Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/Xl_ve1ecImh3Ccs-bHKkHcjZqEo.roa
File: Xl_ve1ecImh3Ccs-bHKkHcjZqEo.roa (raw, json)
Hash identifier: hxjXG50Rn0ISF6HK+z630FGVlm+WUNDKOFphayYoLFs=
Subject key identifier: 5E:5F:EF:7B:57:9C:22:68:77:09:CB:3E:6C:72:A4:1D:C8:D9:A8:4A
Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial: 0586A439
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/Xl_ve1ecImh3Ccs-bHKkHcjZqEo.roa
Signing time: Sat 01 Jan 2022 06:56:58 +0000
ROA not before: Sat 01 Jan 2022 06:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202391
IP address blocks: 185.174.134.0/24 maxlen: 24
185.174.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92709945 (0x586a439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Validity
Not Before: Jan 1 06:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e5fef7b579c22687709cb3e6c72a41dc8d9a84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:13:78:ed:97:74:f1:df:d4:c8:97:5c:43:
42:96:5c:66:2a:95:42:e3:44:20:4a:0e:e7:f5:da:
47:d8:ec:8a:c6:cf:ae:18:27:0f:e0:e8:cf:21:a4:
c9:9f:00:d1:da:25:de:65:18:f5:c5:31:85:09:a5:
77:67:69:b4:74:59:50:52:09:0f:9a:cb:04:3a:17:
1c:57:88:eb:37:64:10:9a:67:fa:28:57:76:4f:20:
4e:9d:f8:b4:3d:f2:84:02:36:8c:bd:1c:97:b8:fd:
cb:3f:60:46:c7:74:2b:8a:fa:5b:a8:ae:2c:6e:f6:
cb:79:23:d8:2d:cc:1d:2c:06:6f:95:54:07:24:47:
cd:13:bd:53:b0:bd:82:65:40:86:6d:d6:f2:6b:9a:
cb:f1:f4:4e:98:fc:6e:4d:30:f9:9d:7c:69:e5:05:
c1:3c:27:35:26:b7:a3:eb:e3:e6:30:a2:b8:1e:98:
36:55:c3:3e:31:68:e5:cd:ec:0c:c7:ea:91:0a:ec:
9d:1b:b5:87:4b:92:bb:8b:bc:59:6f:9e:58:60:21:
8d:ef:6a:ff:7c:74:03:4f:da:5b:af:07:ad:b5:28:
99:db:5a:4c:07:f1:b1:0b:82:90:5e:c8:78:25:9f:
1a:c5:9f:e1:23:be:3b:d6:5a:9d:7c:19:d2:26:6b:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5F:EF:7B:57:9C:22:68:77:09:CB:3E:6C:72:A4:1D:C8:D9:A8:4A
X509v3 Authority Key Identifier:
keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/Xl_ve1ecImh3Ccs-bHKkHcjZqEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.132.0/24
185.174.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:36:37:c8:c4:7f:12:57:d6:8d:b4:fe:21:e0:3c:6e:e7:bf:
17:97:b6:2e:8d:81:8b:a7:f8:19:73:08:c9:c0:0a:9f:e6:26:
2e:28:50:17:6a:c5:58:fd:a7:dc:fa:1d:f3:83:9d:e7:b6:42:
54:9f:13:7d:f8:34:52:ea:b9:c5:51:b6:ec:a9:45:f5:f7:89:
85:81:c5:53:d8:ab:33:51:59:cd:b0:90:d8:2b:68:3f:f8:e8:
c2:14:90:03:cf:41:1b:3e:76:e1:94:e0:3e:13:24:ab:be:6d:
6e:49:7d:3e:8f:3d:3b:a3:aa:a6:bd:37:cf:34:ac:e8:15:f8:
fb:55:cf:14:5c:d0:f0:3c:71:cc:85:c6:87:d9:1b:4c:5c:e7:
9e:d2:8d:16:56:85:c8:ec:96:e5:37:15:fe:b9:44:ba:a1:cc:
90:fb:63:c5:85:58:7d:d1:f0:ec:14:81:41:c6:be:ce:02:55:
a0:18:79:c1:04:c6:6c:05:8a:18:30:e6:ff:46:62:a1:2c:97:
7f:ea:7f:5a:59:6b:7d:c2:82:36:8b:c0:4e:f9:8c:69:44:a1:
08:97:01:f9:d0:3f:8d:ec:4d:63:7f:09:bd:0b:90:ca:f4:37:
be:ff:f8:b2:9e:70:e8:33:c4:a2:43:3f:26:c2:c9:97:5d:54:
dc:b6:3f:af
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBYakOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
Mjc3ODQ1OTk1Nzc2Y2Y2ZjJhMDgzN2Y3YWQ0YzFhOTFiYzk3ZDgyMB4XDTIyMDEw
MTA2NTY1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWU1ZmVmN2I1Nzlj
MjI2ODc3MDljYjNlNmM3MmE0MWRjOGQ5YTg0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM0IE3jtl3Tx39TIl1xDQpZcZiqVQuNEIEoO5/XaR9jsisbP
rhgnD+DozyGkyZ8A0dol3mUY9cUxhQmld2dptHRZUFIJD5rLBDoXHFeI6zdkEJpn
+ihXdk8gTp34tD3yhAI2jL0cl7j9yz9gRsd0K4r6W6iuLG72y3kj2C3MHSwGb5VU
ByRHzRO9U7C9gmVAhm3W8muay/H0Tpj8bk0w+Z18aeUFwTwnNSa3o+vj5jCiuB6Y
NlXDPjFo5c3sDMfqkQrsnRu1h0uSu4u8WW+eWGAhje9q/3x0A0/aW68HrbUomdta
TAfxsQuCkF7IeCWfGsWf4SO+O9ZanXwZ0iZrhf0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBReX+97V5wiaHcJyz5scqQdyNmoSjAfBgNVHSMEGDAWgBRyd4RZlXds9vKg
g3961MGpG8l9gjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NuZUVXWlYzYlBieW9JTl9ldFRCcVJ2SmZZSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTEvNmU5MGQ5LThjY2UtNGZmNS1hYmQ4LWVlZTZiYTE4MjliNC8x
L1hsX3ZlMWVjSW1oM0Njcy1iSEtrSGNqWnFFby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEv
NmU5MGQ5LThjY2UtNGZmNS1hYmQ4LWVlZTZiYTE4MjliNC8xL2NuZUVXWlYzYlBi
eW9JTl9ldFRCcVJ2SmZZSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALmuhAMEALmuhjANBgkqhkiG9w0B
AQsFAAOCAQEAtDY3yMR/ElfWjbT+IeA8bue/F5e2Lo2Bi6f4GXMIycAKn+YmLihQ
F2rFWP2n3Pod84Od57ZCVJ8Tffg0Uuq5xVG27KlF9feJhYHFU9irM1FZzbCQ2Cto
P/jowhSQA89BGz524ZTgPhMkq75tbkl9Po89O6Oqpr03zzSs6BX4+1XPFFzQ8Dxx
zIXGh9kbTFznntKNFlaFyOyW5TcV/rlEuqHMkPtjxYVYfdHw7BSBQca+zgJVoBh5
wQTGbAWKGDDm/0ZioSyXf+p/WllrfcKCNovATvmMaUShCJcB+dA/jexNY38JvQuQ
yvQ3vv/4sp5w6DPEokM/JsLJl11U3LY/rw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:00 2025 by rpki-client