Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/m2Wy57fh4ZJtgnpU7zrsRd4Hjog.roa
File: m2Wy57fh4ZJtgnpU7zrsRd4Hjog.roa (raw, json)
Hash identifier: vO5zkAQ2mJ35inF1lfIBzWH3gH/O6aK8IN1VU6CMLuw=
Subject key identifier: 9B:65:B2:E7:B7:E1:E1:92:6D:82:7A:54:EF:3A:EC:45:DE:07:8E:88
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 01857079A9FDACC37328DA0E87721A300F37
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/m2Wy57fh4ZJtgnpU7zrsRd4Hjog.roa
Signing time: Mon 02 Jan 2023 03:14:59 +0000
ROA not before: Mon 02 Jan 2023 03:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60574
IP address blocks: 185.28.156.0/22 maxlen: 22
192.162.168.0/22 maxlen: 22
2a00:9e20::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:a9:fd:ac:c3:73:28:da:0e:87:72:1a:30:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Jan 2 03:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b65b2e7b7e1e1926d827a54ef3aec45de078e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:46:70:68:6a:c1:26:80:35:10:83:18:b6:
a6:bb:e5:80:17:14:dd:e3:df:89:c0:cc:27:13:cb:
e6:73:67:99:1d:c9:2d:1d:aa:e8:b3:5f:63:11:94:
57:a9:e3:e3:b2:f8:ea:6c:58:c5:62:f9:01:cc:48:
4a:a1:4b:c7:70:19:cc:a9:e6:75:22:c2:65:ff:bd:
79:2e:fb:f5:40:12:1b:87:eb:79:bd:d5:fd:8a:e1:
68:af:8c:a0:62:16:4e:93:86:0f:69:84:6e:60:4a:
0e:1b:4f:a0:dc:6b:c6:00:cd:a3:bf:e0:d8:5b:fa:
2e:6b:13:44:8d:76:7f:fe:62:c2:1f:84:8b:c1:8e:
f7:27:2a:94:66:de:17:4d:d3:3c:07:a5:8a:25:df:
07:81:bb:5c:c4:92:b7:c2:87:86:ce:7b:e5:ee:28:
d2:38:33:41:98:f5:21:8d:81:86:59:c7:18:5b:83:
50:f2:0c:08:87:c8:82:4a:1f:51:df:c4:4a:61:97:
d7:92:f3:e7:e9:9d:a6:f8:cd:fe:38:de:88:3a:b1:
32:e9:e2:c3:71:2b:48:81:82:a8:c2:5e:5f:bd:44:
cc:19:9d:e2:e5:63:50:b2:98:48:99:3c:d3:09:7e:
44:3a:61:94:ea:9d:9f:be:0e:72:a8:95:ef:5b:3e:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:65:B2:E7:B7:E1:E1:92:6D:82:7A:54:EF:3A:EC:45:DE:07:8E:88
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/m2Wy57fh4ZJtgnpU7zrsRd4Hjog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.156.0/22
192.162.168.0/22
IPv6:
2a00:9e20::/32
Signature Algorithm: sha256WithRSAEncryption
6e:82:7e:e2:79:c3:ec:67:26:c0:76:6c:8b:22:e3:da:ac:b0:
99:5a:88:0f:40:f2:83:98:71:75:a4:e7:d2:14:a4:c2:48:4a:
60:69:b4:4e:e5:56:fb:3f:1a:52:e7:c0:e0:e9:85:fb:62:11:
98:b9:4a:23:c0:8a:d7:79:8f:cd:ae:01:ac:61:fd:b0:17:d3:
e0:1f:e1:e6:1c:da:c9:54:e1:e7:f7:dc:b5:c9:ad:69:89:71:
a8:c4:d7:6f:45:43:24:f7:3a:ea:9b:09:f1:b4:b0:49:53:09:
59:ce:ff:20:4d:37:90:b8:1b:e0:e7:ba:50:5e:76:95:d3:75:
0a:68:82:37:ca:1a:78:16:26:06:3d:bd:23:b2:b5:fd:0b:88:
cb:ab:1e:b5:be:1c:50:b3:70:ee:69:ce:ee:e7:40:76:d3:9a:
d5:1c:ab:01:8c:1d:76:d6:bd:81:b8:8d:3a:57:e5:a0:ec:d7:
86:67:7a:12:2c:a5:6e:f9:7c:7b:5d:a3:56:a2:e2:9c:1a:3a:
e4:17:16:22:3b:1d:29:05:d9:e1:83:b2:16:f5:fc:ec:ae:67:
82:4e:e6:17:6d:93:13:b5:0e:ea:44:ed:6d:10:5f:b3:12:b1:
3b:7b:b4:c5:ae:75:36:84:6d:ae:2b:b3:f3:f9:ac:54:eb:19:
b3:a2:44:16
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVwean9rMNzKNoOh3IaMA83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOGY3ZWI0ZDI1NDhmOWNjYmYzY2IzOGU3MDJhMTkwYzEx
NzQyZjUwHhcNMjMwMTAyMDMxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjY1YjJlN2I3ZTFlMTkyNmQ4MjdhNTRlZjNhZWM0NWRlMDc4ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr9GcGhqwSaANRCDGLamu+WAFxTd
49+JwMwnE8vmc2eZHcktHaros19jEZRXqePjsvjqbFjFYvkBzEhKoUvHcBnMqeZ1
IsJl/715Lvv1QBIbh+t5vdX9iuFor4ygYhZOk4YPaYRuYEoOG0+g3GvGAM2jv+DY
W/ouaxNEjXZ//mLCH4SLwY73JyqUZt4XTdM8B6WKJd8HgbtcxJK3woeGznvl7ijS
ODNBmPUhjYGGWccYW4NQ8gwIh8iCSh9R38RKYZfXkvPn6Z2m+M3+ON6IOrEy6eLD
cStIgYKowl5fvUTMGZ3i5WNQsphImTzTCX5EOmGU6p2fvg5yqJXvWz5p0QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJtlsue34eGSbYJ6VO867EXeB46IMB8GA1UdIwQY
MBaAFI2PfrTSVI+cy/PLOOcCoZDBF0L1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYt
YWZkMjcyZGQwZmI1LzEvbTJXeTU3Zmg0Wkp0Z25wVTd6cnNSZDRIam9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYtYWZkMjcyZGQwZmI1
LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRycAwQC
wKKoMA0EAgACMAcDBQAqAJ4gMA0GCSqGSIb3DQEBCwUAA4IBAQBugn7iecPsZybA
dmyLIuParLCZWogPQPKDmHF1pOfSFKTCSEpgabRO5Vb7PxpS58Dg6YX7YhGYuUoj
wIrXeY/NrgGsYf2wF9PgH+HmHNrJVOHn99y1ya1piXGoxNdvRUMk9zrqmwnxtLBJ
UwlZzv8gTTeQuBvg57pQXnaV03UKaII3yhp4FiYGPb0jsrX9C4jLqx61vhxQs3Du
ac7u50B205rVHKsBjB121r2BuI06V+Wg7NeGZ3oSLKVu+Xx7XaNWouKcGjrkFxYi
Ox0pBdnhg7IW9fzsrmeCTuYXbZMTtQ7qRO1tEF+zErE7e7TFrnU2hG2uK7Pz+axU
6xmzokQW
-----END CERTIFICATE-----
Generated at Thu May 1 20:02:49 2025 by rpki-client