Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/lx5uoFckPigg9pO3vpeCtwtA6Po.roa
File: lx5uoFckPigg9pO3vpeCtwtA6Po.roa (raw, json)
Hash identifier: Sjhs/NEDsYLsihaNYdZ0Ky+7v/g/tnOX3C2cVmj+cVg=
Subject key identifier: 97:1E:6E:A0:57:24:3E:28:20:F6:93:B7:BE:97:82:B7:0B:40:E8:FA
Certificate issuer: /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Certificate serial: 01856E01D028D086759CABC556B707744609
Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/lx5uoFckPigg9pO3vpeCtwtA6Po.roa
Signing time: Sun 01 Jan 2023 15:44:50 +0000
ROA not before: Sun 01 Jan 2023 15:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62037
IP address blocks: 195.225.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:d0:28:d0:86:75:9c:ab:c5:56:b7:07:74:46:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Validity
Not Before: Jan 1 15:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=971e6ea057243e2820f693b7be9782b70b40e8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:b7:2f:06:e3:32:34:5b:7d:61:6a:1c:2e:
33:83:0d:85:a9:6e:df:22:bd:e7:8b:43:0a:d8:f8:
2e:54:bc:62:92:2a:84:88:e8:c9:e4:84:8a:20:be:
3f:c7:27:78:2d:28:a3:68:65:20:43:4f:14:1e:32:
0b:f1:43:af:20:6f:a1:51:cf:69:92:30:f6:a9:01:
a7:d7:6a:29:f6:4c:4b:19:fd:74:39:c1:3f:b1:fb:
04:81:ed:32:64:47:ee:77:62:d6:12:80:29:19:25:
1f:78:83:ed:70:1d:50:94:c7:4e:c3:47:2f:ee:60:
04:14:dc:b7:d2:64:7c:36:8f:f6:96:78:4a:93:4b:
11:08:e4:d3:34:31:b1:18:91:6e:e4:9e:d5:08:ba:
40:cf:51:83:0d:21:63:09:ce:cb:da:2f:db:46:2a:
27:fd:8f:a8:86:8c:e9:91:9a:1f:68:2d:1b:ac:c2:
7d:a8:6f:b6:7c:ca:66:2e:4a:8b:a2:7a:77:c9:55:
c3:9a:b1:9d:e3:42:26:ef:c8:4d:e5:9c:07:fb:de:
99:56:e8:27:be:9a:ce:06:d7:44:51:d9:59:ea:f8:
ff:30:4c:c8:b1:00:40:63:4b:5e:ee:2e:6a:ab:20:
91:4a:5e:db:ed:c3:72:4f:8a:89:0d:19:a2:24:77:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1E:6E:A0:57:24:3E:28:20:F6:93:B7:BE:97:82:B7:0B:40:E8:FA
X509v3 Authority Key Identifier:
keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/lx5uoFckPigg9pO3vpeCtwtA6Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:71:47:ec:27:f6:13:c6:11:f3:e4:7e:23:85:b5:38:b1:c7:
6e:93:10:3c:ed:8f:52:aa:f0:22:05:79:eb:93:12:44:ad:cb:
31:5f:09:98:59:79:ce:67:f1:17:32:39:7e:bc:ea:fc:20:07:
a3:32:ee:97:f4:16:5b:9c:27:bb:23:d9:97:91:1b:0c:b8:65:
7c:87:fa:87:23:f8:9d:db:f5:25:ab:6a:51:0d:3f:9b:5b:15:
1b:b4:1d:fb:07:6c:6c:2b:7e:c3:83:4a:0d:bd:18:53:e1:0c:
60:86:fb:5a:79:5c:9f:06:df:32:69:91:bf:c9:01:53:b5:99:
d8:02:3c:90:67:55:30:cd:b3:4e:9b:b3:e4:42:62:88:b5:d1:
d8:bc:e7:b6:1e:a2:f2:79:24:6d:0d:09:9d:a7:54:f6:0e:81:
91:f8:f0:a5:a7:c2:de:f7:fd:85:9a:8a:23:59:c3:d2:97:5f:
3d:46:ce:69:e0:d4:ed:7a:d0:77:7f:70:ab:25:71:7b:31:14:
f4:46:ab:c2:46:66:8f:09:14:35:42:8f:a4:90:95:5f:92:f7:
73:de:eb:fb:55:55:16:04:f9:9b:e0:e4:ba:2c:4d:b1:89:be:
a4:20:0b:2e:72:86:3f:20:29:39:14:47:4e:6f:70:e3:96:23:
3a:c2:17:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuAdAo0IZ1nKvFVrcHdEYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlOGU4NTIzMjk4MGE2M2YwZDRkZjViMDQ5MTYzZTNmZDAy
ZjU0YjMwHhcNMjMwMTAxMTU0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzFlNmVhMDU3MjQzZTI4MjBmNjkzYjdiZTk3ODJiNzBiNDBlOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnce3LwbjMjRbfWFqHC4zgw2FqW7f
Ir3ni0MK2PguVLxikiqEiOjJ5ISKIL4/xyd4LSijaGUgQ08UHjIL8UOvIG+hUc9p
kjD2qQGn12op9kxLGf10OcE/sfsEge0yZEfud2LWEoApGSUfeIPtcB1QlMdOw0cv
7mAEFNy30mR8No/2lnhKk0sRCOTTNDGxGJFu5J7VCLpAz1GDDSFjCc7L2i/bRion
/Y+ohozpkZofaC0brMJ9qG+2fMpmLkqLonp3yVXDmrGd40Im78hN5ZwH+96ZVugn
vprOBtdEUdlZ6vj/MEzIsQBAY0te7i5qqyCRSl7b7cNyT4qJDRmiJHf/rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcebqBXJD4oIPaTt76XgrcLQOj6MB8GA1UdIwQY
MBaAFP6OhSMpgKY/DU31sEkWPj/QL1SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kMzZiOGItODY1Ni00ODViLTkzYjIt
Mzg5MmFjYTI3N2IwLzEvbHg1dW9GY2tQaWdnOXBPM3ZwZUN0d3RBNlBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kMzZiOGItODY1Ni00ODViLTkzYjItMzg5MmFjYTI3N2Iw
LzEvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+EzMA0G
CSqGSIb3DQEBCwUAA4IBAQAbcUfsJ/YTxhHz5H4jhbU4scdukxA87Y9SqvAiBXnr
kxJErcsxXwmYWXnOZ/EXMjl+vOr8IAejMu6X9BZbnCe7I9mXkRsMuGV8h/qHI/id
2/Ulq2pRDT+bWxUbtB37B2xsK37Dg0oNvRhT4QxghvtaeVyfBt8yaZG/yQFTtZnY
AjyQZ1UwzbNOm7PkQmKItdHYvOe2HqLyeSRtDQmdp1T2DoGR+PClp8Le9/2Fmooj
WcPSl189Rs5p4NTtetB3f3CrJXF7MRT0RqvCRmaPCRQ1Qo+kkJVfkvdz3uv7VVUW
BPmb4OS6LE2xib6kIAsucoY/ICk5FEdOb3DjliM6whdK
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:41:52 2025 by rpki-client