Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/h1fGNyQblRG4s3SuuSw1kEpD-yY.roa
File: h1fGNyQblRG4s3SuuSw1kEpD-yY.roa (raw, json)
Hash identifier: FZUeEa0B+uXAy9ecQOMGEwcTvEGfimJONKSUUrYhmNI=
Subject key identifier: 87:57:C6:37:24:1B:95:11:B8:B3:74:AE:B9:2C:35:90:4A:43:FB:26
Certificate issuer: /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial: 065205CE
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/h1fGNyQblRG4s3SuuSw1kEpD-yY.roa
Signing time: Sat 01 Jan 2022 07:02:26 +0000
ROA not before: Sat 01 Jan 2022 07:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207520
IP address blocks: 185.211.40.0/24 maxlen: 24
188.116.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106038734 (0x65205ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Validity
Not Before: Jan 1 07:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8757c637241b9511b8b374aeb92c35904a43fb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:dc:de:90:e9:2d:b4:fc:39:50:45:0f:59:
08:bf:06:e7:fe:55:02:ba:2b:24:b5:f5:10:12:95:
be:83:c5:43:f0:0e:bc:94:c4:21:d6:7f:bc:fe:cb:
d4:09:e6:1a:e4:c8:43:43:ff:03:1a:76:14:16:9d:
fa:44:51:d9:0e:92:6e:33:e8:44:a9:57:2a:fd:62:
83:3e:47:78:fe:c2:07:fd:0d:c2:7d:e3:7b:55:c3:
22:72:bb:bf:97:ae:31:85:ff:01:62:9c:2a:20:72:
c0:74:fb:db:c5:08:2b:58:3f:44:01:67:95:dd:b2:
47:38:c5:94:82:71:8b:29:52:7d:23:b1:f6:f3:f9:
e5:31:c9:b2:65:a7:76:c3:83:fa:d3:c4:78:7f:6b:
43:73:15:0f:4c:56:d3:7e:1b:01:f8:60:48:c4:64:
c0:e3:72:35:12:d5:c7:4d:67:8c:fe:e3:77:d6:6a:
89:2f:a4:9b:c9:66:fe:bb:ae:e8:9f:cc:38:d3:85:
35:b6:0d:53:0b:0b:d0:ee:20:68:bf:30:b7:23:3f:
17:8c:d6:85:7b:16:bb:b1:94:64:9e:f2:4c:29:5f:
98:58:d0:4d:92:e2:3f:83:ad:ef:63:c2:3e:a4:24:
5f:ec:7f:fe:77:04:0c:dc:30:04:c1:c7:ce:fa:f6:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:57:C6:37:24:1B:95:11:B8:B3:74:AE:B9:2C:35:90:4A:43:FB:26
X509v3 Authority Key Identifier:
keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/h1fGNyQblRG4s3SuuSw1kEpD-yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.40.0/24
188.116.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:04:aa:ad:12:ce:64:d6:4a:52:b9:73:c5:8c:cb:4a:35:ed:
ad:e0:fe:e2:da:c6:45:c0:51:ec:f5:8d:2d:55:b3:08:12:46:
5f:31:45:ca:db:02:91:aa:11:7d:39:a2:c8:2f:5a:96:53:47:
50:93:2d:43:b4:cd:74:88:36:2f:fa:cb:a3:d8:69:a4:15:86:
56:0b:c4:99:bc:71:05:74:e3:08:ce:60:14:6a:86:ff:5a:3d:
01:ce:4e:41:09:b3:e3:49:e7:4b:d2:ac:33:63:aa:f0:23:1d:
31:09:98:2e:40:96:99:8a:7c:6a:10:91:cc:90:e8:8f:10:f9:
9d:19:88:d0:78:c3:25:a7:46:d2:9f:fe:07:6a:b1:83:7a:cb:
32:4e:19:4b:65:fb:ac:c6:8a:bc:aa:24:58:70:bf:51:b3:89:
71:c4:c5:6b:8b:26:9b:45:42:0e:ae:8a:b8:47:eb:17:cb:11:
1c:ab:a0:dd:a0:e6:36:ec:ff:e2:26:dd:c4:60:78:31:b3:01:
13:c4:dc:d1:ee:3e:de:b2:e4:4d:ef:bc:41:3f:c3:70:96:70:
bd:f3:f0:81:62:c6:c8:44:5e:fd:ae:a5:c1:31:b9:64:8f:bf:
65:cc:62:b0:33:86:64:20:18:5e:72:1d:a3:d3:bb:46:5e:25:
1c:ed:7e:60
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBlIFzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
Mzg3NmJmYmI1YWU4Y2ZlMTE2YmI1ZjVmMjg2NGExMTYyMTNhYTRmMB4XDTIyMDEw
MTA3MDIyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODc1N2M2MzcyNDFi
OTUxMWI4YjM3NGFlYjkyYzM1OTA0YTQzZmIyNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkT3N6Q6S20/DlQRQ9ZCL8G5/5VArorJLX1EBKVvoPFQ/AO
vJTEIdZ/vP7L1AnmGuTIQ0P/Axp2FBad+kRR2Q6SbjPoRKlXKv1igz5HeP7CB/0N
wn3je1XDInK7v5euMYX/AWKcKiBywHT728UIK1g/RAFnld2yRzjFlIJxiylSfSOx
9vP55THJsmWndsOD+tPEeH9rQ3MVD0xW034bAfhgSMRkwONyNRLVx01njP7jd9Zq
iS+km8lm/ruu6J/MONOFNbYNUwsL0O4gaL8wtyM/F4zWhXsWu7GUZJ7yTClfmFjQ
TZLiP4Ot72PCPqQkX+x//ncEDNwwBMHHzvr2fDsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSHV8Y3JBuVEbizdK65LDWQSkP7JjAfBgNVHSMEGDAWgBSDh2v7ta6M/hFr
tfXyhkoRYhOqTzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2c0ZHItN1d1alA0UmE3WDE4b1pLRVdJVHFrOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDUvNDJiZDVkLTRjM2UtNDNmNC1hODU3LTdlNzA5YWYwNTdkNS8x
L2gxZkdOeVFibFJHNHMzU3V1U3cxa0VwRC15WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUv
NDJiZDVkLTRjM2UtNDNmNC1hODU3LTdlNzA5YWYwNTdkNS8xL2c0ZHItN1d1alA0
UmE3WDE4b1pLRVdJVHFrOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALnTKAMEALx0KTANBgkqhkiG9w0B
AQsFAAOCAQEAXwSqrRLOZNZKUrlzxYzLSjXtreD+4trGRcBR7PWNLVWzCBJGXzFF
ytsCkaoRfTmiyC9allNHUJMtQ7TNdIg2L/rLo9hppBWGVgvEmbxxBXTjCM5gFGqG
/1o9Ac5OQQmz40nnS9KsM2Oq8CMdMQmYLkCWmYp8ahCRzJDojxD5nRmI0HjDJadG
0p/+B2qxg3rLMk4ZS2X7rMaKvKokWHC/UbOJccTFa4smm0VCDq6KuEfrF8sRHKug
3aDmNuz/4ibdxGB4MbMBE8Tc0e4+3rLkTe+8QT/DcJZwvfPwgWLGyERe/a6lwTG5
ZI+/ZcxisDOGZCAYXnIdo9O7Rl4lHO1+YA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:16 2025 by rpki-client