Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/0pbuFeu3fyIwAudi7mTck4kSI2o.roa
File: 0pbuFeu3fyIwAudi7mTck4kSI2o.roa (raw, json)
Hash identifier: 4gmfG8NE3TJW4LBY6YLv+e4qdKdUQGMnZVBNlWzaXgw=
Subject key identifier: D2:96:EE:15:EB:B7:7F:22:30:02:E7:62:EE:64:DC:93:89:12:23:6A
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 018572D5A6870234595695A5809F57BEEC29
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/0pbuFeu3fyIwAudi7mTck4kSI2o.roa
Signing time: Mon 02 Jan 2023 14:14:42 +0000
ROA not before: Mon 02 Jan 2023 14:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3254
IP address blocks: 62.244.0.0/18 maxlen: 18
62.244.48.0/22 maxlen: 22
193.193.192.0/19 maxlen: 19
193.193.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:a6:87:02:34:59:56:95:a5:80:9f:57:be:ec:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Jan 2 14:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d296ee15ebb77f223002e762ee64dc938912236a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:4b:4a:3b:af:93:16:cb:7b:9c:8b:8d:f4:
03:82:a6:96:87:b6:cb:88:32:9f:cc:03:a7:5d:4b:
2f:06:1a:c2:66:62:85:fb:a4:4e:5b:08:28:78:80:
0e:da:91:d2:07:7f:89:79:7c:d6:bf:89:88:65:5a:
03:4c:ec:0c:43:8b:7c:d7:1b:d8:3a:e7:f1:d8:e6:
f0:dc:94:51:f7:7d:e4:4e:80:4e:4f:56:20:90:6d:
22:0f:dd:02:d2:dd:e9:30:06:8b:bf:1f:c6:7b:a8:
d0:f6:d3:90:1e:90:6a:81:4f:ef:e9:68:1e:ec:aa:
70:51:71:49:4e:ad:42:a4:31:a3:55:2a:d9:7b:f3:
58:5f:39:2f:b3:0b:88:f1:f6:24:65:7c:43:1f:92:
aa:65:10:52:a3:d2:e9:c9:2b:74:d4:54:00:a5:e7:
e3:be:fb:75:cd:0e:4c:0a:88:b4:75:7f:c3:fc:d1:
1f:dd:65:15:eb:03:0e:0f:99:12:ab:4f:2f:ef:8a:
c4:8b:35:86:01:15:6e:b0:19:25:f5:59:21:b4:54:
78:d3:6e:fd:e8:a3:f7:c8:0d:9c:b5:a4:13:4c:6a:
6e:b3:91:e1:86:49:ee:d8:54:3c:41:56:1b:2c:7f:
67:7e:d3:17:1d:cc:44:c6:54:3f:9a:4f:e0:b9:48:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:96:EE:15:EB:B7:7F:22:30:02:E7:62:EE:64:DC:93:89:12:23:6A
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/0pbuFeu3fyIwAudi7mTck4kSI2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.0.0/18
193.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
30:86:23:1e:36:76:f3:f3:6b:80:04:9a:41:54:6b:b5:a9:ba:
e6:40:09:f2:c5:00:bf:a8:ec:46:8e:f5:13:99:61:90:77:87:
d9:6c:81:c0:fb:00:c9:39:ab:6d:e7:98:eb:e5:cb:bb:26:e4:
39:0a:02:f0:0f:0e:ac:9a:12:28:2c:2c:41:fd:64:fa:ab:c5:
23:31:2a:39:63:d6:09:df:1d:11:d2:30:43:25:95:81:6f:d2:
71:27:36:dd:16:84:f4:3a:ad:68:3f:c7:0d:4e:29:e8:ba:07:
19:7e:02:64:6d:9b:97:10:07:a4:3c:13:15:83:af:8c:96:61:
6e:49:0f:26:e9:3e:dc:7e:04:a0:41:c9:61:13:83:bb:58:30:
f9:6a:d1:44:57:c0:46:9d:7a:4d:20:8a:3f:46:66:a8:ec:ab:
a0:eb:97:a2:fb:8d:e9:77:20:16:aa:22:82:d3:54:7e:a5:18:
33:ab:00:85:2a:9e:3c:87:21:33:4b:f3:9e:63:87:d0:4a:bf:
d2:0f:aa:09:61:d0:ef:0a:d7:7d:e1:b0:d8:a6:70:80:b4:59:
71:0f:93:65:a4:07:94:da:04:c9:95:7a:fb:45:51:e3:f2:60:
25:0d:c9:22:cd:1d:d1:b8:32:b5:d3:a3:d1:85:f8:58:93:f9:
78:98:a3:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVy1aaHAjRZVpWlgJ9XvuwpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4
NTU1MzkwHhcNMjMwMTAyMTQxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjk2ZWUxNWViYjc3ZjIyMzAwMmU3NjJlZTY0ZGM5Mzg5MTIyMzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCVLSjuvkxbLe5yLjfQDgqaWh7bL
iDKfzAOnXUsvBhrCZmKF+6ROWwgoeIAO2pHSB3+JeXzWv4mIZVoDTOwMQ4t81xvY
Oufx2Obw3JRR933kToBOT1YgkG0iD90C0t3pMAaLvx/Ge6jQ9tOQHpBqgU/v6Wge
7KpwUXFJTq1CpDGjVSrZe/NYXzkvswuI8fYkZXxDH5KqZRBSo9LpySt01FQApefj
vvt1zQ5MCoi0dX/D/NEf3WUV6wMOD5kSq08v74rEizWGARVusBkl9VkhtFR40279
6KP3yA2ctaQTTGpus5Hhhknu2FQ8QVYbLH9nftMXHcxExlQ/mk/guUjHEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNKW7hXrt38iMALnYu5k3JOJEiNqMB8GA1UdIwQY
MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt
MzM2YWM5NDU2NDY0LzEvMHBidUZldTNmeUl3QXVkaTdtVGNrNGtTSTJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0
LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGPvQAAwQF
wcHAMA0GCSqGSIb3DQEBCwUAA4IBAQAwhiMeNnbz82uABJpBVGu1qbrmQAnyxQC/
qOxGjvUTmWGQd4fZbIHA+wDJOatt55jr5cu7JuQ5CgLwDw6smhIoLCxB/WT6q8Uj
MSo5Y9YJ3x0R0jBDJZWBb9JxJzbdFoT0Oq1oP8cNTinougcZfgJkbZuXEAekPBMV
g6+MlmFuSQ8m6T7cfgSgQclhE4O7WDD5atFEV8BGnXpNIIo/Rmao7Kug65ei+43p
dyAWqiKC01R+pRgzqwCFKp48hyEzS/OeY4fQSr/SD6oJYdDvCtd94bDYpnCAtFlx
D5NlpAeU2gTJlXr7RVHj8mAlDckizR3RuDK106PRhfhYk/l4mKNH
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:49:29 2025 by rpki-client