Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/sk8ShfVp6uJF9RdkFkMI2Fswz0c.roa
File: sk8ShfVp6uJF9RdkFkMI2Fswz0c.roa (raw, json)
Hash identifier: FFzXM6Pm9EY6v3+U90v3bD8T/zKQPYvhnsBaCnYqf4w=
Subject key identifier: B2:4F:12:85:F5:69:EA:E2:45:F5:17:64:16:43:08:D8:5B:30:CF:47
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 018C8C51768925A0F9D665E6D47846D024E7
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/sk8ShfVp6uJF9RdkFkMI2Fswz0c.roa
Signing time: Thu 21 Dec 2023 12:19:58 +0000
ROA not before: Thu 21 Dec 2023 12:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 193.228.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:51:76:89:25:a0:f9:d6:65:e6:d4:78:46:d0:24:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Dec 21 12:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b24f1285f569eae245f51764164308d85b30cf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:e9:5e:ab:87:51:2b:f2:2e:a3:a0:f3:fa:
f8:9f:e5:c0:4c:68:a1:fa:19:5f:3f:92:e5:5d:af:
0c:a3:ab:d0:02:19:8f:12:2f:f7:44:9d:59:9f:11:
82:3e:b2:c6:5a:c3:41:22:6e:d8:49:43:db:d2:1c:
57:df:5c:19:7a:8c:23:37:8b:d3:0a:9f:42:3b:d1:
ef:ff:e5:b4:73:40:2d:fd:91:8d:e7:dd:88:e5:08:
d1:6a:7c:df:bf:59:72:b9:73:b9:e8:8a:d6:fb:03:
d1:fc:2b:74:94:da:b9:02:8c:94:97:e5:6c:2f:0d:
24:09:75:04:bf:2a:9f:33:d6:88:d8:35:cd:e6:96:
ef:9f:b9:7b:90:cb:1f:a3:e5:ab:87:80:c3:1c:83:
c8:fe:e3:5c:20:c3:33:b3:8a:f8:4f:be:4a:82:5a:
70:bc:76:df:94:22:0d:b1:60:19:3c:45:c4:c9:67:
a8:8a:20:ac:4e:78:cf:d5:20:e5:43:d0:1b:96:ce:
0d:06:95:3d:19:01:8d:0b:30:0f:a9:3f:09:91:6f:
5e:f7:56:88:bc:31:ff:d0:c6:64:a0:d6:b5:fd:c6:
9f:04:38:dc:a3:bf:ad:9b:27:aa:b7:d0:78:7b:9a:
b6:22:59:96:91:14:3f:c8:d6:4b:a7:a5:ab:73:23:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:12:85:F5:69:EA:E2:45:F5:17:64:16:43:08:D8:5B:30:CF:47
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/sk8ShfVp6uJF9RdkFkMI2Fswz0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:4b:2f:09:f3:03:87:27:72:ce:01:af:6e:af:51:b5:6b:53:
c7:2d:a1:89:80:1f:fe:19:c6:a4:02:bf:e0:ec:4e:f4:f1:dd:
45:0c:ae:ce:5c:03:76:2a:2a:e4:5d:41:3a:c4:e2:47:7c:aa:
31:2f:20:14:11:80:ea:b9:88:8a:9d:01:f9:5a:29:df:98:fb:
2a:2e:91:41:f9:e0:02:4e:fb:f2:eb:0f:be:7e:a5:8b:cc:d7:
19:71:63:c6:f4:cd:f2:fe:98:1b:4a:7c:32:23:dc:4f:4e:b2:
24:9b:13:06:de:d8:20:cb:78:57:90:d6:de:ec:5d:bc:06:db:
a0:03:79:b3:2e:44:8c:76:18:09:ff:ee:b8:ff:a9:6d:8c:33:
a2:ed:7f:16:36:18:85:3f:14:a0:db:3d:e3:0f:cf:ea:59:cb:
42:7a:9e:45:81:a2:90:07:01:28:c0:63:45:0c:36:cb:2a:1a:
5f:00:c9:f1:16:d7:1a:8b:c7:1f:1a:7b:9a:af:63:ac:21:57:
aa:06:79:0a:96:33:b6:de:4e:39:94:48:d1:90:37:c3:dd:2e:
9f:c1:b6:d3:d3:98:a0:d4:06:3a:5a:e3:fb:9f:cb:66:97:6c:
ee:10:13:50:b4:2d:f4:4b:56:0d:07:1f:00:51:a7:2c:68:a9:
87:f6:0e:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyMUXaJJaD51mXm1HhG0CTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTA1M2NiOWNiNGY0MWMxZTQ3NzNlN2YxNmU4NGJiNTc1
MjIwMzMwHhcNMjMxMjIxMTIxOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjRmMTI4NWY1NjllYWUyNDVmNTE3NjQxNjQzMDhkODViMzBjZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRjpXquHUSvyLqOg8/r4n+XATGih
+hlfP5LlXa8Mo6vQAhmPEi/3RJ1ZnxGCPrLGWsNBIm7YSUPb0hxX31wZeowjN4vT
Cp9CO9Hv/+W0c0At/ZGN592I5QjRanzfv1lyuXO56IrW+wPR/Ct0lNq5AoyUl+Vs
Lw0kCXUEvyqfM9aI2DXN5pbvn7l7kMsfo+Wrh4DDHIPI/uNcIMMzs4r4T75Kglpw
vHbflCINsWAZPEXEyWeoiiCsTnjP1SDlQ9Abls4NBpU9GQGNCzAPqT8JkW9e91aI
vDH/0MZkoNa1/cafBDjco7+tmyeqt9B4e5q2IlmWkRQ/yNZLp6WrcyO03QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLJPEoX1aeriRfUXZBZDCNhbMM9HMB8GA1UdIwQY
MBaAFH7gU8uctPQcHkdz5/FuhLtXUiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYt
MThlODZmMGIxZDgxLzEvc2s4U2hmVnA2dUpGOVJka0ZrTUkyRnN3ejBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYtMThlODZmMGIxZDgx
LzEvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweRbMA0G
CSqGSIb3DQEBCwUAA4IBAQBcSy8J8wOHJ3LOAa9ur1G1a1PHLaGJgB/+GcakAr/g
7E708d1FDK7OXAN2KirkXUE6xOJHfKoxLyAUEYDquYiKnQH5WinfmPsqLpFB+eAC
Tvvy6w++fqWLzNcZcWPG9M3y/pgbSnwyI9xPTrIkmxMG3tggy3hXkNbe7F28Btug
A3mzLkSMdhgJ/+64/6ltjDOi7X8WNhiFPxSg2z3jD8/qWctCep5FgaKQBwEowGNF
DDbLKhpfAMnxFtcai8cfGnuar2OsIVeqBnkKljO23k45lEjRkDfD3S6fwbbT05ig
1AY6WuP7n8tml2zuEBNQtC30S1YNBx8AUacsaKmH9g6f
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:45:00 2025 by rpki-client