Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/3-iDxuQwHLB1ltwtiGE3_duC9z8.roa
File: 3-iDxuQwHLB1ltwtiGE3_duC9z8.roa (raw, json)
Hash identifier: VBzE7ztG3NScH4JMqCee45+oYP2Dzw1wSoHpKGPpuTA=
Subject key identifier: DF:E8:83:C6:E4:30:1C:B0:75:96:DC:2D:88:61:37:FD:DB:82:F7:3F
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 0186C52183543A78C2EA6BED198815758657
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/3-iDxuQwHLB1ltwtiGE3_duC9z8.roa
Signing time: Thu 09 Mar 2023 06:49:13 +0000
ROA not before: Thu 09 Mar 2023 06:49:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58075
IP address blocks: 185.187.100.0/22 maxlen: 24
2a0a:47c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:21:83:54:3a:78:c2:ea:6b:ed:19:88:15:75:86:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Mar 9 06:49:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfe883c6e4301cb07596dc2d886137fddb82f73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:1d:cc:21:5e:9e:f6:38:d5:38:7e:c6:d7:
0e:bb:e8:4f:de:89:3c:bb:2a:41:70:e1:15:6a:4a:
37:61:60:67:1e:30:93:d2:48:96:d2:2d:49:6c:48:
ff:32:e5:dd:c1:de:10:0f:ad:53:80:9a:4b:95:00:
be:c1:8c:7f:28:d6:e3:bd:56:cb:30:31:b1:9e:6a:
82:72:da:d4:70:b0:0a:1e:bc:98:c7:10:93:5c:c5:
9f:e6:ad:14:e3:0b:57:95:df:22:bc:0c:74:ba:1b:
ba:a3:1f:ee:ef:70:43:55:21:12:ed:18:a7:08:f7:
5e:aa:f7:af:91:86:50:59:4c:15:a5:07:46:4e:a2:
59:d8:49:cf:e5:da:e1:7b:c7:66:34:92:27:e8:f3:
72:1d:e2:a0:8a:c2:c2:3b:bf:1f:bc:64:3d:60:00:
6a:5d:ee:a0:10:32:73:fd:62:bf:20:03:8f:29:e5:
e0:ed:ec:c2:fd:0b:65:0b:bd:af:13:96:94:37:76:
75:89:5c:3c:22:e8:a2:2c:b6:f3:f9:dc:d9:9e:e4:
69:00:0b:4b:24:16:6d:2d:30:25:c5:93:62:78:0f:
13:f2:4c:7e:ca:0d:c7:44:8c:75:9a:e5:e6:97:5e:
95:b0:16:9b:eb:51:3e:02:66:a1:ab:d2:c2:59:10:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:83:C6:E4:30:1C:B0:75:96:DC:2D:88:61:37:FD:DB:82:F7:3F
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/3-iDxuQwHLB1ltwtiGE3_duC9z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.100.0/22
IPv6:
2a0a:47c0::/48
Signature Algorithm: sha256WithRSAEncryption
4f:e7:bc:b1:fa:ba:9a:1c:8c:ed:7b:8f:2b:a3:e3:17:c5:05:
36:9f:2a:60:57:8e:26:57:15:ff:68:19:7b:1c:c7:23:f4:33:
3c:51:c5:6e:72:44:ac:99:49:ca:16:c3:4d:f4:3e:31:78:1e:
d0:2b:64:86:8f:87:18:a1:b0:1d:01:64:18:fd:d9:a6:d2:c2:
f5:36:e3:e4:5f:18:e3:6a:b8:7b:11:a1:56:7c:92:8b:96:fe:
3a:f2:f6:a3:66:f2:55:c1:10:4b:76:89:89:23:ef:32:62:5d:
45:ac:7f:3c:a7:41:3b:50:e6:b5:d5:9e:70:03:65:45:b6:6f:
fe:b4:c0:97:63:76:32:3a:32:fa:36:de:ca:05:f1:0e:96:94:
94:e2:02:2d:8e:03:fc:dc:0c:5a:70:aa:f5:b0:12:e9:77:25:
01:d4:79:60:f3:6e:2c:75:15:13:b4:c9:4c:cb:87:98:c8:60:
64:96:07:fe:4b:02:7d:fb:31:9c:32:ea:15:12:5a:17:aa:38:
2a:fe:bc:21:59:1e:c8:35:3e:b4:d4:be:ad:01:e8:52:d8:65:
81:f3:62:a5:d0:79:96:0d:cd:38:0c:d8:41:df:02:0b:bf:a5:
f7:01:da:37:8e:f3:22:c6:6a:0c:68:94:fc:2b:f7:7a:ee:06:
87:8c:54:f4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbFIYNUOnjC6mvtGYgVdYZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw
YjAwOWIwHhcNMjMwMzA5MDY0OTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmU4ODNjNmU0MzAxY2IwNzU5NmRjMmQ4ODYxMzdmZGRiODJmNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv0dzCFenvY41Th+xtcOu+hP3ok8
uypBcOEVako3YWBnHjCT0kiW0i1JbEj/MuXdwd4QD61TgJpLlQC+wYx/KNbjvVbL
MDGxnmqCctrUcLAKHryYxxCTXMWf5q0U4wtXld8ivAx0uhu6ox/u73BDVSES7Rin
CPdeqvevkYZQWUwVpQdGTqJZ2EnP5drhe8dmNJIn6PNyHeKgisLCO78fvGQ9YABq
Xe6gEDJz/WK/IAOPKeXg7ezC/QtlC72vE5aUN3Z1iVw8IuiiLLbz+dzZnuRpAAtL
JBZtLTAlxZNieA8T8kx+yg3HRIx1muXml16VsBab61E+Amahq9LCWRBJFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN/og8bkMBywdZbcLYhhN/3bgvc/MB8GA1UdIwQY
MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt
MjEzZDY0YmVmZjcxLzEvMy1pRHh1UXdITEIxbHR3dGlHRTNfZHVDOXo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx
LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCubtkMA8E
AgACMAkDBwAqCkfAAAAwDQYJKoZIhvcNAQELBQADggEBAE/nvLH6upocjO17jyuj
4xfFBTafKmBXjiZXFf9oGXscxyP0MzxRxW5yRKyZScoWw030PjF4HtArZIaPhxih
sB0BZBj92abSwvU24+RfGONquHsRoVZ8kouW/jry9qNm8lXBEEt2iYkj7zJiXUWs
fzynQTtQ5rXVnnADZUW2b/60wJdjdjI6Mvo23soF8Q6WlJTiAi2OA/zcDFpwqvWw
Eul3JQHUeWDzbix1FRO0yUzLh5jIYGSWB/5LAn37MZwy6hUSWheqOCr+vCFZHsg1
PrTUvq0B6FLYZYHzYqXQeZYNzTgM2EHfAgu/pfcB2jeO8yLGagxolPwr93ruBoeM
VPQ=
-----END CERTIFICATE-----
Generated at Thu May 1 11:17:09 2025 by rpki-client