Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/7DZfxriKVvtb1N-umry4HEmEI-w.roa
File: 7DZfxriKVvtb1N-umry4HEmEI-w.roa (raw, json)
Hash identifier: WzFCLrDiUOzqhTL32+HbzTbstttW/kJLjaV9VX8aySo=
Subject key identifier: EC:36:5F:C6:B8:8A:56:FB:5B:D4:DF:AE:9A:BC:B8:1C:49:84:23:EC
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 01856D0A80289144EB3FE29D761FAEBE7AC8
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/7DZfxriKVvtb1N-umry4HEmEI-w.roa
Signing time: Sun 01 Jan 2023 11:14:42 +0000
ROA not before: Sun 01 Jan 2023 11:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2611
IP address blocks: 185.182.132.0/22 maxlen: 24
2a10:8280::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:80:28:91:44:eb:3f:e2:9d:76:1f:ae:be:7a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Jan 1 11:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec365fc6b88a56fb5bd4dfae9abcb81c498423ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:1f:4b:1b:11:ea:4d:3d:7c:0f:d8:54:b8:
8c:96:25:9b:0a:b2:c9:1d:9d:09:6d:25:0c:71:4f:
8f:71:15:62:9a:12:a7:96:74:a1:0c:c2:b5:0b:96:
18:32:4e:8d:86:81:10:2d:e0:1c:d5:a1:51:34:3f:
da:73:9b:d1:15:a8:a2:1e:d9:5c:a2:91:7a:39:5b:
f7:18:aa:95:47:4c:cc:e5:22:0c:d5:96:38:2a:97:
aa:35:f0:a1:fb:2a:08:d2:81:3f:0c:08:93:c2:65:
27:2f:a5:94:5e:b3:83:58:4c:e7:bf:4b:79:81:b4:
a5:e6:a1:2a:76:71:52:57:25:52:b3:b2:2a:44:ce:
4c:16:a4:ec:c5:67:ef:bf:de:eb:2e:37:88:1a:61:
1f:ae:92:23:ee:a0:14:27:b5:04:f5:69:3d:dc:a6:
eb:a1:6d:66:51:78:8d:30:78:dc:92:4d:39:b7:3e:
54:ab:98:f8:1c:6c:2e:ab:59:fd:5e:17:59:d5:e2:
9b:05:e5:37:af:d2:ab:5e:d0:79:18:11:a0:ee:60:
8b:d4:be:d4:4e:c5:46:55:a5:a0:91:a0:30:12:63:
22:49:1b:d6:eb:f9:ab:9d:ef:03:c5:38:4b:ca:71:
c0:6b:1c:f5:4b:c2:0f:72:12:0c:d3:2c:12:f0:0a:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:5F:C6:B8:8A:56:FB:5B:D4:DF:AE:9A:BC:B8:1C:49:84:23:EC
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/7DZfxriKVvtb1N-umry4HEmEI-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.132.0/22
IPv6:
2a10:8280::/32
Signature Algorithm: sha256WithRSAEncryption
4e:51:df:4d:fc:1a:ff:cf:e9:7b:88:b1:54:23:10:58:52:c0:
97:1f:5f:6d:7a:e4:07:6f:16:b5:b9:1e:94:63:7a:00:2c:ed:
ed:6f:f2:f2:9e:3f:27:df:46:7d:36:99:2a:4a:64:bd:8a:4a:
9b:98:e9:9b:4f:75:31:5e:6b:71:43:d4:65:83:5d:9b:37:56:
83:43:c2:53:1f:07:6f:82:64:db:f2:e8:85:d5:5a:97:20:e5:
f5:fd:ba:e8:6d:3c:c6:81:af:61:c1:ae:e8:be:e0:b9:25:d2:
5e:7f:41:a4:44:ba:8c:c4:36:87:9c:c8:fa:62:a2:23:17:d7:
64:e7:db:cc:d5:99:dd:bb:af:f0:59:74:0c:f8:25:5a:c4:92:
89:0d:4e:43:40:27:ba:71:b2:cb:cc:f4:72:11:c8:dc:84:ed:
53:a1:ac:04:b1:7a:46:bd:58:89:68:92:28:43:c8:39:ea:44:
e0:7e:65:b0:a9:83:0e:3b:0f:2a:3b:bd:bf:21:86:f8:d4:e5:
02:1a:f4:1c:5c:9e:b3:c5:cf:34:94:a2:d5:d4:64:b1:a1:86:
a0:35:aa:71:c4:9d:3e:58:85:fc:04:b0:02:1d:42:98:70:60:
52:10:58:20:ed:8f:d7:04:b5:63:d3:42:4d:24:1f:f6:9c:cd:
5a:99:a3:54
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtCoAokUTrP+Kddh+uvnrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDRhYWFjN2YyZWJiMjk4MWMyNDc2M2ViM2Q2MDQ1ZWZi
ZDZmMDYwHhcNMjMwMTAxMTExNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzM2NWZjNmI4OGE1NmZiNWJkNGRmYWU5YWJjYjgxYzQ5ODQyM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEYfSxsR6k09fA/YVLiMliWbCrLJ
HZ0JbSUMcU+PcRVimhKnlnShDMK1C5YYMk6NhoEQLeAc1aFRND/ac5vRFaiiHtlc
opF6OVv3GKqVR0zM5SIM1ZY4KpeqNfCh+yoI0oE/DAiTwmUnL6WUXrODWEznv0t5
gbSl5qEqdnFSVyVSs7IqRM5MFqTsxWfvv97rLjeIGmEfrpIj7qAUJ7UE9Wk93Kbr
oW1mUXiNMHjckk05tz5Uq5j4HGwuq1n9XhdZ1eKbBeU3r9KrXtB5GBGg7mCL1L7U
TsVGVaWgkaAwEmMiSRvW6/mrne8DxThLynHAaxz1S8IPchIM0ywS8AoMDwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOw2X8a4ilb7W9Tfrpq8uBxJhCPsMB8GA1UdIwQY
MBaAFAlEqqx/LrspgcJHY+s9YEXvvW8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUt
NjZjZDAxOTYxZTQ2LzEvN0RaZnhyaUtWdnRiMU4tdW1yeTRIRW1FSS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUtNjZjZDAxOTYxZTQ2
LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubaEMA0E
AgACMAcDBQAqEIKAMA0GCSqGSIb3DQEBCwUAA4IBAQBOUd9N/Br/z+l7iLFUIxBY
UsCXH19teuQHbxa1uR6UY3oALO3tb/Lynj8n30Z9NpkqSmS9ikqbmOmbT3UxXmtx
Q9Rlg12bN1aDQ8JTHwdvgmTb8uiF1VqXIOX1/brobTzGga9hwa7ovuC5JdJef0Gk
RLqMxDaHnMj6YqIjF9dk59vM1Zndu6/wWXQM+CVaxJKJDU5DQCe6cbLLzPRyEcjc
hO1ToawEsXpGvViJaJIoQ8g56kTgfmWwqYMOOw8qO72/IYb41OUCGvQcXJ6zxc80
lKLV1GSxoYagNapxxJ0+WIX8BLACHUKYcGBSEFgg7Y/XBLVj00JNJB/2nM1amaNU
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:43 2025 by rpki-client