Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/pG9EKXtPOlGmly0RApcpgLabgiQ.roa
File: pG9EKXtPOlGmly0RApcpgLabgiQ.roa (raw, json)
Hash identifier: 0+dFL6AQ5jqyRZFZlGhC6LcxSkTHuasFFuNai3D9jXk=
Subject key identifier: A4:6F:44:29:7B:4F:3A:51:A6:97:2D:11:02:97:29:80:B6:9B:82:24
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 0188BAC48DE9C96DE6D17802AEBE696BD335
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/pG9EKXtPOlGmly0RApcpgLabgiQ.roa
Signing time: Wed 14 Jun 2023 16:37:03 +0000
ROA not before: Wed 14 Jun 2023 16:37:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198119
IP address blocks: 195.137.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:c4:8d:e9:c9:6d:e6:d1:78:02:ae:be:69:6b:d3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Jun 14 16:37:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a46f44297b4f3a51a6972d1102972980b69b8224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:d5:3b:85:3f:e1:bd:aa:b7:07:0a:14:b1:
f0:33:26:7c:22:63:f9:fb:87:0c:e8:37:5f:fb:6f:
5f:22:93:e1:3e:1f:35:47:8e:2d:38:80:15:f2:39:
46:b8:2b:c0:e4:7d:53:4d:b4:df:4b:7f:7b:57:86:
34:39:ae:94:2b:66:d3:75:a2:f7:e1:fa:e4:ff:53:
60:89:46:81:13:3a:2e:43:a0:0a:da:8e:d9:71:46:
ed:14:f3:2d:21:dd:5f:6d:1e:ae:09:30:c6:2f:ad:
71:89:40:f8:1f:b5:a9:a5:f2:ee:6f:59:4f:bd:74:
6b:01:66:fc:48:c2:eb:28:08:b7:31:af:8b:21:34:
7c:72:81:b1:9b:18:96:1f:6b:43:17:cd:36:67:c8:
2b:f6:5b:21:e3:bd:a9:ba:cf:34:66:88:0a:b1:56:
90:0a:a6:51:99:0f:6f:ef:3e:44:9f:af:76:de:75:
55:fd:98:71:5b:c2:3b:4c:2e:fb:06:fb:51:43:6e:
a9:fe:e9:ff:a2:97:c6:56:eb:b6:e3:31:8b:23:08:
a4:65:16:51:76:bd:c5:5d:65:50:0e:f8:75:c7:44:
be:67:c9:d7:7b:62:b4:db:b3:de:e7:cd:81:8a:6d:
ec:88:bc:78:64:51:4f:d1:91:bc:3d:f6:be:14:8a:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6F:44:29:7B:4F:3A:51:A6:97:2D:11:02:97:29:80:B6:9B:82:24
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/pG9EKXtPOlGmly0RApcpgLabgiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:73:f2:3c:e1:fa:61:22:85:26:a5:35:ed:3d:5d:61:68:67:
a2:80:97:4c:31:3b:0f:38:77:1e:6e:99:91:f1:d3:5e:fc:e0:
7a:ce:f7:a6:df:99:9a:46:bf:88:ed:f6:12:88:22:c2:2a:f8:
21:e7:0f:a7:16:f1:12:0b:fb:31:5c:ad:01:58:1b:bd:87:e7:
85:36:30:30:fa:75:69:bb:4a:2b:48:85:d1:a5:bb:e6:fb:06:
f8:10:25:fb:fc:55:d9:b2:7f:77:12:a6:0b:1d:d3:82:80:89:
66:cc:aa:ae:02:e0:18:97:7e:89:71:b0:4a:63:75:50:53:d6:
ed:77:d8:51:ce:2e:86:3d:d3:29:60:ce:a7:3f:26:bc:19:a3:
19:e8:29:78:d2:ba:69:95:df:a8:4b:6e:c7:be:2b:f9:be:1f:
d6:1b:eb:dd:d6:f7:18:aa:b0:3c:1a:2c:ab:bf:19:f8:90:a4:
65:21:cf:10:9c:0e:ed:a7:94:54:aa:82:08:f6:d9:f8:6f:e4:
be:c3:f0:4f:a8:47:58:ec:a7:1e:a9:ba:c7:5b:53:bd:8c:3a:
21:1c:50:b1:c8:ac:96:f1:aa:96:f4:a2:74:3c:6e:f9:6a:0f:
aa:55:e7:ba:9e:a7:b7:58:d3:cf:e9:fc:b8:85:a6:78:ca:d4:
50:94:5c:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi6xI3pyW3m0XgCrr5pa9M1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNzQ4NDlhOTcwYTkzMDRkZjQ1ZjhlMjhiNmViODdmZjA5
ZTBiZWEwHhcNMjMwNjE0MTYzNzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDZmNDQyOTdiNGYzYTUxYTY5NzJkMTEwMjk3Mjk4MGI2OWI4MjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn93VO4U/4b2qtwcKFLHwMyZ8ImP5
+4cM6Ddf+29fIpPhPh81R44tOIAV8jlGuCvA5H1TTbTfS397V4Y0Oa6UK2bTdaL3
4frk/1NgiUaBEzouQ6AK2o7ZcUbtFPMtId1fbR6uCTDGL61xiUD4H7WppfLub1lP
vXRrAWb8SMLrKAi3Ma+LITR8coGxmxiWH2tDF802Z8gr9lsh472pus80ZogKsVaQ
CqZRmQ9v7z5En6923nVV/ZhxW8I7TC77BvtRQ26p/un/opfGVuu24zGLIwikZRZR
dr3FXWVQDvh1x0S+Z8nXe2K027Pe582Bim3siLx4ZFFP0ZG8Pfa+FIpYBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKRvRCl7TzpRppctEQKXKYC2m4IkMB8GA1UdIwQY
MBaAFIx0hJqXCpME30X44otuuH/wngvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yY2I5NWQtOGYwYy00MmRkLTkxYjkt
MjlmZmQwZWY1NjBhLzEvcEc5RUtYdFBPbEdtbHkwUkFwY3BnTGFiZ2lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yY2I5NWQtOGYwYy00MmRkLTkxYjktMjlmZmQwZWY1NjBh
LzEvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4nnMA0G
CSqGSIb3DQEBCwUAA4IBAQB/c/I84fphIoUmpTXtPV1haGeigJdMMTsPOHcebpmR
8dNe/OB6zvem35maRr+I7fYSiCLCKvgh5w+nFvESC/sxXK0BWBu9h+eFNjAw+nVp
u0orSIXRpbvm+wb4ECX7/FXZsn93EqYLHdOCgIlmzKquAuAYl36JcbBKY3VQU9bt
d9hRzi6GPdMpYM6nPya8GaMZ6Cl40rppld+oS27Hviv5vh/WG+vd1vcYqrA8Giyr
vxn4kKRlIc8QnA7tp5RUqoII9tn4b+S+w/BPqEdY7KceqbrHW1O9jDohHFCxyKyW
8aqW9KJ0PG75ag+qVee6nqe3WNPP6fy4haZ4ytRQlFz4
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:27:06 2025 by rpki-client