Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/zMuI_qt5W_EuXa_xsSAl5MH3ATc.roa
File: zMuI_qt5W_EuXa_xsSAl5MH3ATc.roa (raw, json)
Hash identifier: MsyZWQDJSzPvCZIHl9xW+dFvl2bT6kraHKOa3zFMMmo=
Subject key identifier: CC:CB:88:FE:AB:79:5B:F1:2E:5D:AF:F1:B1:20:25:E4:C1:F7:01:37
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 018C026C0065879F1AE88BA2A94883093B2A
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/zMuI_qt5W_EuXa_xsSAl5MH3ATc.roa
Signing time: Fri 24 Nov 2023 17:41:21 +0000
ROA not before: Fri 24 Nov 2023 17:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209257
IP address blocks: 185.186.222.0/24 maxlen: 24
185.186.221.0/24 maxlen: 24
2a11:1e40:1::/48 maxlen: 48
2a11:1e40:ba5e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:6c:00:65:87:9f:1a:e8:8b:a2:a9:48:83:09:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Nov 24 17:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cccb88feab795bf12e5daff1b12025e4c1f70137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:82:e7:e5:bd:9e:13:d3:fe:48:c0:25:50:
de:1b:c9:59:7a:a4:f0:45:a7:bc:f6:18:a6:72:63:
6e:64:8f:19:8e:ea:24:c5:46:c1:69:f6:0b:cf:89:
d5:c1:fd:42:aa:18:bb:ca:b4:d1:d9:1f:72:0b:4d:
29:a7:29:5b:e5:31:6e:fe:c3:cb:e2:d3:c0:e5:2c:
a7:d1:91:cf:d9:62:18:35:78:29:df:57:6b:cd:d2:
1a:d0:ce:66:c3:df:ad:bd:3c:0e:a2:c7:a6:fc:47:
5e:52:f6:c7:24:76:d3:8d:92:c4:26:fc:dc:f2:ab:
06:a7:61:44:37:b4:79:55:be:0e:11:3e:6f:a9:d4:
4a:f2:78:cb:6f:c4:61:0a:13:4b:23:87:b8:4b:8d:
5b:21:19:88:d9:ff:76:32:b9:d9:39:0d:1b:87:54:
7c:6f:3e:c1:7e:9c:5c:d0:9e:62:53:ee:13:92:5d:
9c:cb:2f:cb:6f:a2:42:08:76:84:d0:43:cb:40:f6:
0d:86:d3:05:46:fd:61:0e:a5:fc:50:63:58:37:4c:
fd:15:4c:dc:35:54:8f:ce:66:c0:ae:8f:fd:51:81:
96:a3:37:5c:6e:de:74:93:b8:c3:76:97:32:ec:2c:
55:3e:89:2c:e3:e6:97:ea:fd:62:76:94:2b:55:9b:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CB:88:FE:AB:79:5B:F1:2E:5D:AF:F1:B1:20:25:E4:C1:F7:01:37
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/zMuI_qt5W_EuXa_xsSAl5MH3ATc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.221.0-185.186.222.255
IPv6:
2a11:1e40:1::/48
2a11:1e40:ba5e::/48
Signature Algorithm: sha256WithRSAEncryption
2e:92:60:39:cc:56:23:3e:08:d0:b1:1d:23:e2:85:82:18:b6:
10:b2:6c:30:c4:36:68:38:37:61:1e:26:74:65:80:df:88:f8:
2c:94:23:7b:17:43:7b:99:50:f7:3c:03:4f:a6:d1:3e:d9:83:
23:1f:2e:49:d8:b5:49:dc:69:c3:36:88:f3:44:1a:50:88:1a:
ee:e2:0d:0a:75:68:38:d2:fc:9c:11:04:95:d5:ce:c7:98:9b:
1a:53:7d:d5:b9:0a:68:53:61:c7:5d:72:82:b0:b4:f2:b4:c4:
7a:41:16:d0:2b:13:2c:62:fc:c1:5d:be:33:40:2c:40:88:f9:
4c:a6:19:15:28:24:bc:71:de:d4:93:06:74:b1:b8:1b:3e:5d:
6e:94:8d:c0:3d:93:8d:19:4f:a6:18:62:e3:78:ba:ce:10:96:
a9:0f:2b:f5:23:5f:55:59:3d:37:27:b3:67:0f:20:a9:b8:82:
96:d5:fd:4d:2f:5e:bb:97:1e:11:01:dd:04:e6:b9:89:a8:59:
a2:38:3b:5f:f9:6d:eb:fa:3d:a1:61:a9:a0:df:5c:b6:a2:c5:
c8:3e:cc:b0:2d:96:87:19:c5:27:7d:ee:3b:3a:e9:4c:a3:3c:
57:dd:a6:7d:e3:1b:1b:e6:ec:e3:4f:d4:44:e8:5b:d1:03:3b:
04:10:5b:5c
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYwCbABlh58a6IuiqUiDCTsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWNhNTIxMzYyMjI2ZDAzYzE4MjkwMDNkODFkNDk4YWE4
MzhmMzMwHhcNMjMxMTI0MTc0MTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2NiODhmZWFiNzk1YmYxMmU1ZGFmZjFiMTIwMjVlNGMxZjcwMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzqC5+W9nhPT/kjAJVDeG8lZeqTw
Rae89himcmNuZI8ZjuokxUbBafYLz4nVwf1Cqhi7yrTR2R9yC00ppylb5TFu/sPL
4tPA5Syn0ZHP2WIYNXgp31drzdIa0M5mw9+tvTwOosem/EdeUvbHJHbTjZLEJvzc
8qsGp2FEN7R5Vb4OET5vqdRK8njLb8RhChNLI4e4S41bIRmI2f92MrnZOQ0bh1R8
bz7Bfpxc0J5iU+4Tkl2cyy/Lb6JCCHaE0EPLQPYNhtMFRv1hDqX8UGNYN0z9FUzc
NVSPzmbAro/9UYGWozdcbt50k7jDdpcy7CxVPoks4+aX6v1idpQrVZvurwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFMzLiP6reVvxLl2v8bEgJeTB9wE3MB8GA1UdIwQY
MBaAFDNcpSE2IibQPBgpAD2B1Jiqg48zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgt
OTc0YzQ0YWI5Y2ZiLzEvek11SV9xdDVXX0V1WGFfeHNTQWw1TUgzQVRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgtOTc0YzQ0YWI5Y2Zi
LzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAUBAIAATAOMAwDBAC5ut0D
BAC5ut4wGAQCAAIwEgMHACoRHkAAAQMHACoRHkC6XjANBgkqhkiG9w0BAQsFAAOC
AQEALpJgOcxWIz4I0LEdI+KFghi2ELJsMMQ2aDg3YR4mdGWA34j4LJQjexdDe5lQ
9zwDT6bRPtmDIx8uSdi1SdxpwzaI80QaUIga7uINCnVoONL8nBEEldXOx5ibGlN9
1bkKaFNhx11ygrC08rTEekEW0CsTLGL8wV2+M0AsQIj5TKYZFSgkvHHe1JMGdLG4
Gz5dbpSNwD2TjRlPphhi43i6zhCWqQ8r9SNfVVk9NyezZw8gqbiCltX9TS9eu5ce
EQHdBOa5iahZojg7X/lt6/o9oWGpoN9ctqLFyD7MsC2WhxnFJ33uOzrpTKM8V92m
feMbG+bs40/UROhb0QM7BBBbXA==
-----END CERTIFICATE-----
Generated at Thu May 1 08:01:40 2025 by rpki-client