Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/s3UTcLldiHPOrrUX_hDMSV0OQy8.roa
File: s3UTcLldiHPOrrUX_hDMSV0OQy8.roa (raw, json)
Hash identifier: HK6GH2m8lmod0++ycgcBlkrCG4OdovZ5uoVIJhZwWYs=
Subject key identifier: B3:75:13:70:B9:5D:88:73:CE:AE:B5:17:FE:10:CC:49:5D:0E:43:2F
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 3325C685
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/s3UTcLldiHPOrrUX_hDMSV0OQy8.roa
Signing time: Sat 01 Jan 2022 10:59:10 +0000
ROA not before: Sat 01 Jan 2022 10:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197889
IP address blocks: 195.184.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858113669 (0x3325c685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 10:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3751370b95d8873ceaeb517fe10cc495d0e432f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:0a:de:f9:57:b8:e9:00:7d:36:e7:82:45:
28:c3:d0:08:08:b2:b6:c5:a8:0f:96:36:cf:e4:de:
9d:56:89:2a:fd:88:92:0d:0c:c3:2a:87:75:a9:32:
e0:1e:ef:89:8f:cf:8b:a6:b1:b3:af:6a:c4:6f:7d:
4d:89:48:45:24:bc:69:49:d4:b4:ee:2b:18:b9:25:
4a:e3:ce:99:01:c6:50:32:a0:c1:c1:83:53:52:1b:
8f:b3:2f:76:56:56:2a:b8:51:9e:1a:fc:75:d8:68:
8d:5a:eb:ef:11:ab:9c:88:1f:a2:14:e0:f7:28:81:
9f:15:92:76:64:6e:69:07:75:80:cc:7c:c9:7f:6b:
ec:c2:29:cb:a8:db:6a:fa:c1:74:17:60:fd:69:44:
51:33:0b:e3:0d:94:3c:de:2b:d2:76:0b:fa:ed:ca:
a0:8d:1f:ab:d1:5d:54:d6:eb:ef:35:ad:84:90:9f:
93:b6:37:ab:28:f8:e9:46:16:f7:7d:48:0e:70:89:
80:0b:2a:3c:7c:8c:f8:08:63:fb:31:77:3c:a2:a4:
13:59:3d:62:6e:4d:6f:f7:75:08:ef:d2:74:80:f6:
8d:07:3b:fb:b3:76:76:7a:2c:47:6a:2a:3f:2a:63:
0a:d6:1b:1b:4f:82:40:6e:4c:9e:f6:49:77:c8:00:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:13:70:B9:5D:88:73:CE:AE:B5:17:FE:10:CC:49:5D:0E:43:2F
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/s3UTcLldiHPOrrUX_hDMSV0OQy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.4.0/24
Signature Algorithm: sha256WithRSAEncryption
14:74:fc:b0:4d:b9:6f:dc:12:1c:ed:5d:6c:f5:51:14:4f:33:
5d:37:63:56:49:99:3d:d5:f1:3c:f9:a8:41:ad:51:4d:b4:9a:
94:41:a7:c9:fe:16:99:e2:dc:1e:03:5d:f8:dd:94:70:18:14:
31:7b:5d:e6:c6:8e:04:74:1d:ed:54:a4:d7:4b:ad:db:04:8a:
80:a4:31:6b:c1:2a:98:3d:e3:ed:b3:22:08:e5:dc:44:b3:01:
eb:61:33:be:94:e2:57:9b:24:4f:94:ae:ca:43:e9:63:45:35:
39:d0:40:b8:a4:a4:80:4a:ba:29:29:9b:41:0f:d3:32:74:ae:
42:85:61:62:77:fb:df:b5:98:e8:dd:46:86:30:ff:da:21:91:
ba:a9:02:41:1e:46:a8:cd:21:51:fa:06:f6:b4:b4:09:f5:a3:
f5:12:25:e1:0c:91:59:7d:13:1b:63:31:3a:f5:38:92:5b:ce:
54:59:71:03:a9:18:48:07:b1:76:37:b0:23:a6:a2:91:da:b1:
fa:75:d4:7c:3d:5f:b6:d2:76:c9:31:08:6f:84:fb:6e:f5:9d:
da:ee:43:db:3f:45:48:01:99:62:23:e8:d0:f1:aa:23:fc:02:
22:25:58:e7:88:65:ac:d2:93:b3:52:91:10:d0:4e:27:c6:00:
26:85:fb:3f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMyXGhTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZmIwOTdhMzZjMjMyNWQxMDMxZmY0MDkxYmEwMGE4NjQ1OWQ0Mjg4MB4XDTIyMDEw
MTEwNTkxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjM3NTEzNzBiOTVk
ODg3M2NlYWViNTE3ZmUxMGNjNDk1ZDBlNDMyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMtvCt75V7jpAH0254JFKMPQCAiytsWoD5Y2z+TenVaJKv2I
kg0MwyqHdaky4B7viY/Pi6axs69qxG99TYlIRSS8aUnUtO4rGLklSuPOmQHGUDKg
wcGDU1Ibj7MvdlZWKrhRnhr8ddhojVrr7xGrnIgfohTg9yiBnxWSdmRuaQd1gMx8
yX9r7MIpy6jbavrBdBdg/WlEUTML4w2UPN4r0nYL+u3KoI0fq9FdVNbr7zWthJCf
k7Y3qyj46UYW931IDnCJgAsqPHyM+Ahj+zF3PKKkE1k9Ym5Nb/d1CO/SdID2jQc7
+7N2dnosR2oqPypjCtYbG0+CQG5MnvZJd8gAgVkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSzdRNwuV2Ic86utRf+EMxJXQ5DLzAfBgNVHSMEGDAWgBS/sJejbCMl0QMf
9AkboAqGRZ1CiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Y3Q1hvMndqSmRFREhfUUpHNkFLaGtXZFFvZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvZjJjNWU4LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8x
L3MzVVRjTGxkaUhQT3JyVVhfaERNU1YwT1F5OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
ZjJjNWU4LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8xL3Y3Q1hvMndqSmRF
REhfUUpHNkFLaGtXZFFvZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMO4BDANBgkqhkiG9w0BAQsFAAOC
AQEAFHT8sE25b9wSHO1dbPVRFE8zXTdjVkmZPdXxPPmoQa1RTbSalEGnyf4WmeLc
HgNd+N2UcBgUMXtd5saOBHQd7VSk10ut2wSKgKQxa8EqmD3j7bMiCOXcRLMB62Ez
vpTiV5skT5SuykPpY0U1OdBAuKSkgEq6KSmbQQ/TMnSuQoVhYnf737WY6N1GhjD/
2iGRuqkCQR5GqM0hUfoG9rS0CfWj9RIl4QyRWX0TG2MxOvU4klvOVFlxA6kYSAex
djewI6aikdqx+nXUfD1fttJ2yTEIb4T7bvWd2u5D2z9FSAGZYiPo0PGqI/wCIiVY
54hlrNKTs1KRENBOJ8YAJoX7Pw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:12:56 2025 by rpki-client