Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DABdv2x2b0aS_wArZCv6TueQO3A.roa
File: DABdv2x2b0aS_wArZCv6TueQO3A.roa (raw, json)
Hash identifier: WnNUFohftgp60AzmlP7fhL6QNX1Es9TfaOdIN5Q5Jho=
Subject key identifier: 0C:00:5D:BF:6C:76:6F:46:92:FF:00:2B:64:2B:FA:4E:E7:90:3B:70
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50E1BC78
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DABdv2x2b0aS_wArZCv6TueQO3A.roa
Signing time: Sat 01 Jan 2022 16:01:55 +0000
ROA not before: Sat 01 Jan 2022 16:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201870
IP address blocks: 195.65.24.0/24 maxlen: 24
195.65.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356971128 (0x50e1bc78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c005dbf6c766f4692ff002b642bfa4ee7903b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:2d:ef:f7:86:1b:54:37:1d:07:d9:7c:64:
cc:c9:1a:df:67:ce:52:8b:89:c2:e3:6a:1e:c0:63:
38:e0:63:48:6f:46:02:90:c4:8d:87:c8:9e:98:a8:
c1:6c:a2:c9:1d:8f:af:43:c7:9b:3d:fa:40:0b:2d:
34:6f:ae:a9:2a:c9:0b:c8:f3:d8:aa:4d:37:22:72:
9d:40:9d:39:0d:25:5e:ab:57:4c:25:1f:ae:fc:a2:
aa:9a:fd:e9:54:40:f2:05:78:28:b7:be:36:75:20:
66:d8:90:a6:64:92:e8:35:90:8b:95:1e:ea:69:d5:
d6:fb:72:40:0e:03:30:fc:bc:d5:85:33:89:13:fe:
71:c2:0e:db:4e:72:0a:65:43:4a:44:b8:44:7c:16:
0b:bd:c8:65:f2:9b:6a:57:bd:72:4f:a8:b8:87:c8:
ff:4d:ed:64:e0:35:08:07:d9:83:dc:40:2b:cc:5f:
f9:15:a4:ed:9e:72:90:f6:a7:86:04:c5:e5:65:02:
43:be:b2:c4:62:3e:02:40:81:7c:4a:13:b1:56:63:
9b:f8:af:09:af:f7:8e:a5:24:4e:4f:a0:c9:cb:ce:
90:e5:73:e8:11:46:09:4b:16:0c:76:5d:39:e3:d6:
74:3b:da:1f:c4:49:53:e2:30:3d:48:11:16:e8:88:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:00:5D:BF:6C:76:6F:46:92:FF:00:2B:64:2B:FA:4E:E7:90:3B:70
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DABdv2x2b0aS_wArZCv6TueQO3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.24.0/24
195.65.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:4e:52:51:3c:25:59:7c:4f:dc:49:fb:29:7a:ac:3e:b3:60:
de:00:6d:e1:07:37:fc:5e:36:82:67:3f:85:52:7a:9c:47:30:
90:09:9d:6a:55:6c:ab:54:77:c9:73:9e:4b:95:16:b2:8c:f0:
b2:9a:e0:3d:8a:76:76:ff:a7:ff:37:a7:cb:ac:65:08:97:37:
03:f0:dd:87:35:6e:9b:2c:ed:b5:db:d6:fb:b2:2c:ea:36:c8:
77:86:b7:29:c0:e5:0a:44:4b:e9:04:7d:dc:82:8f:a5:d6:24:
3d:cb:7d:d8:27:63:0d:8d:07:1e:f5:a7:5c:86:65:c1:68:98:
b2:ee:41:06:b9:29:ac:0d:75:4f:66:e8:9f:d6:9a:be:d6:50:
9f:95:d4:19:59:04:26:ab:90:2d:74:7c:32:53:e5:ce:61:d0:
cb:41:27:bc:e0:2c:a6:c3:2f:ac:f4:99:f4:dc:07:32:c1:6f:
cf:ab:f0:cf:d4:5a:af:e4:c9:7b:4d:a2:be:99:d9:0e:fc:d7:
94:6d:2f:2f:e2:a5:b7:19:a2:55:ea:b6:01:4b:f2:8f:2f:b7:
17:1b:64:72:d9:14:0e:11:eb:6b:53:31:dc:5d:fc:38:12:77:
d5:15:a3:ad:45:01:44:d5:9e:96:31:f4:9e:89:fd:a6:10:40:
ed:e8:1b:af
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEUOG8eDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjYzZjNkYjE1MmUwNTVhYzE0NWJkYmI0MjllMDE4NjU0MjA0YzhkMB4XDTIyMDEw
MTE2MDE1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGMwMDVkYmY2Yzc2
NmY0NjkyZmYwMDJiNjQyYmZhNGVlNzkwM2I3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMY8Le/3hhtUNx0H2XxkzMka32fOUouJwuNqHsBjOOBjSG9G
ApDEjYfInpiowWyiyR2Pr0PHmz36QAstNG+uqSrJC8jz2KpNNyJynUCdOQ0lXqtX
TCUfrvyiqpr96VRA8gV4KLe+NnUgZtiQpmSS6DWQi5Ue6mnV1vtyQA4DMPy81YUz
iRP+ccIO205yCmVDSkS4RHwWC73IZfKbale9ck+ouIfI/03tZOA1CAfZg9xAK8xf
+RWk7Z5ykPanhgTF5WUCQ76yxGI+AkCBfEoTsVZjm/ivCa/3jqUkTk+gycvOkOVz
6BFGCUsWDHZdOePWdDvaH8RJU+IwPUgRFuiIhbECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQMAF2/bHZvRpL/ACtkK/pO55A7cDAfBgNVHSMEGDAWgBQmY/PbFS4FWsFF
vbtCngGGVCBMjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ptUHoyeFV1QlZyQlJiMjdRcDRCaGxRZ1RJMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvYzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2YzliYi8x
L0RBQmR2MngyYjBhU193QXJaQ3Y2VHVlUU8zQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
YzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2YzliYi8xL0ptUHoyeFV1QlZy
QlJiMjdRcDRCaGxRZ1RJMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMNBGAMEAMNBITANBgkqhkiG9w0B
AQsFAAOCAQEATE5SUTwlWXxP3En7KXqsPrNg3gBt4Qc3/F42gmc/hVJ6nEcwkAmd
alVsq1R3yXOeS5UWsozwsprgPYp2dv+n/zeny6xlCJc3A/DdhzVumyzttdvW+7Is
6jbId4a3KcDlCkRL6QR93IKPpdYkPct92CdjDY0HHvWnXIZlwWiYsu5BBrkprA11
T2bon9aavtZQn5XUGVkEJquQLXR8MlPlzmHQy0EnvOAspsMvrPSZ9NwHMsFvz6vw
z9Rar+TJe02ivpnZDvzXlG0vL+KltxmiVeq2AUvyjy+3FxtkctkUDhHra1Mx3F38
OBJ31RWjrUUBRNWeljH0non9phBA7egbrw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:29:06 2025 by rpki-client