Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/X3GbyuDTIXR375teiYz9sORsxCM.roa
File: X3GbyuDTIXR375teiYz9sORsxCM.roa (raw, json)
Hash identifier: kbE88YP+vSDxv87+ExukLAwbLGSsO2eS4RDPXQ1YiFo=
Subject key identifier: 5F:71:9B:CA:E0:D3:21:74:77:EF:9B:5E:89:8C:FD:B0:E4:6C:C4:23
Certificate issuer: /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial: 01856CE5FB2AD496B603AAFFD4CCEC0EBA3A
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/X3GbyuDTIXR375teiYz9sORsxCM.roa
Signing time: Sun 01 Jan 2023 10:34:49 +0000
ROA not before: Sun 01 Jan 2023 10:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198776
IP address blocks: 78.110.44.0/22 maxlen: 22
185.220.132.0/22 maxlen: 22
185.117.64.0/22 maxlen: 22
2a0b:f740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e5:fb:2a:d4:96:b6:03:aa:ff:d4:cc:ec:0e:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Validity
Not Before: Jan 1 10:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f719bcae0d3217477ef9b5e898cfdb0e46cc423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:0e:56:28:40:82:ff:7c:a0:55:07:86:91:
92:bf:5f:3c:d7:82:49:d4:31:b7:9c:d2:62:ca:59:
0c:95:4e:f8:b1:f2:e6:72:29:1e:01:e4:ba:dd:0f:
e6:69:25:92:d4:7b:34:bb:01:76:5d:07:3b:9f:6f:
51:ec:bc:bf:1e:20:0a:5a:e5:2e:90:e7:e6:2c:bf:
31:42:f1:87:c3:80:84:55:6a:53:6d:cc:e6:60:d8:
57:48:90:be:a9:1d:33:f5:01:38:4b:1f:d0:51:f0:
bc:c8:86:37:05:87:54:7e:65:f7:79:18:28:69:d6:
48:d2:6a:6d:27:90:9d:59:41:8a:d7:18:1c:4a:95:
7e:0e:79:e8:d8:0c:52:5b:7a:36:43:0f:a5:a8:f1:
37:4d:70:b5:68:98:53:75:f2:3f:26:57:56:53:28:
5e:89:2f:d8:ad:8a:1a:32:3b:b7:bf:f2:cc:f6:3a:
90:8e:66:32:4e:22:0b:89:bb:7c:16:58:76:64:78:
c5:ce:03:fd:f8:81:67:4b:7f:3b:93:df:e8:d1:5c:
f0:27:ac:90:39:58:a6:e2:34:b9:8f:55:3c:dc:a3:
3f:38:83:a5:59:b6:eb:5f:06:ce:f5:bd:6f:4b:2a:
d2:d6:fd:ec:2a:35:a9:7a:fe:46:bd:db:59:42:20:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:9B:CA:E0:D3:21:74:77:EF:9B:5E:89:8C:FD:B0:E4:6C:C4:23
X509v3 Authority Key Identifier:
keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/X3GbyuDTIXR375teiYz9sORsxCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.44.0/22
185.117.64.0/22
185.220.132.0/22
IPv6:
2a0b:f740::/29
Signature Algorithm: sha256WithRSAEncryption
26:29:ab:18:3a:c5:59:e8:cc:63:dc:92:88:08:de:2e:d5:4c:
34:5e:a5:2c:1e:e1:a1:25:c7:06:49:c2:42:3d:2e:18:cc:dc:
04:c5:53:05:33:4c:ac:f7:66:75:24:cb:b3:fa:17:fb:52:f0:
3c:93:94:bb:4b:52:b0:5a:f8:db:dc:cf:ed:d5:9e:d4:90:9a:
9a:8c:73:89:c4:e2:7c:83:81:b8:33:ea:1a:66:a9:21:6a:d1:
0d:b8:66:23:56:94:84:a9:92:83:3b:68:8a:aa:29:bc:41:57:
93:8a:f9:63:f7:b3:f0:c6:01:ba:ce:c3:c4:c7:60:8f:a1:20:
be:44:ac:06:cd:d0:2a:98:cc:18:38:2e:a4:76:df:3e:aa:28:
91:d1:37:e8:b6:40:c3:a1:21:85:95:a2:c1:be:e7:cd:83:31:
6b:17:e9:58:f5:19:c0:29:33:6e:4c:ce:ad:cb:c6:d4:b5:14:
f2:84:0f:fd:35:5e:fb:ec:db:b3:a7:7e:0e:ef:bc:bc:e6:66:
54:40:41:ae:62:22:e0:3a:e6:d4:19:50:9f:2a:7f:9f:52:71:
fb:de:1f:f2:3b:70:41:44:f5:83:9c:d2:e3:85:a2:ed:00:6d:
81:1f:e9:cd:49:1e:6b:24:84:8b:b1:3c:46:17:ef:5c:71:78:
13:4f:67:0d
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVs5fsq1Ja2A6r/1MzsDro6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDI1NDlkOGQwMDY3YTM3MjMyM2NjNzZkOGVlMDEwMmI3
NGQ4MzMwHhcNMjMwMTAxMTAzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjcxOWJjYWUwZDMyMTc0NzdlZjliNWU4OThjZmRiMGU0NmNjNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwsOVihAgv98oFUHhpGSv18814JJ
1DG3nNJiylkMlU74sfLmcikeAeS63Q/maSWS1Hs0uwF2XQc7n29R7Ly/HiAKWuUu
kOfmLL8xQvGHw4CEVWpTbczmYNhXSJC+qR0z9QE4Sx/QUfC8yIY3BYdUfmX3eRgo
adZI0mptJ5CdWUGK1xgcSpV+Dnno2AxSW3o2Qw+lqPE3TXC1aJhTdfI/JldWUyhe
iS/YrYoaMju3v/LM9jqQjmYyTiILibt8Flh2ZHjFzgP9+IFnS387k9/o0VzwJ6yQ
OVim4jS5j1U83KM/OIOlWbbrXwbO9b1vSyrS1v3sKjWpev5GvdtZQiAEawIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFF9xm8rg0yF0d++bXomM/bDkbMQjMB8GA1UdIwQY
MBaAFMLSVJ2NAGejcjI8x22O4BArdNgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RKVW5ZMEFaNk55TWp6SGJZN2dFQ3QwMkRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lODhmNzEtMjM4Mi00NDEzLWI1NjIt
MTk3MTc4ZmYxOGYyLzEvWDNHYnl1RFRJWFIzNzV0ZWlZejlzT1JzeENNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lODhmNzEtMjM4Mi00NDEzLWI1NjItMTk3MTc4ZmYxOGYy
LzEvd3RKVW5ZMEFaNk55TWp6SGJZN2dFQ3QwMkRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCTm4sAwQC
uXVAAwQCudyEMA0EAgACMAcDBQMqC/dAMA0GCSqGSIb3DQEBCwUAA4IBAQAmKasY
OsVZ6Mxj3JKICN4u1Uw0XqUsHuGhJccGScJCPS4YzNwExVMFM0ys92Z1JMuz+hf7
UvA8k5S7S1KwWvjb3M/t1Z7UkJqajHOJxOJ8g4G4M+oaZqkhatENuGYjVpSEqZKD
O2iKqim8QVeTivlj97PwxgG6zsPEx2CPoSC+RKwGzdAqmMwYOC6kdt8+qiiR0Tfo
tkDDoSGFlaLBvufNgzFrF+lY9RnAKTNuTM6ty8bUtRTyhA/9NV777Nuzp34O77y8
5mZUQEGuYiLgOubUGVCfKn+fUnH73h/yO3BBRPWDnNLjhaLtAG2BH+nNSR5rJISL
sTxGF+9ccXgTT2cN
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:34:11 2025 by rpki-client