Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/wDdOe3Cw_sUjXYHgLAGYaVSAj_8.roa
File: wDdOe3Cw_sUjXYHgLAGYaVSAj_8.roa (raw, json)
Hash identifier: JqL/lOB8u+fUMBHI/I4GpZblr216anEmsdkimDXtQZU=
Subject key identifier: C0:37:4E:7B:70:B0:FE:C5:23:5D:81:E0:2C:01:98:69:54:80:8F:FF
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 01845ED059FC08A5FCB2B5750F254A3B5582
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/wDdOe3Cw_sUjXYHgLAGYaVSAj_8.roa
Signing time: Wed 09 Nov 2022 23:53:43 +0000
ROA not before: Wed 09 Nov 2022 23:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 185.191.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:d0:59:fc:08:a5:fc:b2:b5:75:0f:25:4a:3b:55:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Nov 9 23:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0374e7b70b0fec5235d81e02c01986954808fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d5:42:72:5c:1b:0e:a1:b3:cc:cf:86:ed:40:
ec:4f:88:3f:98:ff:4b:2d:49:1f:fe:dc:c0:95:23:
09:35:ee:ce:35:8a:ea:11:8b:b2:57:7d:72:59:58:
d4:8f:5a:9c:44:8e:f7:03:b3:74:7c:1c:9a:33:b0:
5d:4c:aa:ac:ba:97:f5:7c:e4:18:08:cb:e2:0b:ab:
d3:37:2a:88:df:ab:6a:2a:2b:14:6b:bc:34:94:a5:
d1:bb:08:92:4e:02:53:61:d1:e0:b6:d5:e1:66:a4:
de:6c:96:41:3b:18:05:51:48:5b:1b:a9:64:62:a8:
f0:13:53:33:89:0c:64:0f:cb:3f:65:ab:b6:6c:2f:
5a:b5:af:c3:77:c2:65:8e:44:81:86:ad:d9:1d:7d:
34:87:1a:e5:90:b6:a7:65:58:22:e8:5c:ab:91:4a:
a2:33:11:c3:21:fe:13:74:34:1b:3b:2c:47:ce:4a:
0d:a4:f6:a9:d1:f9:7a:20:4f:f4:35:df:5a:d1:3b:
ea:a1:9b:db:0d:6f:83:98:64:60:da:22:68:b7:87:
36:d0:c7:1b:5d:6e:0b:16:3d:02:a2:6c:35:cb:72:
e2:9a:24:9a:94:ce:45:4a:58:42:95:52:a0:3a:c4:
f4:8f:24:df:a5:b1:ba:2f:22:f6:ba:5b:1f:ce:c2:
17:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:37:4E:7B:70:B0:FE:C5:23:5D:81:E0:2C:01:98:69:54:80:8F:FF
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/wDdOe3Cw_sUjXYHgLAGYaVSAj_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.145.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8b:1c:c2:d6:56:d7:c7:b1:c6:69:4f:5b:d1:9e:d7:15:83:
f3:52:30:54:fa:99:8a:e5:d3:98:1b:a3:dd:24:55:e2:56:b3:
d1:ac:38:f3:f0:03:99:88:19:a1:de:ef:0f:c8:34:c1:75:a4:
de:b8:30:36:b6:9c:dc:8c:ee:72:4a:9a:a5:83:be:84:97:0b:
02:d2:df:17:5d:0a:17:4e:c0:b1:fe:3a:72:14:c2:28:e8:bd:
3b:62:f2:90:b4:15:38:b6:45:d3:1e:25:d3:36:e0:13:3e:35:
2f:4f:c1:79:74:f5:3e:ea:98:d8:0e:0a:c3:ba:0c:22:67:f5:
dc:71:dd:7c:1d:dd:cd:24:76:f4:c4:4f:0e:98:44:36:21:3f:
3f:9a:3f:7e:99:fb:e5:68:9e:cf:28:9a:95:28:92:7c:ce:e0:
51:da:2e:45:26:8e:aa:fc:ca:40:7d:02:04:7a:c1:33:8a:c3:
54:fd:0f:05:b2:a2:63:15:f0:bb:9c:1b:ff:04:a4:e1:55:54:
a5:c1:e3:e5:34:94:ac:72:55:8e:78:c1:11:24:a9:bd:c0:cf:
33:f2:2e:d6:89:16:11:29:ad:07:11:6b:59:c4:f8:db:ff:1a:
ec:12:0a:ec:4f:13:92:ab:fd:95:5b:c3:48:aa:af:3e:98:a7:
da:da:e8:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRe0Fn8CKX8srV1DyVKO1WCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy
Yjg3OTYwHhcNMjIxMTA5MjM1MzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDM3NGU3YjcwYjBmZWM1MjM1ZDgxZTAyYzAxOTg2OTU0ODA4ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNVCclwbDqGzzM+G7UDsT4g/mP9L
LUkf/tzAlSMJNe7ONYrqEYuyV31yWVjUj1qcRI73A7N0fByaM7BdTKqsupf1fOQY
CMviC6vTNyqI36tqKisUa7w0lKXRuwiSTgJTYdHgttXhZqTebJZBOxgFUUhbG6lk
YqjwE1MziQxkD8s/Zau2bC9ata/Dd8JljkSBhq3ZHX00hxrlkLanZVgi6FyrkUqi
MxHDIf4TdDQbOyxHzkoNpPap0fl6IE/0Nd9a0TvqoZvbDW+DmGRg2iJot4c20Mcb
XW4LFj0Comw1y3LimiSalM5FSlhClVKgOsT0jyTfpbG6LyL2ulsfzsIXCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMA3TntwsP7FI12B4CwBmGlUgI//MB8GA1UdIwQY
MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt
NjFiNzMzNTRhYmRiLzEvd0RkT2UzQ3dfc1VqWFlIZ0xBR1lhVlNBal84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi
LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub+RMA0G
CSqGSIb3DQEBCwUAA4IBAQAGixzC1lbXx7HGaU9b0Z7XFYPzUjBU+pmK5dOYG6Pd
JFXiVrPRrDjz8AOZiBmh3u8PyDTBdaTeuDA2tpzcjO5ySpqlg76ElwsC0t8XXQoX
TsCx/jpyFMIo6L07YvKQtBU4tkXTHiXTNuATPjUvT8F5dPU+6pjYDgrDugwiZ/Xc
cd18Hd3NJHb0xE8OmEQ2IT8/mj9+mfvlaJ7PKJqVKJJ8zuBR2i5FJo6q/MpAfQIE
esEzisNU/Q8FsqJjFfC7nBv/BKThVVSlwePlNJSsclWOeMERJKm9wM8z8i7WiRYR
Ka0HEWtZxPjb/xrsEgrsTxOSq/2VW8NIqq8+mKfa2ugD
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:59 2025 by rpki-client