Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/EvQcYikeoGSZqtoiRtmY8ADj0t8.roa
File: EvQcYikeoGSZqtoiRtmY8ADj0t8.roa (raw, json)
Hash identifier: pGeWDFrSp3di9szJQtq6RV38e9JdMRZ5ens4mpUF3Do=
Subject key identifier: 12:F4:1C:62:29:1E:A0:64:99:AA:DA:22:46:D9:98:F0:00:E3:D2:DF
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 01856D8AE85D6CC2D60026DFABA25249697F
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/EvQcYikeoGSZqtoiRtmY8ADj0t8.roa
Signing time: Sun 01 Jan 2023 13:34:58 +0000
ROA not before: Sun 01 Jan 2023 13:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39781
IP address blocks: 185.106.216.0/22 maxlen: 24
193.227.107.0/24 maxlen: 24
79.98.56.0/21 maxlen: 24
2a02:1758::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:e8:5d:6c:c2:d6:00:26:df:ab:a2:52:49:69:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: Jan 1 13:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12f41c62291ea06499aada2246d998f000e3d2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cf:3c:25:a3:44:31:69:6b:56:c6:a1:6f:a0:
ab:83:0b:12:cc:5e:0c:3c:e0:f2:a1:eb:4b:50:aa:
7b:4d:01:64:f9:59:ce:67:81:cd:f3:42:c3:b7:48:
4d:0a:53:7c:43:d9:7f:fa:42:62:20:8a:c9:8d:3d:
15:1e:7b:8d:c2:06:8b:ca:2f:3a:fe:1d:92:42:58:
ba:c0:af:97:62:2c:59:70:fa:35:c7:fe:3f:93:45:
5d:43:a3:f9:02:9c:28:b2:0f:72:05:ae:bd:0b:33:
8a:06:32:c4:c9:e6:04:67:ad:88:c7:25:48:af:d4:
dd:45:1b:81:8a:c8:2f:66:0e:1f:76:35:40:98:d7:
4e:3e:bb:b8:37:d3:9f:91:28:8b:33:99:26:21:eb:
fa:21:e9:c1:bf:af:5a:9c:d7:34:46:3e:55:30:c0:
40:23:ea:7e:54:90:9d:6a:08:30:47:00:ba:2c:5f:
b9:57:ac:1f:86:6a:3c:53:2e:a4:3f:58:85:1c:cc:
1c:62:28:7a:32:4f:91:44:5a:bf:fa:37:51:7f:6a:
8f:35:95:78:c6:85:b1:76:71:59:38:29:77:1e:a0:
84:d1:ab:b6:06:b1:c3:a3:9e:64:ed:52:16:02:33:
c8:54:90:7f:e0:c7:e1:77:f2:ab:0e:ef:e3:f1:26:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F4:1C:62:29:1E:A0:64:99:AA:DA:22:46:D9:98:F0:00:E3:D2:DF
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/EvQcYikeoGSZqtoiRtmY8ADj0t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.56.0/21
185.106.216.0/22
193.227.107.0/24
IPv6:
2a02:1758::/29
Signature Algorithm: sha256WithRSAEncryption
4a:44:ec:2a:b3:30:ae:e7:d8:ed:e5:58:97:61:a7:13:2a:37:
73:4a:ba:5d:e8:0a:95:e7:66:9f:a9:c7:1d:15:04:16:04:44:
d5:5c:1a:12:45:7f:2b:4d:e0:62:47:33:d0:de:8e:f7:17:12:
7b:85:ab:eb:7c:bb:ad:a9:e4:6c:9a:61:9b:21:f3:22:78:f8:
b8:9e:18:a1:53:f5:46:81:62:68:22:37:6f:30:1a:28:59:03:
aa:9b:d0:d9:dd:9a:5d:bf:32:b7:b2:03:4e:43:05:fe:28:82:
30:dc:d0:ac:1b:cd:39:65:69:1e:2b:32:48:d5:97:c6:5e:16:
3f:36:44:84:72:d0:d5:85:f5:eb:51:6b:57:32:5b:98:22:b1:
c2:1e:1b:fb:8e:f2:e2:0b:17:cc:01:2a:4b:7c:f1:f4:23:aa:
91:16:f6:2a:ef:f6:e1:79:21:89:4e:80:75:bd:e0:c8:a6:a7:
c9:1b:32:98:12:6a:ab:7a:aa:92:c1:7d:50:40:40:d7:36:ad:
c4:46:88:b8:3c:a7:26:df:6b:b1:67:8f:94:52:cf:84:c2:35:
97:a5:bb:71:10:d8:5f:1c:bb:8e:9d:a0:32:31:84:00:59:33:
70:9f:76:57:78:b9:62:11:64:47:7f:b1:5d:a3:5a:6c:4e:df:
42:20:b7:ed
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVtiuhdbMLWACbfq6JSSWl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZGFiNzA1MjRmZDUxMzEzYjg0ZjVkOGY0NjM2MmEzZDhj
ODA4MTQwHhcNMjMwMTAxMTMzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmY0MWM2MjI5MWVhMDY0OTlhYWRhMjI0NmQ5OThmMDAwZTNkMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc88JaNEMWlrVsahb6CrgwsSzF4M
PODyoetLUKp7TQFk+VnOZ4HN80LDt0hNClN8Q9l/+kJiIIrJjT0VHnuNwgaLyi86
/h2SQli6wK+XYixZcPo1x/4/k0VdQ6P5Apwosg9yBa69CzOKBjLEyeYEZ62IxyVI
r9TdRRuBisgvZg4fdjVAmNdOPru4N9OfkSiLM5kmIev6IenBv69anNc0Rj5VMMBA
I+p+VJCdaggwRwC6LF+5V6wfhmo8Uy6kP1iFHMwcYih6Mk+RRFq/+jdRf2qPNZV4
xoWxdnFZOCl3HqCE0au2BrHDo55k7VIWAjPIVJB/4Mfhd/KrDu/j8SYsKQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFBL0HGIpHqBkmaraIkbZmPAA49LfMB8GA1UdIwQY
MBaAFBzatwUk/VExO4T12PRjYqPYyAgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xOTAxN2EtNGZjYy00ZmFkLWE1NzIt
OTlmNjkzZTQ1MDYxLzEvRXZRY1lpa2VvR1NacXRvaVJ0bVk4QURqMHQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xOTAxN2EtNGZjYy00ZmFkLWE1NzItOTlmNjkzZTQ1MDYx
LzEvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDT2I4AwQC
uWrYAwQAweNrMA0EAgACMAcDBQMqAhdYMA0GCSqGSIb3DQEBCwUAA4IBAQBKROwq
szCu59jt5ViXYacTKjdzSrpd6AqV52afqccdFQQWBETVXBoSRX8rTeBiRzPQ3o73
FxJ7havrfLutqeRsmmGbIfMiePi4nhihU/VGgWJoIjdvMBooWQOqm9DZ3ZpdvzK3
sgNOQwX+KIIw3NCsG805ZWkeKzJI1ZfGXhY/NkSEctDVhfXrUWtXMluYIrHCHhv7
jvLiCxfMASpLfPH0I6qRFvYq7/bheSGJToB1veDIpqfJGzKYEmqreqqSwX1QQEDX
Nq3ERoi4PKcm32uxZ4+UUs+EwjWXpbtxENhfHLuOnaAyMYQAWTNwn3ZXeLliEWRH
f7Fdo1psTt9CILft
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:27 2025 by rpki-client