Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/tqsNrEM3md1A83ODZRG_j_U06Pk.roa
File: tqsNrEM3md1A83ODZRG_j_U06Pk.roa (raw, json)
Hash identifier: UK0TdXXIyzaJRujlzDKsdo3Wx/MuzvS0NnZoAEq9n60=
Subject key identifier: B6:AB:0D:AC:43:37:99:DD:40:F3:73:83:65:11:BF:8F:F5:34:E8:F9
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 169BEF33
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/tqsNrEM3md1A83ODZRG_j_U06Pk.roa
Signing time: Sat 01 Jan 2022 09:06:36 +0000
ROA not before: Sat 01 Jan 2022 09:06:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198380
IP address blocks: 185.242.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379318067 (0x169bef33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jan 1 09:06:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6ab0dac433799dd40f373836511bf8ff534e8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:9e:bc:83:86:eb:c8:bb:db:aa:cd:04:73:
8c:2e:f3:f8:d0:84:d7:d7:c2:11:75:79:d9:ff:c8:
1c:c6:ca:e4:84:3e:dc:ee:bf:1a:0c:dc:0a:cc:14:
1c:19:5c:ee:32:87:07:42:2a:1c:f9:0b:f0:f6:f3:
6d:96:51:fb:f3:9e:5e:ce:b2:d3:8e:1c:f7:2c:21:
91:ef:21:cf:a0:49:af:d9:3b:4e:b6:82:16:04:d5:
4f:ee:26:87:bd:ac:42:9a:d2:f4:41:cf:d4:23:92:
c4:4e:82:bc:b0:63:b4:77:66:db:9c:a0:80:74:86:
53:6c:fc:a5:a7:a5:44:6a:9e:84:38:95:b4:20:02:
d1:87:30:a2:95:92:83:05:e2:a6:92:6c:7c:88:0e:
67:42:19:f0:e6:17:6a:7b:88:c1:f2:92:f2:39:27:
9f:fe:8a:96:13:6a:1c:b1:7b:9c:3b:77:d4:0a:f0:
05:19:51:0f:c0:34:04:44:16:8d:49:50:41:f1:95:
67:6d:da:f8:6a:46:5c:f8:86:70:57:ca:c9:6d:23:
d1:e0:ef:ba:e0:3a:68:69:1b:78:6d:4d:6c:cc:5e:
04:ae:d7:3a:68:a2:38:c3:04:ed:14:79:06:27:28:
94:3b:15:79:56:13:8f:16:6e:36:b1:f1:d4:65:72:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:0D:AC:43:37:99:DD:40:F3:73:83:65:11:BF:8F:F5:34:E8:F9
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/tqsNrEM3md1A83ODZRG_j_U06Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.15.0/24
Signature Algorithm: sha256WithRSAEncryption
30:76:15:10:8f:51:46:b1:4a:96:af:9b:0a:89:34:69:34:07:
71:00:a7:85:db:55:be:af:79:8d:97:00:45:71:4e:7f:47:7b:
7c:f8:16:e8:3c:16:37:56:a6:9c:1e:64:4d:88:a5:54:3b:3b:
22:b0:1b:d7:c7:43:1b:ca:20:1a:04:75:bb:a4:b4:9b:5e:e0:
31:51:6d:95:3d:a4:aa:b4:f7:9e:3a:f9:0b:29:cb:3b:84:25:
bd:1e:1c:33:35:8a:05:da:7e:6c:d6:dd:ee:a5:41:41:74:93:
84:2c:8f:12:1d:b5:01:47:92:1f:f3:3a:87:2a:08:78:26:97:
71:91:f7:2b:8d:f7:4b:6d:f7:1f:5f:e1:06:54:ed:27:70:ff:
98:58:93:0a:49:f2:f9:25:b4:ed:f0:53:63:c6:28:73:34:65:
63:7a:6d:3f:a4:35:3e:53:61:22:4d:de:94:8a:14:99:d0:4c:
8d:cd:8f:17:ac:68:15:c9:f3:52:e4:52:ac:11:1b:cb:14:d9:
27:7d:49:30:6c:73:50:2c:fe:0b:5d:37:0e:22:64:ef:62:f6:
9c:0b:4c:22:8f:be:6e:10:fe:e5:13:e0:db:01:66:29:18:59:
a2:fb:2e:6a:67:f1:4a:1d:c5:42:5a:f7:d0:9c:23:9b:09:2f:
27:41:7f:51
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFpvvMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjVjMGM3MTExZTJmNTdmY2FmODExM2E0MmU1NTZlODgyZGQ1YzRiMB4XDTIyMDEw
MTA5MDYzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZhYjBkYWM0MzM3
OTlkZDQwZjM3MzgzNjUxMWJmOGZmNTM0ZThmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsJnryDhuvIu9uqzQRzjC7z+NCE19fCEXV52f/IHMbK5IQ+
3O6/GgzcCswUHBlc7jKHB0IqHPkL8PbzbZZR+/OeXs6y044c9ywhke8hz6BJr9k7
TraCFgTVT+4mh72sQprS9EHP1COSxE6CvLBjtHdm25yggHSGU2z8paelRGqehDiV
tCAC0YcwopWSgwXippJsfIgOZ0IZ8OYXanuIwfKS8jknn/6KlhNqHLF7nDt31Arw
BRlRD8A0BEQWjUlQQfGVZ23a+GpGXPiGcFfKyW0j0eDvuuA6aGkbeG1NbMxeBK7X
OmiiOMME7RR5BicolDsVeVYTjxZuNrHx1GVyeEsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS2qw2sQzeZ3UDzc4NlEb+P9TTo+TAfBgNVHSMEGDAWgBRyXAxxEeL1f8r4
ETpC5Vbogt1cSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Nsd01jUkhpOVhfSy1CRTZRdVZXNklMZFhFcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvMGM5YjU0LTEzMGEtNDk5YS1iZjlmLTc2MTBhYWJhYTI3NC8x
L3Rxc05yRU0zbWQxQTgzT0RaUkdfal9VMDZQay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
MGM5YjU0LTEzMGEtNDk5YS1iZjlmLTc2MTBhYWJhYTI3NC8xL2Nsd01jUkhpOVhf
Sy1CRTZRdVZXNklMZFhFcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnyDzANBgkqhkiG9w0BAQsFAAOC
AQEAMHYVEI9RRrFKlq+bCok0aTQHcQCnhdtVvq95jZcARXFOf0d7fPgW6DwWN1am
nB5kTYilVDs7IrAb18dDG8ogGgR1u6S0m17gMVFtlT2kqrT3njr5CynLO4QlvR4c
MzWKBdp+bNbd7qVBQXSThCyPEh21AUeSH/M6hyoIeCaXcZH3K433S233H1/hBlTt
J3D/mFiTCkny+SW07fBTY8YoczRlY3ptP6Q1PlNhIk3elIoUmdBMjc2PF6xoFcnz
UuRSrBEbyxTZJ31JMGxzUCz+C103DiJk72L2nAtMIo++bhD+5RPg2wFmKRhZovsu
amfxSh3FQlr30JwjmwkvJ0F/UQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:36 2025 by rpki-client