Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/1-Bu3-6JRmH8l4uwiCM3TiyhS8yo.roa
File: 1-Bu3-6JRmH8l4uwiCM3TiyhS8yo.roa (raw, json)
Hash identifier: l2PUZpMMLyXTf/gKLU1oPHEvsD1q9zLS+nhP3viDhnU=
Subject key identifier: F8:1B:B7:FB:A2:51:98:7F:25:E2:EC:22:08:CD:D3:8B:28:52:F3:2A
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 018572B3F3B072D3F0A3940C6C0B0200CD27
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/1-Bu3-6JRmH8l4uwiCM3TiyhS8yo.roa
Signing time: Mon 02 Jan 2023 13:37:54 +0000
ROA not before: Mon 02 Jan 2023 13:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202443
IP address blocks: 194.34.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b3:f3:b0:72:d3:f0:a3:94:0c:6c:0b:02:00:cd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Jan 2 13:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f81bb7fba251987f25e2ec2208cdd38b2852f32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:d7:87:de:60:99:0c:00:c5:21:e6:da:fc:
f9:91:42:a4:29:b3:71:a8:20:a7:42:e3:7c:ee:be:
0c:99:7d:f4:b0:7d:6a:66:fb:95:ad:0c:79:5e:97:
a2:84:19:60:42:b5:c6:89:32:98:36:05:95:8c:6f:
04:bf:54:49:8e:4f:fc:33:51:cc:10:b3:4b:29:ac:
1c:5e:86:ce:35:ff:5f:89:16:7d:0c:21:ab:8e:8d:
39:85:13:fa:89:40:20:23:d1:61:98:33:7c:08:ab:
1a:6e:d7:57:02:15:66:9a:ab:03:ae:47:f2:a1:d0:
13:9b:08:3f:01:17:ab:4c:12:66:d5:54:75:88:fb:
5a:6d:eb:a5:24:03:f1:5c:88:ed:e1:eb:e3:67:ee:
9c:a8:8e:36:24:d1:2f:17:cb:eb:b1:04:49:59:bb:
f3:20:80:2a:14:f1:76:28:33:04:39:ce:b7:a8:80:
e6:23:e6:66:02:37:e9:f1:69:40:5f:0f:a1:d4:9f:
27:01:e3:88:38:40:72:30:a1:b1:7b:ea:67:d3:b8:
5f:0e:8b:77:42:f6:30:4d:45:e2:1f:82:80:f3:5c:
4b:d8:21:86:8b:e4:25:62:bc:fb:31:fe:e6:77:b7:
5a:e8:a0:37:e6:93:e5:de:d4:7b:5b:f8:4c:ef:75:
b0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1B:B7:FB:A2:51:98:7F:25:E2:EC:22:08:CD:D3:8B:28:52:F3:2A
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/1-Bu3-6JRmH8l4uwiCM3TiyhS8yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.168.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3a:0e:cb:e9:4d:4c:c7:5f:c3:ca:2a:8f:c3:bc:f6:9d:44:
8b:ce:4c:11:a2:e7:8c:69:73:1a:ad:72:af:41:66:36:ac:f0:
36:c3:2f:ad:1f:68:27:0b:eb:8e:a9:27:a6:86:20:1c:a6:c2:
64:91:1a:56:e4:c3:90:d5:cf:67:49:37:1e:36:17:72:6a:d9:
d2:62:df:f9:57:cf:b8:cc:3d:7a:0d:3f:88:05:7a:90:4f:22:
bb:7f:6a:d4:4c:7e:12:b7:c3:63:57:5f:89:2f:1a:ab:5a:6b:
b2:3d:30:37:ff:94:23:b1:ca:19:69:a3:92:81:dc:f0:c2:6b:
8e:56:1a:09:ef:3b:d1:ce:b5:bd:ed:0d:05:71:74:9f:28:37:
d4:69:fa:b0:7e:4a:6c:08:34:26:41:1a:02:8e:1e:c8:c0:63:
78:d2:71:aa:94:ee:1c:a1:6c:10:7e:be:cb:51:0f:0d:b1:18:
c5:c5:6d:8d:ab:79:73:c6:3b:62:87:ab:81:b4:5a:c4:68:2c:
61:c3:e0:8a:d6:d0:ad:ad:c9:17:91:fa:65:d5:9b:23:b3:2a:
3d:fd:83:24:7f:98:7c:bf:81:e3:e1:56:b2:72:be:1a:60:1b:
55:0e:ad:f2:ad:7c:ae:1b:b6:a6:bf:c8:3f:51:9f:0a:44:2e:
c2:4a:c8:24
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVys/OwctPwo5QMbAsCAM0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNGU3ZDUxNWRkZTlhMDNjMmRjODczODlhMmZjYTRlN2Q1
OGM0ZWMwHhcNMjMwMTAyMTMzNzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODFiYjdmYmEyNTE5ODdmMjVlMmVjMjIwOGNkZDM4YjI4NTJmMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls/Xh95gmQwAxSHm2vz5kUKkKbNx
qCCnQuN87r4MmX30sH1qZvuVrQx5XpeihBlgQrXGiTKYNgWVjG8Ev1RJjk/8M1HM
ELNLKawcXobONf9fiRZ9DCGrjo05hRP6iUAgI9FhmDN8CKsabtdXAhVmmqsDrkfy
odATmwg/ARerTBJm1VR1iPtabeulJAPxXIjt4evjZ+6cqI42JNEvF8vrsQRJWbvz
IIAqFPF2KDMEOc63qIDmI+ZmAjfp8WlAXw+h1J8nAeOIOEByMKGxe+pn07hfDot3
QvYwTUXiH4KA81xL2CGGi+QlYrz7Mf7md7da6KA35pPl3tR7W/hM73WwrQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgbt/uiUZh/JeLsIgjN04soUvMqMB8GA1UdIwQY
MBaAFJNOfVFd3poDwtyHOJovyk59WMTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NTkzMjctY2M5Zi00ZDZkLWFjNzkt
OWNiOGQwMjNjYzBiLzEvMS1CdTMtNkpSbUg4bDR1d2lDTTNUaXloUzh5by5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmYvNzU5MzI3LWNjOWYtNGQ2ZC1hYzc5LTljYjhkMDIzY2Mw
Yi8xL2swNTlVVjNlbWdQQzNJYzRtaV9LVG4xWXhPdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIiqDAN
BgkqhkiG9w0BAQsFAAOCAQEAkjoOy+lNTMdfw8oqj8O89p1Ei85MEaLnjGlzGq1y
r0FmNqzwNsMvrR9oJwvrjqknpoYgHKbCZJEaVuTDkNXPZ0k3HjYXcmrZ0mLf+VfP
uMw9eg0/iAV6kE8iu39q1Ex+ErfDY1dfiS8aq1prsj0wN/+UI7HKGWmjkoHc8MJr
jlYaCe870c61ve0NBXF0nyg31Gn6sH5KbAg0JkEaAo4eyMBjeNJxqpTuHKFsEH6+
y1EPDbEYxcVtjat5c8Y7YoergbRaxGgsYcPgitbQra3JF5H6ZdWbI7MqPf2DJH+Y
fL+B4+FWsnK+GmAbVQ6t8q18rhu2pr/IP1GfCkQuwkrIJA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:46:38 2025 by rpki-client