Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/kzTXx4SAJwvzaq4Gm2mKvf-FqBw.roa
File: kzTXx4SAJwvzaq4Gm2mKvf-FqBw.roa (raw, json)
Hash identifier: sE5n3KtWu3lzQ9nh2ofBND2418nqRgHcHL40IexTK0E=
Subject key identifier: 93:34:D7:C7:84:80:27:0B:F3:6A:AE:06:9B:69:8A:BD:FF:85:A8:1C
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 0187B42D9F676FF090956670C27829BEA415
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/kzTXx4SAJwvzaq4Gm2mKvf-FqBw.roa
Signing time: Mon 24 Apr 2023 16:51:41 +0000
ROA not before: Mon 24 Apr 2023 16:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31549
IP address blocks: 185.110.245.0/24 maxlen: 24
185.110.244.0/24 maxlen: 24
185.110.246.0/24 maxlen: 24
185.110.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:2d:9f:67:6f:f0:90:95:66:70:c2:78:29:be:a4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Apr 24 16:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9334d7c78480270bf36aae069b698abdff85a81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:87:ec:62:90:1b:46:8e:d4:d7:2f:97:77:
9f:6e:10:b7:3f:ee:19:d3:28:f1:93:72:ca:13:ac:
df:c9:88:eb:dd:46:f4:72:f7:c5:fa:87:24:bb:20:
a2:5d:c8:59:c5:ab:03:60:f6:a2:ea:3e:af:7e:a6:
49:1b:6a:33:4a:69:ab:6f:1e:23:e1:ca:5b:8d:d2:
61:52:4a:d9:b3:43:44:af:f2:d1:48:3e:b1:26:9e:
11:45:c4:a2:c3:55:df:f4:e3:1a:40:83:69:7e:68:
44:6c:4c:50:e4:be:30:cb:89:1d:87:7a:cf:4a:d3:
2b:d6:d9:99:f4:7a:20:db:61:af:ed:43:31:a6:e6:
9d:7b:10:e7:20:ab:7f:cb:23:88:fa:c2:09:39:87:
f1:b7:51:8a:fa:33:a9:71:a9:c2:9e:01:0b:1b:5a:
9d:e5:49:11:e7:15:d3:0c:3c:b9:b8:e4:6a:c2:6b:
c6:72:cd:24:a4:9f:86:d1:22:40:a4:13:26:f8:5f:
ce:3d:c1:fb:06:6e:da:e4:54:02:0d:4d:8f:6a:fd:
d8:18:0a:43:61:73:08:2a:d8:42:42:ce:1a:26:e2:
29:14:ae:e3:30:c4:08:3e:f7:9e:2b:e8:d1:45:5a:
30:ae:a5:74:25:d5:4a:80:c7:2c:29:b8:6d:d5:bb:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:34:D7:C7:84:80:27:0B:F3:6A:AE:06:9B:69:8A:BD:FF:85:A8:1C
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/kzTXx4SAJwvzaq4Gm2mKvf-FqBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.244.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:bc:57:56:c1:d1:2e:25:c6:35:94:e5:b8:17:f5:30:2b:63:
a7:1f:b2:5c:2b:41:92:a7:92:43:d4:07:28:e5:b2:66:a4:51:
f5:e4:47:e4:64:83:e5:53:d7:20:76:d4:2d:ca:18:e7:d4:b0:
90:e4:3d:2f:85:a0:d4:c9:90:7e:97:a0:63:52:80:af:59:df:
c8:f8:13:8c:6f:59:6b:3f:0c:4a:c1:96:65:80:9f:19:38:7d:
5c:97:10:98:d8:a5:8c:21:6b:4b:86:20:f0:0d:e4:59:42:e4:
a0:bd:89:22:2d:e1:d6:72:a9:91:0a:58:bb:85:03:01:19:d0:
b2:b8:32:13:f3:a5:92:3e:53:09:2e:76:32:60:72:f2:77:af:
e0:84:8d:79:bb:d5:e2:49:98:61:c2:15:c3:c1:b3:4e:64:22:
fa:ae:cc:da:d8:12:48:0e:1c:5d:60:33:13:96:12:34:96:07:
ba:13:99:71:56:2b:ba:34:cf:c2:4a:55:ee:a2:ef:fa:f0:49:
93:6d:8a:ee:1d:47:4e:64:8e:38:3b:40:3e:c7:ee:e8:70:93:
80:b7:d2:4f:af:88:47:5b:9c:92:d2:9e:2b:11:ad:13:01:a1:
e8:c5:cd:3a:a2:39:40:f2:00:d9:a2:50:a0:93:23:a9:9d:f5:
a7:cd:c6:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe0LZ9nb/CQlWZwwngpvqQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYWM2NzliNDgwYTc4ZWFkNzk3ZjJlMGI3Nzc5ZTU4ZjIy
NzFmMjQwHhcNMjMwNDI0MTY1MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzM0ZDdjNzg0ODAyNzBiZjM2YWFlMDY5YjY5OGFiZGZmODVhODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7SH7GKQG0aO1Ncvl3efbhC3P+4Z
0yjxk3LKE6zfyYjr3Ub0cvfF+ockuyCiXchZxasDYPai6j6vfqZJG2ozSmmrbx4j
4cpbjdJhUkrZs0NEr/LRSD6xJp4RRcSiw1Xf9OMaQINpfmhEbExQ5L4wy4kdh3rP
StMr1tmZ9Hog22Gv7UMxpuadexDnIKt/yyOI+sIJOYfxt1GK+jOpcanCngELG1qd
5UkR5xXTDDy5uORqwmvGcs0kpJ+G0SJApBMm+F/OPcH7Bm7a5FQCDU2Pav3YGApD
YXMIKthCQs4aJuIpFK7jMMQIPveeK+jRRVowrqV0JdVKgMcsKbht1bujnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJM018eEgCcL82quBptpir3/hagcMB8GA1UdIwQY
MBaAFI2sZ5tICnjq15fy4Ld3nljyJx8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTIt
NjAyMGU4YTU2NTU2LzEva3pUWHg0U0FKd3Z6YXE0R20ybUt2Zi1GcUJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTItNjAyMGU4YTU2NTU2
LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW70MA0G
CSqGSIb3DQEBCwUAA4IBAQDAvFdWwdEuJcY1lOW4F/UwK2OnH7JcK0GSp5JD1Aco
5bJmpFH15EfkZIPlU9cgdtQtyhjn1LCQ5D0vhaDUyZB+l6BjUoCvWd/I+BOMb1lr
PwxKwZZlgJ8ZOH1clxCY2KWMIWtLhiDwDeRZQuSgvYkiLeHWcqmRCli7hQMBGdCy
uDIT86WSPlMJLnYyYHLyd6/ghI15u9XiSZhhwhXDwbNOZCL6rsza2BJIDhxdYDMT
lhI0lge6E5lxViu6NM/CSlXuou/68EmTbYruHUdOZI44O0A+x+7ocJOAt9JPr4hH
W5yS0p4rEa0TAaHoxc06ojlA8gDZolCgkyOpnfWnzcZz
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:00:05 2025 by rpki-client