Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/KEVp4vUpb2UZ9GtR2WL8MH616gw.roa
File: KEVp4vUpb2UZ9GtR2WL8MH616gw.roa (raw, json)
Hash identifier: my5LJHyD3hLm6Hbcs8UciSsOsq7hLDpE9nOEzDuUnDE=
Subject key identifier: 28:45:69:E2:F5:29:6F:65:19:F4:6B:51:D9:62:FC:30:7E:B5:EA:0C
Certificate issuer: /CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Certificate serial: 08CEBCF6
Authority key identifier: 08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/KEVp4vUpb2UZ9GtR2WL8MH616gw.roa
Signing time: Sat 01 Jan 2022 14:55:32 +0000
ROA not before: Sat 01 Jan 2022 14:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20559
IP address blocks: 185.157.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147766518 (0x8cebcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Validity
Not Before: Jan 1 14:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=284569e2f5296f6519f46b51d962fc307eb5ea0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:85:59:91:94:5f:42:32:93:02:7c:0d:a4:
cb:e4:5d:7b:3d:85:73:8a:16:9a:23:db:5a:fc:21:
d2:84:c1:92:bf:27:73:0b:66:03:d9:ee:ab:f6:df:
de:c6:67:a4:6e:0f:13:87:85:6d:96:06:d1:70:7b:
6a:91:07:72:65:63:b1:38:17:6f:f6:e4:af:bd:d4:
ca:e0:e6:cb:1f:06:34:34:ff:15:70:09:67:b3:38:
c3:31:d9:7e:3d:d6:ca:6a:94:49:40:68:1e:3d:b9:
d6:39:89:6e:d6:64:ae:f8:20:dc:1a:93:87:46:73:
20:25:98:11:7b:fc:8e:88:e8:90:3d:d4:16:4e:a6:
66:16:82:64:aa:56:f1:84:ec:d3:d3:1b:b3:9d:7d:
e0:8b:ad:e9:8f:89:67:23:6a:9d:3e:73:3f:f8:e7:
cf:5a:84:6d:f9:41:59:d6:39:44:ba:47:38:a2:ed:
dc:b7:a1:62:09:0a:36:06:3d:2a:e6:a9:53:bb:bd:
d1:36:f7:9d:79:33:fc:9d:95:22:94:57:43:59:2b:
f9:87:29:1b:00:b7:69:d0:d0:6c:cc:3e:31:66:ba:
fa:c6:d8:ef:a4:b3:a6:7a:90:22:c3:82:a6:26:55:
5e:7f:88:0e:e0:dd:24:b6:3c:ef:84:bb:d9:24:f6:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:45:69:E2:F5:29:6F:65:19:F4:6B:51:D9:62:FC:30:7E:B5:EA:0C
X509v3 Authority Key Identifier:
keyid:08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/KEVp4vUpb2UZ9GtR2WL8MH616gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.145.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:92:a1:77:d3:f8:02:ab:4c:7d:40:23:de:ef:9d:65:eb:a0:
f6:2f:7f:81:15:15:03:69:a6:d3:dd:d4:a6:1b:f9:1a:1b:20:
0c:49:d7:1f:48:c8:bb:0e:79:4e:c2:28:74:6e:95:46:3f:66:
91:71:85:51:80:34:07:b7:38:6a:3b:58:b4:1f:40:05:a2:70:
9c:32:0e:ee:1c:6b:a0:c0:b6:4c:14:2f:bf:ec:f7:a2:fc:b1:
23:77:08:50:1f:e8:53:ad:0a:5c:16:9d:89:49:70:34:0e:66:
89:a3:2b:e9:b7:57:0e:bf:3e:73:a8:55:20:8a:03:5e:04:7d:
fa:12:a1:c6:26:2e:9f:25:49:9c:93:70:da:e4:3a:f5:8f:40:
f4:79:b8:86:dd:bd:d3:4b:64:98:d5:8e:18:13:98:26:b0:9a:
72:60:ad:a8:72:8b:31:8c:eb:89:5e:14:07:60:2a:ad:df:61:
ee:e0:de:0b:96:21:b3:4e:83:ad:14:a5:28:d5:08:42:14:3d:
18:57:c7:66:91:df:94:22:a4:6a:ea:c2:5b:4b:0b:e9:2a:1b:
2b:a8:09:11:14:69:04:7c:af:ff:8c:cc:4a:5d:e7:1f:33:be:
0d:04:68:e1:de:8d:6e:1b:83:4c:3f:b6:a9:d5:17:48:41:04:
08:4e:65:9a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECM689jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ODJhNmUzNzdmMWM4ODVhNmQ3M2YzZjU2OWZkMDZkN2VhNGM3YTQ1MB4XDTIyMDEw
MTE0NTUzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjg0NTY5ZTJmNTI5
NmY2NTE5ZjQ2YjUxZDk2MmZjMzA3ZWI1ZWEwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJsDhVmRlF9CMpMCfA2ky+Rdez2Fc4oWmiPbWvwh0oTBkr8n
cwtmA9nuq/bf3sZnpG4PE4eFbZYG0XB7apEHcmVjsTgXb/bkr73UyuDmyx8GNDT/
FXAJZ7M4wzHZfj3WymqUSUBoHj251jmJbtZkrvgg3BqTh0ZzICWYEXv8jojokD3U
Fk6mZhaCZKpW8YTs09Mbs5194Iut6Y+JZyNqnT5zP/jnz1qEbflBWdY5RLpHOKLt
3LehYgkKNgY9KuapU7u90Tb3nXkz/J2VIpRXQ1kr+YcpGwC3adDQbMw+MWa6+sbY
76SzpnqQIsOCpiZVXn+IDuDdJLY874S72ST2U0kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQoRWni9SlvZRn0a1HZYvwwfrXqDDAfBgNVHSMEGDAWgBQIKm43fxyIWm1z
8/Vp/QbX6kx6RTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NDcHVOMzhjaUZwdGNfUDFhZjBHMS1wTWVrVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvMThmZWIzLWYzZDItNDlmMy05MGQyLTlkNGIxNmI1OWRlNi8x
L0tFVnA0dlVwYjJVWjlHdFIyV0w4TUg2MTZndy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
MThmZWIzLWYzZDItNDlmMy05MGQyLTlkNGIxNmI1OWRlNi8xL0NDcHVOMzhjaUZw
dGNfUDFhZjBHMS1wTWVrVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmdkTANBgkqhkiG9w0BAQsFAAOC
AQEAbJKhd9P4AqtMfUAj3u+dZeug9i9/gRUVA2mm093Uphv5GhsgDEnXH0jIuw55
TsIodG6VRj9mkXGFUYA0B7c4ajtYtB9ABaJwnDIO7hxroMC2TBQvv+z3ovyxI3cI
UB/oU60KXBadiUlwNA5miaMr6bdXDr8+c6hVIIoDXgR9+hKhxiYunyVJnJNw2uQ6
9Y9A9Hm4ht2900tkmNWOGBOYJrCacmCtqHKLMYzriV4UB2Aqrd9h7uDeC5Yhs06D
rRSlKNUIQhQ9GFfHZpHflCKkaurCW0sL6SobK6gJERRpBHyv/4zMSl3nHzO+DQRo
4d6NbhuDTD+2qdUXSEEECE5lmg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:40 2025 by rpki-client