Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/USAo1W1MpRtKCkYt5s6oMz_cnuU.roa
File: USAo1W1MpRtKCkYt5s6oMz_cnuU.roa (raw, json)
Hash identifier: Z4BLRawWdJk7e40kmtZxHLqniwQJeddkog4i2AAa5XM=
Subject key identifier: 51:20:28:D5:6D:4C:A5:1B:4A:0A:46:2D:E6:CE:A8:33:3F:DC:9E:E5
Certificate issuer: /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Certificate serial: 018971C4714EF0CEE7C2A8228B8E7DD86BB3
Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/USAo1W1MpRtKCkYt5s6oMz_cnuU.roa
Signing time: Thu 20 Jul 2023 05:27:26 +0000
ROA not before: Thu 20 Jul 2023 05:27:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 185.238.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:71:c4:71:4e:f0:ce:e7:c2:a8:22:8b:8e:7d:d8:6b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Validity
Not Before: Jul 20 05:27:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=512028d56d4ca51b4a0a462de6cea8333fdc9ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:01:7a:a5:95:2d:ba:43:c1:6e:77:35:21:
c9:bb:26:c6:74:e2:0f:07:20:f2:02:2d:02:e9:7d:
82:54:84:b4:35:b1:02:92:33:f5:44:0e:5b:02:d5:
2e:ae:09:b3:4b:b9:12:59:53:66:5d:71:85:78:fd:
87:e4:f9:fb:72:f0:2f:83:4f:88:58:c9:02:44:47:
ab:d1:58:a3:5b:3f:1b:63:56:10:d1:60:d2:bf:f2:
92:26:6d:91:2a:de:3c:de:8b:41:0c:63:0e:d4:94:
74:d7:e8:d8:6b:e2:e7:87:d2:07:5b:dd:b0:64:9e:
a8:b0:a8:7e:19:0a:45:9e:04:b8:ae:f8:ab:d6:e2:
5e:b7:3e:b4:a9:eb:c0:36:45:19:42:e1:10:37:09:
ff:db:f7:bf:c1:05:5b:54:17:34:cd:13:02:90:97:
9c:61:17:fa:20:16:2f:cc:15:fc:15:f5:2d:81:51:
3b:29:a7:81:01:35:c7:87:30:2b:bb:85:8c:17:98:
ae:4b:aa:4d:9f:80:4e:07:ae:ab:e9:fd:b1:34:b9:
aa:6a:af:57:f0:b3:e9:a9:34:aa:06:ee:c5:31:e1:
5a:10:14:fd:63:26:8c:f9:8a:00:b7:ea:57:fc:4e:
ed:64:59:66:f3:62:82:c1:73:46:e4:80:0f:e2:77:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:20:28:D5:6D:4C:A5:1B:4A:0A:46:2D:E6:CE:A8:33:3F:DC:9E:E5
X509v3 Authority Key Identifier:
keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/USAo1W1MpRtKCkYt5s6oMz_cnuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.141.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1d:8a:22:b7:e1:b8:9f:9f:45:cc:2b:99:24:24:e6:1c:89:
11:61:55:12:5d:19:8c:d1:b7:7e:8a:57:27:1c:18:40:5b:81:
3a:a4:a5:c1:3d:6b:42:47:02:44:0f:87:52:2c:7e:bd:a5:98:
62:79:60:01:1f:16:3a:38:35:d9:7c:8c:d5:72:e7:b3:fc:74:
05:26:b0:1c:70:af:2a:67:7e:21:25:c6:3f:d5:24:76:6a:ec:
8d:05:c1:87:df:6f:b7:38:bb:60:b1:77:07:43:63:76:20:8a:
fe:06:18:2a:ba:21:16:c5:45:ac:55:59:66:ed:46:6d:25:0b:
90:07:0f:95:f7:62:67:48:1b:2b:ba:a1:5d:92:f3:5c:28:fd:
8c:21:eb:74:01:1e:2b:99:26:12:ad:01:15:c3:fe:cc:a5:b9:
ed:5c:1c:7c:b9:b0:e1:f7:a4:79:6d:c2:91:f5:ca:c5:02:b2:
6c:3b:6c:72:29:b7:74:c0:72:61:45:ec:60:5e:de:34:3f:d1:
f3:91:63:1d:87:74:52:99:8a:a6:4e:2b:e3:43:e5:5d:a7:f6:
b9:df:26:01:97:51:c2:6d:70:75:e3:c9:0a:71:30:a2:21:56:
b4:f9:57:8e:cb:19:70:e0:0f:ed:7f:0a:f9:f6:8c:17:4e:f8:
49:bc:57:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlxxHFO8M7nwqgii4592GuzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDBhODRiYWIzZGVmNDFkNmFhYTkwMjhkZTdhNDc1ZDMy
ZDEyYmQwHhcNMjMwNzIwMDUyNzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTIwMjhkNTZkNGNhNTFiNGEwYTQ2MmRlNmNlYTgzMzNmZGM5ZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqgBeqWVLbpDwW53NSHJuybGdOIP
ByDyAi0C6X2CVIS0NbECkjP1RA5bAtUurgmzS7kSWVNmXXGFeP2H5Pn7cvAvg0+I
WMkCREer0VijWz8bY1YQ0WDSv/KSJm2RKt483otBDGMO1JR01+jYa+Lnh9IHW92w
ZJ6osKh+GQpFngS4rvir1uJetz60qevANkUZQuEQNwn/2/e/wQVbVBc0zRMCkJec
YRf6IBYvzBX8FfUtgVE7KaeBATXHhzAru4WMF5iuS6pNn4BOB66r6f2xNLmqaq9X
8LPpqTSqBu7FMeFaEBT9YyaM+YoAt+pX/E7tZFlm82KCwXNG5IAP4nfukQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFEgKNVtTKUbSgpGLebOqDM/3J7lMB8GA1UdIwQY
MBaAFOPQqEurPe9B1qqpAo3npHXTLRK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jYjUxZjUtYTg0My00OWM0LTlmMTkt
MTBlYjhhZGZlYTdlLzEvVVNBbzFXMU1wUnRLQ2tZdDVzNm9Nel9jbnVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jYjUxZjUtYTg0My00OWM0LTlmMTktMTBlYjhhZGZlYTdl
LzEvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue6NMA0G
CSqGSIb3DQEBCwUAA4IBAQCSHYoit+G4n59FzCuZJCTmHIkRYVUSXRmM0bd+ilcn
HBhAW4E6pKXBPWtCRwJED4dSLH69pZhieWABHxY6ODXZfIzVcuez/HQFJrAccK8q
Z34hJcY/1SR2auyNBcGH32+3OLtgsXcHQ2N2IIr+BhgquiEWxUWsVVlm7UZtJQuQ
Bw+V92JnSBsruqFdkvNcKP2MIet0AR4rmSYSrQEVw/7MpbntXBx8ubDh96R5bcKR
9crFArJsO2xyKbd0wHJhRexgXt40P9HzkWMdh3RSmYqmTivjQ+Vdp/a53yYBl1HC
bXB148kKcTCiIVa0+VeOyxlw4A/tfwr59owXTvhJvFcF
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:31:06 2025 by rpki-client