Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/8ViddbHAf0Un9p7F4u7wSpMzn1o.roa
File: 8ViddbHAf0Un9p7F4u7wSpMzn1o.roa (raw, json)
Hash identifier: wPXsONaYBGTzKOa2apqBHdor3uptdSdwHDgx+/I6COw=
Subject key identifier: F1:58:9D:75:B1:C0:7F:45:27:F6:9E:C5:E2:EE:F0:4A:93:33:9F:5A
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 0185728368ED2DC1EF232F7DB99933A01481
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/8ViddbHAf0Un9p7F4u7wSpMzn1o.roa
Signing time: Mon 02 Jan 2023 12:44:52 +0000
ROA not before: Mon 02 Jan 2023 12:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208693
IP address blocks: 185.185.204.0/22 maxlen: 24
2a00:7420:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:68:ed:2d:c1:ef:23:2f:7d:b9:99:33:a0:14:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Jan 2 12:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1589d75b1c07f4527f69ec5e2eef04a93339f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ea:a2:98:c2:68:52:64:d9:10:9f:e8:c8:fe:
13:80:fe:6b:02:8b:80:c4:1b:88:8c:ab:5e:38:55:
8c:dd:98:eb:64:63:8d:26:e9:a1:67:de:3d:de:13:
c3:cb:2c:15:03:a7:23:aa:62:b0:1b:1c:3f:37:ac:
62:46:36:ad:58:3f:3c:7a:dc:93:39:4f:5c:f3:ed:
fb:ae:95:bc:b8:8d:85:31:92:5a:50:5a:5d:66:5a:
8f:fc:4d:2d:05:97:ab:06:58:a7:51:d5:7b:21:25:
85:90:f9:b7:27:23:25:a5:fe:5a:60:7c:cc:b6:ab:
82:a0:32:bc:c0:f0:b9:33:4e:26:c2:94:9a:ac:b0:
8b:f0:3c:55:5e:ca:e7:5b:71:ca:99:75:ff:7d:b5:
84:fe:ac:0f:8e:d5:61:0a:3d:fa:2e:03:7d:87:95:
39:89:51:ff:9e:3f:0c:a5:6e:6f:a3:a5:c8:38:f2:
a3:93:a5:58:1a:94:74:86:5b:39:32:0d:d3:fe:ba:
72:8d:37:ff:25:b9:9d:63:68:52:0d:cb:8a:b5:ba:
5b:ee:2c:04:c2:44:78:b1:4c:ea:60:c2:fa:d2:82:
3e:47:87:b7:6f:d7:cd:47:a5:db:61:a9:5d:16:d2:
08:9b:d5:9a:9a:e8:cd:1a:f2:3c:33:b1:5b:a9:68:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:58:9D:75:B1:C0:7F:45:27:F6:9E:C5:E2:EE:F0:4A:93:33:9F:5A
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/8ViddbHAf0Un9p7F4u7wSpMzn1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.204.0/22
IPv6:
2a00:7420:8000::/33
Signature Algorithm: sha256WithRSAEncryption
6a:65:e4:be:35:45:3f:9c:f8:65:39:5e:65:70:6c:ce:90:df:
ba:40:3d:79:04:4d:48:e9:8c:a2:50:cb:4b:7a:a8:fc:6c:5c:
a0:95:26:37:9c:24:fa:38:b3:73:c2:c6:fd:87:c2:27:46:8b:
10:15:ff:29:ce:5c:53:27:b0:1f:a5:2a:e6:1a:c0:26:94:5a:
12:3d:e5:ca:78:dd:0f:3a:a2:7b:7d:6b:ea:c8:e0:1a:1a:12:
11:f3:8a:a5:65:be:59:cf:80:d4:e8:df:58:63:06:d9:f5:aa:
41:f9:8b:53:39:12:0d:61:e9:20:88:98:f3:4a:49:62:58:23:
0f:41:0b:5c:74:fb:18:c6:77:ff:3c:a4:ea:be:46:31:bf:66:
a4:e4:e2:4b:22:66:b4:19:98:b4:b1:97:d8:1e:73:fd:18:87:
3a:17:46:69:ef:4c:6e:cc:54:71:77:16:cf:2e:a0:71:73:16:
77:fb:81:33:48:c4:b3:af:4b:3f:f8:db:4c:c0:d4:9d:7c:3c:
fd:50:bf:b6:6c:3d:70:37:ed:8b:4b:e6:37:b9:2b:d6:d4:94:
c4:ca:e6:c5:c0:ee:5b:8f:60:e0:65:f4:40:9d:71:6a:5f:40:
83:b6:b4:b8:93:bd:33:cf:2f:f9:03:48:d0:c6:51:12:f8:01:
e4:68:f7:70
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVyg2jtLcHvIy99uZkzoBSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz
MzVjY2YwHhcNMjMwMTAyMTI0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTU4OWQ3NWIxYzA3ZjQ1MjdmNjllYzVlMmVlZjA0YTkzMzM5ZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguqimMJoUmTZEJ/oyP4TgP5rAouA
xBuIjKteOFWM3ZjrZGONJumhZ9493hPDyywVA6cjqmKwGxw/N6xiRjatWD88etyT
OU9c8+37rpW8uI2FMZJaUFpdZlqP/E0tBZerBlinUdV7ISWFkPm3JyMlpf5aYHzM
tquCoDK8wPC5M04mwpSarLCL8DxVXsrnW3HKmXX/fbWE/qwPjtVhCj36LgN9h5U5
iVH/nj8MpW5vo6XIOPKjk6VYGpR0hls5Mg3T/rpyjTf/JbmdY2hSDcuKtbpb7iwE
wkR4sUzqYML60oI+R4e3b9fNR6XbYaldFtIIm9WamujNGvI8M7FbqWjj4QIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPFYnXWxwH9FJ/aexeLu8EqTM59aMB8GA1UdIwQY
MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct
NzM3MTdjNTZiNmYzLzEvOFZpZGRiSEFmMFVuOXA3RjR1N3dTcE16bjFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz
LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCubnMMA4E
AgACMAgDBgcqAHQggDANBgkqhkiG9w0BAQsFAAOCAQEAamXkvjVFP5z4ZTleZXBs
zpDfukA9eQRNSOmMolDLS3qo/GxcoJUmN5wk+jizc8LG/YfCJ0aLEBX/Kc5cUyew
H6Uq5hrAJpRaEj3lynjdDzqie31r6sjgGhoSEfOKpWW+Wc+A1OjfWGMG2fWqQfmL
UzkSDWHpIIiY80pJYlgjD0ELXHT7GMZ3/zyk6r5GMb9mpOTiSyJmtBmYtLGX2B5z
/RiHOhdGae9MbsxUcXcWzy6gcXMWd/uBM0jEs69LP/jbTMDUnXw8/VC/tmw9cDft
i0vmN7kr1tSUxMrmxcDuW49g4GX0QJ1xal9Ag7a0uJO9M88v+QNI0MZREvgB5Gj3
cA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:52:29 2025 by rpki-client