Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/j-VHRbUwSBf6VQsiA202gES0Yeg.roa
File: j-VHRbUwSBf6VQsiA202gES0Yeg.roa (raw, json)
Hash identifier: HboXzvJXkDjX8bSEv8BpMAZAGFxGpLV9NmQDLZ9fuF8=
Subject key identifier: 8F:E5:47:45:B5:30:48:17:FA:55:0B:22:03:6D:36:80:44:B4:61:E8
Certificate issuer: /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial: 018570B0799D27685BB261B6E69F33E4B01A
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/j-VHRbUwSBf6VQsiA202gES0Yeg.roa
Signing time: Mon 02 Jan 2023 04:14:51 +0000
ROA not before: Mon 02 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:79:9d:27:68:5b:b2:61:b6:e6:9f:33:e4:b0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
Validity
Not Before: Jan 2 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fe54745b5304817fa550b22036d368044b461e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:fb:27:fd:40:78:fb:32:58:2b:38:58:6d:
79:28:78:97:77:8f:c9:61:32:7b:58:e4:65:cf:76:
fc:78:f6:80:a0:13:79:c4:eb:9b:28:07:6b:fb:ab:
78:93:1a:5f:44:4e:50:fe:24:13:be:66:6a:10:c8:
c8:dd:0b:c5:8e:11:05:ae:21:ca:c9:2f:51:88:31:
23:c0:b0:ff:76:b1:b6:c0:82:bf:10:e2:7c:e3:e2:
a6:0d:8a:50:b3:65:0b:9c:e3:75:c9:46:06:5a:5d:
38:3c:96:5a:c1:4e:0b:8b:f5:55:c2:38:13:be:d2:
f5:91:62:7d:69:8d:84:5b:15:e0:9b:50:e6:02:3f:
2b:2a:e0:54:ad:48:cb:5b:0f:62:17:03:d6:23:86:
b1:35:e9:72:ad:7e:47:c7:55:1e:30:db:c5:39:e4:
6d:f1:d0:c1:d9:7c:9e:89:71:ae:bc:6e:4d:e1:a5:
1d:13:48:42:09:0c:b9:b7:17:8e:13:d4:2b:7f:50:
cf:78:8b:74:5a:52:e2:36:35:6c:17:ab:c5:87:b9:
12:36:c0:42:1f:d4:b7:8d:e2:d2:ed:6c:ae:e1:86:
72:30:8f:13:f7:61:72:a8:ca:a0:b4:71:90:b4:ff:
5d:43:a8:af:fe:f0:be:c5:e2:02:3b:86:fe:52:c7:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:47:45:B5:30:48:17:FA:55:0B:22:03:6D:36:80:44:B4:61:E8
X509v3 Authority Key Identifier:
keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/j-VHRbUwSBf6VQsiA202gES0Yeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:40:29:8f:bb:82:1f:ba:8b:fa:2f:aa:54:d1:b3:45:c1:42:
46:66:67:a9:e4:e2:ed:3a:a8:aa:09:16:65:4b:fc:3b:51:5f:
38:44:34:27:df:3b:6d:a9:ed:bd:87:6a:bb:8d:03:ac:a2:8d:
4c:ef:89:b5:95:fe:30:3f:e1:eb:cd:2e:9f:7e:18:58:21:dd:
3d:f3:b3:74:0d:4b:bb:9e:5f:6d:da:fb:aa:84:ad:06:a2:5d:
fc:ea:2f:54:b7:3d:f3:a2:2e:02:ce:8f:cb:3d:df:1c:db:a4:
df:b7:ab:9b:9c:8c:bd:67:68:d6:b4:a7:95:1d:99:72:b3:8c:
ce:94:c4:fb:34:f7:58:f9:6c:7b:7d:d5:73:92:ad:96:41:b4:
5b:5d:0a:90:12:8e:43:aa:f2:dd:80:d5:a8:3c:af:3b:e5:0e:
3b:6c:b2:18:be:d9:5e:0c:14:5c:45:bf:1d:ef:bd:44:11:d1:
c6:d7:0f:8b:1b:ac:66:c2:45:c8:7d:7b:e3:92:41:3d:8a:c0:
20:53:96:89:56:fd:35:61:7d:a9:29:a6:bd:8a:ba:12:4e:91:
ec:37:d8:bd:1c:5d:2f:1e:b1:49:75:f9:0f:93:43:88:ac:ea:
90:b4:73:84:70:12:92:6c:b3:54:58:05:a4:8c:21:10:30:18:
fb:29:0f:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsHmdJ2hbsmG25p8z5LAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGFlYWM2ZjhhMDM3NDgzOTczMGZjODU2Nzk1NzA5ZTE4
ZWQ5MTYwHhcNMjMwMTAyMDQxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmU1NDc0NWI1MzA0ODE3ZmE1NTBiMjIwMzZkMzY4MDQ0YjQ2MWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxH7J/1AePsyWCs4WG15KHiXd4/J
YTJ7WORlz3b8ePaAoBN5xOubKAdr+6t4kxpfRE5Q/iQTvmZqEMjI3QvFjhEFriHK
yS9RiDEjwLD/drG2wIK/EOJ84+KmDYpQs2ULnON1yUYGWl04PJZawU4Li/VVwjgT
vtL1kWJ9aY2EWxXgm1DmAj8rKuBUrUjLWw9iFwPWI4axNelyrX5Hx1UeMNvFOeRt
8dDB2XyeiXGuvG5N4aUdE0hCCQy5txeOE9Qrf1DPeIt0WlLiNjVsF6vFh7kSNsBC
H9S3jeLS7Wyu4YZyMI8T92FyqMqgtHGQtP9dQ6iv/vC+xeICO4b+UscJkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/lR0W1MEgX+lULIgNtNoBEtGHoMB8GA1UdIwQY
MBaAFO/a6sb4oDdIOXMPyFZ5VwnhjtkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzlycXh2aWdOMGc1Y3dfSVZubFhDZUdPMlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82ZDNhM2UtMDA1My00MzU3LWIxYjQt
Zjk5MmJhMDU4ZTMxLzEvai1WSFJiVXdTQmY2VlFzaUEyMDJnRVMwWWVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82ZDNhM2UtMDA1My00MzU3LWIxYjQtZjk5MmJhMDU4ZTMx
LzEvNzlycXh2aWdOMGc1Y3dfSVZubFhDZUdPMlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFySMA0G
CSqGSIb3DQEBCwUAA4IBAQCeQCmPu4Ifuov6L6pU0bNFwUJGZmep5OLtOqiqCRZl
S/w7UV84RDQn3zttqe29h2q7jQOsoo1M74m1lf4wP+HrzS6ffhhYId0987N0DUu7
nl9t2vuqhK0Gol386i9Utz3zoi4Czo/LPd8c26Tft6ubnIy9Z2jWtKeVHZlys4zO
lMT7NPdY+Wx7fdVzkq2WQbRbXQqQEo5DqvLdgNWoPK875Q47bLIYvtleDBRcRb8d
771EEdHG1w+LG6xmwkXIfXvjkkE9isAgU5aJVv01YX2pKaa9iroSTpHsN9i9HF0v
HrFJdfkPk0OIrOqQtHOEcBKSbLNUWAWkjCEQMBj7KQ82
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:37:43 2025 by rpki-client