Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/sBBKPk9aGeJ0yAZLg8xdHeJmvOQ.roa
File: sBBKPk9aGeJ0yAZLg8xdHeJmvOQ.roa (raw, json)
Hash identifier: xSlMijeconsgMdl8+BVR1lViJhp2QvhjyLNKdjRErig=
Subject key identifier: B0:10:4A:3E:4F:5A:19:E2:74:C8:06:4B:83:CC:5D:1D:E2:66:BC:E4
Certificate issuer: /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial: 0185724C704A5854112E6F830DBFC9B87AE1
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/sBBKPk9aGeJ0yAZLg8xdHeJmvOQ.roa
Signing time: Mon 02 Jan 2023 11:44:50 +0000
ROA not before: Mon 02 Jan 2023 11:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213093
IP address blocks: 185.184.63.0/24 maxlen: 24
185.184.62.0/24 maxlen: 24
185.184.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:70:4a:58:54:11:2e:6f:83:0d:bf:c9:b8:7a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Validity
Not Before: Jan 2 11:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0104a3e4f5a19e274c8064b83cc5d1de266bce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:21:35:a0:35:3e:94:a0:70:35:29:64:d3:
3f:a9:96:31:f0:81:35:15:1c:86:53:98:1c:7d:5e:
6f:e1:e3:8e:e7:68:84:6d:e8:47:d8:8c:ea:97:e9:
5c:92:e8:8d:6e:c8:92:65:60:cc:3e:cb:73:a5:f6:
f2:49:30:0f:3f:58:de:2e:59:23:35:74:ce:ad:49:
73:2b:ee:3a:ee:1a:a7:09:4c:73:68:35:c8:70:f9:
27:03:c9:00:8d:92:5a:04:2f:dd:4b:3e:85:d7:ab:
7c:93:80:bc:bd:e6:9d:4e:64:43:0a:c2:ae:c2:e4:
c0:fb:84:e8:70:18:c2:7a:ea:bf:5d:c2:18:d0:f8:
42:de:1b:e9:ac:0d:4e:d9:20:6f:8c:36:cd:65:75:
31:ef:ad:4d:83:0f:7b:67:d2:82:e5:77:27:59:b5:
22:88:72:11:4c:cc:40:f0:70:9f:54:44:ed:a5:d7:
b6:ee:1f:32:06:ac:6e:e4:1c:f2:c7:49:ea:21:a0:
7e:11:e3:11:93:fc:4c:bc:5d:df:71:99:54:4a:ce:
9f:31:77:aa:72:4f:57:6a:7f:8c:52:4a:a3:1d:a9:
d3:7b:82:3d:db:dc:d1:6d:92:bd:97:50:e7:d8:b0:
df:75:81:00:36:d7:ec:5b:7e:bf:cb:86:8f:5c:77:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:10:4A:3E:4F:5A:19:E2:74:C8:06:4B:83:CC:5D:1D:E2:66:BC:E4
X509v3 Authority Key Identifier:
keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/sBBKPk9aGeJ0yAZLg8xdHeJmvOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.62.0/23
Signature Algorithm: sha256WithRSAEncryption
27:b2:3d:e1:6f:f9:cb:7f:78:24:a4:16:ad:af:60:1f:37:c6:
18:c3:eb:93:13:fb:f1:20:3b:56:82:f3:18:57:32:4b:fe:6d:
77:6c:da:e4:a6:49:f5:4e:fc:1e:28:28:07:d7:fe:30:d6:2a:
f7:a4:ba:c1:26:d3:c0:4a:b9:8b:b0:cd:02:31:62:66:d1:0e:
8f:dc:02:3b:6e:2b:5e:51:d4:9d:54:d0:d3:8f:5b:93:17:b5:
a8:c9:fc:40:1c:31:7a:23:d2:71:e2:8f:02:82:72:47:84:55:
75:8e:56:7d:d9:de:f3:ab:8e:5c:fe:fc:92:8f:b7:11:46:4d:
61:65:56:a9:5a:43:b1:b0:3a:16:36:f6:e8:69:15:e4:51:c3:
73:ef:1c:8d:21:37:0d:9a:14:91:8a:e6:2e:f4:c2:7a:53:1a:
c2:68:e9:d0:78:20:30:c3:2a:0e:ab:52:bc:03:43:aa:99:59:
54:38:31:4e:3f:ec:e3:6a:00:4c:f6:80:e7:7a:bf:60:dd:11:
6c:e8:f3:61:ce:63:51:9c:ec:bb:35:eb:4b:02:b5:3a:6a:5a:
4b:c0:5b:3c:f3:11:8c:64:df:73:40:16:34:e7:49:9d:c4:b8:
4a:b0:bb:81:29:9c:3d:39:70:2f:81:4e:0d:04:6a:2f:a9:3d:
77:bc:fb:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyTHBKWFQRLm+DDb/JuHrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNTY2NGUwMjkzNmNiNWI1NDU0ZDU5NWM1MzgyYjdlN2Ew
Yzc5NDQwHhcNMjMwMTAyMTE0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDEwNGEzZTRmNWExOWUyNzRjODA2NGI4M2NjNWQxZGUyNjZiY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAchNaA1PpSgcDUpZNM/qZYx8IE1
FRyGU5gcfV5v4eOO52iEbehH2Izql+lckuiNbsiSZWDMPstzpfbySTAPP1jeLlkj
NXTOrUlzK+467hqnCUxzaDXIcPknA8kAjZJaBC/dSz6F16t8k4C8veadTmRDCsKu
wuTA+4TocBjCeuq/XcIY0PhC3hvprA1O2SBvjDbNZXUx761Ngw97Z9KC5XcnWbUi
iHIRTMxA8HCfVETtpde27h8yBqxu5Bzyx0nqIaB+EeMRk/xMvF3fcZlUSs6fMXeq
ck9Xan+MUkqjHanTe4I929zRbZK9l1Dn2LDfdYEANtfsW36/y4aPXHdXfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLAQSj5PWhnidMgGS4PMXR3iZrzkMB8GA1UdIwQY
MBaAFC5WZOApNstbVFTVlcU4K356DHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yN2M5MTktY2NjZS00NmE5LTg0YjMt
ZWY4MWZjYTYzMDI5LzEvc0JCS1BrOWFHZUoweUFaTGc4eGRIZUptdk9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yN2M5MTktY2NjZS00NmE5LTg0YjMtZWY4MWZjYTYzMDI5
LzEvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubg+MA0G
CSqGSIb3DQEBCwUAA4IBAQAnsj3hb/nLf3gkpBatr2AfN8YYw+uTE/vxIDtWgvMY
VzJL/m13bNrkpkn1TvweKCgH1/4w1ir3pLrBJtPASrmLsM0CMWJm0Q6P3AI7bite
UdSdVNDTj1uTF7WoyfxAHDF6I9Jx4o8CgnJHhFV1jlZ92d7zq45c/vySj7cRRk1h
ZVapWkOxsDoWNvboaRXkUcNz7xyNITcNmhSRiuYu9MJ6UxrCaOnQeCAwwyoOq1K8
A0OqmVlUODFOP+zjagBM9oDner9g3RFs6PNhzmNRnOy7NetLArU6alpLwFs88xGM
ZN9zQBY050mdxLhKsLuBKZw9OXAvgU4NBGovqT13vPv+
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:48:12 2025 by rpki-client