Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FV5LS8lhTDZOXZJbmGUdZuA5pWw.roa
File: FV5LS8lhTDZOXZJbmGUdZuA5pWw.roa (raw, json)
Hash identifier: MNGNbSg8C58Nkxz2zGeEO75J4SbCkIAmoIX0um9isDA=
Subject key identifier: 15:5E:4B:4B:C9:61:4C:36:4E:5D:92:5B:98:65:1D:66:E0:39:A5:6C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01890D8F3C8EA9B9754E33735876915023AA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FV5LS8lhTDZOXZJbmGUdZuA5pWw.roa
Signing time: Fri 30 Jun 2023 18:27:18 +0000
ROA not before: Fri 30 Jun 2023 18:27:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.218.100.0/24 maxlen: 24
185.230.52.0/24 maxlen: 24
185.210.234.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
193.58.144.0/24 maxlen: 24
193.58.145.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
45.147.224.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0d:8f:3c:8e:a9:b9:75:4e:33:73:58:76:91:50:23:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 30 18:27:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155e4b4bc9614c364e5d925b98651d66e039a56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:59:bf:e4:27:84:ad:c7:36:d5:34:9e:78:5b:
b1:a0:8e:ce:f7:30:81:24:f9:15:03:e4:34:97:0c:
25:6c:ef:f0:9c:06:19:f1:cf:4a:73:bb:c2:7e:e5:
3a:31:a2:ae:8b:26:49:a8:81:87:be:04:d8:ea:7c:
ee:5b:34:a6:eb:ed:ed:43:9b:14:b4:37:45:ba:0d:
8a:99:7d:74:c9:c9:3e:fb:a2:ec:34:ea:d6:a1:f2:
b3:f3:60:a8:48:46:02:6a:36:13:8e:53:3d:67:64:
a3:d7:c7:6e:ef:b8:82:44:a8:38:e9:33:ed:62:9d:
4d:16:05:45:a0:00:cb:c0:cc:a9:1f:11:d3:86:aa:
98:aa:93:fb:45:7f:4c:7b:26:f8:f1:02:00:5b:24:
2b:ca:d5:b5:2e:e4:a9:c6:61:03:aa:23:b1:f2:e6:
5c:b9:b2:6c:86:1d:05:1e:94:a3:d3:af:a2:08:b1:
e3:cb:18:12:8f:ed:3a:af:d3:08:5a:0c:1e:05:1d:
70:be:04:a5:0b:66:28:db:c8:27:a6:f2:eb:c9:01:
88:cd:94:bc:f0:a1:b6:f3:9b:af:7b:e7:31:f7:d5:
e0:36:84:02:13:15:ea:a0:18:38:92:b7:ec:f9:9c:
c1:49:c8:48:fb:20:1c:1a:3c:40:62:08:ed:f1:76:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:4B:4B:C9:61:4C:36:4E:5D:92:5B:98:65:1D:66:E0:39:A5:6C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FV5LS8lhTDZOXZJbmGUdZuA5pWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.210.234.0/23
185.214.103.0/24
185.218.100.0/24
185.218.102.0/24
185.225.0.0/23
185.225.22.0/24
185.230.52.0/24
185.246.115.0/24
193.58.144.0/22
Signature Algorithm: sha256WithRSAEncryption
15:6e:df:c2:b9:be:06:fc:57:e6:0a:76:c6:c6:d2:a7:84:7e:
97:09:3a:26:5e:95:7d:24:68:73:ba:4f:cd:5e:64:b8:b9:97:
65:41:77:c4:d9:80:41:15:f4:40:a0:a2:17:e2:2f:14:21:9a:
e5:d0:3b:1d:61:7f:2b:ad:09:b8:24:66:f2:1b:16:db:4a:75:
bc:ad:da:50:fe:6d:2d:d6:3c:68:1a:ff:38:6e:fc:79:82:b2:
a2:8c:a2:9a:d4:d8:de:00:c0:ff:e4:2a:ab:91:aa:b2:1e:96:
3d:9e:1a:8c:ba:89:c9:3f:8b:d5:ae:be:c9:17:de:25:5f:bc:
03:1b:d0:10:15:58:bf:6a:83:49:43:eb:09:22:e6:1a:5f:e6:
18:95:e9:48:68:8b:e0:a3:3d:c8:05:55:c9:f0:37:ac:2b:c7:
eb:1e:ab:fe:7b:7b:88:23:f5:4d:17:74:5b:7f:87:3e:9f:95:
7b:7f:39:e6:73:aa:b6:c3:46:2a:38:35:6e:b0:0c:90:b6:de:
58:44:a5:82:05:59:3e:68:6e:1d:38:15:86:8a:97:08:a1:ad:
94:4a:01:ee:cf:ee:9f:f9:78:2c:14:f1:2c:e1:2b:ee:22:ab:
0f:b1:17:ee:ff:80:1b:03:90:53:8b:f2:ab:f6:6a:1b:37:1d:
28:fd:b9:fb
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYkNjzyOqbl1TjNzWHaRUCOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNjMwMTgyNzE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTVlNGI0YmM5NjE0YzM2NGU1ZDkyNWI5ODY1MWQ2NmUwMzlhNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlm/5CeErcc21TSeeFuxoI7O9zCB
JPkVA+Q0lwwlbO/wnAYZ8c9Kc7vCfuU6MaKuiyZJqIGHvgTY6nzuWzSm6+3tQ5sU
tDdFug2KmX10yck++6LsNOrWofKz82CoSEYCajYTjlM9Z2Sj18du77iCRKg46TPt
Yp1NFgVFoADLwMypHxHThqqYqpP7RX9Meyb48QIAWyQrytW1LuSpxmEDqiOx8uZc
ubJshh0FHpSj06+iCLHjyxgSj+06r9MIWgweBR1wvgSlC2Yo28gnpvLryQGIzZS8
8KG285uve+cx99XgNoQCExXqoBg4krfs+ZzBSchI+yAcGjxAYgjt8XYSVQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFBVeS0vJYUw2Tl2SW5hlHWbgOaVsMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvRlY1TFM4bGhURFpPWFpKYm1HVWRadUE1cFd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALQgVAwQA
LZPgAwQBudLqAwQAudZnAwQAudpkAwQAudpmAwQBueEAAwQAueEWAwQAueY0AwQA
ufZzAwQCwTqQMA0GCSqGSIb3DQEBCwUAA4IBAQAVbt/Cub4G/FfmCnbGxtKnhH6X
CTomXpV9JGhzuk/NXmS4uZdlQXfE2YBBFfRAoKIX4i8UIZrl0DsdYX8rrQm4JGby
GxbbSnW8rdpQ/m0t1jxoGv84bvx5grKijKKa1NjeAMD/5CqrkaqyHpY9nhqMuonJ
P4vVrr7JF94lX7wDG9AQFVi/aoNJQ+sJIuYaX+YYlelIaIvgoz3IBVXJ8DesK8fr
Hqv+e3uII/VNF3Rbf4c+n5V7fznmc6q2w0YqODVusAyQtt5YRKWCBVk+aG4dOBWG
ipcIoa2USgHuz+6f+XgsFPEs4SvuIqsPsRfu/4AbA5BTi/Kr9mobNx0o/bn7
-----END CERTIFICATE-----
Generated at Fri May 9 02:38:27 2025 by rpki-client