Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/2VYb4JkG_9hDleJnhJ9yWcjY_E0.roa
File: 2VYb4JkG_9hDleJnhJ9yWcjY_E0.roa (raw, json)
Hash identifier: qLdfRi6IdfbnyujydxV7yhetFx4+guXx0BXNGZP6DEI=
Subject key identifier: D9:56:1B:E0:99:06:FF:D8:43:95:E2:67:84:9F:72:59:C8:D8:FC:4D
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 060918FE
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/2VYb4JkG_9hDleJnhJ9yWcjY_E0.roa
Signing time: Sat 01 Jan 2022 06:01:28 +0000
ROA not before: Sat 01 Jan 2022 06:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197889
IP address blocks: 193.188.192.0/24 maxlen: 24
193.188.193.0/24 maxlen: 24
193.188.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101259518 (0x60918fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 1 06:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9561be09906ffd84395e267849f7259c8d8fc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:58:6b:eb:f1:32:45:6b:64:68:17:2d:f2:
6c:46:70:86:79:46:13:25:04:7b:7d:2d:7c:2c:8f:
d4:0d:4e:c4:21:c3:b6:49:e7:10:6b:37:2f:d5:4b:
57:9c:79:86:a7:92:a2:89:a4:c0:ef:00:ec:86:16:
7d:68:1c:1d:ec:7a:4d:45:f3:8d:ae:49:7f:be:43:
e2:9b:c9:13:38:de:7e:e3:1f:b3:7f:fd:4e:63:e4:
86:41:40:f4:5e:a1:ed:32:27:81:59:d3:30:a9:fe:
58:7b:14:33:dc:88:b7:21:2a:8b:63:e1:9d:be:22:
e2:9c:8e:f8:f2:53:94:81:20:17:14:b3:47:d7:56:
c6:54:3c:1f:df:42:a2:6e:ae:25:be:43:5a:0d:7a:
77:84:1a:cb:88:49:e3:18:1a:45:55:66:64:7e:16:
62:94:1d:53:36:be:cb:da:50:ff:f5:4a:14:c4:01:
83:6c:30:42:4c:ae:69:bf:15:8b:0d:1c:ce:18:1b:
6e:f8:6a:3a:75:e4:b3:58:78:ea:64:14:4f:92:d2:
92:65:88:0b:41:bd:ad:7c:84:63:cf:e4:6d:73:ae:
8b:87:58:94:77:c6:8c:dc:30:33:f4:10:94:6f:1f:
58:50:95:4b:f3:7a:ae:53:74:79:cf:d2:16:99:62:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:1B:E0:99:06:FF:D8:43:95:E2:67:84:9F:72:59:C8:D8:FC:4D
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/2VYb4JkG_9hDleJnhJ9yWcjY_E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.192.0-193.188.194.255
Signature Algorithm: sha256WithRSAEncryption
34:33:22:a4:9d:96:ce:1b:48:93:3d:bc:fc:41:2c:8c:11:c2:
22:57:64:6b:e1:08:bc:ab:e2:e9:3a:7e:a0:39:2e:67:75:2b:
35:63:87:d4:0a:ba:68:bb:cc:14:f3:f9:76:6e:d4:43:4c:37:
fa:07:31:d3:ab:3a:dc:7e:e5:ee:1e:b1:2a:cd:4b:e5:de:63:
ba:5e:85:c2:58:28:f6:c6:bd:17:37:b9:86:05:fe:20:ea:14:
23:32:31:58:dc:57:42:8f:46:2f:54:61:6b:fc:a1:26:7c:56:
d5:35:22:ec:8c:9b:3a:25:41:73:4f:24:66:97:92:cd:58:d2:
ba:b3:81:f3:fa:e9:af:45:eb:f6:20:10:16:04:7e:1b:38:9b:
29:cb:a2:5b:13:e2:22:0d:32:05:ed:bd:c0:eb:73:5c:ba:89:
05:3a:58:f0:5c:60:57:40:c0:58:54:ad:99:89:f7:df:a4:30:
67:35:d9:c6:26:1f:06:cb:76:0c:53:fd:ba:02:dc:d7:bb:c7:
11:8a:54:3a:3e:6a:f4:f7:b6:bd:fa:f1:8b:fa:de:28:a5:58:
68:6f:f8:59:9c:ca:c1:37:63:ca:3d:f2:64:69:95:49:d3:24:
50:b6:26:f0:65:79:74:8a:a7:a6:3a:4e:42:4f:90:96:ac:bc:
ce:74:74:a5
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBgkY/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NDhmNWUyNmYxYzA4ZjQ0ODZjOTkxMWM4YjYwOWVhZThiNmNiNzRkMB4XDTIyMDEw
MTA2MDEyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDk1NjFiZTA5OTA2
ZmZkODQzOTVlMjY3ODQ5ZjcyNTljOGQ4ZmM0ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALa7WGvr8TJFa2RoFy3ybEZwhnlGEyUEe30tfCyP1A1OxCHD
tknnEGs3L9VLV5x5hqeSoomkwO8A7IYWfWgcHex6TUXzja5Jf75D4pvJEzjefuMf
s3/9TmPkhkFA9F6h7TIngVnTMKn+WHsUM9yItyEqi2Phnb4i4pyO+PJTlIEgFxSz
R9dWxlQ8H99Com6uJb5DWg16d4Qay4hJ4xgaRVVmZH4WYpQdUza+y9pQ//VKFMQB
g2wwQkyuab8Viw0czhgbbvhqOnXks1h46mQUT5LSkmWIC0G9rXyEY8/kbXOui4dY
lHfGjNwwM/QQlG8fWFCVS/N6rlN0ec/SFpliCp0CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTZVhvgmQb/2EOV4meEn3JZyNj8TTAfBgNVHSMEGDAWgBQkj14m8cCPRIbJ
kRyLYJ6ui2y3TTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pJOWVKdkhBajBTR3laRWNpMkNlcm90c3QwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGIvZGFlOGIwLTk3ZDAtNDhkNC05YjI2LTAxMzdiMWY3NWQwMi8x
LzJWWWI0SmtHXzloRGxlSm5oSjl5V2NqWV9FMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIv
ZGFlOGIwLTk3ZDAtNDhkNC05YjI2LTAxMzdiMWY3NWQwMi8xL0pJOWVKdkhBajBT
R3laRWNpMkNlcm90c3QwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQGwbzAAwQAwbzCMA0GCSqGSIb3
DQEBCwUAA4IBAQA0MyKknZbOG0iTPbz8QSyMEcIiV2Rr4Qi8q+LpOn6gOS5ndSs1
Y4fUCrpou8wU8/l2btRDTDf6BzHTqzrcfuXuHrEqzUvl3mO6XoXCWCj2xr0XN7mG
Bf4g6hQjMjFY3FdCj0YvVGFr/KEmfFbVNSLsjJs6JUFzTyRml5LNWNK6s4Hz+umv
Rev2IBAWBH4bOJspy6JbE+IiDTIF7b3A63NcuokFOljwXGBXQMBYVK2ZifffpDBn
NdnGJh8Gy3YMU/26AtzXu8cRilQ6Pmr097a9+vGL+t4opVhob/hZnMrBN2PKPfJk
aZVJ0yRQtibwZXl0iqemOk5CT5CWrLzOdHSl
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:35:17 2025 by rpki-client