Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/vmTpMXdkI8bUhZm3cR9Zf7SaDMs.roa
File: vmTpMXdkI8bUhZm3cR9Zf7SaDMs.roa (raw, json)
Hash identifier: pMvXUk7Fi58KQIba68FzJWC2hCtCjY9H+GEe7R/St1M=
Subject key identifier: BE:64:E9:31:77:64:23:C6:D4:85:99:B7:71:1F:59:7F:B4:9A:0C:CB
Certificate issuer: /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Certificate serial: 01856DCAC5762484E1215D718B9B8227D667
Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/vmTpMXdkI8bUhZm3cR9Zf7SaDMs.roa
Signing time: Sun 01 Jan 2023 14:44:43 +0000
ROA not before: Sun 01 Jan 2023 14:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48394
IP address blocks: 94.247.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:c5:76:24:84:e1:21:5d:71:8b:9b:82:27:d6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Validity
Not Before: Jan 1 14:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be64e931776423c6d48599b7711f597fb49a0ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:58:48:ab:2f:95:46:bc:fb:e2:f6:09:f8:
d4:69:ef:db:29:65:31:05:be:42:0f:e4:6b:30:44:
e6:53:09:6e:2c:26:a8:0f:c0:98:24:93:cb:98:4f:
00:f8:b2:6d:8f:68:7f:6e:74:a6:a0:c4:86:30:7f:
36:89:93:34:bd:2c:3f:59:8b:fc:b9:7d:fc:3f:89:
6a:ac:64:4e:01:42:43:c0:6a:de:8f:02:04:4c:77:
af:59:6d:ac:9e:27:e0:85:de:5b:20:62:b4:28:dc:
a9:70:f8:c5:30:64:6e:12:63:0e:a8:50:5c:84:4e:
df:ee:8d:e5:b2:d6:a1:a8:a6:a4:e4:b4:be:18:ab:
3b:84:67:e8:ab:1c:e3:33:65:46:0b:22:7e:d3:a1:
a0:85:04:d6:57:c7:62:38:86:16:a2:03:e7:e7:d8:
65:cc:bf:94:0d:b4:04:46:8b:65:84:74:3c:72:33:
23:7e:09:92:35:94:82:6a:45:56:87:f2:a2:17:cc:
48:19:07:36:53:17:36:91:f6:ef:06:cd:d2:e3:d0:
c7:07:32:c0:be:33:08:b4:99:8a:68:d7:3f:fa:0d:
ad:26:b4:38:0f:5f:a7:8c:eb:b9:87:ac:97:4a:3c:
a2:e3:6d:ae:60:6c:5b:fb:b2:e9:49:09:89:76:49:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:64:E9:31:77:64:23:C6:D4:85:99:B7:71:1F:59:7F:B4:9A:0C:CB
X509v3 Authority Key Identifier:
keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/vmTpMXdkI8bUhZm3cR9Zf7SaDMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.8.0/21
Signature Algorithm: sha256WithRSAEncryption
01:de:18:1c:72:c5:8c:bd:43:f8:8a:0b:f9:18:bd:1a:81:78:
f9:4e:c7:0f:72:16:3d:86:86:aa:09:37:59:ad:da:2f:55:17:
3c:3f:78:36:3f:95:83:3c:b9:c8:b7:b8:e0:e8:25:e2:45:12:
f1:60:1b:45:35:9c:b2:ca:40:b0:88:20:b2:5c:f3:26:02:1c:
e8:fd:bd:ea:67:88:9b:65:e4:da:f2:79:c4:b5:b6:92:eb:87:
93:77:16:6a:cc:c3:bd:bd:49:c4:9b:79:89:c3:71:0b:2d:66:
9c:f1:4d:4d:24:76:f5:e0:2b:20:02:24:65:6f:d7:20:55:6f:
19:3d:bc:85:ee:3a:6a:83:28:00:aa:9e:80:3c:1b:f1:97:ce:
67:ee:d6:68:7f:5b:42:dd:b1:a9:33:c8:2d:ec:8f:fb:34:ef:
7c:fa:67:fa:8f:db:3b:8b:94:78:b4:e0:9c:51:7f:74:21:19:
60:f3:35:ec:ac:2e:c9:40:16:92:ee:bc:b0:88:32:b1:e1:48:
0c:06:f5:33:3e:88:f9:5b:f0:03:be:e6:0d:94:ed:1a:5a:21:
09:ea:90:a6:32:22:7c:f7:37:c6:4d:b4:97:4f:8f:79:d3:63:
60:55:1a:0b:ac:bf:a1:43:ac:82:53:3e:aa:ed:f6:e1:ce:a4:
89:55:5c:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtysV2JIThIV1xi5uCJ9ZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTY5ODBkNDg5ZTljNTNiYzgyOWYzZThkNjNkMzgzZjM4
ZDBkZTMwHhcNMjMwMTAxMTQ0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTY0ZTkzMTc3NjQyM2M2ZDQ4NTk5Yjc3MTFmNTk3ZmI0OWEwY2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC1YSKsvlUa8++L2CfjUae/bKWUx
Bb5CD+RrMETmUwluLCaoD8CYJJPLmE8A+LJtj2h/bnSmoMSGMH82iZM0vSw/WYv8
uX38P4lqrGROAUJDwGrejwIETHevWW2snifghd5bIGK0KNypcPjFMGRuEmMOqFBc
hE7f7o3lstahqKak5LS+GKs7hGfoqxzjM2VGCyJ+06GghQTWV8diOIYWogPn59hl
zL+UDbQERotlhHQ8cjMjfgmSNZSCakVWh/KiF8xIGQc2Uxc2kfbvBs3S49DHBzLA
vjMItJmKaNc/+g2tJrQ4D1+njOu5h6yXSjyi422uYGxb+7LpSQmJdkkdFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL5k6TF3ZCPG1IWZt3EfWX+0mgzLMB8GA1UdIwQY
MBaAFJ5WmA1InpxTvIKfPo1j04PzjQ3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxhWURVaWVuRk84Z3A4LWpXUFRnX09ORGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzAzNjAtMDMyOS00Y2YxLWEzN2Yt
ZGI3NDk4ZGFkZTBjLzEvdm1UcE1YZGtJOGJVaFptM2NSOVpmN1NhRE1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hMzAzNjAtMDMyOS00Y2YxLWEzN2YtZGI3NDk4ZGFkZTBj
LzEvbmxhWURVaWVuRk84Z3A4LWpXUFRnX09ORGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXvcIMA0G
CSqGSIb3DQEBCwUAA4IBAQAB3hgccsWMvUP4igv5GL0agXj5TscPchY9hoaqCTdZ
rdovVRc8P3g2P5WDPLnIt7jg6CXiRRLxYBtFNZyyykCwiCCyXPMmAhzo/b3qZ4ib
ZeTa8nnEtbaS64eTdxZqzMO9vUnEm3mJw3ELLWac8U1NJHb14CsgAiRlb9cgVW8Z
PbyF7jpqgygAqp6APBvxl85n7tZof1tC3bGpM8gt7I/7NO98+mf6j9s7i5R4tOCc
UX90IRlg8zXsrC7JQBaS7rywiDKx4UgMBvUzPoj5W/ADvuYNlO0aWiEJ6pCmMiJ8
9zfGTbSXT49502NgVRoLrL+hQ6yCUz6q7fbhzqSJVVyE
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:07:36 2025 by rpki-client