Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/BihGTcfylMBHNzqtFNTVfl9EqZQ.roa
File: BihGTcfylMBHNzqtFNTVfl9EqZQ.roa (raw, json)
Hash identifier: 2uI/279QMqM62G+qDqukvIoR+GJ0bGmQHrim2G5bnqQ=
Subject key identifier: 06:28:46:4D:C7:F2:94:C0:47:37:3A:AD:14:D4:D5:7E:5F:44:A9:94
Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial: 01856CB8376BFDFFB9BD79D069023D8ACAE7
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/BihGTcfylMBHNzqtFNTVfl9EqZQ.roa
Signing time: Sun 01 Jan 2023 09:44:50 +0000
ROA not before: Sun 01 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.212.124.0/23 maxlen: 23
185.212.124.0/22 maxlen: 22
185.212.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:37:6b:fd:ff:b9:bd:79:d0:69:02:3d:8a:ca:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Validity
Not Before: Jan 1 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0628464dc7f294c047373aad14d4d57e5f44a994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:ec:e2:33:af:52:40:ca:44:cc:98:d5:8e:
02:f5:91:0e:05:e3:c2:27:40:cf:ad:18:36:2c:cd:
50:d7:5e:b1:66:cd:55:1c:aa:9a:51:e7:82:6a:dd:
34:9c:67:86:05:64:cd:dd:ca:b4:0d:0e:c1:62:78:
b4:bd:08:cc:99:2c:d5:a6:d5:68:ea:66:95:f9:69:
4e:b8:cc:de:c3:b7:50:4e:d4:bf:7f:87:11:2e:52:
7d:83:86:f4:29:ba:c0:52:f0:69:fe:1c:7c:c7:50:
e1:1d:15:00:8d:19:6c:ae:a7:17:e5:38:a7:73:4f:
0e:d8:da:ff:5a:17:ae:44:e6:eb:2d:dd:ab:da:d3:
3d:9e:fb:2e:d6:90:45:fe:ff:b0:e5:36:a2:8b:01:
73:5c:a7:22:dc:83:df:a1:45:41:33:df:8e:3b:cf:
82:8d:98:23:5a:09:ed:17:73:0c:72:28:7e:34:f5:
17:a9:d0:22:38:06:ec:29:23:f4:28:0b:9e:0b:1b:
d3:69:88:10:36:f6:82:b5:90:d2:bd:4f:c6:0d:ff:
7f:fc:53:1b:84:9c:45:bf:f5:31:5e:be:bd:b6:de:
d5:fa:02:c7:fb:54:94:53:54:57:6c:e7:0d:b3:cd:
5d:c0:65:26:76:b3:35:16:1e:42:61:44:a3:44:35:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:28:46:4D:C7:F2:94:C0:47:37:3A:AD:14:D4:D5:7E:5F:44:A9:94
X509v3 Authority Key Identifier:
keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/BihGTcfylMBHNzqtFNTVfl9EqZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:db:24:8d:21:7b:44:da:2a:68:b2:72:29:7b:6e:f6:4a:dd:
6d:f4:a3:59:42:0d:67:18:05:6d:69:50:3d:9d:a6:67:9a:9e:
0b:47:4f:02:4c:3a:c3:8c:f0:1e:f6:b5:61:17:aa:ac:94:e6:
58:bc:35:4f:68:53:81:af:5d:fa:b7:5c:63:96:91:e1:df:bb:
63:33:c4:cb:a2:35:62:83:7a:ae:bb:b0:a9:14:c5:c3:2d:96:
29:de:fc:d6:37:ac:52:db:1f:6d:a3:f6:25:bb:71:e0:8f:03:
ef:b4:18:16:91:54:1e:f9:bf:12:4b:aa:55:8b:79:ca:00:aa:
15:0f:2f:04:21:ae:76:ef:d6:18:63:29:48:c8:11:0e:8e:bb:
26:89:8f:2a:da:0c:c4:e8:28:95:91:15:d2:9a:1d:fd:03:21:
a0:28:00:04:79:61:b3:cb:3d:4a:15:d4:b9:dd:91:b4:05:1e:
c8:fd:3e:58:82:5e:71:1e:30:98:a7:ba:43:b2:2c:f7:ea:3e:
5f:f9:37:a2:51:83:f8:bf:24:85:40:9c:1f:a3:fd:6f:53:d4:
90:69:7d:71:eb:40:df:ac:fb:64:45:d3:cb:d6:de:f2:f2:5c:
bf:05:04:1d:01:53:5d:4e:29:c4:27:f2:dd:f2:a2:2a:79:d7:
12:ba:ee:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsuDdr/f+5vXnQaQI9isrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYmM5ZTkxMDMxNmJlMmYwNDMzYWE5NTM5MmNkNjczOWRj
MjZiODYwHhcNMjMwMTAxMDk0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjI4NDY0ZGM3ZjI5NGMwNDczNzNhYWQxNGQ0ZDU3ZTVmNDRhOTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Hs4jOvUkDKRMyY1Y4C9ZEOBePC
J0DPrRg2LM1Q116xZs1VHKqaUeeCat00nGeGBWTN3cq0DQ7BYni0vQjMmSzVptVo
6maV+WlOuMzew7dQTtS/f4cRLlJ9g4b0KbrAUvBp/hx8x1DhHRUAjRlsrqcX5Tin
c08O2Nr/WheuRObrLd2r2tM9nvsu1pBF/v+w5TaiiwFzXKci3IPfoUVBM9+OO8+C
jZgjWgntF3MMcih+NPUXqdAiOAbsKSP0KAueCxvTaYgQNvaCtZDSvU/GDf9//FMb
hJxFv/UxXr69tt7V+gLH+1SUU1RXbOcNs81dwGUmdrM1Fh5CYUSjRDWWOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAYoRk3H8pTARzc6rRTU1X5fRKmUMB8GA1UdIwQY
MBaAFP28npEDFr4vBDOqlTks1nOdwmuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYt
YTE0NmQ2MDQ3MzM3LzEvQmloR1RjZnlsTUJITnpxdEZOVFZmbDlFcVpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYtYTE0NmQ2MDQ3MzM3
LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudR8MA0G
CSqGSIb3DQEBCwUAA4IBAQCk2ySNIXtE2iposnIpe272St1t9KNZQg1nGAVtaVA9
naZnmp4LR08CTDrDjPAe9rVhF6qslOZYvDVPaFOBr136t1xjlpHh37tjM8TLojVi
g3quu7CpFMXDLZYp3vzWN6xS2x9to/Ylu3HgjwPvtBgWkVQe+b8SS6pVi3nKAKoV
Dy8EIa5279YYYylIyBEOjrsmiY8q2gzE6CiVkRXSmh39AyGgKAAEeWGzyz1KFdS5
3ZG0BR7I/T5Ygl5xHjCYp7pDsiz36j5f+TeiUYP4vySFQJwfo/1vU9SQaX1x60Df
rPtkRdPL1t7y8ly/BQQdAVNdTinEJ/Ld8qIqedcSuu4O
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:17 2025 by rpki-client