Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/9xxzaqgCCdvNoYs4ABWNUi2ebJ8.roa
File: 9xxzaqgCCdvNoYs4ABWNUi2ebJ8.roa (raw, json)
Hash identifier: O5P8hu+IBMTLa/zpNVnwYSPhgThXVi9nu4iu72LFDso=
Subject key identifier: F7:1C:73:6A:A8:02:09:DB:CD:A1:8B:38:00:15:8D:52:2D:9E:6C:9F
Certificate issuer: /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial: 01856C4A6F9D07924563FDEA56610E777785
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/9xxzaqgCCdvNoYs4ABWNUi2ebJ8.roa
Signing time: Sun 01 Jan 2023 07:44:55 +0000
ROA not before: Sun 01 Jan 2023 07:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207766
IP address blocks: 213.240.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6f:9d:07:92:45:63:fd:ea:56:61:0e:77:77:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Validity
Not Before: Jan 1 07:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f71c736aa80209dbcda18b3800158d522d9e6c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:30:d8:62:d2:85:c6:c3:e7:57:ac:cd:ab:d3:
25:48:3e:de:2a:c4:ce:c1:1b:bd:18:29:f4:9b:d4:
07:ef:96:64:5c:c2:3f:0a:78:bc:be:ab:ef:a7:ed:
60:79:e7:07:a9:a1:92:08:f2:12:df:f0:9f:3f:7e:
ab:8c:29:51:6a:3d:e2:7f:23:7b:5f:a5:4e:80:5a:
dd:f1:7c:40:31:11:74:27:5b:22:38:4f:8c:19:af:
0d:cd:74:22:d9:5e:ee:1c:4b:b1:a4:4e:92:22:10:
fb:94:27:05:20:74:9c:16:6a:d2:f3:38:dd:90:65:
8a:58:17:4a:0e:07:6a:98:e0:f3:4a:25:d1:ed:61:
7b:7a:0c:92:38:ee:fe:50:dd:4c:0e:71:ba:34:9c:
b5:09:41:d8:33:31:9b:b1:45:d1:1c:04:8c:f3:3d:
30:43:8a:47:c9:92:d6:59:f5:8c:ab:17:eb:48:52:
c1:d7:4f:c0:e2:62:24:21:a9:1b:5c:a3:bb:8b:02:
d7:8c:8f:9a:e8:9b:ab:86:41:81:1e:17:ca:ac:e3:
00:06:51:18:3c:df:80:89:fb:56:b9:bc:26:bb:8a:
6a:c4:12:bd:17:75:51:f2:62:5f:7b:0d:aa:c7:31:
a0:97:a3:92:3c:5a:b2:66:74:fe:d8:cc:e6:cc:3c:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:73:6A:A8:02:09:DB:CD:A1:8B:38:00:15:8D:52:2D:9E:6C:9F
X509v3 Authority Key Identifier:
keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/9xxzaqgCCdvNoYs4ABWNUi2ebJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.240.32.0/24
Signature Algorithm: sha256WithRSAEncryption
18:93:48:cd:96:fe:8f:0a:e8:24:0c:cd:51:7e:4f:de:34:04:
a6:a8:16:c1:ac:24:54:d1:52:66:27:36:75:ac:ac:1d:eb:02:
94:9c:8a:f3:5f:7a:7a:56:20:26:45:a8:8a:67:6c:8a:18:86:
f4:d6:1a:b7:35:99:1c:b4:6c:3e:0b:94:68:07:95:a6:1f:f1:
cd:77:87:e8:10:74:bf:d8:6b:61:f2:02:a9:a6:a6:7e:c6:2b:
f7:9c:21:73:8d:0a:73:a3:e3:e0:2a:88:bf:54:b5:ad:b5:b4:
c9:3a:41:3c:77:0f:75:ed:ac:1d:3e:51:2c:9b:f7:7a:4e:e7:
d1:31:a8:21:b5:cf:e8:41:38:33:cc:9d:15:10:08:cd:91:22:
aa:b8:0f:1e:91:03:34:b5:aa:43:33:0e:f4:29:75:ab:84:36:
6b:bd:e1:f0:3d:e2:17:e7:5f:16:30:b2:54:15:81:83:1e:6f:
be:3a:0f:1c:b3:d3:c4:8b:6b:ba:4b:f0:83:c4:eb:11:23:40:
67:f6:6e:63:d7:61:bd:ce:85:72:ae:80:7d:67:77:95:6d:da:
de:0b:0b:41:ab:3b:5a:a0:32:30:53:90:d8:10:d5:eb:16:75:
fc:77:cf:e0:74:d8:3c:9f:3e:fc:1d:c8:d5:cc:50:ea:23:f0:
16:4b:2a:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsSm+dB5JFY/3qVmEOd3eFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MmNiODVjYTc5M2ZhZDU2NWI0NjA4ZTI2ZDgyYTZhZTI3
ZGMyMzIwHhcNMjMwMTAxMDc0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzFjNzM2YWE4MDIwOWRiY2RhMThiMzgwMDE1OGQ1MjJkOWU2YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTDYYtKFxsPnV6zNq9MlSD7eKsTO
wRu9GCn0m9QH75ZkXMI/Cni8vqvvp+1geecHqaGSCPIS3/CfP36rjClRaj3ifyN7
X6VOgFrd8XxAMRF0J1siOE+MGa8NzXQi2V7uHEuxpE6SIhD7lCcFIHScFmrS8zjd
kGWKWBdKDgdqmODzSiXR7WF7egySOO7+UN1MDnG6NJy1CUHYMzGbsUXRHASM8z0w
Q4pHyZLWWfWMqxfrSFLB10/A4mIkIakbXKO7iwLXjI+a6JurhkGBHhfKrOMABlEY
PN+AiftWubwmu4pqxBK9F3VR8mJfew2qxzGgl6OSPFqyZnT+2MzmzDxnbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPccc2qoAgnbzaGLOAAVjVItnmyfMB8GA1UdIwQY
MBaAFOUsuFynk/rVZbRgjibYKmrifcIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVN5NFhLZVQtdFZsdEdDT0p0Z3FhdUo5d2pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85NWJhZDktMjBmZS00YjhkLThmMDMt
OWMyOTk5ZDA5YjhmLzEvOXh4emFxZ0NDZHZOb1lzNEFCV05VaTJlYko4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85NWJhZDktMjBmZS00YjhkLThmMDMtOWMyOTk5ZDA5Yjhm
LzEvNVN5NFhLZVQtdFZsdEdDT0p0Z3FhdUo5d2pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1fAgMA0G
CSqGSIb3DQEBCwUAA4IBAQAYk0jNlv6PCugkDM1Rfk/eNASmqBbBrCRU0VJmJzZ1
rKwd6wKUnIrzX3p6ViAmRaiKZ2yKGIb01hq3NZkctGw+C5RoB5WmH/HNd4foEHS/
2Gth8gKppqZ+xiv3nCFzjQpzo+PgKoi/VLWttbTJOkE8dw917awdPlEsm/d6TufR
Maghtc/oQTgzzJ0VEAjNkSKquA8ekQM0tapDMw70KXWrhDZrveHwPeIX518WMLJU
FYGDHm++Og8cs9PEi2u6S/CDxOsRI0Bn9m5j12G9zoVyroB9Z3eVbdreCwtBqzta
oDIwU5DYENXrFnX8d8/gdNg8nz78HcjVzFDqI/AWSyop
-----END CERTIFICATE-----
Generated at Wed Apr 23 12:36:36 2025 by rpki-client