Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/E50sqCmnNaK8wO2kW-xIMsB3Rf4.roa
File: E50sqCmnNaK8wO2kW-xIMsB3Rf4.roa (raw, json)
Hash identifier: 5qAqO0ac04maPvQ1Rvo+FhPsxjdpKZwSsFDQpiS3xLE=
Subject key identifier: 13:9D:2C:A8:29:A7:35:A2:BC:C0:ED:A4:5B:EC:48:32:C0:77:45:FE
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 03E4A9CD
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/E50sqCmnNaK8wO2kW-xIMsB3Rf4.roa
Signing time: Tue 26 Apr 2022 14:41:05 +0000
ROA not before: Tue 26 Apr 2022 14:41:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57469
IP address blocks: 185.234.101.0/24 maxlen: 24
185.231.228.0/22 maxlen: 22
185.253.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65317325 (0x3e4a9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Apr 26 14:41:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=139d2ca829a735a2bcc0eda45bec4832c07745fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:9a:39:be:59:11:d7:b4:76:8f:c7:7f:01:
04:9a:70:bc:8f:e9:3f:45:81:4e:b4:64:1d:bb:f4:
f5:31:d5:0f:68:a0:25:12:5c:63:73:ec:5f:29:8e:
cf:5d:8e:0a:8e:90:b3:7a:22:16:a4:ee:50:f6:fb:
fb:26:b6:78:9e:52:16:f1:16:41:ee:7b:05:0b:56:
90:ab:8f:06:4d:0b:71:08:05:53:0b:ea:47:50:e9:
62:2c:aa:72:f5:60:9b:83:58:a1:4e:43:76:4d:e4:
65:5b:d6:65:7f:65:cf:dc:19:fc:3b:e3:9f:0b:f2:
f0:0f:b1:cd:1f:8b:04:86:81:b6:65:db:80:36:01:
6e:71:15:61:2e:42:ac:3b:c6:01:0f:af:94:78:b9:
d5:08:52:39:e9:6d:c0:0f:b7:9f:9d:e6:8f:18:76:
5e:67:d1:8b:1c:d3:e3:65:21:ac:05:f8:49:1c:3a:
1a:1d:2f:ce:f8:ee:61:52:9d:a5:f7:bf:50:7f:71:
1b:58:5a:0e:74:61:8b:af:45:cd:60:b7:4b:02:73:
8c:ed:5e:4d:e4:9a:84:d8:e0:47:3c:52:eb:09:c4:
86:39:b8:9e:1c:a7:7a:9f:56:d8:e4:3c:13:1a:df:
a3:cb:fd:8d:4a:fc:ed:ee:ea:73:4f:77:2c:5b:57:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:2C:A8:29:A7:35:A2:BC:C0:ED:A4:5B:EC:48:32:C0:77:45:FE
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/E50sqCmnNaK8wO2kW-xIMsB3Rf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.228.0/22
185.234.101.0/24
185.253.62.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:1f:78:e4:38:40:d8:49:67:a6:5b:03:02:4a:02:a9:38:4f:
8d:58:56:0b:9b:78:aa:14:0c:48:ad:cf:56:5e:48:fa:57:8d:
39:57:68:15:44:fa:4e:60:09:d9:20:05:09:e1:d1:d9:58:68:
11:70:3b:10:ad:de:ff:71:67:70:ae:7f:f5:37:85:47:11:c5:
4b:d4:67:93:42:63:1e:cb:d6:bb:97:8c:86:fb:95:ca:7f:fa:
16:f8:b0:e3:d1:c2:18:79:c0:de:19:e3:4b:db:69:06:19:bb:
bb:e4:54:54:ad:c5:f6:8f:aa:ec:ea:8b:fa:98:db:53:dc:a3:
69:73:07:cd:60:bb:6e:c4:de:2f:6f:04:e2:47:d0:8a:88:81:
84:99:51:7d:c4:ff:ff:54:9d:00:15:ea:76:e7:9a:00:4f:7a:
76:41:20:f8:5e:ac:d8:98:5a:e9:90:29:af:20:94:7b:96:0f:
2a:39:df:4d:6e:e3:76:83:a8:c0:e5:11:20:0a:63:22:65:b5:
c5:5c:87:f8:98:0d:73:bb:ed:5e:b3:3c:8d:38:3b:cf:33:9c:
84:e0:e8:0d:dc:22:5f:c3:9a:74:4f:0d:d1:cf:52:1e:eb:54:
ba:fd:b7:f8:0b:14:44:c0:22:5a:9e:00:81:fd:2f:e7:b1:60:
c7:ce:5b:08
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA+SpzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMzYzQ1NjU3NDNhZTU3YmQyYWVhOWEzNjNjMmIzYzNlMjUwZjcyMB4XDTIyMDQy
NjE0NDEwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTM5ZDJjYTgyOWE3
MzVhMmJjYzBlZGE0NWJlYzQ4MzJjMDc3NDVmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxumjm+WRHXtHaPx38BBJpwvI/pP0WBTrRkHbv09THVD2ig
JRJcY3PsXymOz12OCo6Qs3oiFqTuUPb7+ya2eJ5SFvEWQe57BQtWkKuPBk0LcQgF
UwvqR1DpYiyqcvVgm4NYoU5Ddk3kZVvWZX9lz9wZ/Dvjnwvy8A+xzR+LBIaBtmXb
gDYBbnEVYS5CrDvGAQ+vlHi51QhSOeltwA+3n53mjxh2XmfRixzT42UhrAX4SRw6
Gh0vzvjuYVKdpfe/UH9xG1haDnRhi69FzWC3SwJzjO1eTeSahNjgRzxS6wnEhjm4
nhynep9W2OQ8Exrfo8v9jUr87e7qc093LFtXUgMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQTnSyoKac1orzA7aRb7EgywHdF/jAfBgNVHSMEGDAWgBQ2w8RWV0OuV70q
6po2PCs8PiUPcjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zUEVWbGREcmxlOUt1cWFOandyUEQ0bEQzSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvMDE2MTU2LTA5M2UtNDA1Yi05YjJkLWE1NzQ5ZDIzNDZlNy8x
L0U1MHNxQ21uTmFLOHdPMmtXLXhJTXNCM1JmNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
MDE2MTU2LTA5M2UtNDA1Yi05YjJkLWE1NzQ5ZDIzNDZlNy8xL05zUEVWbGREcmxl
OUt1cWFOandyUEQ0bEQzSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEArnn5AMEALnqZQMEAbn9PjANBgkq
hkiG9w0BAQsFAAOCAQEAqx945DhA2ElnplsDAkoCqThPjVhWC5t4qhQMSK3PVl5I
+leNOVdoFUT6TmAJ2SAFCeHR2VhoEXA7EK3e/3FncK5/9TeFRxHFS9Rnk0JjHsvW
u5eMhvuVyn/6Fviw49HCGHnA3hnjS9tpBhm7u+RUVK3F9o+q7OqL+pjbU9yjaXMH
zWC7bsTeL28E4kfQioiBhJlRfcT//1SdABXqdueaAE96dkEg+F6s2Jha6ZApryCU
e5YPKjnfTW7jdoOowOURIApjImW1xVyH+JgNc7vtXrM8jTg7zzOchODoDdwiX8Oa
dE8N0c9SHutUuv23+AsURMAiWp4Agf0v57Fgx85bCA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:35 2025 by rpki-client