Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/rn_dIhOMY1_JfBHY-uDPWuUfvnU.roa
File: rn_dIhOMY1_JfBHY-uDPWuUfvnU.roa (raw, json)
Hash identifier: UZ/1zipFFdNl5U14NFLVLtUg8eAOWxXm0fmDpU1jj4o=
Subject key identifier: AE:7F:DD:22:13:8C:63:5F:C9:7C:11:D8:FA:E0:CF:5A:E5:1F:BE:75
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E7CF19257129CD65F0DACF30A67AB
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/rn_dIhOMY1_JfBHY-uDPWuUfvnU.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210244
IP address blocks: 212.108.238.0/24 maxlen: 24
195.184.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7c:f1:92:57:12:9c:d6:5f:0d:ac:f3:0a:67:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae7fdd22138c635fc97c11d8fae0cf5ae51fbe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5e:e3:37:fd:33:db:5a:1c:07:16:51:7f:39:
1b:07:be:7d:da:de:0c:7d:ba:ca:ba:b9:f7:4c:cb:
55:c9:65:2c:61:43:00:78:07:9d:62:9b:77:d8:e9:
39:a7:4d:72:fa:e5:36:82:e5:48:a8:f3:9e:c6:64:
6e:ea:60:ed:74:56:b9:52:85:1c:26:35:7c:b4:ee:
05:57:78:43:d2:31:95:f7:29:02:8e:27:57:4d:00:
73:61:bd:ec:83:75:bb:0e:04:b2:43:f1:a9:10:dc:
5c:ec:08:de:d5:7e:6e:90:59:7c:14:aa:a4:3e:c7:
4f:d8:4f:47:57:90:1e:fc:eb:ef:1d:4b:49:4e:5b:
f3:50:3c:1e:15:bc:00:4d:d1:46:5f:b8:ba:8f:87:
98:1e:6f:6d:7f:a0:10:c8:d8:66:db:e6:71:60:20:
75:3b:20:1c:8b:6f:79:6b:86:b1:16:3a:ca:6d:4f:
20:08:ae:00:a0:ee:40:97:95:66:ae:a3:bd:1f:6a:
26:c6:9f:de:12:76:4b:55:8a:51:51:fd:58:b0:70:
2e:27:91:30:0b:b0:e1:7d:c3:54:ef:3e:2a:2d:fc:
95:3c:f1:5c:ca:f1:66:43:38:b8:fa:e8:ad:0e:63:
c9:62:3f:b4:f7:ee:b8:5e:8d:06:cd:60:7d:71:c6:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:DD:22:13:8C:63:5F:C9:7C:11:D8:FA:E0:CF:5A:E5:1F:BE:75
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/rn_dIhOMY1_JfBHY-uDPWuUfvnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.6.0/24
212.108.238.0/24
Signature Algorithm: sha256WithRSAEncryption
87:7f:b1:81:2f:8f:11:c5:34:04:df:c9:db:69:3e:fb:a9:12:
3c:ba:0c:6f:1b:15:0d:af:0a:af:f5:d5:72:67:9e:3b:4d:06:
42:59:72:36:ce:d1:93:d1:dc:32:6a:b8:83:18:52:21:6d:75:
23:bd:c9:b3:e3:6c:10:0f:a7:25:64:fd:6a:3a:89:4f:4e:fa:
84:20:56:d2:e5:91:6a:bc:c1:3d:c8:c9:77:6f:eb:57:a0:ca:
f2:16:7e:4d:3f:3e:b6:21:91:8a:8c:98:25:c6:ed:c3:3e:9d:
75:65:a8:29:6a:b0:c4:0c:9b:f9:e4:ac:21:43:77:e5:fe:29:
13:b5:46:e1:37:7a:99:14:bf:2a:7e:e5:46:a0:f0:a0:c7:e2:
69:14:49:e3:43:6c:f0:c0:fa:5b:ae:1f:76:ef:fb:17:4a:7e:
cc:9c:68:53:07:bd:53:91:7c:53:03:8f:ce:fc:8c:bb:58:cb:
90:a2:a4:15:e9:77:8a:a5:3d:84:0a:e7:38:b2:84:d8:4c:6b:
a9:df:8d:c5:11:fe:90:be:b2:dc:08:30:da:81:4d:05:f2:e1:
b6:f1:35:a5:40:88:21:24:ed:41:30:83:28:f9:61:20:f5:ee:
31:89:dc:5d:3a:8f:ab:19:8e:bb:8c:e2:7a:92:82:5a:a9:2b:
d8:03:f2:ca
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxnnzxklcSnNZfDazzCmerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5
ZDQyODgwHhcNMjMwMTAyMDgzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTdmZGQyMjEzOGM2MzVmYzk3YzExZDhmYWUwY2Y1YWU1MWZiZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV7jN/0z21ocBxZRfzkbB7592t4M
fbrKurn3TMtVyWUsYUMAeAedYpt32Ok5p01y+uU2guVIqPOexmRu6mDtdFa5UoUc
JjV8tO4FV3hD0jGV9ykCjidXTQBzYb3sg3W7DgSyQ/GpENxc7Aje1X5ukFl8FKqk
PsdP2E9HV5Ae/OvvHUtJTlvzUDweFbwATdFGX7i6j4eYHm9tf6AQyNhm2+ZxYCB1
OyAci295a4axFjrKbU8gCK4AoO5Al5VmrqO9H2omxp/eEnZLVYpRUf1YsHAuJ5Ew
C7DhfcNU7z4qLfyVPPFcyvFmQzi4+uitDmPJYj+09+64Xo0GzWB9ccZEwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK5/3SITjGNfyXwR2Prgz1rlH751MB8GA1UdIwQY
MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It
ZWNjNDliZGMyYWQ4LzEvcm5fZEloT01ZMV9KZkJIWS11RFBXdVVmdm5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4
LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw7gGAwQA
1GzuMA0GCSqGSIb3DQEBCwUAA4IBAQCHf7GBL48RxTQE38nbaT77qRI8ugxvGxUN
rwqv9dVyZ547TQZCWXI2ztGT0dwyariDGFIhbXUjvcmz42wQD6clZP1qOolPTvqE
IFbS5ZFqvME9yMl3b+tXoMryFn5NPz62IZGKjJglxu3DPp11ZagparDEDJv55Kwh
Q3fl/ikTtUbhN3qZFL8qfuVGoPCgx+JpFEnjQ2zwwPpbrh927/sXSn7MnGhTB71T
kXxTA4/O/Iy7WMuQoqQV6XeKpT2ECuc4soTYTGup343FEf6QvrLcCDDagU0F8uG2
8TWlQIghJO1BMIMo+WEg9e4xidxdOo+rGY67jOJ6koJaqSvYA/LK
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:51 2025 by rpki-client