Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/N5U_cQDJib-8iSMURG9qLbLa4b8.roa
File: N5U_cQDJib-8iSMURG9qLbLa4b8.roa (raw, json)
Hash identifier: kQuRrWTYI3t7phkgAXlcRWjD5BN8hvpxjQ1JdorB2U0=
Subject key identifier: 37:95:3F:71:00:C9:89:BF:BC:89:23:14:44:6F:6A:2D:B2:DA:E1:BF
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 0803F2B5
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/N5U_cQDJib-8iSMURG9qLbLa4b8.roa
Signing time: Thu 12 May 2022 07:29:04 +0000
ROA not before: Thu 12 May 2022 07:29:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205806
IP address blocks: 149.249.240.0/22 maxlen: 22
185.206.44.0/22 maxlen: 22
185.147.168.0/22 maxlen: 22
149.249.160.0/19 maxlen: 22
185.178.24.0/22 maxlen: 22
149.249.192.0/19 maxlen: 22
213.208.40.0/22 maxlen: 22
213.208.44.0/22 maxlen: 22
149.249.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134476469 (0x803f2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: May 12 07:29:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37953f7100c989bfbc892314446f6a2db2dae1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:5f:e6:39:78:77:71:cc:40:8e:1c:47:76:
76:d6:4e:ac:bd:8f:e3:2e:23:54:0f:fd:65:be:8b:
d8:a5:9c:c9:02:d3:f0:e8:64:89:54:61:ce:19:58:
a0:79:19:70:12:40:ed:e8:eb:be:e3:fa:f7:be:cd:
58:87:b5:9c:61:d6:ee:8d:35:07:9c:de:2a:f5:f0:
0a:0f:e4:1a:02:d2:41:1c:cb:81:45:fa:d3:4a:1e:
8f:42:be:2e:f4:eb:51:c6:a7:29:8a:47:f5:6a:5d:
48:da:0d:61:ca:33:9c:5d:b5:f5:ee:8f:dd:99:18:
43:a4:74:05:fe:c1:92:52:19:23:c4:8e:1b:62:63:
e2:37:45:f6:a4:58:3d:d0:11:1c:43:fa:06:e3:d8:
4c:cc:39:17:e1:ca:b8:11:07:21:e5:c4:07:c8:60:
9e:9c:12:65:da:7c:79:e9:c4:b1:26:8e:01:b0:5a:
87:9e:38:a1:f0:32:57:ad:7c:8c:8b:8a:6f:2e:0d:
ff:f5:c1:6f:9e:44:06:7e:fb:43:7c:05:6c:75:04:
81:b8:c1:25:ae:61:15:f8:c0:74:9c:eb:bb:c7:20:
1a:7c:7b:29:11:ac:33:28:82:5a:45:70:96:ef:91:
c3:d1:47:fd:8e:fb:92:0e:d7:c7:88:04:c6:f9:3b:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:95:3F:71:00:C9:89:BF:BC:89:23:14:44:6F:6A:2D:B2:DA:E1:BF
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/N5U_cQDJib-8iSMURG9qLbLa4b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.249.160.0-149.249.243.255
185.147.168.0/22
185.178.24.0/22
185.206.44.0/22
213.208.40.0/21
Signature Algorithm: sha256WithRSAEncryption
07:40:f6:bd:d6:49:bb:b0:d1:19:65:f4:70:56:6e:68:9d:73:
6d:87:a6:85:fd:d3:d3:b7:ca:dd:70:35:cc:a1:5d:d9:09:d5:
3f:fb:0c:ac:ab:65:60:6f:39:21:5f:19:16:3e:d3:09:0f:1c:
72:e1:cd:99:09:33:c3:0b:53:5f:24:46:3f:b3:3a:4c:46:29:
de:47:2a:de:a6:30:09:9a:7d:26:39:69:fb:59:f4:65:39:57:
c8:7e:ab:ad:ce:2a:72:38:d4:c5:56:ad:ee:72:04:4d:e3:b9:
25:dc:a0:ce:93:1e:ba:49:1c:00:ae:6b:49:6d:53:d0:01:f1:
73:4c:da:37:e1:aa:15:8a:6f:ec:c1:5b:76:44:ad:f0:2d:8f:
94:97:a6:78:52:52:1b:47:bd:87:8d:79:66:a0:fa:02:25:74:
25:ba:31:c3:b5:4d:29:c5:6f:73:2e:57:88:06:f9:e2:b2:2f:
38:fd:92:29:78:c1:bc:82:f6:9d:f9:b9:54:3a:ea:98:0f:3f:
3a:c8:70:b0:bb:20:26:69:a9:68:35:ff:f0:78:f9:b5:e3:9d:
80:65:68:d3:68:36:7b:8d:56:42:e1:46:a8:a9:94:78:06:7c:
dc:12:69:d9:6f:93:8b:9a:3d:f6:0a:08:6e:f7:e3:2f:44:26:
ff:c2:09:52
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIECAPytTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NGVmOThhZGJmNDJkNWJhY2QyNGNhZGIwYWRmMDkyYzQ1NzZkYWYzMB4XDTIyMDUx
MjA3MjkwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc5NTNmNzEwMGM5
ODliZmJjODkyMzE0NDQ2ZjZhMmRiMmRhZTFiZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJLAX+Y5eHdxzECOHEd2dtZOrL2P4y4jVA/9Zb6L2KWcyQLT
8OhkiVRhzhlYoHkZcBJA7ejrvuP6977NWIe1nGHW7o01B5zeKvXwCg/kGgLSQRzL
gUX600oej0K+LvTrUcanKYpH9WpdSNoNYcoznF219e6P3ZkYQ6R0Bf7BklIZI8SO
G2Jj4jdF9qRYPdARHEP6BuPYTMw5F+HKuBEHIeXEB8hgnpwSZdp8eenEsSaOAbBa
h544ofAyV618jIuKby4N//XBb55EBn77Q3wFbHUEgbjBJa5hFfjAdJzru8cgGnx7
KRGsMyiCWkVwlu+Rw9FH/Y77kg7Xx4gExvk74m0CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBQ3lT9xAMmJv7yJIxREb2otstrhvzAfBgNVHSMEGDAWgBRk75itv0LVus0k
ytsK3wksRXba8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pPLVlyYjlDMWJyTkpNcmJDdDhKTEVWMjJ2TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjcvZTQ5YmM1LTY4YzUtNGNlMi1hOWI5LTAzYzZmZWFmMWQ5Zi8x
L041VV9jUURKaWItOGlTTVVSRzlxTGJMYTRiOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcv
ZTQ5YmM1LTY4YzUtNGNlMi1hOWI5LTAzYzZmZWFmMWQ5Zi8xL1pPLVlyYjlDMWJy
TkpNcmJDdDhKTEVWMjJ2TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJjAMAwQFlfmgAwQClfnwAwQCuZOoAwQC
ubIYAwQCuc4sAwQD1dAoMA0GCSqGSIb3DQEBCwUAA4IBAQAHQPa91km7sNEZZfRw
Vm5onXNth6aF/dPTt8rdcDXMoV3ZCdU/+wysq2VgbzkhXxkWPtMJDxxy4c2ZCTPD
C1NfJEY/szpMRineRyrepjAJmn0mOWn7WfRlOVfIfqutzipyONTFVq3ucgRN47kl
3KDOkx66SRwArmtJbVPQAfFzTNo34aoVim/swVt2RK3wLY+Ul6Z4UlIbR72HjXlm
oPoCJXQlujHDtU0pxW9zLleIBvnisi84/ZIpeMG8gvad+blUOuqYDz86yHCwuyAm
aaloNf/wePm1452AZWjTaDZ7jVZC4UaoqZR4BnzcEmnZb5OLmj32Cghu9+MvRCb/
wglS
-----END CERTIFICATE-----
Generated at Sun May 11 05:17:32 2025 by rpki-client