Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CwHF7ILJH1wMIFZQMDwSmUSXCxA.roa
File: CwHF7ILJH1wMIFZQMDwSmUSXCxA.roa (raw, json)
Hash identifier: IB4QkM2XNSmK6JlvTCx1BEPFFRQ8I5dsLQeJR3Xap9Q=
Subject key identifier: 0B:01:C5:EC:82:C9:1F:5C:0C:20:56:50:30:3C:12:99:44:97:0B:10
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 331CA179
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CwHF7ILJH1wMIFZQMDwSmUSXCxA.roa
Signing time: Sat 01 Jan 2022 10:59:04 +0000
ROA not before: Sat 01 Jan 2022 10:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16015
IP address blocks: 213.253.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857514361 (0x331ca179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 10:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b01c5ec82c91f5c0c205650303c129944970b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:98:84:13:12:46:34:3f:8d:01:53:cf:20:
f2:a7:aa:1c:e6:1f:db:e4:cc:a6:9c:01:9f:65:42:
34:c2:69:52:62:ad:92:78:ff:26:70:9a:ff:43:0f:
3a:b4:cf:32:17:50:8d:6e:6c:e5:a3:a9:b4:6e:ae:
81:51:20:cd:19:7e:95:aa:3b:4b:31:43:56:72:c3:
64:e9:2a:fb:64:49:ce:f2:4b:32:9b:9a:04:74:93:
dd:d0:e7:18:1b:f6:bf:a8:f3:d6:45:77:35:cd:9a:
c7:32:b3:8a:2f:a3:ad:a0:4a:0f:96:3b:e1:3a:41:
11:a5:d6:5c:e5:eb:b0:82:34:c1:96:74:4b:13:87:
60:c8:cd:4a:42:9d:8c:ef:fd:40:b3:f2:cc:6b:d0:
cf:42:64:c4:e5:11:41:cc:73:5e:ca:4c:4b:59:2c:
f8:3d:46:66:50:d0:8f:f6:84:ae:c7:08:9d:a3:bf:
6f:fc:0e:9f:17:24:36:43:1c:a7:37:62:b2:e1:f9:
a8:95:86:87:88:09:82:90:bb:ff:4d:c6:0c:67:ff:
8a:c4:10:e8:62:06:c7:3d:6d:af:d6:4d:0a:98:ac:
e6:8b:50:3c:53:22:87:1a:97:33:46:08:00:3c:f2:
d8:a6:8d:ad:f9:9a:ab:c3:b3:56:22:25:f7:34:26:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:C5:EC:82:C9:1F:5C:0C:20:56:50:30:3C:12:99:44:97:0B:10
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CwHF7ILJH1wMIFZQMDwSmUSXCxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.253.194.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c2:41:0f:5f:c1:86:52:9e:c3:6f:0d:85:63:39:d0:eb:f5:
35:6a:cf:2c:5e:e6:6b:9c:96:40:1c:26:5b:07:6f:d2:ce:84:
d1:44:88:25:69:55:b7:db:e4:ca:21:5c:fd:83:be:e9:80:56:
d1:27:51:11:2d:eb:b0:84:30:c5:c2:8b:ef:58:09:1e:5a:a6:
bc:b3:5c:e6:94:73:95:ac:0d:e4:8a:cb:5e:bf:ec:ea:a2:48:
e8:26:ec:9e:2f:9c:5b:ab:b0:e0:3b:4a:5b:12:f7:f8:61:1b:
26:77:2d:44:f0:ee:47:c3:ce:f3:2e:41:20:56:6a:4a:02:c6:
fd:d4:29:28:10:07:6a:c0:28:ca:49:75:18:72:5a:da:88:7a:
16:82:bf:52:ab:38:09:86:7e:f5:b8:f8:5b:6d:bf:27:09:d8:
12:c8:4d:e7:f8:81:2c:54:ad:9c:a7:4a:39:c3:99:12:87:9c:
51:d7:4d:fb:14:55:e9:8f:ff:9e:26:f9:ff:14:29:03:e4:1f:
aa:a9:21:e1:14:40:2b:5c:7a:ae:ce:83:0d:bd:c7:16:cf:25:
dc:c1:6b:8a:18:06:0d:38:fc:23:77:ab:6d:4b:ec:5a:1e:85:
5a:2f:1f:ba:7f:16:5f:83:81:a3:b3:5d:e1:e2:3b:24:77:e7:
97:36:d5:1f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMxyheTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZmIwOTdhMzZjMjMyNWQxMDMxZmY0MDkxYmEwMGE4NjQ1OWQ0Mjg4MB4XDTIyMDEw
MTEwNTkwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGIwMWM1ZWM4MmM5
MWY1YzBjMjA1NjUwMzAzYzEyOTk0NDk3MGIxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMGAmIQTEkY0P40BU88g8qeqHOYf2+TMppwBn2VCNMJpUmKt
knj/JnCa/0MPOrTPMhdQjW5s5aOptG6ugVEgzRl+lao7SzFDVnLDZOkq+2RJzvJL
MpuaBHST3dDnGBv2v6jz1kV3Nc2axzKzii+jraBKD5Y74TpBEaXWXOXrsII0wZZ0
SxOHYMjNSkKdjO/9QLPyzGvQz0JkxOURQcxzXspMS1ks+D1GZlDQj/aErscInaO/
b/wOnxckNkMcpzdisuH5qJWGh4gJgpC7/03GDGf/isQQ6GIGxz1tr9ZNCpis5otQ
PFMihxqXM0YIADzy2KaNrfmaq8OzViIl9zQmXtkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQLAcXsgskfXAwgVlAwPBKZRJcLEDAfBgNVHSMEGDAWgBS/sJejbCMl0QMf
9AkboAqGRZ1CiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Y3Q1hvMndqSmRFREhfUUpHNkFLaGtXZFFvZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvZjJjNWU4LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8x
L0N3SEY3SUxKSDF3TUlGWlFNRHdTbVVTWEN4QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
ZjJjNWU4LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8xL3Y3Q1hvMndqSmRF
REhfUUpHNkFLaGtXZFFvZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANX9wjANBgkqhkiG9w0BAQsFAAOC
AQEACcJBD1/BhlKew28NhWM50Ov1NWrPLF7ma5yWQBwmWwdv0s6E0USIJWlVt9vk
yiFc/YO+6YBW0SdRES3rsIQwxcKL71gJHlqmvLNc5pRzlawN5IrLXr/s6qJI6Cbs
ni+cW6uw4DtKWxL3+GEbJnctRPDuR8PO8y5BIFZqSgLG/dQpKBAHasAoykl1GHJa
2oh6FoK/Uqs4CYZ+9bj4W22/JwnYEshN5/iBLFStnKdKOcOZEoecUddN+xRV6Y//
nib5/xQpA+Qfqqkh4RRAK1x6rs6DDb3HFs8l3MFrihgGDTj8I3erbUvsWh6FWi8f
un8WX4OBo7Nd4eI7JHfnlzbVHw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:47 2025 by rpki-client