Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/d1Iy2hONeVMvDfpdRxunrqHy81o.roa
File: d1Iy2hONeVMvDfpdRxunrqHy81o.roa (raw, json)
Hash identifier: QUiM0eCO231IyS5NGwcdBE5f+7wwzFKcY7Ax8DsKaPc=
Subject key identifier: 77:52:32:DA:13:8D:79:53:2F:0D:FA:5D:47:1B:A7:AE:A1:F2:F3:5A
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 0184DF16415A3BB6438389F94793640BE6E5
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/d1Iy2hONeVMvDfpdRxunrqHy81o.roa
Signing time: Sun 04 Dec 2022 21:41:28 +0000
ROA not before: Sun 04 Dec 2022 21:41:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50272
IP address blocks: 185.41.64.0/22 maxlen: 24
62.24.32.0/19 maxlen: 19
185.155.140.0/22 maxlen: 24
185.155.143.0/24 maxlen: 24
185.155.142.0/24 maxlen: 24
2a03:1400::/32 maxlen: 32
2a07:33c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:df:16:41:5a:3b:b6:43:83:89:f9:47:93:64:0b:e6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Dec 4 21:41:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=775232da138d79532f0dfa5d471ba7aea1f2f35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:fb:62:0b:9c:65:c7:b4:82:56:f2:a9:c9:
01:6f:59:c7:e6:74:3b:3f:30:98:77:73:d2:c9:5a:
0f:5f:81:e3:c9:0c:bf:9f:04:1c:72:6c:3a:dd:22:
e0:bc:bd:d8:5f:c5:f4:c1:ff:03:f8:a3:47:9e:2c:
ca:bb:47:b7:7e:6a:47:2f:fd:e2:05:f5:7d:bf:53:
44:7b:15:be:5d:b4:67:f0:ef:15:a1:85:ea:63:b3:
2c:f4:05:05:2d:ff:57:1f:f1:b0:be:9d:a8:fc:44:
bf:b4:1a:0a:9b:10:20:c6:41:2c:6c:35:e1:57:2e:
51:d3:5c:df:4c:23:44:33:ce:35:c0:09:5a:05:1b:
da:da:dd:9a:0c:19:ba:e2:c9:47:92:48:24:b4:63:
94:e5:98:76:6a:d0:28:5c:44:28:7a:6f:ff:7a:25:
93:0a:a3:d7:8a:e7:16:31:5b:73:83:2a:3f:50:e4:
1b:d1:9c:a1:55:c1:ad:38:d8:8b:ec:c8:cb:e4:cb:
18:6e:2f:92:45:ce:33:05:94:29:d3:d6:ba:fd:18:
37:c2:a4:1f:09:c8:3f:9a:35:b7:0f:6f:c3:1e:2f:
e3:ed:d1:55:97:0d:e9:6b:7e:e1:08:55:96:58:6b:
7b:73:fe:d6:10:e4:b2:3c:03:a8:ac:67:31:a7:a8:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:52:32:DA:13:8D:79:53:2F:0D:FA:5D:47:1B:A7:AE:A1:F2:F3:5A
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/d1Iy2hONeVMvDfpdRxunrqHy81o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.24.32.0/19
185.41.64.0/22
185.155.140.0/22
IPv6:
2a03:1400::/32
2a07:33c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:4d:1b:ab:3b:6e:8c:04:ff:30:94:7c:b0:ea:2b:ba:c9:f9:
c7:d9:77:ad:f5:8e:2f:e1:29:d0:79:df:2b:55:7e:1d:84:c6:
21:d3:22:10:8a:c8:86:d0:25:d6:66:4a:9b:09:8e:24:73:fd:
55:29:fd:20:5d:f0:4d:87:94:7b:79:bd:30:08:7c:57:f0:53:
4a:cf:d3:33:a7:95:be:ab:bd:f4:86:fd:82:b8:27:dc:b8:d7:
93:4a:de:a9:ef:e0:16:0f:e1:a2:38:e2:f3:b0:36:5c:07:fe:
06:82:e4:8b:7f:6e:21:40:1f:a4:7c:db:37:2a:ca:88:61:78:
3c:44:1a:fd:da:93:13:91:e9:86:0b:c4:01:ac:8a:37:3b:99:
04:51:6a:87:96:97:eb:7c:5c:31:65:07:b3:82:e0:9b:70:a3:
95:d8:3c:17:8c:09:50:a9:a9:56:5f:e8:46:e3:8b:e7:15:50:
1a:39:a2:31:01:6d:ef:e3:fe:3f:23:37:ee:87:b3:6c:05:07:
82:d3:30:ba:b7:a4:71:51:50:47:8d:55:d3:50:b7:75:d3:8e:
30:9b:1b:c6:c0:f0:92:30:37:20:ef:02:f8:4b:e5:06:b9:9b:
b0:b9:9c:cb:80:8f:36:4e:8d:3a:b0:1a:9c:3e:11:3c:21:26:
ec:3f:a2:72
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYTfFkFaO7ZDg4n5R5NkC+blMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTk4YjFkMGVjY2NjNGY2ZmYxYTdlN2RiODRiNGJiMmY1
NWIwOGQwHhcNMjIxMjA0MjE0MTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzUyMzJkYTEzOGQ3OTUzMmYwZGZhNWQ0NzFiYTdhZWExZjJmMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpL7YgucZce0glbyqckBb1nH5nQ7
PzCYd3PSyVoPX4HjyQy/nwQccmw63SLgvL3YX8X0wf8D+KNHnizKu0e3fmpHL/3i
BfV9v1NEexW+XbRn8O8VoYXqY7Ms9AUFLf9XH/Gwvp2o/ES/tBoKmxAgxkEsbDXh
Vy5R01zfTCNEM841wAlaBRva2t2aDBm64slHkkgktGOU5Zh2atAoXEQoem//eiWT
CqPXiucWMVtzgyo/UOQb0ZyhVcGtONiL7MjL5MsYbi+SRc4zBZQp09a6/Rg3wqQf
Ccg/mjW3D2/DHi/j7dFVlw3pa37hCFWWWGt7c/7WEOSyPAOorGcxp6haMQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFHdSMtoTjXlTLw36XUcbp66h8vNaMB8GA1UdIwQY
MBaAFPypix0OzMxPb/Gn59uEtLsvVbCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzIt
NThmMGYzMjVjMmI4LzEvZDFJeTJoT05lVk12RGZwZFJ4dW5ycUh5ODFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzItNThmMGYzMjVjMmI4
LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQFPhggAwQC
uSlAAwQCuZuMMBQEAgACMA4DBQAqAxQAAwUDKgczwDANBgkqhkiG9w0BAQsFAAOC
AQEAj00bqztujAT/MJR8sOorusn5x9l3rfWOL+Ep0HnfK1V+HYTGIdMiEIrIhtAl
1mZKmwmOJHP9VSn9IF3wTYeUe3m9MAh8V/BTSs/TM6eVvqu99Ib9grgn3LjXk0re
qe/gFg/hojji87A2XAf+BoLki39uIUAfpHzbNyrKiGF4PEQa/dqTE5HphgvEAayK
NzuZBFFqh5aX63xcMWUHs4Lgm3Cjldg8F4wJUKmpVl/oRuOL5xVQGjmiMQFt7+P+
PyM37oezbAUHgtMwurekcVFQR41V01C3ddOOMJsbxsDwkjA3IO8C+EvlBrmbsLmc
y4CPNk6NOrAanD4RPCEm7D+icg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:40 2025 by rpki-client