Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fjAnbEtlEtRGyNVh5T76xb3WBbA.roa
File: fjAnbEtlEtRGyNVh5T76xb3WBbA.roa (raw, json)
Hash identifier: q+yBd1lTKxKogZzVQGY1exQXEP3CCPeSpbSvus+fmXA=
Subject key identifier: 7E:30:27:6C:4B:65:12:D4:46:C8:D5:61:E5:3E:FA:C5:BD:D6:05:B0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B6053A465C652F86F644CE73B4C99477B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fjAnbEtlEtRGyNVh5T76xb3WBbA.roa
Signing time: Tue 24 Oct 2023 06:16:16 +0000
ROA not before: Tue 24 Oct 2023 06:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 193.124.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:53:a4:65:c6:52:f8:6f:64:4c:e7:3b:4c:99:47:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 24 06:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e30276c4b6512d446c8d561e53efac5bdd605b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:08:71:b4:6d:da:70:f7:85:f2:9f:de:07:fb:
ff:ea:b7:83:b4:99:6b:3b:c5:f0:fd:e9:c0:a5:75:
0b:96:e3:e6:78:68:83:49:b1:8d:73:e8:65:29:43:
54:1d:f9:08:6c:d6:12:85:9a:6b:02:e2:52:a0:8f:
44:3c:e5:42:7b:58:43:f5:cc:b8:9e:9c:b1:f0:5d:
3c:5f:74:b5:2f:37:2d:ed:07:ec:9b:9b:fb:4d:05:
5e:05:a8:0d:aa:65:71:41:63:c7:f7:c7:54:47:26:
e3:b6:b9:c6:31:41:0e:89:8a:a6:3b:26:08:ab:94:
e3:dc:0b:74:2e:05:0f:a8:74:43:6b:a9:4c:43:87:
63:bf:48:9c:2a:cd:7d:cc:b4:2b:63:e5:5f:5c:60:
11:00:ae:a6:b8:1b:5c:c3:06:67:9a:74:2c:d3:a9:
d2:4b:60:ca:2d:ba:e8:fb:8d:db:da:a9:68:a4:46:
68:f0:16:3e:58:4f:de:1a:04:d1:e0:b0:68:2a:3f:
d8:8c:cc:09:a0:14:b2:b4:f8:8b:bc:8c:ba:ff:c2:
9a:1e:2d:70:78:ef:df:fe:47:6e:0c:42:68:43:f5:
91:aa:6a:c5:9a:e6:8e:68:5b:63:fb:31:98:f6:5e:
6a:89:7f:28:35:20:ad:29:5e:f8:ea:ad:36:7e:8d:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:30:27:6C:4B:65:12:D4:46:C8:D5:61:E5:3E:FA:C5:BD:D6:05:B0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fjAnbEtlEtRGyNVh5T76xb3WBbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
Signature Algorithm: sha256WithRSAEncryption
24:64:ed:42:75:d3:12:b6:d8:74:c6:e1:2c:62:5d:74:bd:a8:
5b:78:1e:c0:30:a1:e9:51:53:d2:38:c3:33:5a:45:af:46:3c:
44:84:f7:39:ab:ae:c6:f5:91:60:77:bb:d9:4a:dd:3d:91:d8:
8e:ca:35:ce:11:a2:f0:53:9d:28:e2:90:51:e3:6f:c3:ff:94:
f5:d3:f4:09:c7:a6:cd:2f:72:3d:7b:f6:d3:74:ba:d8:56:b6:
dc:7d:9a:5f:4f:13:80:cc:2e:14:2b:5c:ef:bd:84:dc:2a:66:
c1:56:7a:29:e3:a0:bd:a4:6b:39:fb:15:e5:ea:2e:de:44:40:
03:5d:88:95:d4:2c:94:be:1a:08:03:98:f4:51:fe:b9:c6:c4:
77:27:95:a2:28:41:6e:8e:0d:c2:03:2f:6d:69:76:fd:bb:34:
a7:69:67:0a:1a:c5:6c:dd:4c:69:9e:ea:39:98:c8:64:aa:fd:
75:5a:69:33:97:cd:02:8e:3f:92:72:eb:4d:d6:97:ae:47:ca:
96:68:9e:bd:e3:8a:58:4c:97:25:1b:9b:39:0c:f4:7d:c2:07:
3b:93:4e:e0:c6:4b:f0:d7:94:ca:f2:b8:aa:8f:32:cc:47:b8:
5b:3d:21:ab:0b:17:8d:83:4d:31:61:ee:d2:00:2b:54:bd:07:
56:fb:6c:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtgU6RlxlL4b2RM5ztMmUd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMDI0MDYxNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTMwMjc2YzRiNjUxMmQ0NDZjOGQ1NjFlNTNlZmFjNWJkZDYwNWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAhxtG3acPeF8p/eB/v/6reDtJlr
O8Xw/enApXULluPmeGiDSbGNc+hlKUNUHfkIbNYShZprAuJSoI9EPOVCe1hD9cy4
npyx8F08X3S1Lzct7Qfsm5v7TQVeBagNqmVxQWPH98dURybjtrnGMUEOiYqmOyYI
q5Tj3At0LgUPqHRDa6lMQ4djv0icKs19zLQrY+VfXGARAK6muBtcwwZnmnQs06nS
S2DKLbro+43b2qlopEZo8BY+WE/eGgTR4LBoKj/YjMwJoBSytPiLvIy6/8KaHi1w
eO/f/kduDEJoQ/WRqmrFmuaOaFtj+zGY9l5qiX8oNSCtKV746q02fo3LxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH4wJ2xLZRLURsjVYeU++sW91gWwMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvZmpBbmJFdGxFdFJHeU5WaDVUNzZ4YjNXQmJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXzNMA0G
CSqGSIb3DQEBCwUAA4IBAQAkZO1CddMStth0xuEsYl10vahbeB7AMKHpUVPSOMMz
WkWvRjxEhPc5q67G9ZFgd7vZSt09kdiOyjXOEaLwU50o4pBR42/D/5T10/QJx6bN
L3I9e/bTdLrYVrbcfZpfTxOAzC4UK1zvvYTcKmbBVnop46C9pGs5+xXl6i7eREAD
XYiV1CyUvhoIA5j0Uf65xsR3J5WiKEFujg3CAy9taXb9uzSnaWcKGsVs3Uxpnuo5
mMhkqv11Wmkzl80Cjj+ScutN1peuR8qWaJ6944pYTJclG5s5DPR9wgc7k07gxkvw
15TK8riqjzLMR7hbPSGrCxeNg00xYe7SACtUvQdW+2xP
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:31 2025 by rpki-client