Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/PkVGvVJaQdrEgbodQbK6G4GkGm0.roa
File: PkVGvVJaQdrEgbodQbK6G4GkGm0.roa (raw, json)
Hash identifier: PTPFucjsh18vGTDF5zSnXKViK1O/6vbeJxTsW0uYeSs=
Subject key identifier: 3E:45:46:BD:52:5A:41:DA:C4:81:BA:1D:41:B2:BA:1B:81:A4:1A:6D
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 01857155660ED888DCE3FCDE2E0BB2A07DFF
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/PkVGvVJaQdrEgbodQbK6G4GkGm0.roa
Signing time: Mon 02 Jan 2023 07:15:00 +0000
ROA not before: Mon 02 Jan 2023 07:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210250
IP address blocks: 194.1.147.0/24 maxlen: 24
2001:67c:51c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:66:0e:d8:88:dc:e3:fc:de:2e:0b:b2:a0:7d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Jan 2 07:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e4546bd525a41dac481ba1d41b2ba1b81a41a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ca:48:40:02:95:4e:3d:27:ce:7a:7a:1b:b9:
59:51:24:4f:bc:3b:e4:8a:15:e8:3a:34:78:f9:40:
7b:61:c7:30:24:f3:a9:8b:87:ff:22:57:e3:74:f5:
35:eb:69:0c:82:4d:17:86:bc:f3:f4:fa:07:bc:2d:
4c:a8:89:5d:8c:5b:80:9d:3e:7f:d3:1e:39:7d:9f:
52:c4:22:5e:44:1a:d5:b3:5d:19:57:e3:d1:52:83:
c6:a3:17:5f:c2:90:f6:b7:6f:33:6b:9c:7f:5a:1e:
c5:00:a5:cc:28:8c:40:a8:17:e9:bc:d1:4a:00:82:
44:7b:8e:82:a3:17:02:5c:dc:01:3a:76:ce:12:78:
d8:05:5f:26:6d:77:9f:be:a2:4f:28:21:78:b4:d6:
5e:95:f2:db:69:7c:53:36:d3:4e:78:45:36:18:be:
a3:8a:51:55:08:f1:61:ae:79:9b:4c:8b:dc:41:9a:
62:0f:9c:7b:45:2e:07:72:22:52:a8:a4:fd:97:ae:
f0:f1:83:27:a0:1a:4a:02:90:a2:41:2f:9f:d9:4c:
99:a5:6f:e6:8d:89:8d:c4:f4:43:97:1e:04:e3:cd:
46:58:46:fd:9d:e9:e9:e1:bc:43:9d:43:91:f8:7c:
69:1a:f1:09:52:fb:a5:06:2a:58:ab:71:b7:12:d2:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:45:46:BD:52:5A:41:DA:C4:81:BA:1D:41:B2:BA:1B:81:A4:1A:6D
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/PkVGvVJaQdrEgbodQbK6G4GkGm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.147.0/24
IPv6:
2001:67c:51c::/48
Signature Algorithm: sha256WithRSAEncryption
00:bb:54:37:fc:f6:a5:0d:a4:21:ad:77:8f:ae:29:58:88:d7:
64:e7:31:b2:cb:7b:84:47:1e:53:83:31:61:e1:e9:81:d9:cc:
0b:2b:5b:c7:ef:97:d9:e7:6c:09:3d:7e:05:bd:ec:2f:31:69:
ff:bc:a0:1a:5a:03:0b:76:2a:be:fc:f7:2c:bd:52:2b:8d:23:
e1:5f:96:ab:31:23:bd:ee:a3:c1:fe:15:88:db:91:6b:88:0c:
ea:9b:13:57:8e:a0:d2:e7:ee:46:b3:c5:31:2b:44:c2:e6:ee:
37:c5:ea:e5:09:9e:17:f4:a4:c1:ab:d1:41:d4:91:b6:7c:fc:
c5:f3:fb:ae:6f:5f:6f:66:52:e8:8d:62:9c:9b:5b:84:3d:bc:
fe:c7:e1:f2:8d:a7:e5:03:5b:f2:06:4e:ae:59:2d:6b:2b:12:
ae:a4:cc:35:6f:bf:7f:17:bd:d3:33:99:c4:b3:d8:31:a5:bd:
b1:80:bb:32:d3:cd:d6:6e:2a:cc:7a:72:4d:2c:4b:14:26:57:
b0:9c:3c:d8:b5:f8:49:1d:ad:57:c8:12:3a:25:40:2a:bb:64:
09:8a:6a:2c:4d:a8:77:5a:67:4c:ec:8e:24:4b:d6:b4:6e:36:
84:76:25:5e:4f:53:fb:2f:f6:e4:79:27:e4:c6:5c:79:6c:6d:
e5:0a:4d:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxVWYO2Ijc4/zeLguyoH3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Zjc2OWQ0NDMzYjc3MDRkZjcwM2QxNjQ1YjdmZWE4ZWZi
ZjkyNmUwHhcNMjMwMTAyMDcxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTQ1NDZiZDUyNWE0MWRhYzQ4MWJhMWQ0MWIyYmExYjgxYTQxYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgspIQAKVTj0nznp6G7lZUSRPvDvk
ihXoOjR4+UB7YccwJPOpi4f/IlfjdPU162kMgk0Xhrzz9PoHvC1MqIldjFuAnT5/
0x45fZ9SxCJeRBrVs10ZV+PRUoPGoxdfwpD2t28za5x/Wh7FAKXMKIxAqBfpvNFK
AIJEe46CoxcCXNwBOnbOEnjYBV8mbXefvqJPKCF4tNZelfLbaXxTNtNOeEU2GL6j
ilFVCPFhrnmbTIvcQZpiD5x7RS4HciJSqKT9l67w8YMnoBpKApCiQS+f2UyZpW/m
jYmNxPRDlx4E481GWEb9nenp4bxDnUOR+HxpGvEJUvulBipYq3G3EtIhDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD5FRr1SWkHaxIG6HUGyuhuBpBptMB8GA1UdIwQY
MBaAFLn3adRDO3cE33A9FkW3/qjvv5JuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQt
M2FlYjdjZGUwMzZjLzEvUGtWR3ZWSmFRZHJFZ2JvZFFiSzZHNEdrR20wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQtM2FlYjdjZGUwMzZj
LzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgGTMA8E
AgACMAkDBwAgAQZ8BRwwDQYJKoZIhvcNAQELBQADggEBAAC7VDf89qUNpCGtd4+u
KViI12TnMbLLe4RHHlODMWHh6YHZzAsrW8fvl9nnbAk9fgW97C8xaf+8oBpaAwt2
Kr789yy9UiuNI+FflqsxI73uo8H+FYjbkWuIDOqbE1eOoNLn7kazxTErRMLm7jfF
6uUJnhf0pMGr0UHUkbZ8/MXz+65vX29mUuiNYpybW4Q9vP7H4fKNp+UDW/IGTq5Z
LWsrEq6kzDVvv38XvdMzmcSz2DGlvbGAuzLTzdZuKsx6ck0sSxQmV7CcPNi1+Ekd
rVfIEjolQCq7ZAmKaixNqHdaZ0zsjiRL1rRuNoR2JV5PU/sv9uR5J+TGXHlsbeUK
TbA=
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:07:06 2025 by rpki-client