Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4n1eDGV2T6yC4xm094ueCtNhq1E.roa
File: 4n1eDGV2T6yC4xm094ueCtNhq1E.roa (raw, json)
Hash identifier: Wgh34z/PZyMJFa9ZrhV/TW6NCWs8IWbf0zsqS57H4QA=
Subject key identifier: E2:7D:5E:0C:65:76:4F:AC:82:E3:19:B4:F7:8B:9E:0A:D3:61:AB:51
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018B473C281AF1DE801CCDF1030555390D9A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4n1eDGV2T6yC4xm094ueCtNhq1E.roa
Signing time: Thu 19 Oct 2023 09:20:06 +0000
ROA not before: Thu 19 Oct 2023 09:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 85.122.232.0/24 maxlen: 24
85.122.233.0/24 maxlen: 24
85.122.238.0/24 maxlen: 24
85.122.236.0/24 maxlen: 24
85.122.234.0/24 maxlen: 24
85.122.239.0/24 maxlen: 24
85.122.237.0/24 maxlen: 24
85.122.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:3c:28:1a:f1:de:80:1c:cd:f1:03:05:55:39:0d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 19 09:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e27d5e0c65764fac82e319b4f78b9e0ad361ab51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:25:13:36:4d:59:11:8f:e9:d5:6b:ed:ae:
7d:6b:c8:92:77:30:0d:42:72:e6:26:c7:b7:f4:ed:
59:9e:bf:81:f6:68:83:3d:d9:aa:c4:f0:e3:65:07:
32:16:e2:b4:63:22:6d:67:bd:c2:63:99:18:fb:89:
d8:44:58:eb:8f:51:5c:64:ec:39:be:8f:26:40:cf:
04:36:0a:35:ca:b3:79:20:c3:bd:e7:f5:6b:a4:52:
73:95:51:b8:31:39:b8:c5:f4:fe:60:90:65:1e:88:
da:e1:f1:3d:80:0a:4e:dd:49:f6:38:91:68:01:bf:
5b:ae:be:5f:2e:c8:5f:2d:2f:84:21:75:21:68:9a:
40:f4:dc:c6:4b:c4:c7:8e:35:97:d9:6d:b5:f2:f5:
10:28:38:d8:7c:12:42:74:1e:44:17:b8:29:06:a6:
60:80:b1:04:44:bb:6f:c9:41:12:c7:86:71:1e:64:
20:d0:fc:4d:24:71:8a:1e:06:ee:00:a9:15:7b:f9:
eb:f3:9b:d2:79:19:bd:fa:92:5a:cf:83:f3:6d:77:
d7:29:5b:cf:69:27:98:5c:b4:50:d1:67:67:0c:11:
20:51:3d:dd:11:b6:c7:81:cd:af:54:9f:cb:4f:81:
4a:3f:d4:cf:59:cb:a8:79:a9:92:a4:ea:68:b8:6b:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7D:5E:0C:65:76:4F:AC:82:E3:19:B4:F7:8B:9E:0A:D3:61:AB:51
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4n1eDGV2T6yC4xm094ueCtNhq1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.232.0/21
Signature Algorithm: sha256WithRSAEncryption
08:31:59:e8:31:19:d9:70:23:ca:43:df:b8:c0:68:d7:d6:9e:
63:2a:80:fb:ce:23:03:78:88:22:e6:16:2c:ea:c8:1c:dd:8c:
ac:b1:96:d4:6e:e3:dc:a5:69:c5:99:16:94:67:6c:60:55:f7:
58:38:f3:92:5c:76:74:c3:ae:a4:fc:97:d4:42:60:7c:e0:f8:
cb:f3:db:fc:a5:cf:75:8a:11:d0:e6:73:5a:14:9c:b3:4a:63:
c5:79:b2:38:4b:61:91:2a:88:4a:8a:16:96:78:0c:14:f5:50:
a4:df:db:b3:52:c0:24:82:1b:0e:a6:a5:c5:8a:d0:b8:ed:21:
c3:32:a4:22:dd:77:03:6f:dd:4b:02:a8:8d:09:49:9e:86:39:
3f:7b:27:b2:7c:1d:af:7f:7f:54:d5:42:0c:b5:86:40:b3:b8:
24:40:49:42:2f:0c:eb:3e:7d:10:f9:31:d9:7f:a7:1f:4f:c5:
de:9c:07:33:32:f6:b9:9a:5d:c1:36:17:92:cc:80:37:03:e9:
2b:fb:a8:e9:e6:fb:a3:eb:07:29:ca:0d:c2:96:4e:3f:18:f0:
6b:45:b7:9f:14:4f:25:6a:64:52:75:32:88:ec:88:55:d9:40:
e4:d6:ab:14:e5:d2:bb:0b:cc:26:39:5c:99:c8:9e:3c:33:9c:
b9:b7:23:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtHPCga8d6AHM3xAwVVOQ2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMxMDE5MDkyMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjdkNWUwYzY1NzY0ZmFjODJlMzE5YjRmNzhiOWUwYWQzNjFhYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimclEzZNWRGP6dVr7a59a8iSdzAN
QnLmJse39O1Znr+B9miDPdmqxPDjZQcyFuK0YyJtZ73CY5kY+4nYRFjrj1FcZOw5
vo8mQM8ENgo1yrN5IMO95/VrpFJzlVG4MTm4xfT+YJBlHoja4fE9gApO3Un2OJFo
Ab9brr5fLshfLS+EIXUhaJpA9NzGS8THjjWX2W218vUQKDjYfBJCdB5EF7gpBqZg
gLEERLtvyUESx4ZxHmQg0PxNJHGKHgbuAKkVe/nr85vSeRm9+pJaz4PzbXfXKVvP
aSeYXLRQ0WdnDBEgUT3dEbbHgc2vVJ/LT4FKP9TPWcuoeamSpOpouGtD6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOJ9Xgxldk+sguMZtPeLngrTYatRMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvNG4xZURHVjJUNnlDNHhtMDk0dWVDdE5ocTFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVXroMA0G
CSqGSIb3DQEBCwUAA4IBAQAIMVnoMRnZcCPKQ9+4wGjX1p5jKoD7ziMDeIgi5hYs
6sgc3YyssZbUbuPcpWnFmRaUZ2xgVfdYOPOSXHZ0w66k/JfUQmB84PjL89v8pc91
ihHQ5nNaFJyzSmPFebI4S2GRKohKihaWeAwU9VCk39uzUsAkghsOpqXFitC47SHD
MqQi3XcDb91LAqiNCUmehjk/eyeyfB2vf39U1UIMtYZAs7gkQElCLwzrPn0Q+THZ
f6cfT8XenAczMva5ml3BNheSzIA3A+kr+6jp5vuj6wcpyg3Clk4/GPBrRbefFE8l
amRSdTKI7IhV2UDk1qsU5dK7C8wmOVyZyJ48M5y5tyPa
-----END CERTIFICATE-----
Generated at Mon May 5 19:02:09 2025 by rpki-client