Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/8Uh50kqwggghZ2fizLXcBmHSPK0.roa
File: 8Uh50kqwggghZ2fizLXcBmHSPK0.roa (raw, json)
Hash identifier: Fp/NAfLrAQHNPvsriHYUJysHHOC9rtRqOcdRBGwhRFg=
Subject key identifier: F1:48:79:D2:4A:B0:82:08:21:67:67:E2:CC:B5:DC:06:61:D2:3C:AD
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 08E98FBF
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/8Uh50kqwggghZ2fizLXcBmHSPK0.roa
Signing time: Sat 01 Jan 2022 16:11:34 +0000
ROA not before: Sat 01 Jan 2022 16:11:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59518
IP address blocks: 185.131.3.0/24 maxlen: 24
2a02:6f00:ec0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149524415 (0x8e98fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Jan 1 16:11:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f14879d24ab08208216767e2ccb5dc0661d23cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:b6:f7:31:df:b1:1a:f4:77:ce:23:7e:4c:
62:35:97:37:0e:0b:41:2a:ad:d3:30:df:d4:0c:be:
55:91:f5:e4:e2:47:66:4c:5d:0a:6f:7b:42:7b:10:
6d:6b:63:bc:4a:6b:e8:15:aa:90:1b:38:88:35:da:
7e:84:64:a6:e1:1b:fb:d5:9f:0a:d0:2e:db:47:5e:
35:5f:00:50:26:4b:6c:69:e6:3c:ed:ed:9a:ca:9c:
d2:78:08:bf:5f:48:4f:1b:f0:31:f8:10:ed:0b:41:
c2:58:8c:6d:48:4a:ee:6b:39:70:72:0d:e8:a0:aa:
1a:ba:92:74:eb:ae:f9:61:9c:f1:8c:e6:d7:43:7c:
12:b6:50:0c:8e:84:38:b1:88:e9:76:dd:56:2d:92:
96:3a:eb:73:b8:71:9f:62:ac:b0:f3:47:1c:b8:d3:
0f:23:d5:c2:59:a8:63:9a:a3:a9:2d:ce:20:a7:9f:
fd:17:a3:b7:78:a1:d2:e3:59:c0:1d:d9:54:07:ba:
41:9a:ab:60:95:c2:63:6d:de:cd:26:f2:f0:ec:22:
97:40:cf:cf:91:ba:a8:8f:0c:80:b3:c6:86:d6:0a:
0b:ca:bb:8f:1c:80:e5:b6:85:aa:ca:da:22:a7:fa:
af:78:0d:e0:9e:4e:a8:76:60:94:f6:be:8e:d6:52:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:48:79:D2:4A:B0:82:08:21:67:67:E2:CC:B5:DC:06:61:D2:3C:AD
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/8Uh50kqwggghZ2fizLXcBmHSPK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.3.0/24
IPv6:
2a02:6f00:ec0::/48
Signature Algorithm: sha256WithRSAEncryption
76:c5:49:7b:c2:a5:78:58:0b:4d:9a:22:4f:c4:16:bf:f4:a2:
5d:01:01:00:30:e9:72:25:9f:5c:79:e5:16:50:61:07:1c:4b:
98:f3:c6:d4:b6:19:07:bd:62:d5:1e:77:eb:84:b6:ef:a7:8a:
45:90:3e:e1:d8:61:fd:af:f3:ee:92:1a:58:8d:cb:ca:c7:ea:
df:90:93:cd:95:02:37:7f:c7:ae:87:91:58:f8:65:e7:c2:e8:
64:73:5b:40:87:25:35:b1:d4:23:74:85:ce:6f:49:07:67:aa:
9a:e8:01:38:8d:1d:fc:97:e8:58:3c:5e:ff:b5:06:60:6b:48:
74:16:87:ca:80:b8:d5:d1:ef:6f:0d:ed:d2:be:19:db:38:73:
93:c9:9e:cd:65:5d:a0:02:43:2c:09:8a:3f:cb:d2:d8:05:ff:
60:37:bd:54:61:7b:5c:91:fa:0a:5a:05:95:55:a7:be:83:50:
ce:1c:d7:99:5d:84:e6:1d:22:ff:c3:98:3e:18:8d:63:52:c1:
c5:9a:ba:4b:f3:b9:26:23:30:1c:e6:cd:de:a5:46:52:1c:4f:
7d:f9:02:88:16:f4:1c:e1:43:0b:65:85:cf:ae:b2:50:de:52:
4c:18:60:a8:3c:15:bc:44:34:c0:14:d7:1d:e2:d9:f7:de:e3:
51:67:bd:94
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECOmPvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NGViYTFmZGY2YzRkZTE5MmMxZDNlZGY4YTgwMGNhNTk3Zjk3ZDY4MB4XDTIyMDEw
MTE2MTEzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjE0ODc5ZDI0YWIw
ODIwODIxNjc2N2UyY2NiNWRjMDY2MWQyM2NhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmrtvcx37Ea9HfOI35MYjWXNw4LQSqt0zDf1Ay+VZH15OJH
ZkxdCm97QnsQbWtjvEpr6BWqkBs4iDXafoRkpuEb+9WfCtAu20deNV8AUCZLbGnm
PO3tmsqc0ngIv19ITxvwMfgQ7QtBwliMbUhK7ms5cHIN6KCqGrqSdOuu+WGc8Yzm
10N8ErZQDI6EOLGI6XbdVi2Sljrrc7hxn2KssPNHHLjTDyPVwlmoY5qjqS3OIKef
/Rejt3ih0uNZwB3ZVAe6QZqrYJXCY23ezSby8Owil0DPz5G6qI8MgLPGhtYKC8q7
jxyA5baFqsraIqf6r3gN4J5OqHZglPa+jtZS7zECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTxSHnSSrCCCCFnZ+LMtdwGYdI8rTAfBgNVHSMEGDAWgBTE66H99sTeGSwd
Pt+KgAyll/l9aDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hPdWhfZmJFM2hrc0hUN2Zpb0FNcFpmNWZXZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2QvMWE2MTU5LTFkYzYtNGEwOS04NDRmLTUxMjg1NjBkYmRmYy8x
LzhVaDUwa3F3Z2dnaFoyZml6TFhjQm1IU1BLMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
MWE2MTU5LTFkYzYtNGEwOS04NDRmLTUxMjg1NjBkYmRmYy8xL3hPdWhfZmJFM2hr
c0hUN2Zpb0FNcFpmNWZXZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALmDAzAPBAIAAjAJAwcAKgJvAA7A
MA0GCSqGSIb3DQEBCwUAA4IBAQB2xUl7wqV4WAtNmiJPxBa/9KJdAQEAMOlyJZ9c
eeUWUGEHHEuY88bUthkHvWLVHnfrhLbvp4pFkD7h2GH9r/PukhpYjcvKx+rfkJPN
lQI3f8euh5FY+GXnwuhkc1tAhyU1sdQjdIXOb0kHZ6qa6AE4jR38l+hYPF7/tQZg
a0h0FofKgLjV0e9vDe3SvhnbOHOTyZ7NZV2gAkMsCYo/y9LYBf9gN71UYXtckfoK
WgWVVae+g1DOHNeZXYTmHSL/w5g+GI1jUsHFmrpL87kmIzAc5s3epUZSHE99+QKI
FvQc4UMLZYXPrrJQ3lJMGGCoPBW8RDTAFNcd4tn33uNRZ72U
-----END CERTIFICATE-----
Generated at Tue May 6 15:21:09 2025 by rpki-client