Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/N1Mc_cGT7x4h4dhJWNgA7usBeRo.roa
File: N1Mc_cGT7x4h4dhJWNgA7usBeRo.roa (raw, json)
Hash identifier: taX4PXMr6+Mm9yR+lhPkJr1R6uKYHCPWMRAyKVwxwDo=
Subject key identifier: 37:53:1C:FD:C1:93:EF:1E:21:E1:D8:49:58:D8:00:EE:EB:01:79:1A
Certificate issuer: /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial: 0185714C3921B3E8816C7CFD2A5EB6CE6E84
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/N1Mc_cGT7x4h4dhJWNgA7usBeRo.roa
Signing time: Mon 02 Jan 2023 07:04:58 +0000
ROA not before: Mon 02 Jan 2023 07:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42885
IP address blocks: 185.225.120.0/22 maxlen: 22
77.234.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:39:21:b3:e8:81:6c:7c:fd:2a:5e:b6:ce:6e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Validity
Not Before: Jan 2 07:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37531cfdc193ef1e21e1d84958d800eeeb01791a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:fa:98:44:e4:f9:67:ba:54:92:17:b5:5e:
1b:a7:7a:bb:c1:04:40:c5:37:99:4d:82:76:c2:e1:
71:79:e8:14:4e:93:11:29:34:f3:b2:68:72:23:1f:
59:93:2b:c7:40:07:0d:1e:33:cc:26:a0:c4:41:a3:
6a:2a:b5:19:f9:ce:70:13:47:3d:48:ed:eb:e6:2b:
21:c1:f6:9f:6c:39:68:10:2b:b2:e0:e4:73:49:ff:
6e:35:3e:5b:ec:20:fd:6f:a0:f8:b4:21:eb:c0:72:
cb:ba:2b:97:51:2e:95:96:34:00:19:f4:5b:a9:5a:
76:53:1a:6f:f3:54:cc:fc:c6:84:33:81:d7:08:9d:
c5:ea:07:45:46:56:a0:bd:3a:2c:7c:fe:43:da:ff:
e1:09:88:88:90:5a:b5:50:25:50:76:63:6b:eb:68:
ad:b5:0e:69:66:a6:e0:d6:f5:32:d9:48:b1:26:1a:
28:cf:1a:34:59:b6:61:af:1a:97:c8:48:57:81:cd:
f6:b5:8b:96:a2:69:42:78:59:f3:67:65:ee:24:e1:
f1:0e:9a:b3:3c:0f:3a:db:79:7d:cf:50:aa:40:2b:
d6:c7:6f:9f:dd:8e:d4:69:26:3c:fd:13:04:e9:13:
af:aa:6a:29:f2:4c:f0:58:46:d0:8e:dd:ea:1c:4c:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:1C:FD:C1:93:EF:1E:21:E1:D8:49:58:D8:00:EE:EB:01:79:1A
X509v3 Authority Key Identifier:
keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/N1Mc_cGT7x4h4dhJWNgA7usBeRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.234.96.0/19
185.225.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:c4:4b:49:89:c2:61:9a:48:9c:f1:a0:4c:b8:58:f5:c9:04:
19:6e:41:53:36:14:71:b5:e4:d8:2f:d5:a1:b0:1f:41:43:4f:
29:c2:6f:a3:07:66:11:8e:34:c6:54:a3:7d:52:08:3a:3f:50:
71:76:8a:d5:08:bd:c2:8d:3a:74:7f:d8:89:14:36:1f:3a:63:
48:59:34:66:1e:34:1a:7d:b6:e2:dd:e4:c9:44:30:48:6c:7d:
b4:28:70:33:20:3f:b3:e0:6f:93:55:bf:cf:52:99:d9:f8:fa:
a0:1d:37:41:41:2d:dd:3c:cb:bd:b4:4a:40:d0:e0:89:4e:ef:
45:c4:dc:f4:c3:3a:fd:4e:9a:b8:80:4a:c9:77:1e:c7:7c:16:
57:11:d9:25:b5:03:40:d7:d1:49:b8:be:8f:4d:43:9c:a6:03:
b5:a7:4f:fd:34:a3:c1:9c:6f:d9:07:41:de:d8:5c:1c:8b:86:
73:e4:a6:6d:4d:fd:0b:2c:1b:91:0c:11:75:86:40:f8:08:0c:
e0:d6:3b:6a:04:71:c5:9a:19:53:56:c7:52:5b:74:31:80:1b:
b4:27:e3:1c:63:07:ca:e9:a3:66:43:2a:3c:61:0d:03:91:d9:
04:ce:0e:42:fc:0b:0d:b5:55:a9:1e:1b:ef:44:8e:ca:de:48:
f3:50:4f:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxTDkhs+iBbHz9Kl62zm6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMjM3ZjMyYmFlMTRhODFmZGEyN2ViMjk0NjBjM2EwZWRh
MzQyNDAwHhcNMjMwMTAyMDcwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzUzMWNmZGMxOTNlZjFlMjFlMWQ4NDk1OGQ4MDBlZWViMDE3OTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih36mETk+We6VJIXtV4bp3q7wQRA
xTeZTYJ2wuFxeegUTpMRKTTzsmhyIx9ZkyvHQAcNHjPMJqDEQaNqKrUZ+c5wE0c9
SO3r5ishwfafbDloECuy4ORzSf9uNT5b7CD9b6D4tCHrwHLLuiuXUS6VljQAGfRb
qVp2Uxpv81TM/MaEM4HXCJ3F6gdFRlagvTosfP5D2v/hCYiIkFq1UCVQdmNr62it
tQ5pZqbg1vUy2UixJhoozxo0WbZhrxqXyEhXgc32tYuWomlCeFnzZ2XuJOHxDpqz
PA8623l9z1CqQCvWx2+f3Y7UaSY8/RME6ROvqmop8kzwWEbQjt3qHEy5awIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDdTHP3Bk+8eIeHYSVjYAO7rAXkaMB8GA1UdIwQY
MBaAFJ4jfzK64UqB/aJ+spRgw6Dto0JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81ZDZlYmQtYThlZS00NzRjLWI3MWEt
YTY0MmNjODViYzcxLzEvTjFNY19jR1Q3eDRoNGRoSldOZ0E3dXNCZVJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81ZDZlYmQtYThlZS00NzRjLWI3MWEtYTY0MmNjODViYzcx
LzEvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFTepgAwQC
ueF4MA0GCSqGSIb3DQEBCwUAA4IBAQAtxEtJicJhmkic8aBMuFj1yQQZbkFTNhRx
teTYL9WhsB9BQ08pwm+jB2YRjjTGVKN9Ugg6P1BxdorVCL3CjTp0f9iJFDYfOmNI
WTRmHjQafbbi3eTJRDBIbH20KHAzID+z4G+TVb/PUpnZ+PqgHTdBQS3dPMu9tEpA
0OCJTu9FxNz0wzr9Tpq4gErJdx7HfBZXEdkltQNA19FJuL6PTUOcpgO1p0/9NKPB
nG/ZB0He2Fwci4Zz5KZtTf0LLBuRDBF1hkD4CAzg1jtqBHHFmhlTVsdSW3QxgBu0
J+McYwfK6aNmQyo8YQ0DkdkEzg5C/AsNtVWpHhvvRI7K3kjzUE+T
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:05:40 2025 by rpki-client