Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/z5svgb87D3gEcrpGXJIr6GtEloY.roa
File: z5svgb87D3gEcrpGXJIr6GtEloY.roa (raw, json)
Hash identifier: PKFF9joPd0vPYZg7ZJ+aTWnsqZKLFxSaKkZskdE25X8=
Subject key identifier: CF:9B:2F:81:BF:3B:0F:78:04:72:BA:46:5C:92:2B:E8:6B:44:96:86
Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial: 10F8FD35
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/z5svgb87D3gEcrpGXJIr6GtEloY.roa
Signing time: Sat 01 Jan 2022 15:55:19 +0000
ROA not before: Sat 01 Jan 2022 15:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33567
IP address blocks: 217.15.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284753205 (0x10f8fd35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Validity
Not Before: Jan 1 15:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf9b2f81bf3b0f780472ba465c922be86b449686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:f2:55:19:63:01:d8:f5:79:4e:74:87:8b:
7a:ec:de:33:f0:3f:0c:aa:be:46:96:c6:1a:83:3a:
bb:a2:03:57:3d:83:d3:14:ae:6c:39:3f:b0:66:bb:
d4:70:76:dc:ba:cb:ab:60:7e:28:8e:81:45:0f:d4:
15:5d:34:4c:9f:85:c9:a9:87:eb:16:5d:64:37:b6:
e8:36:ca:9c:a2:b3:a8:cd:21:d6:75:39:f1:87:f3:
14:93:8a:1a:85:6a:85:97:b7:2f:11:b7:5e:0f:76:
56:41:45:c4:a8:a9:11:9d:8b:68:21:86:2c:a9:b3:
ac:67:1e:f1:6e:5d:40:f6:92:3f:07:60:72:3e:08:
c8:2c:d1:86:79:4f:4b:eb:9e:da:80:c0:9f:85:ce:
f6:39:ce:a5:72:64:ea:68:af:cb:5a:00:66:a5:09:
8b:94:61:0d:4f:30:54:61:0a:14:08:fc:8f:66:fd:
d1:0e:f5:70:71:af:67:ff:10:4c:03:b0:f6:6c:e8:
8f:a9:d1:63:c0:88:a2:69:7e:a1:c4:de:20:63:25:
21:8a:a1:87:e3:d1:d7:ad:e6:9f:07:9b:ef:79:8e:
3e:11:83:90:2c:6a:c7:81:aa:f8:c2:b6:b1:e7:f7:
67:ea:df:d6:12:c3:20:8c:ab:e0:7f:d9:ac:a0:2c:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:2F:81:BF:3B:0F:78:04:72:BA:46:5C:92:2B:E8:6B:44:96:86
X509v3 Authority Key Identifier:
keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/z5svgb87D3gEcrpGXJIr6GtEloY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.15.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:32:24:75:fc:9e:ce:63:ac:c0:43:86:42:40:7a:6f:b6:0c:
26:17:c1:12:45:3d:5a:b8:fa:7c:0b:d2:97:cf:39:cb:7f:aa:
5c:ba:8e:f4:5b:8e:f2:d1:a9:76:73:1a:b0:f2:50:9f:ca:12:
76:d0:a7:2b:d3:5f:8d:f6:62:45:a3:58:f8:7a:e7:fb:dd:9b:
a4:6a:88:4f:73:15:d8:18:13:40:a0:43:93:6b:05:82:d5:d8:
00:88:ba:9a:04:56:71:76:f0:f7:17:1e:39:47:16:db:3d:db:
35:47:bc:33:c5:9f:f1:93:15:5d:5b:c3:e4:88:2d:f6:7d:00:
0d:43:fe:c1:3e:70:56:02:c0:d8:35:ec:f9:4f:85:59:f0:63:
22:ed:fb:c9:38:19:9d:45:70:6e:22:ef:f6:b3:c6:39:fd:83:
3d:ce:73:b2:da:a4:cd:80:25:a6:c6:f7:bf:01:f2:f1:7f:3a:
b9:bb:92:1c:16:68:46:9a:3b:bb:a1:3c:56:1d:28:c8:9b:f7:
db:44:cf:50:de:cd:f1:5d:58:67:93:bc:dc:6e:03:67:99:91:
b1:9d:e7:38:00:c0:0e:ac:b8:38:5f:53:6d:e1:e6:60:8c:2c:
0c:dd:af:3f:cb:e7:52:11:1f:88:5b:3c:49:97:ce:a0:8a:02:
07:2f:54:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEPj9NTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NDk3NjczYzc4ZWZhZTVmNmJkODBhMjVhY2UzZDNjMzcxOTNlNzg5MB4XDTIyMDEw
MTE1NTUxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2Y5YjJmODFiZjNi
MGY3ODA0NzJiYTQ2NWM5MjJiZTg2YjQ0OTY4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALpP8lUZYwHY9XlOdIeLeuzeM/A/DKq+RpbGGoM6u6IDVz2D
0xSubDk/sGa71HB23LrLq2B+KI6BRQ/UFV00TJ+FyamH6xZdZDe26DbKnKKzqM0h
1nU58YfzFJOKGoVqhZe3LxG3Xg92VkFFxKipEZ2LaCGGLKmzrGce8W5dQPaSPwdg
cj4IyCzRhnlPS+ue2oDAn4XO9jnOpXJk6mivy1oAZqUJi5RhDU8wVGEKFAj8j2b9
0Q71cHGvZ/8QTAOw9mzoj6nRY8CIoml+ocTeIGMlIYqhh+PR163mnweb73mOPhGD
kCxqx4Gq+MK2sef3Z+rf1hLDIIyr4H/ZrKAssCsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTPmy+BvzsPeARyukZckivoa0SWhjAfBgNVHSMEGDAWgBT0l2c8eO+uX2vY
CiWs49PDcZPniTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlKZG5QSGp2cmw5cjJBb2xyT1BUdzNHVDU0ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDEvZDEzNjU4LWFmN2UtNGQ2ZS04MmVmLTZlMDY5NmZlZThlNi8x
L3o1c3ZnYjg3RDNnRWNycEdYSklyNkd0RWxvWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEv
ZDEzNjU4LWFmN2UtNGQ2ZS04MmVmLTZlMDY5NmZlZThlNi8xLzlKZG5QSGp2cmw5
cjJBb2xyT1BUdzNHVDU0ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANkPfTANBgkqhkiG9w0BAQsFAAOC
AQEALzIkdfyezmOswEOGQkB6b7YMJhfBEkU9Wrj6fAvSl885y3+qXLqO9FuO8tGp
dnMasPJQn8oSdtCnK9NfjfZiRaNY+Hrn+92bpGqIT3MV2BgTQKBDk2sFgtXYAIi6
mgRWcXbw9xceOUcW2z3bNUe8M8Wf8ZMVXVvD5Igt9n0ADUP+wT5wVgLA2DXs+U+F
WfBjIu37yTgZnUVwbiLv9rPGOf2DPc5zstqkzYAlpsb3vwHy8X86ubuSHBZoRpo7
u6E8Vh0oyJv320TPUN7N8V1YZ5O83G4DZ5mRsZ3nOADADqy4OF9TbeHmYIwsDN2v
P8vnUhEfiFs8SZfOoIoCBy9UQw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:41:43 2025 by rpki-client