Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9aPrnJMRZOfWZxSP5R9Zl1wXibk.roa
File: 9aPrnJMRZOfWZxSP5R9Zl1wXibk.roa (raw, json)
Hash identifier: kqjPdEGFHNb7qwaUAm2oJpj58GZhLvQwveDw5d5mSqg=
Subject key identifier: F5:A3:EB:9C:93:11:64:E7:D6:67:14:8F:E5:1F:59:97:5C:17:89:B9
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 0187B417A5EBC0088D1B750C93041E18D7E4
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9aPrnJMRZOfWZxSP5R9Zl1wXibk.roa
Signing time: Mon 24 Apr 2023 16:27:41 +0000
ROA not before: Mon 24 Apr 2023 16:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 185.135.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:17:a5:eb:c0:08:8d:1b:75:0c:93:04:1e:18:d7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Apr 24 16:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5a3eb9c931164e7d667148fe51f59975c1789b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:21:98:98:e2:3a:a4:97:f4:c8:c8:47:8b:
e1:9f:98:cc:bf:10:be:89:5f:2f:79:88:ee:b1:66:
9a:49:ca:6f:39:ab:17:d8:3f:0e:72:ff:ad:f6:ca:
b3:84:fd:4c:1d:e9:f7:22:8b:f5:e2:fd:aa:77:3f:
bb:01:6b:bd:f7:0d:5d:19:53:98:d4:dc:8b:df:96:
dc:4e:ed:f0:e6:ee:ad:8f:b9:ff:7f:ce:34:66:de:
d7:f9:d7:48:05:c5:fb:79:20:75:c5:2e:34:f1:67:
7d:05:e3:f9:bf:5f:65:b5:69:3e:1c:3d:27:5b:34:
80:9d:c3:13:e7:24:16:22:b6:53:23:02:51:df:2c:
9a:3a:08:bd:dc:53:7c:cb:b5:0c:44:08:f6:31:e8:
eb:a4:7f:3a:5d:f1:09:c4:4c:e7:04:6f:69:0a:6e:
a8:df:74:54:6f:3c:ac:0a:e1:3f:3d:dc:aa:fb:1b:
cd:6b:fc:e6:68:e4:d5:ff:ae:2f:57:57:c3:6f:87:
83:8a:60:a0:74:8c:67:85:32:63:4d:92:dd:99:17:
ff:4b:47:53:ff:cb:35:0d:f2:eb:4e:1e:cd:9d:3b:
51:38:62:d4:d4:20:ea:90:26:9a:26:30:cb:ad:00:
d4:ab:b0:a0:18:2e:b0:16:77:55:19:78:6d:4d:cf:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A3:EB:9C:93:11:64:E7:D6:67:14:8F:E5:1F:59:97:5C:17:89:B9
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9aPrnJMRZOfWZxSP5R9Zl1wXibk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d8:62:6e:64:3c:00:7e:58:91:9d:4a:67:d0:91:13:43:4e:
e8:1a:67:75:a7:80:72:e0:c0:cb:ed:81:a1:fc:85:3e:76:79:
08:c1:c9:d0:34:06:2e:96:45:05:2a:6f:49:f2:76:38:f7:77:
6f:70:cf:1a:6a:b3:6a:f8:0c:12:eb:86:49:17:1a:bf:49:e6:
5b:2e:c7:d0:d3:3f:8c:a7:cd:70:34:4f:35:d6:f4:17:2f:17:
f3:7c:29:b2:80:af:b8:51:06:59:04:69:b0:ff:7f:66:0b:a0:
97:ca:d9:1b:21:85:41:bd:b5:8c:6b:e0:1b:05:f7:0b:c1:09:
f8:e2:6c:f7:63:50:d9:01:f8:1e:92:3d:ff:dc:3a:06:23:08:
07:2f:25:43:88:9e:72:12:37:e9:b4:af:89:24:38:d1:d7:8c:
eb:eb:a7:7e:50:23:20:c5:46:ff:90:7c:a4:7f:01:36:4f:00:
b9:f5:e6:d4:35:c6:11:65:67:76:ff:8c:c9:3e:27:51:6b:07:
ab:9a:17:3a:af:bf:14:51:28:1a:18:c0:28:be:e1:f2:5d:aa:
b5:b6:50:aa:54:66:8d:fb:d9:48:90:b6:fc:51:46:c6:96:2b:
3f:8d:6e:05:bf:cd:1e:e3:49:7a:44:61:a8:d2:bb:d7:98:44:
99:d9:eb:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe0F6XrwAiNG3UMkwQeGNfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjQ0ZTI5ODNjNWM1MDRkODAwZjJkMDU4MmIxODJlYmFi
ZjI0ODcwHhcNMjMwNDI0MTYyNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWEzZWI5YzkzMTE2NGU3ZDY2NzE0OGZlNTFmNTk5NzVjMTc4OWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBohmJjiOqSX9MjIR4vhn5jMvxC+
iV8veYjusWaaScpvOasX2D8Ocv+t9sqzhP1MHen3Iov14v2qdz+7AWu99w1dGVOY
1NyL35bcTu3w5u6tj7n/f840Zt7X+ddIBcX7eSB1xS408Wd9BeP5v19ltWk+HD0n
WzSAncMT5yQWIrZTIwJR3yyaOgi93FN8y7UMRAj2MejrpH86XfEJxEznBG9pCm6o
33RUbzysCuE/Pdyq+xvNa/zmaOTV/64vV1fDb4eDimCgdIxnhTJjTZLdmRf/S0dT
/8s1DfLrTh7NnTtROGLU1CDqkCaaJjDLrQDUq7CgGC6wFndVGXhtTc8aRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPWj65yTEWTn1mcUj+UfWZdcF4m5MB8GA1UdIwQY
MBaAFE5kTimDxcUE2ADy0FgrGC66vySHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWIt
YjM4OGM1NzcwZTA0LzEvOWFQcm5KTVJaT2ZXWnhTUDVSOVpsMXdYaWJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWItYjM4OGM1NzcwZTA0
LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYe+MA0G
CSqGSIb3DQEBCwUAA4IBAQBv2GJuZDwAfliRnUpn0JETQ07oGmd1p4By4MDL7YGh
/IU+dnkIwcnQNAYulkUFKm9J8nY493dvcM8aarNq+AwS64ZJFxq/SeZbLsfQ0z+M
p81wNE811vQXLxfzfCmygK+4UQZZBGmw/39mC6CXytkbIYVBvbWMa+AbBfcLwQn4
4mz3Y1DZAfgekj3/3DoGIwgHLyVDiJ5yEjfptK+JJDjR14zr66d+UCMgxUb/kHyk
fwE2TwC59ebUNcYRZWd2/4zJPidRawermhc6r78UUSgaGMAovuHyXaq1tlCqVGaN
+9lIkLb8UUbGlis/jW4Fv80e40l6RGGo0rvXmESZ2esj
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:32:24 2025 by rpki-client