Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/cGLymCTz1E9cRMN7jyIZro6iUHk.roa
File: cGLymCTz1E9cRMN7jyIZro6iUHk.roa (raw, json)
Hash identifier: UQq5lA0l2qXv1mUoUwl+LB/mFNOs0S1bhraNe3x59a8=
Subject key identifier: 70:62:F2:98:24:F3:D4:4F:5C:44:C3:7B:8F:22:19:AE:8E:A2:50:79
Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial: 018570CBEC098A64BA4B18D49BAFE9869D24
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/cGLymCTz1E9cRMN7jyIZro6iUHk.roa
Signing time: Mon 02 Jan 2023 04:44:50 +0000
ROA not before: Mon 02 Jan 2023 04:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47843
IP address blocks: 194.33.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:ec:09:8a:64:ba:4b:18:d4:9b:af:e9:86:9d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Validity
Not Before: Jan 2 04:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7062f29824f3d44f5c44c37b8f2219ae8ea25079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:af:d1:ac:af:2c:af:91:22:02:b6:f5:cc:f5:
d9:1e:f3:54:51:20:2a:ee:8e:f0:5d:62:15:aa:b0:
ff:8f:96:28:0a:c7:ba:f6:45:85:9e:31:48:27:a8:
25:10:d5:2c:ab:f3:90:ac:fc:e8:f2:09:23:a6:dc:
6f:78:05:42:9a:45:44:b7:37:f3:66:4d:f9:49:c4:
cc:2f:23:72:aa:2b:ab:b4:0a:3f:77:b9:d4:83:8a:
60:c4:5f:67:18:80:40:2f:b1:ed:76:a2:42:ab:26:
6a:e0:22:93:23:99:67:68:72:57:de:01:35:52:dd:
c4:f2:83:d5:79:0e:74:bb:f5:50:02:ff:a1:d3:1b:
2e:4a:81:13:72:b8:b6:08:d9:82:b1:32:1b:03:bc:
64:be:8a:c8:dc:1e:3f:99:60:2f:7c:7f:c1:f7:61:
18:45:1a:ac:5c:2c:41:7b:d4:77:a4:dd:79:3a:27:
7c:9b:59:cc:7f:fd:e4:2c:fd:69:db:1f:81:7e:ad:
e0:85:32:4d:2b:19:05:b0:c7:10:8b:6c:76:67:be:
db:2d:74:76:d7:dc:18:f5:c8:5a:b0:2f:fa:cb:de:
82:a8:2f:37:1c:b9:c5:68:4a:f9:58:16:1f:22:c3:
62:e8:49:b2:ae:83:27:8b:d6:dd:b6:d7:fc:39:c2:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:62:F2:98:24:F3:D4:4F:5C:44:C3:7B:8F:22:19:AE:8E:A2:50:79
X509v3 Authority Key Identifier:
keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/cGLymCTz1E9cRMN7jyIZro6iUHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:be:37:39:ca:4e:4f:ec:bb:54:81:1c:d1:a4:69:31:ea:0f:
49:3f:72:cc:3b:69:9a:cd:ff:3a:4c:b3:61:50:35:b8:49:1d:
55:6e:45:24:c7:77:f4:8a:29:9d:d8:0e:b9:b3:f8:d6:9c:f2:
4b:7e:9a:43:4e:8f:a4:b9:b6:3b:d1:8a:2d:34:88:92:ee:b3:
ba:d1:7e:77:41:82:70:22:77:e4:cc:4a:6c:9d:d1:1d:a9:3f:
ce:cb:38:d4:6f:bb:58:49:c5:bf:38:56:57:00:e7:52:95:50:
d6:d2:d2:ad:d5:7f:b4:8d:16:6b:70:0a:f8:24:65:41:30:c5:
83:74:14:58:55:93:2c:9b:21:3f:6d:79:f2:4a:a7:2c:12:3c:
8b:e1:16:c0:c1:81:00:d6:3f:51:7f:d0:31:a2:87:78:ca:ed:
da:7c:9d:3d:bb:4c:7a:5f:fc:3d:7f:85:8d:5a:4c:26:6c:54:
1f:cc:bf:63:12:89:5c:90:0a:d2:f8:09:f0:46:45:41:f6:e9:
70:49:46:ad:35:be:d9:91:c9:c1:5e:53:69:97:9c:69:b4:8c:
71:89:dd:13:af:b5:1f:50:a7:b3:bb:be:a8:8a:83:49:04:6f:
17:e1:4d:b8:16:eb:a9:0a:1b:d0:56:97:0e:e5:2a:43:df:9e:
93:32:b1:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwy+wJimS6SxjUm6/php0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNDdlZTczYzI4NzgwYjEyZjE1MmNmYTI1OWFkZTNkOGFl
MGQxM2IwHhcNMjMwMTAyMDQ0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDYyZjI5ODI0ZjNkNDRmNWM0NGMzN2I4ZjIyMTlhZThlYTI1MDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka/RrK8sr5EiArb1zPXZHvNUUSAq
7o7wXWIVqrD/j5YoCse69kWFnjFIJ6glENUsq/OQrPzo8gkjptxveAVCmkVEtzfz
Zk35ScTMLyNyqiurtAo/d7nUg4pgxF9nGIBAL7HtdqJCqyZq4CKTI5lnaHJX3gE1
Ut3E8oPVeQ50u/VQAv+h0xsuSoETcri2CNmCsTIbA7xkvorI3B4/mWAvfH/B92EY
RRqsXCxBe9R3pN15Oid8m1nMf/3kLP1p2x+Bfq3ghTJNKxkFsMcQi2x2Z77bLXR2
19wY9chasC/6y96CqC83HLnFaEr5WBYfIsNi6EmyroMni9bdttf8OcJi1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBi8pgk89RPXETDe48iGa6OolB5MB8GA1UdIwQY
MBaAFJxH7nPCh4CxLxUs+iWa3j2K4NE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2Et
ZjNjMWE5YTExZDczLzEvY0dMeW1DVHoxRTljUk1ON2p5SVpybzZpVUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2EtZjNjMWE5YTExZDcz
LzEvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiFrMA0G
CSqGSIb3DQEBCwUAA4IBAQBfvjc5yk5P7LtUgRzRpGkx6g9JP3LMO2mazf86TLNh
UDW4SR1VbkUkx3f0iimd2A65s/jWnPJLfppDTo+kubY70YotNIiS7rO60X53QYJw
InfkzEpsndEdqT/OyzjUb7tYScW/OFZXAOdSlVDW0tKt1X+0jRZrcAr4JGVBMMWD
dBRYVZMsmyE/bXnySqcsEjyL4RbAwYEA1j9Rf9Axood4yu3afJ09u0x6X/w9f4WN
WkwmbFQfzL9jEolckArS+AnwRkVB9ulwSUatNb7ZkcnBXlNpl5xptIxxid0Tr7Uf
UKezu76oioNJBG8X4U24FuupChvQVpcO5SpD356TMrG/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:27 2025 by rpki-client