Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OBusRz0PuGhptr0zrqMo3HB-G4g.roa
File: OBusRz0PuGhptr0zrqMo3HB-G4g.roa (raw, json)
Hash identifier: ogsO/MJKTyRW+xJojPCORp/uLiy3hGV2bLeJPmvnaRk=
Subject key identifier: 38:1B:AC:47:3D:0F:B8:68:69:B6:BD:33:AE:A3:28:DC:70:7E:1B:88
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0BF43929
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OBusRz0PuGhptr0zrqMo3HB-G4g.roa
Signing time: Thu 27 Jan 2022 13:22:50 +0000
ROA not before: Thu 27 Jan 2022 13:22:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 194.233.4.0/24 maxlen: 24
194.233.6.0/24 maxlen: 24
194.233.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200554793 (0xbf43929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 27 13:22:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=381bac473d0fb86869b6bd33aea328dc707e1b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:34:91:fc:1d:a0:be:84:d8:d2:77:f6:97:
4e:fc:75:4d:1d:8c:e8:5b:b8:63:c1:07:49:6d:9e:
d7:9f:86:85:72:87:e1:dc:c9:5c:67:65:84:c2:e6:
ac:37:ca:3d:02:7c:82:be:b6:4f:5f:5f:6a:78:c8:
4c:e2:6f:f0:cc:f8:af:54:7c:50:13:54:a6:a1:64:
b0:31:9a:59:6a:ac:95:f7:6f:f5:d6:93:80:76:cd:
05:4c:c0:b2:0b:f0:b4:b0:11:3e:f1:4d:ec:94:aa:
ba:a6:c5:79:4d:9e:91:f9:8f:6a:6e:fe:ca:b2:f1:
3d:92:93:4c:4d:a7:0a:bf:3b:5b:a9:9a:d6:b8:6a:
65:79:58:56:a9:b2:70:c8:2a:7c:8b:c4:b2:a1:cc:
72:ca:63:f9:a0:9c:b9:ca:c9:78:c1:9d:ca:5b:cb:
da:3e:c1:3a:7f:7d:00:a1:d3:60:78:7f:dd:84:20:
a1:aa:c6:8c:8c:4d:99:79:9d:c6:30:66:04:6f:16:
49:5d:7f:98:aa:44:c1:26:1e:78:7e:ae:7b:7f:a9:
40:05:7e:83:9c:b1:6e:b8:c7:a7:51:cb:c6:8e:3a:
25:0d:1b:dd:ab:34:4d:71:e1:34:19:fb:9f:55:5c:
97:55:85:08:a2:e0:8f:f3:23:2c:fb:fb:f1:4d:0a:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:AC:47:3D:0F:B8:68:69:B6:BD:33:AE:A3:28:DC:70:7E:1B:88
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OBusRz0PuGhptr0zrqMo3HB-G4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.4.0/24
194.233.6.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:a2:f4:da:c3:4b:cc:3c:4e:af:0f:1d:a0:14:1b:ee:46:a0:
22:f5:71:2a:95:fd:04:9a:06:37:53:ef:6f:47:e7:7d:05:07:
12:44:03:93:bb:5f:9e:f5:93:94:b8:bf:bd:d2:f0:c3:a1:8b:
6b:99:4c:48:28:5f:36:fd:68:f9:d2:e2:4e:7c:61:78:1e:48:
07:39:20:d7:5b:78:cd:f2:b8:d6:41:0d:d0:24:c4:ec:75:66:
60:2c:db:49:a1:3f:af:13:4c:df:e9:36:0c:4b:41:98:2a:4c:
49:88:bb:0f:cc:92:d5:60:54:d7:be:f7:56:2c:6d:80:85:5b:
9f:44:e8:f3:15:82:51:c7:f6:31:04:09:1d:21:04:66:50:57:
3a:ed:58:a6:46:ba:8d:e2:7b:1c:54:06:fc:67:20:d2:a2:c1:
91:a2:8f:c5:18:fc:9f:04:4f:dd:4f:2f:6f:2f:f2:f9:71:1d:
31:f9:96:4d:cb:8c:68:f3:f1:84:9c:a8:11:2f:50:bd:d3:9b:
a7:c6:92:4d:d6:95:2f:dd:df:14:be:84:85:7e:e4:3b:86:a9:
61:7e:72:0d:cb:41:9c:2c:44:ea:06:71:d4:ec:45:b8:32:57:
c4:23:72:d9:f2:b9:63:54:9f:85:7d:20:af:ba:21:ff:c1:5f:
cc:bf:8b:f6
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEC/Q5KTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDEy
NzEzMjI1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzgxYmFjNDczZDBm
Yjg2ODY5YjZiZDMzYWVhMzI4ZGM3MDdlMWI4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALqiNJH8HaC+hNjSd/aXTvx1TR2M6Fu4Y8EHSW2e15+GhXKH
4dzJXGdlhMLmrDfKPQJ8gr62T19fanjITOJv8Mz4r1R8UBNUpqFksDGaWWqslfdv
9daTgHbNBUzAsgvwtLARPvFN7JSquqbFeU2ekfmPam7+yrLxPZKTTE2nCr87W6ma
1rhqZXlYVqmycMgqfIvEsqHMcspj+aCcucrJeMGdylvL2j7BOn99AKHTYHh/3YQg
oarGjIxNmXmdxjBmBG8WSV1/mKpEwSYeeH6ue3+pQAV+g5yxbrjHp1HLxo46JQ0b
3as0TXHhNBn7n1Vcl1WFCKLgj/MjLPv78U0K7F8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ4G6xHPQ+4aGm2vTOuoyjccH4biDAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L09CdXNSejBQdUdocHRyMHpycU1vM0hCLUc0Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMLpBAMEAcLpBjANBgkqhkiG9w0B
AQsFAAOCAQEAH6L02sNLzDxOrw8doBQb7kagIvVxKpX9BJoGN1Pvb0fnfQUHEkQD
k7tfnvWTlLi/vdLww6GLa5lMSChfNv1o+dLiTnxheB5IBzkg11t4zfK41kEN0CTE
7HVmYCzbSaE/rxNM3+k2DEtBmCpMSYi7D8yS1WBU1773VixtgIVbn0To8xWCUcf2
MQQJHSEEZlBXOu1Ypka6jeJ7HFQG/Gcg0qLBkaKPxRj8nwRP3U8vby/y+XEdMfmW
TcuMaPPxhJyoES9QvdObp8aSTdaVL93fFL6EhX7kO4apYX5yDctBnCxE6gZx1OxF
uDJXxCNy2fK5Y1SfhX0gr7oh/8FfzL+L9g==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:33 2025 by rpki-client