Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/Br_lRelkeFHlrzISICi4-S6d08k.roa
File: Br_lRelkeFHlrzISICi4-S6d08k.roa (raw, json)
Hash identifier: 9MGn/+ULKlVDFJ3xoubI+DGVRCOx2oK8xpiWpzx1MQQ=
Subject key identifier: 06:BF:E5:45:E9:64:78:51:E5:AF:32:12:20:28:B8:F9:2E:9D:D3:C9
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 0744CE79
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/Br_lRelkeFHlrzISICi4-S6d08k.roa
Signing time: Thu 17 Feb 2022 08:47:50 +0000
ROA not before: Thu 17 Feb 2022 08:47:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205806
IP address blocks: 185.206.44.0/22 maxlen: 22
185.147.168.0/22 maxlen: 22
149.249.160.0/19 maxlen: 22
185.178.24.0/22 maxlen: 22
213.208.40.0/22 maxlen: 22
213.208.44.0/22 maxlen: 22
149.249.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121949817 (0x744ce79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Feb 17 08:47:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06bfe545e9647851e5af32122028b8f92e9dd3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:da:88:c7:83:87:e5:40:d7:8c:49:b8:8f:
01:9e:5c:33:e5:13:27:30:34:c2:6e:af:ae:64:cf:
d0:78:70:07:9d:10:e9:06:95:b7:2b:f7:97:f9:14:
3e:a2:cc:50:54:60:b1:eb:4c:90:2d:bc:f9:8e:21:
32:fc:f1:f0:d0:c2:74:3c:09:10:40:b3:bb:f2:f1:
43:4c:7f:96:1f:a7:80:b8:39:bf:ce:7c:d8:68:34:
b2:26:e2:62:65:51:a2:eb:a7:5a:fe:e1:4b:15:5b:
b3:a2:83:60:2b:90:f2:63:1a:b2:4c:81:33:3c:26:
bd:a9:30:a0:da:6c:1f:12:04:fd:fd:a7:de:45:56:
04:41:6b:69:7a:b3:d9:24:7e:0d:9f:6f:83:87:05:
b2:69:6a:db:5d:bf:60:78:d0:9b:c5:47:54:4a:a7:
5c:d6:3d:5b:43:9a:a1:37:d7:c9:44:05:c3:ce:41:
87:ec:60:d3:19:89:af:b6:9f:80:5d:73:16:92:5d:
90:c3:a4:36:d7:4b:79:3a:47:5e:30:92:16:d9:3c:
ae:c1:68:c0:ff:9b:70:79:be:df:21:4d:98:cd:5f:
a8:79:44:3e:1b:7f:4c:2b:dd:d0:5e:3f:d0:77:72:
bc:99:37:89:27:e8:5c:ce:0e:8d:12:0b:5e:27:49:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:E5:45:E9:64:78:51:E5:AF:32:12:20:28:B8:F9:2E:9D:D3:C9
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/Br_lRelkeFHlrzISICi4-S6d08k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.249.160.0/19
149.249.224.0/20
185.147.168.0/22
185.178.24.0/22
185.206.44.0/22
213.208.40.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:ec:fb:5f:1a:c5:e0:0c:3d:b9:a0:23:3d:25:6c:8a:be:97:
53:3a:6d:19:11:53:d5:d6:8c:7e:f2:24:25:07:7b:ed:ec:0b:
36:a4:66:23:b6:1f:e2:4e:49:d8:11:83:fb:ca:ac:5b:c2:f5:
9c:15:c7:f9:6b:3e:4c:7a:19:46:1b:d7:19:4e:ed:5c:7b:38:
0b:9c:54:74:1c:f6:87:d4:eb:42:b7:f8:17:dd:03:f1:69:4f:
d1:c3:7c:dd:45:67:e3:0e:b0:37:d1:2f:46:4e:b8:2c:e0:26:
54:2f:56:7e:6f:5f:8b:72:27:30:ec:97:a6:10:e5:83:80:fd:
95:3b:b4:df:8d:d2:55:a6:d1:d5:fb:64:43:1a:74:31:37:a9:
cc:a7:be:b6:9b:78:71:e8:7f:b8:d1:c6:4c:21:c0:57:3d:f9:
b3:08:e0:90:a9:72:25:a7:f2:d1:1c:1d:05:7f:4a:55:98:9c:
b4:d7:10:6d:7c:07:09:76:ac:c8:38:1b:ad:7b:75:4d:7e:e0:
03:04:8a:d1:2b:9e:41:ee:ee:58:d8:88:a0:f4:be:25:a6:f9:
02:52:82:36:f1:83:d8:36:77:b2:64:35:62:26:bf:82:81:e5:
dc:2a:11:23:8a:17:69:dd:73:23:5a:d5:46:50:c5:f4:e5:99:
8c:c9:b9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:16:33 2025 by rpki-client