Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/vYHMLI91d72eAaomKpNYpQ_oSA0.roa
File: vYHMLI91d72eAaomKpNYpQ_oSA0.roa (raw, json)
Hash identifier: Ks7AX4TKtTugYNW/TZetXgOGgeDs0ySc9sDKBWGonU4=
Subject key identifier: BD:81:CC:2C:8F:75:77:BD:9E:01:AA:26:2A:93:58:A5:0F:E8:48:0D
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 02D872B4
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/vYHMLI91d72eAaomKpNYpQ_oSA0.roa
Signing time: Fri 29 Apr 2022 11:50:15 +0000
ROA not before: Fri 29 Apr 2022 11:50:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25335
IP address blocks: 185.105.56.0/23 maxlen: 23
185.105.58.0/23 maxlen: 23
185.122.130.0/23 maxlen: 23
185.116.172.0/23 maxlen: 23
185.130.36.0/23 maxlen: 23
185.127.56.0/23 maxlen: 23
185.130.38.0/23 maxlen: 23
185.116.175.0/24 maxlen: 24
185.127.58.0/23 maxlen: 23
185.129.10.0/23 maxlen: 23
185.129.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47739572 (0x2d872b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Apr 29 11:50:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd81cc2c8f7577bd9e01aa262a9358a50fe8480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:96:ed:6b:f8:97:88:50:82:19:32:bb:1f:
7f:3f:60:3c:d0:7f:b5:1d:ff:8a:c0:56:6e:22:b0:
45:93:3a:0b:90:43:bf:e6:a5:e1:36:2f:45:9f:2f:
0d:84:4b:8e:22:81:78:23:f6:83:f3:8c:c4:55:f9:
a0:53:cb:64:ed:fa:b3:e7:3e:c1:6d:d5:f6:f7:d3:
38:e5:d4:5e:5f:c6:d3:30:31:fa:b4:92:31:48:3a:
e4:0a:97:36:4d:2e:ae:aa:ba:3b:8b:2f:21:af:4d:
80:40:44:4b:e9:26:fe:83:22:e7:13:bb:9c:59:6b:
0c:f2:e5:e8:69:c2:96:68:70:52:2f:26:3d:ea:3b:
31:cd:cc:39:32:9c:24:d4:82:c5:35:48:ed:ac:bb:
eb:9c:87:6d:2f:a1:15:6e:09:a8:3e:8f:65:38:c9:
7a:04:97:2e:78:e2:56:18:ba:13:bb:66:53:6e:69:
ff:e2:29:59:00:e6:57:3c:d9:90:ab:52:15:dd:b0:
95:99:92:7e:fb:9b:a5:00:d2:b1:dc:1d:38:b1:be:
7a:ac:a7:11:0f:73:2d:16:9a:38:a2:65:28:4f:55:
b1:10:23:b2:27:2a:8b:6e:9f:6e:6c:b4:fb:73:e7:
d9:e3:4e:ac:2f:c9:7d:bd:af:95:67:dc:4e:a8:b8:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:CC:2C:8F:75:77:BD:9E:01:AA:26:2A:93:58:A5:0F:E8:48:0D
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/vYHMLI91d72eAaomKpNYpQ_oSA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.56.0/22
185.116.172.0/23
185.116.175.0/24
185.122.130.0/23
185.127.56.0/22
185.129.8.0/22
185.130.36.0/22
Signature Algorithm: sha256WithRSAEncryption
60:47:d3:3d:64:d9:b3:3c:1a:f6:1c:be:85:a2:a0:22:df:b7:
bf:34:14:9d:8c:3f:c7:c6:a2:ff:87:67:c7:c5:8d:e0:8f:2c:
04:a8:14:70:9f:b9:6e:6b:63:96:2f:75:dc:16:14:59:e7:b6:
e2:07:ab:e0:75:32:5c:e1:af:4e:cc:b9:af:eb:77:93:63:ec:
6e:0c:2e:3f:9d:93:aa:37:09:4b:ef:ff:a5:ac:9e:c7:13:f7:
40:44:bc:3c:b0:e0:eb:9a:95:fa:0c:1e:0e:d0:42:fb:19:63:
f3:c0:2f:36:ec:4d:90:18:5e:a6:8f:68:f2:10:30:82:3d:8a:
29:94:fa:e3:92:f2:d2:0b:4c:37:43:ff:f0:b0:50:82:43:fd:
15:3a:6b:ae:31:6d:fe:08:43:6f:44:43:9f:63:08:34:5e:44:
7f:51:7d:7f:39:a6:c7:8f:f5:c7:7e:e0:cc:7d:eb:d1:31:3d:
92:4e:e0:c2:b0:0f:4f:7d:5b:12:06:ef:b2:a5:86:16:80:df:
7f:92:f0:9d:9f:57:50:f3:82:57:65:41:c2:65:24:69:92:ae:
ca:db:37:1e:e1:d8:22:11:6c:a8:91:a4:b1:8b:9b:b8:c8:db:
10:3e:ab:e2:45:e5:4a:c5:6d:cc:59:f3:e2:cb:f2:2f:8c:ee:
cd:b5:34:b4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEAthytDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OWUyYWYwOGNmNmUxMmUyMzA0ZmIzYmRlYzY0Y2ZiY2VkYWE4NTIyMB4XDTIyMDQy
OTExNTAxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmQ4MWNjMmM4Zjc1
NzdiZDllMDFhYTI2MmE5MzU4YTUwZmU4NDgwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJMAlu1r+JeIUIIZMrsffz9gPNB/tR3/isBWbiKwRZM6C5BD
v+al4TYvRZ8vDYRLjiKBeCP2g/OMxFX5oFPLZO36s+c+wW3V9vfTOOXUXl/G0zAx
+rSSMUg65AqXNk0urqq6O4svIa9NgEBES+km/oMi5xO7nFlrDPLl6GnClmhwUi8m
Peo7Mc3MOTKcJNSCxTVI7ay765yHbS+hFW4JqD6PZTjJegSXLnjiVhi6E7tmU25p
/+IpWQDmVzzZkKtSFd2wlZmSfvubpQDSsdwdOLG+eqynEQ9zLRaaOKJlKE9VsRAj
sicqi26fbmy0+3Pn2eNOrC/Jfb2vlWfcTqi4d+cCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBS9gcwsj3V3vZ4BqiYqk1ilD+hIDTAfBgNVHSMEGDAWgBQJ4q8Iz24S4jBP
s73sZM+87aqFIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NlS3ZDTTl1RXVJd1Q3Tzk3R1RQdk8ycWhTSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGEvMTlkM2NkLTY2MTAtNDNmMC04M2ViLTcwYTFhZjUxZGZiZS8x
L3ZZSE1MSTkxZDcyZUFhb21LcE5ZcFFfb1NBMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEv
MTlkM2NkLTY2MTAtNDNmMC04M2ViLTcwYTFhZjUxZGZiZS8xL0NlS3ZDTTl1RXVJ
d1Q3Tzk3R1RQdk8ycWhTSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEArlpOAMEAbl0rAMEALl0rwMEAbl6
ggMEArl/OAMEArmBCAMEArmCJDANBgkqhkiG9w0BAQsFAAOCAQEAYEfTPWTZszwa
9hy+haKgIt+3vzQUnYw/x8ai/4dnx8WN4I8sBKgUcJ+5bmtjli913BYUWee24ger
4HUyXOGvTsy5r+t3k2PsbgwuP52TqjcJS+//payexxP3QES8PLDg65qV+gweDtBC
+xlj88AvNuxNkBhepo9o8hAwgj2KKZT645Ly0gtMN0P/8LBQgkP9FTprrjFt/ghD
b0RDn2MINF5Ef1F9fzmmx4/1x37gzH3r0TE9kk7gwrAPT31bEgbvsqWGFoDff5Lw
nZ9XUPOCV2VBwmUkaZKuyts3HuHYIhFsqJGksYubuMjbED6r4kXlSsVtzFnz4svy
L4zuzbU0tA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 04:11:17 2025 by rpki-client