Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/DwcHolpApOvN5KvYnEgN7AbgYuI.roa
File: DwcHolpApOvN5KvYnEgN7AbgYuI.roa (raw, json)
Hash identifier: oXwuw3s4slrNdc4pqYfeEGeCUq0q44Jl1UEW/Lk4hSE=
Subject key identifier: 0F:07:07:A2:5A:40:A4:EB:CD:E4:AB:D8:9C:48:0D:EC:06:E0:62:E2
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018571D7C51A7BEAFDAA8110FB8B2F6CE608
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/DwcHolpApOvN5KvYnEgN7AbgYuI.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210392
IP address blocks: 185.112.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c5:1a:7b:ea:fd:aa:81:10:fb:8b:2f:6c:e6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f0707a25a40a4ebcde4abd89c480dec06e062e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:8f:83:db:d5:92:02:74:4a:71:79:05:c7:
26:36:15:4e:e7:c2:74:f2:e4:41:19:bc:0b:51:b7:
c2:22:f4:24:4d:d1:b2:6b:8c:f3:f9:9b:4c:80:fa:
62:62:10:9d:e5:7d:15:94:8c:c3:60:51:7d:72:8f:
0c:ea:63:2d:f0:93:3a:58:a6:a4:ed:06:6c:73:15:
1c:3e:4f:46:f3:40:cf:6b:39:f5:be:21:e4:50:0a:
5b:96:b7:56:91:a9:38:fd:e5:af:84:77:00:d9:6e:
a4:41:6f:07:1b:a7:5d:5d:58:64:a0:3d:de:6b:94:
fd:e9:f7:f5:50:eb:e7:59:23:bd:a8:b3:46:40:39:
e6:6c:39:d1:b2:53:19:dd:f4:da:30:a8:5c:46:6e:
d3:0e:1f:ec:86:99:35:e3:17:35:6f:90:27:0e:81:
9c:f0:31:1c:43:44:ef:dc:d0:e3:42:42:52:1d:55:
5b:3b:af:a9:9e:f6:b3:c1:a6:06:88:b9:b9:60:ca:
c7:f0:7e:8e:d2:64:81:8c:44:58:3d:49:9c:8f:19:
38:d0:64:83:d5:82:61:a1:4e:a2:76:b5:71:c4:21:
01:9d:65:05:97:a8:a0:77:21:47:10:d5:1f:39:2f:
cc:40:19:b4:23:d2:38:26:f3:f2:d8:50:43:dc:b2:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:07:07:A2:5A:40:A4:EB:CD:E4:AB:D8:9C:48:0D:EC:06:E0:62:E2
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/DwcHolpApOvN5KvYnEgN7AbgYuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ef:2b:79:da:59:16:74:dc:ed:a6:4e:c8:1d:70:9f:9f:16:
c2:cb:78:9c:74:be:e8:2e:36:a1:91:e4:ed:32:21:0d:15:29:
43:14:6f:04:b7:1e:37:7f:c2:aa:1c:70:30:d9:dd:84:89:ed:
62:43:21:40:7d:41:44:f6:fb:ae:8b:43:b1:e9:17:87:0e:ce:
83:92:e9:e1:df:cc:5e:e0:cc:43:34:b5:26:7e:fa:9c:4e:8a:
36:66:33:2a:b9:5d:6c:a0:da:c1:dc:ff:ee:77:0d:6b:3c:16:
b6:b4:98:ee:34:ee:6b:d1:51:2f:2f:4a:af:67:8c:d2:43:cd:
b7:8b:97:3b:99:87:b0:94:14:b3:cb:fd:1b:ca:d6:82:25:00:
34:d9:c6:0c:ed:e5:9a:12:9a:26:f9:ff:2f:83:c6:ac:75:1a:
26:fc:4f:dc:4a:c3:c6:1d:1c:86:0d:07:07:9d:80:5e:6c:91:
96:04:c1:c2:88:e9:de:a8:a9:c6:59:5c:3c:b9:3f:88:e5:1f:
4e:07:a3:a4:85:78:a9:24:31:31:a3:9a:db:09:fb:79:43:87:
c2:00:6a:31:c5:98:77:82:e1:1f:66:5b:db:d4:99:53:bb:48:
0b:12:38:13:8f:0a:3c:c7:62:72:d9:33:5d:f4:9b:8d:03:a8:
b5:dc:bb:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx18Uae+r9qoEQ+4svbOYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjMwMTAyMDkzNzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjA3MDdhMjVhNDBhNGViY2RlNGFiZDg5YzQ4MGRlYzA2ZTA2MmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZOPg9vVkgJ0SnF5BccmNhVO58J0
8uRBGbwLUbfCIvQkTdGya4zz+ZtMgPpiYhCd5X0VlIzDYFF9co8M6mMt8JM6WKak
7QZscxUcPk9G80DPazn1viHkUApblrdWkak4/eWvhHcA2W6kQW8HG6ddXVhkoD3e
a5T96ff1UOvnWSO9qLNGQDnmbDnRslMZ3fTaMKhcRm7TDh/shpk14xc1b5AnDoGc
8DEcQ0Tv3NDjQkJSHVVbO6+pnvazwaYGiLm5YMrH8H6O0mSBjERYPUmcjxk40GSD
1YJhoU6idrVxxCEBnWUFl6igdyFHENUfOS/MQBm0I9I4JvPy2FBD3LLqmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA8HB6JaQKTrzeSr2JxIDewG4GLiMB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEvRHdjSG9scEFwT3ZONUt2WW5FZ043QWJnWXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXCUMA0G
CSqGSIb3DQEBCwUAA4IBAQAP7yt52lkWdNztpk7IHXCfnxbCy3icdL7oLjahkeTt
MiENFSlDFG8Etx43f8KqHHAw2d2Eie1iQyFAfUFE9vuui0Ox6ReHDs6Dkunh38xe
4MxDNLUmfvqcToo2ZjMquV1soNrB3P/udw1rPBa2tJjuNO5r0VEvL0qvZ4zSQ823
i5c7mYewlBSzy/0bytaCJQA02cYM7eWaEpom+f8vg8asdRom/E/cSsPGHRyGDQcH
nYBebJGWBMHCiOneqKnGWVw8uT+I5R9OB6OkhXipJDExo5rbCft5Q4fCAGoxxZh3
guEfZlvb1JlTu0gLEjgTjwo8x2Jy2TNd9JuNA6i13Lt4
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:01 2025 by rpki-client