Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/PX7tyDMcR-E7YGSbqrK9yZGxjXU.roa
File: PX7tyDMcR-E7YGSbqrK9yZGxjXU.roa (raw, json)
Hash identifier: rkDY0FGwUnuzpIigvkMqt1E8N6uazV0Ka6ejwgH4wVs=
Subject key identifier: 3D:7E:ED:C8:33:1C:47:E1:3B:60:64:9B:AA:B2:BD:C9:91:B1:8D:75
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0189C6368F0C49CD4E0DDBCE4EA79E46D2A5
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/PX7tyDMcR-E7YGSbqrK9yZGxjXU.roa
Signing time: Sat 05 Aug 2023 15:00:11 +0000
ROA not before: Sat 05 Aug 2023 15:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 185.81.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:36:8f:0c:49:cd:4e:0d:db:ce:4e:a7:9e:46:d2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 5 15:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d7eedc8331c47e13b60649baab2bdc991b18d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:b8:07:d4:7d:78:85:25:e1:44:c2:98:1c:
94:fa:44:25:20:41:d1:b3:81:65:13:44:ab:45:63:
c0:d7:e5:e5:71:58:84:64:1b:35:c8:5e:f2:87:5b:
92:3b:81:30:c5:02:71:1b:96:23:d2:99:f3:f9:c9:
ff:9e:b5:73:02:8f:1f:fc:76:7e:65:1b:fa:95:6c:
1a:c5:c2:ce:e3:a7:58:6c:20:59:9a:15:4d:3d:66:
7f:95:54:f0:83:a1:68:eb:ed:27:50:36:3b:0d:16:
58:c4:bc:1b:f5:f7:da:f0:fe:44:65:cc:4f:69:45:
0f:47:7b:59:df:29:00:f1:68:30:7e:66:71:be:eb:
0b:1b:ca:69:77:5d:2a:55:19:2f:06:96:88:5f:80:
74:0b:34:5b:48:2f:62:c4:68:b2:82:f4:a5:4b:96:
34:e1:8a:45:30:4f:d8:3f:ac:a7:a7:9c:30:47:e8:
ea:ec:ff:02:c7:e2:9a:c4:a8:de:dc:c3:d1:e3:94:
64:5d:41:50:35:23:72:b4:4e:9f:40:d4:65:ce:a5:
cb:71:ca:c9:6a:ad:9d:dd:0d:de:0a:16:29:bd:79:
d1:89:21:2f:e9:61:6a:04:ec:9b:e7:1b:11:26:ea:
c1:e0:d6:ff:2d:fa:00:b4:6a:ed:a0:b4:80:68:eb:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7E:ED:C8:33:1C:47:E1:3B:60:64:9B:AA:B2:BD:C9:91:B1:8D:75
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/PX7tyDMcR-E7YGSbqrK9yZGxjXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.219.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:b0:c1:59:28:76:c2:ca:4e:a9:e0:7e:a1:3f:61:68:cd:d8:
76:73:ff:bc:d2:d8:de:72:e5:b4:7b:66:a4:9e:f6:83:c4:99:
69:6d:14:a8:90:82:b3:ec:4a:cb:03:ab:c9:d1:78:ad:c6:d4:
df:16:00:3b:fe:14:75:a6:06:fb:3e:de:f7:d2:e6:3b:ec:b0:
37:3c:6a:ad:b6:d3:68:e5:c9:bf:2a:39:79:5a:da:3a:91:f3:
20:8b:7e:0d:8b:73:70:85:44:0e:91:96:4d:97:32:50:1c:b1:
44:7d:72:87:da:53:55:ba:2b:d9:00:04:9e:3a:d6:7b:8c:a7:
e1:5d:1b:3e:d9:54:f8:d7:d6:b8:6d:67:9a:51:22:ac:85:00:
a6:fe:7e:8c:2b:2f:9a:dd:e3:3d:eb:a0:0c:ab:82:a4:1e:52:
60:95:06:90:8f:77:fc:b7:04:ce:39:67:9a:9a:4b:a4:94:70:
1a:6b:6a:e3:c9:90:33:8b:71:64:44:47:43:b3:74:06:01:67:
8e:8d:09:27:e2:3b:fc:c3:f0:85:00:48:06:8b:ca:72:6d:73:
bc:05:41:94:3d:f1:38:e4:5c:86:01:99:f0:ab:e8:5f:37:d7:
1f:db:73:bc:1b:f0:fe:d8:e2:6e:96:53:ab:e7:ab:3c:17:f3:
f4:e2:c3:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnGNo8MSc1ODdvOTqeeRtKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwODA1MTUwMDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDdlZWRjODMzMWM0N2UxM2I2MDY0OWJhYWIyYmRjOTkxYjE4ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsm4B9R9eIUl4UTCmByU+kQlIEHR
s4FlE0SrRWPA1+XlcViEZBs1yF7yh1uSO4EwxQJxG5Yj0pnz+cn/nrVzAo8f/HZ+
ZRv6lWwaxcLO46dYbCBZmhVNPWZ/lVTwg6Fo6+0nUDY7DRZYxLwb9ffa8P5EZcxP
aUUPR3tZ3ykA8WgwfmZxvusLG8ppd10qVRkvBpaIX4B0CzRbSC9ixGiygvSlS5Y0
4YpFME/YP6ynp5wwR+jq7P8Cx+KaxKje3MPR45RkXUFQNSNytE6fQNRlzqXLccrJ
aq2d3Q3eChYpvXnRiSEv6WFqBOyb5xsRJurB4Nb/LfoAtGrtoLSAaOvl+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD1+7cgzHEfhO2Bkm6qyvcmRsY11MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvUFg3dHlETWNSLUU3WUdTYnFySzl5Wkd4alhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVHbMA0G
CSqGSIb3DQEBCwUAA4IBAQDQsMFZKHbCyk6p4H6hP2Fozdh2c/+80tjecuW0e2ak
nvaDxJlpbRSokIKz7ErLA6vJ0XitxtTfFgA7/hR1pgb7Pt730uY77LA3PGqtttNo
5cm/Kjl5Wto6kfMgi34Ni3NwhUQOkZZNlzJQHLFEfXKH2lNVuivZAASeOtZ7jKfh
XRs+2VT419a4bWeaUSKshQCm/n6MKy+a3eM966AMq4KkHlJglQaQj3f8twTOOWea
mkuklHAaa2rjyZAzi3FkREdDs3QGAWeOjQkn4jv8w/CFAEgGi8pybXO8BUGUPfE4
5FyGAZnwq+hfN9cf23O8G/D+2OJullOr56s8F/P04sNy
-----END CERTIFICATE-----
Generated at Wed May 14 10:12:30 2025 by rpki-client