Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/_A290QlzenaC-inJln8m1_548eQ.roa
File: _A290QlzenaC-inJln8m1_548eQ.roa (raw, json)
Hash identifier: lEXV9+3IA/aPhY4Yh1PuDc1FTDA84fh/aSwATrtQXZs=
Subject key identifier: FC:0D:BD:D1:09:73:7A:76:82:FA:29:C9:96:7F:26:D7:FE:78:F1:E4
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 01856DC19B93A777530BFB7C198D7F17C122
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/_A290QlzenaC-inJln8m1_548eQ.roa
Signing time: Sun 01 Jan 2023 14:34:42 +0000
ROA not before: Sun 01 Jan 2023 14:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60717
IP address blocks: 185.30.224.0/22 maxlen: 22
2a04:45c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9b:93:a7:77:53:0b:fb:7c:19:8d:7f:17:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Jan 1 14:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc0dbdd109737a7682fa29c9967f26d7fe78f1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:2a:3a:29:30:7a:e8:e1:95:56:c4:10:be:
0a:53:e4:0f:ea:c5:85:82:fd:00:6e:f7:7b:6c:da:
d0:f7:69:aa:f2:e5:53:79:e9:0d:f8:2a:be:9d:ae:
6a:11:d6:dc:a6:59:31:e2:c7:7e:a0:a2:d1:c2:37:
56:70:62:a0:80:c0:1c:df:35:da:92:17:3d:30:e1:
7d:c8:18:a6:32:ec:3d:95:17:6c:92:01:10:18:79:
1d:b2:e0:34:fd:7a:2d:91:6a:42:c2:dc:34:46:93:
7a:53:d3:62:03:fb:69:1b:43:95:a1:3f:5b:7c:55:
19:17:81:6d:1e:ed:57:a9:9d:53:e8:5a:2f:95:10:
9c:09:41:d7:a6:4e:24:2d:78:85:c9:70:e4:3a:64:
3e:db:b5:bb:cc:67:c6:c0:70:6e:99:c4:7e:b1:0c:
a2:a1:d2:65:c8:43:19:a7:a6:b4:39:68:aa:ab:a8:
ce:b8:69:00:4b:77:bb:7c:e1:54:2e:dc:f5:e9:0b:
ec:fa:23:9b:c1:24:53:ef:03:04:3b:28:8f:69:35:
e5:d1:14:d8:d2:75:f4:f5:d5:9d:b1:34:15:f3:9a:
98:00:3e:96:f4:20:7e:3e:eb:dd:c4:29:5a:f2:82:
f0:f0:05:79:53:ee:21:07:82:d8:77:2e:50:e4:f8:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:BD:D1:09:73:7A:76:82:FA:29:C9:96:7F:26:D7:FE:78:F1:E4
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/_A290QlzenaC-inJln8m1_548eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.224.0/22
IPv6:
2a04:45c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:8c:4d:84:5e:37:12:36:5a:98:9c:4e:f0:0c:ba:bb:b3:a0:
00:8b:d1:14:31:49:9f:8f:cc:dd:a6:6c:2c:d8:ca:93:39:3f:
c8:62:eb:60:f4:1e:30:2f:23:b2:77:ac:ef:63:d7:45:06:f4:
83:07:83:c8:39:bf:bc:91:0c:66:28:71:7b:80:b8:63:be:ac:
f8:6f:f4:00:0c:20:af:52:5d:c1:cb:27:2d:c4:11:32:13:e4:
22:ca:6e:02:6c:94:72:03:af:19:22:c5:e1:be:09:dc:14:65:
d3:f7:f5:d0:01:8e:48:6d:59:e1:fa:37:21:6a:9f:42:64:cc:
51:d9:0f:71:fd:4c:c7:fe:a1:13:5f:02:3d:4d:35:7c:82:d1:
48:83:f7:e2:4f:bf:53:97:c4:11:b1:44:4d:ec:93:96:06:e6:
17:2d:33:3b:6a:b9:e4:50:87:b4:40:d2:e0:fc:1c:a1:c4:a0:
5b:53:34:f9:59:c1:00:bd:a2:28:0e:66:0f:67:25:4a:a6:67:
0c:95:e1:b6:e0:b9:48:20:63:89:5a:f8:d3:b6:ad:92:98:61:
3a:dd:4a:1a:e3:4f:e1:de:59:d5:a7:43:20:97:3a:5f:1e:f9:
d7:77:eb:ce:07:c0:b4:9f:45:09:57:35:05:a5:49:53:7d:db:
ae:58:21:20
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtwZuTp3dTC/t8GY1/F8EiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWFlMTViZTg2ZWIwYzRkOWE3NjRjYzdhOGY2NTk5NWJm
OGM5MGUwHhcNMjMwMTAxMTQzNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzBkYmRkMTA5NzM3YTc2ODJmYTI5Yzk5NjdmMjZkN2ZlNzhmMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tAqOikweujhlVbEEL4KU+QP6sWF
gv0Abvd7bNrQ92mq8uVTeekN+Cq+na5qEdbcplkx4sd+oKLRwjdWcGKggMAc3zXa
khc9MOF9yBimMuw9lRdskgEQGHkdsuA0/XotkWpCwtw0RpN6U9NiA/tpG0OVoT9b
fFUZF4FtHu1XqZ1T6FovlRCcCUHXpk4kLXiFyXDkOmQ+27W7zGfGwHBumcR+sQyi
odJlyEMZp6a0OWiqq6jOuGkAS3e7fOFULtz16Qvs+iObwSRT7wMEOyiPaTXl0RTY
0nX09dWdsTQV85qYAD6W9CB+PuvdxCla8oLw8AV5U+4hB4LYdy5Q5PjDzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPwNvdEJc3p2gvopyZZ/Jtf+ePHkMB8GA1UdIwQY
MBaAFD4a4VvobrDE2adkzHqPZZlb+MkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQt
YjI3YzM0MTI0MjZhLzEvX0EyOTBRbHplbmFDLWluSmxuOG0xXzU0OGVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQtYjI3YzM0MTI0MjZh
LzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR7gMA0E
AgACMAcDBQMqBEXAMA0GCSqGSIb3DQEBCwUAA4IBAQBdjE2EXjcSNlqYnE7wDLq7
s6AAi9EUMUmfj8zdpmws2MqTOT/IYutg9B4wLyOyd6zvY9dFBvSDB4PIOb+8kQxm
KHF7gLhjvqz4b/QADCCvUl3ByyctxBEyE+Qiym4CbJRyA68ZIsXhvgncFGXT9/XQ
AY5IbVnh+jchap9CZMxR2Q9x/UzH/qETXwI9TTV8gtFIg/fiT79Tl8QRsURN7JOW
BuYXLTM7arnkUIe0QNLg/ByhxKBbUzT5WcEAvaIoDmYPZyVKpmcMleG24LlIIGOJ
WvjTtq2SmGE63Uoa40/h3lnVp0MglzpfHvnXd+vOB8C0n0UJVzUFpUlTfduuWCEg
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:33:38 2025 by rpki-client