW4RDknxFaYrELFtwlTQwYmCo2bbjThHee0rKC9coHKn2FTa9AzdkYgYfMBp
hUNTz2C8cWbp9IY5SzO+23YxzGTjwN3prIuYMgDK3wytMMhdkDWpBsy8xZrq2kG4
Rl/ELfKHL00Twu/DJaoi/OgD1jwjwgNonokdTOWLchaUhj0UIDnb
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:41 2025 by rpki-client