Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CBSXUNVQexwxhNw86Fy5fYJ3KWA.roa
File: CBSXUNVQexwxhNw86Fy5fYJ3KWA.roa (raw, json)
Hash identifier: DI6YerU2tU1ZF/qSRpbW1LuyT/V9Mfge1TyXO0Xp+gs=
Subject key identifier: 08:14:97:50:D5:50:7B:1C:31:84:DC:3C:E8:5C:B9:7D:82:77:29:60
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8AF8E69F699543E72D7E22D8F96854
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CBSXUNVQexwxhNw86Fy5fYJ3KWA.roa
Signing time: Sun 01 Jan 2023 13:35:02 +0000
ROA not before: Sun 01 Jan 2023 13:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12368
IP address blocks: 194.209.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f8:e6:9f:69:95:43:e7:2d:7e:22:d8:f9:68:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08149750d5507b1c3184dc3ce85cb97d82772960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:aa:30:5d:cf:09:42:2b:88:28:e0:73:85:
fd:64:6a:66:a2:c1:59:db:12:86:9a:84:cd:53:2d:
d2:31:b0:57:ae:50:92:f2:69:74:05:bf:bb:22:2a:
c3:3e:93:eb:25:2a:92:b7:a5:17:3c:e3:66:86:56:
38:11:61:c2:ff:53:f3:1d:6a:fc:9a:02:88:c3:9c:
38:34:f4:81:53:8f:f1:35:fd:b6:d2:17:00:dc:75:
5d:f8:7f:aa:24:ef:57:75:c2:35:c7:d1:fc:d2:0b:
b1:de:c8:b9:0e:75:4c:36:b1:6d:98:03:1d:42:21:
ae:8f:a7:c8:55:a2:66:1a:b4:38:19:a6:1c:92:fe:
6e:38:8c:2e:c0:02:00:5b:ba:47:ee:e7:80:21:46:
cc:e5:2b:04:40:2b:8e:1e:33:e1:55:1c:9a:dc:7c:
e3:3d:f4:8e:90:57:10:3a:f4:f5:2c:ca:a9:b8:79:
d7:d5:cd:07:65:c2:88:a4:07:35:61:10:7c:11:e9:
05:43:18:ef:64:89:04:4d:95:db:65:0d:41:27:c9:
03:da:75:f9:ac:99:4e:92:e2:47:3e:fb:2e:89:da:
03:e0:a1:be:6a:65:23:73:98:40:a2:08:79:c7:e9:
3d:f2:3a:8f:4b:b4:da:87:ff:10:9d:de:fc:80:7e:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:14:97:50:D5:50:7B:1C:31:84:DC:3C:E8:5C:B9:7D:82:77:29:60
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CBSXUNVQexwxhNw86Fy5fYJ3KWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.83.0/24
Signature Algorithm: sha256WithRSAEncryption
66:94:ec:16:b0:2f:44:3c:51:34:16:5b:4d:2c:df:f7:21:15:
22:c0:29:67:cf:13:50:30:67:88:cc:dd:70:a1:4c:ab:aa:b0:
a2:4e:f9:bc:62:ad:6a:20:4e:6a:2d:6c:b3:91:25:95:e8:cb:
e4:9e:fa:32:1b:10:1f:7e:6a:79:77:d0:b7:74:39:55:40:91:
5d:f7:5b:a3:5e:15:3f:7c:46:1f:00:4a:92:17:b3:52:28:cd:
ae:c4:7b:bd:55:42:5d:c5:06:24:50:f8:7b:ae:9c:1a:0c:09:
af:52:0c:b7:ea:c1:80:2c:75:8d:96:65:42:c4:1d:49:68:e3:
ce:d6:c0:3e:3b:30:61:af:ae:79:b6:50:dd:f5:34:1f:1e:3c:
19:9c:9f:98:bd:ed:26:26:da:bd:5e:43:7e:60:04:45:97:d5:
a9:c9:13:45:7b:d7:ce:09:f6:ad:b0:3a:ac:91:87:c7:30:bc:
b8:64:6f:1c:10:ea:0e:a5:84:b3:04:f0:db:41:83:38:a2:5c:
49:e6:7e:55:40:84:b6:9c:09:75:31:d8:3f:cb:15:75:a6:db:
74:6b:db:ec:3b:8e:9b:55:d2:aa:74:80:a0:86:77:b0:4d:f5:
ee:ab:26:e1:98:a4:13:ab:b9:b3:e3:0d:2b:54:88:b0:45:28:
c6:b9:3b:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtivjmn2mVQ+ctfiLY+WhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjMwMTAxMTMzNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODE0OTc1MGQ1NTA3YjFjMzE4NGRjM2NlODVjYjk3ZDgyNzcyOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uCqMF3PCUIriCjgc4X9ZGpmosFZ
2xKGmoTNUy3SMbBXrlCS8ml0Bb+7IirDPpPrJSqSt6UXPONmhlY4EWHC/1PzHWr8
mgKIw5w4NPSBU4/xNf220hcA3HVd+H+qJO9XdcI1x9H80gux3si5DnVMNrFtmAMd
QiGuj6fIVaJmGrQ4GaYckv5uOIwuwAIAW7pH7ueAIUbM5SsEQCuOHjPhVRya3Hzj
PfSOkFcQOvT1LMqpuHnX1c0HZcKIpAc1YRB8EekFQxjvZIkETZXbZQ1BJ8kD2nX5
rJlOkuJHPvsuidoD4KG+amUjc5hAogh5x+k98jqPS7Tah/8Qnd78gH6JjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAgUl1DVUHscMYTcPOhcuX2CdylgMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvQ0JTWFVOVlFleHd4aE53ODZGeTVmWUozS1dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtFTMA0G
CSqGSIb3DQEBCwUAA4IBAQBmlOwWsC9EPFE0FltNLN/3IRUiwClnzxNQMGeIzN1w
oUyrqrCiTvm8Yq1qIE5qLWyzkSWV6MvknvoyGxAffmp5d9C3dDlVQJFd91ujXhU/
fEYfAEqSF7NSKM2uxHu9VUJdxQYkUPh7rpwaDAmvUgy36sGALHWNlmVCxB1JaOPO
1sA+OzBhr655tlDd9TQfHjwZnJ+Yve0mJtq9XkN+YARFl9WpyRNFe9fOCfatsDqs
kYfHMLy4ZG8cEOoOpYSzBPDbQYM4olxJ5n5VQIS2nAl1Mdg/yxV1ptt0a9vsO46b
VdKqdICghnewTfXuqybhmKQTq7mz4w0rVIiwRSjGuTtb
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:32:04 2025 by rpki-client