Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PipXIYr45iEDxfP7lrzx8HVe8rA.roa
File: PipXIYr45iEDxfP7lrzx8HVe8rA.roa (raw, json)
Hash identifier: nMQWEYQwP83ZSiFiRqPsKuvkhF0NDhLCC3hOE3tBvi4=
Subject key identifier: 3E:2A:57:21:8A:F8:E6:21:03:C5:F3:FB:96:BC:F1:F0:75:5E:F2:B0
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8AFADAF31BA61991390859B0BEB0D4
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PipXIYr45iEDxfP7lrzx8HVe8rA.roa
Signing time: Sun 01 Jan 2023 13:35:02 +0000
ROA not before: Sun 01 Jan 2023 13:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13277
IP address blocks: 194.209.13.0/24 maxlen: 24
194.209.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:fa:da:f3:1b:a6:19:91:39:08:59:b0:be:b0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e2a57218af8e62103c5f3fb96bcf1f0755ef2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:49:0a:28:ce:0d:c0:c1:5d:75:d4:c7:15:
69:a2:81:52:5e:4c:61:d0:e5:ae:6e:de:c5:fb:1f:
c5:fd:6b:61:07:16:57:f5:89:08:6a:73:99:c6:29:
dd:91:15:cf:56:c8:b9:ac:79:fb:03:79:53:de:a3:
8f:36:d6:20:6a:50:0f:69:29:8c:cb:b7:6e:d2:57:
5d:28:5f:e4:32:b5:9f:79:f6:9a:0d:a7:f1:66:1f:
c9:4c:e0:4e:73:39:21:1b:63:46:2e:26:4d:c4:7c:
3b:8c:99:7f:7a:4b:1f:a6:e4:f8:cc:12:67:ee:c7:
10:3c:f7:0c:57:73:ea:d5:e8:6a:f3:c0:ee:2c:ab:
2e:ce:06:e5:9d:db:f4:0b:f8:4c:c1:76:ec:ad:02:
69:1d:8c:ee:20:46:c8:e0:1d:e9:f7:f1:39:4c:82:
8e:c8:35:11:c6:19:8a:59:0a:61:6a:35:f7:9f:1f:
1d:6f:82:99:81:64:47:d6:ae:74:0a:d0:f6:fa:50:
01:62:ee:8d:cb:84:67:2a:47:50:21:b6:8b:f4:54:
f1:2c:69:b5:da:e4:f3:1d:97:94:0e:ca:84:3d:d3:
08:b4:de:b8:85:b7:db:88:30:ea:1a:a5:f8:9d:f4:
b4:2c:e6:36:ed:2d:43:2e:b4:c5:e3:9c:81:ec:43:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:57:21:8A:F8:E6:21:03:C5:F3:FB:96:BC:F1:F0:75:5E:F2:B0
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PipXIYr45iEDxfP7lrzx8HVe8rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.13.0/24
194.209.211.0/24
Signature Algorithm: sha256WithRSAEncryption
67:36:47:5a:a2:3d:88:42:07:21:f4:90:d9:0c:7c:be:e8:82:
6d:b2:ba:76:4b:b6:d7:cf:54:66:a9:9c:c8:43:7e:dd:25:ad:
54:a4:e0:3b:26:5d:a5:33:52:78:49:7d:29:26:fc:88:a6:6b:
30:b5:19:ec:fa:af:73:08:01:e8:00:79:4e:8a:3b:13:a1:5d:
f1:65:f7:08:fd:0f:a7:e1:70:99:b5:59:a8:cd:76:94:e7:44:
44:8d:bf:e5:50:2c:11:a7:21:1c:16:51:19:58:31:1f:bb:c9:
d5:9a:3b:62:ec:cc:b9:4a:73:c4:48:3d:02:1a:69:1a:25:87:
0d:53:54:97:4e:02:ab:45:cb:93:4b:f5:f5:17:92:7d:ed:c8:
5b:6a:9e:93:e9:13:7d:43:d5:fa:70:65:a9:e5:ec:59:c8:1e:
4e:7c:18:93:9b:78:57:8d:e9:90:e0:4f:fa:94:83:5c:d9:79:
5c:e1:af:d3:1c:05:5b:1d:f3:0a:f0:48:2d:1d:30:b0:ea:dd:
9a:8d:7b:f6:2a:0a:25:86:30:51:b3:25:c0:5e:e5:c7:d9:2f:
d9:81:8b:76:c0:59:60:9a:1d:74:8b:26:99:55:ad:5c:54:b5:
39:7c:f8:1b:ff:f1:40:53:c7:4d:28:99:71:8d:17:e9:a1:28:
d7:2a:7d:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtivra8xumGZE5CFmwvrDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjMwMTAxMTMzNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTJhNTcyMThhZjhlNjIxMDNjNWYzZmI5NmJjZjFmMDc1NWVmMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGRJCijODcDBXXXUxxVpooFSXkxh
0OWubt7F+x/F/WthBxZX9YkIanOZxindkRXPVsi5rHn7A3lT3qOPNtYgalAPaSmM
y7du0lddKF/kMrWfefaaDafxZh/JTOBOczkhG2NGLiZNxHw7jJl/eksfpuT4zBJn
7scQPPcMV3Pq1ehq88DuLKsuzgblndv0C/hMwXbsrQJpHYzuIEbI4B3p9/E5TIKO
yDURxhmKWQphajX3nx8db4KZgWRH1q50CtD2+lABYu6Ny4RnKkdQIbaL9FTxLGm1
2uTzHZeUDsqEPdMItN64hbfbiDDqGqX4nfS0LOY27S1DLrTF45yB7EMu8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD4qVyGK+OYhA8Xz+5a88fB1XvKwMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvUGlwWElZcjQ1aUVEeGZQN2xyeng4SFZlOHJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwtENAwQA
wtHTMA0GCSqGSIb3DQEBCwUAA4IBAQBnNkdaoj2IQgch9JDZDHy+6IJtsrp2S7bX
z1RmqZzIQ37dJa1UpOA7Jl2lM1J4SX0pJvyIpmswtRns+q9zCAHoAHlOijsToV3x
ZfcI/Q+n4XCZtVmozXaU50REjb/lUCwRpyEcFlEZWDEfu8nVmjti7My5SnPESD0C
GmkaJYcNU1SXTgKrRcuTS/X1F5J97chbap6T6RN9Q9X6cGWp5exZyB5OfBiTm3hX
jemQ4E/6lINc2Xlc4a/THAVbHfMK8EgtHTCw6t2ajXv2KgolhjBRsyXAXuXH2S/Z
gYt2wFlgmh10iyaZVa1cVLU5fPgb//FAU8dNKJlxjRfpoSjXKn2k
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:37 2025 by rpki-client