Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/rhkTBCaQoQyfElUVrv34pHpIVac.roa
File: rhkTBCaQoQyfElUVrv34pHpIVac.roa (raw, json)
Hash identifier: KpPSEeDmRYoPJeIvZX9bSr0b3lyJMzjnNO9wxdRwh2I=
Subject key identifier: AE:19:13:04:26:90:A1:0C:9F:12:55:15:AE:FD:F8:A4:7A:48:55:A7
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 012FCAB4
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/rhkTBCaQoQyfElUVrv34pHpIVac.roa
Signing time: Sat 01 Jan 2022 07:55:22 +0000
ROA not before: Sat 01 Jan 2022 07:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25318
IP address blocks: 193.47.162.0/24 maxlen: 24
195.234.177.0/24 maxlen: 24
2001:67c:154::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19909300 (0x12fcab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Jan 1 07:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae1913042690a10c9f125515aefdf8a47a4855a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:c8:b8:f4:79:9e:ce:ba:1e:37:e8:60:0b:
18:68:b5:8f:b3:2b:1b:22:bc:d0:36:db:cf:1c:72:
74:60:31:72:25:8a:68:b2:7e:3f:2f:55:ca:dc:3d:
f1:17:ef:3b:25:07:67:13:0a:f2:57:cf:f3:06:0c:
d9:62:ef:b4:ff:6a:50:cf:fa:1a:37:12:59:b5:28:
7a:b5:b9:14:c6:cc:8a:39:85:c0:61:e4:7b:06:17:
66:cb:30:d6:55:4f:71:d8:62:c9:e6:a1:ef:b9:04:
a2:3c:39:d2:4a:7a:15:b1:94:6f:bb:51:1f:00:fd:
2c:9c:1e:95:c8:fe:fc:fb:a0:1d:58:ba:16:85:a2:
ed:6d:bc:2d:2c:9b:8e:38:6d:0d:03:c2:ef:94:5c:
28:cd:91:52:af:b4:0d:cc:28:f3:2c:aa:79:d5:3e:
66:84:bf:53:0c:32:5a:c4:60:b9:67:6e:c0:6c:45:
07:a7:dc:a0:2d:d5:ca:7f:5a:14:03:e8:94:72:bb:
b7:9f:ae:a3:6d:20:eb:6e:8c:a4:9b:43:09:db:5b:
b3:45:ef:e9:6e:03:a2:4f:9c:56:85:61:6a:1a:65:
17:fb:f1:66:73:58:2b:3f:f5:fa:28:1a:68:bd:37:
e5:da:c6:5f:2f:db:be:ed:d5:57:0d:ea:38:f2:5f:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:13:04:26:90:A1:0C:9F:12:55:15:AE:FD:F8:A4:7A:48:55:A7
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/rhkTBCaQoQyfElUVrv34pHpIVac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.162.0/24
195.234.177.0/24
IPv6:
2001:67c:154::/48
Signature Algorithm: sha256WithRSAEncryption
15:4f:55:40:36:51:d5:94:8b:19:2c:d4:72:ea:08:e9:20:22:
71:d1:ab:2b:f1:23:86:bb:18:64:32:ea:29:ad:d7:ae:e6:58:
7b:fc:e5:5f:b7:7e:67:b7:6e:b3:67:07:78:ac:10:18:57:a0:
78:1c:ba:27:4a:c2:0f:71:ef:33:3f:b6:f3:e1:f6:25:e4:b1:
eb:3a:c0:77:5a:ba:8e:0f:ee:65:99:02:5c:6f:c7:0e:74:a5:
a0:06:29:c0:bf:d4:33:a9:5b:ba:04:7f:e6:b2:fa:81:b7:e7:
f3:19:b5:d5:bd:27:e6:a7:cc:e5:bf:41:9f:d1:cf:34:69:51:
7e:e1:2f:27:c4:9d:91:05:fe:90:f2:28:c2:38:5a:ec:84:c8:
ef:0a:86:85:9c:54:de:de:c8:83:a0:c8:99:ca:91:da:90:0c:
c6:59:5d:9f:d3:1d:cd:b8:73:64:c7:e2:8e:01:35:e2:94:4c:
8f:2c:97:51:86:da:c3:dd:1c:67:1a:a8:83:36:eb:f3:6b:5a:
fa:41:36:0a:e8:ae:b5:54:67:e3:6c:0d:51:53:20:f0:76:27:
0c:6a:2f:e5:26:17:16:3b:f5:88:b3:42:9e:57:03:a0:88:34:
ec:22:c7:62:3d:24:4a:6a:0a:b2:fe:18:54:01:87:e8:8a:56:
34:e7:27:c9
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEAS/KtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
Y2JlYjliMzAyY2ViNmY1OGQzMjdiNDk0ZDgxNDU5NDMzYmU3MzhkMB4XDTIyMDEw
MTA3NTUyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWUxOTEzMDQyNjkw
YTEwYzlmMTI1NTE1YWVmZGY4YTQ3YTQ4NTVhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKguyLj0eZ7Ouh436GALGGi1j7MrGyK80DbbzxxydGAxciWK
aLJ+Py9Vytw98RfvOyUHZxMK8lfP8wYM2WLvtP9qUM/6GjcSWbUoerW5FMbMijmF
wGHkewYXZssw1lVPcdhiyeah77kEojw50kp6FbGUb7tRHwD9LJwelcj+/PugHVi6
FoWi7W28LSybjjhtDQPC75RcKM2RUq+0Dcwo8yyqedU+ZoS/UwwyWsRguWduwGxF
B6fcoC3Vyn9aFAPolHK7t5+uo20g626MpJtDCdtbs0Xv6W4Dok+cVoVhahplF/vx
ZnNYKz/1+igaaL035drGXy/bvu3VVw3qOPJf6vkCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBSuGRMEJpChDJ8SVRWu/fikekhVpzAfBgNVHSMEGDAWgBT8vrmzAs629Y0y
e0lNgUWUM75zjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19MNjVzd0xPdHZXTk1udEpUWUZGbERPLWM0MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMWM4YjY5LTRiN2ItNGJmZC1iY2U1LTM3YWZiZGY0ZDg0Ny8x
L3Joa1RCQ2FRb1F5ZkVsVVZydjM0cEhwSVZhYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MWM4YjY5LTRiN2ItNGJmZC1iY2U1LTM3YWZiZGY0ZDg0Ny8xL19MNjVzd0xPdHZX
Tk1udEpUWUZGbERPLWM0MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMEvogMEAMPqsTAPBAIAAjAJAwcA
IAEGfAFUMA0GCSqGSIb3DQEBCwUAA4IBAQAVT1VANlHVlIsZLNRy6gjpICJx0asr
8SOGuxhkMuoprdeu5lh7/OVft35nt26zZwd4rBAYV6B4HLonSsIPce8zP7bz4fYl
5LHrOsB3WrqOD+5lmQJcb8cOdKWgBinAv9QzqVu6BH/msvqBt+fzGbXVvSfmp8zl
v0Gf0c80aVF+4S8nxJ2RBf6Q8ijCOFrshMjvCoaFnFTe3siDoMiZypHakAzGWV2f
0x3NuHNkx+KOATXilEyPLJdRhtrD3RxnGqiDNuvza1r6QTYK6K61VGfjbA1RUyDw
dicMai/lJhcWO/WIs0KeVwOgiDTsIsdiPSRKagqy/hhUAYfoilY05yfJ
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:34 2025 by rpki-client