Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/S0iQXiVMPfvkwMKt2XpKQl6SnA8.roa
File: S0iQXiVMPfvkwMKt2XpKQl6SnA8.roa (raw, json)
Hash identifier: lI8PtALAaU7DM2RNXmEj0ECm5201Tt7uz5F7nlfyJZs=
Subject key identifier: 4B:48:90:5E:25:4C:3D:FB:E4:C0:C2:AD:D9:7A:4A:42:5E:92:9C:0F
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B0DA035A062BD435D3D228D599CF5
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/S0iQXiVMPfvkwMKt2XpKQl6SnA8.roa
Signing time: Sun 01 Jan 2023 13:35:07 +0000
ROA not before: Sun 01 Jan 2023 13:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61042
IP address blocks: 194.209.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:0d:a0:35:a0:62:bd:43:5d:3d:22:8d:59:9c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b48905e254c3dfbe4c0c2add97a4a425e929c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:64:c3:21:51:a4:ee:ac:46:e2:fa:7d:fc:
c8:f7:50:94:7c:9f:f3:b9:42:7b:1e:78:c7:a9:19:
d6:17:30:89:ee:94:95:6b:14:ce:2f:4f:6c:f3:b9:
fe:ad:39:4b:ff:08:3c:ac:6b:ae:75:6c:d5:f7:db:
df:79:ca:96:c3:f3:54:23:8c:b9:05:e1:b7:97:05:
ba:44:64:d9:a0:1f:0c:68:67:4b:4e:0b:54:08:5f:
dc:76:7a:a2:e5:00:98:bc:ef:f2:c1:06:5f:d2:51:
fc:57:f1:e0:66:eb:82:c0:ce:29:55:0b:35:51:d5:
55:28:35:fb:32:1f:43:26:a2:6f:2e:24:9e:49:1b:
04:bc:e7:fe:d0:a6:78:d9:17:4b:c6:79:38:22:26:
04:6a:76:36:2e:63:ce:a8:8c:3d:28:07:9d:4b:d2:
cf:92:a7:3c:c5:56:ad:d5:90:f8:40:96:92:61:7b:
9a:e9:55:32:08:46:0c:56:83:33:75:8f:f7:71:db:
bb:64:69:31:31:f4:15:3b:dd:55:07:19:60:ae:22:
ed:7d:e6:fa:53:ee:42:5c:28:a3:84:3a:40:47:ed:
33:72:1e:ef:fa:80:19:aa:e9:79:ac:b0:b9:81:be:
94:40:73:ef:4a:a5:1e:7a:7b:d9:29:e8:6b:ba:74:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:90:5E:25:4C:3D:FB:E4:C0:C2:AD:D9:7A:4A:42:5E:92:9C:0F
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/S0iQXiVMPfvkwMKt2XpKQl6SnA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c7:e6:f6:37:83:de:e6:db:af:6f:ba:8e:40:31:df:0d:58:
61:f4:d6:17:a7:50:6e:36:b4:e0:ec:d1:a3:ae:31:88:20:2b:
68:9a:dc:d4:df:b7:25:48:fa:7d:5f:9b:7f:91:7e:36:1d:f6:
f6:f8:92:e4:87:97:30:50:81:34:0a:97:56:5e:23:a4:e9:c5:
89:74:e0:7c:f9:f7:ce:f4:71:78:38:14:f3:52:88:98:37:14:
d7:4a:ae:09:69:28:f6:af:19:59:87:bd:78:38:a1:b7:1a:52:
7c:d5:09:d4:57:5e:c7:d3:27:7d:3a:47:3b:26:a2:94:84:50:
df:a9:a7:a8:41:04:83:66:95:85:b9:82:88:9b:6d:25:f6:1c:
7c:cb:33:81:02:51:fd:ef:c2:4a:f0:42:90:3d:11:18:5b:41:
83:21:10:e1:22:07:0b:cc:1a:04:4a:43:bf:57:8b:81:af:74:
90:60:88:35:f1:eb:d6:aa:27:75:81:62:1e:c4:ad:b0:c4:e0:
f5:c4:b8:1b:ad:bb:ff:19:3d:b3:2e:98:a8:ab:24:ce:85:4e:
a1:c6:1d:57:07:1f:72:f0:1b:40:f6:71:5f:12:31:98:e6:ff:
b9:a4:9c:d6:18:c2:79:5d:b1:dc:d8:4c:f7:98:40:53:81:ed:
de:b0:e6:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtiw2gNaBivUNdPSKNWZz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjMwMTAxMTMzNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjQ4OTA1ZTI1NGMzZGZiZTRjMGMyYWRkOTdhNGE0MjVlOTI5YzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39NkwyFRpO6sRuL6ffzI91CUfJ/z
uUJ7HnjHqRnWFzCJ7pSVaxTOL09s87n+rTlL/wg8rGuudWzV99vfecqWw/NUI4y5
BeG3lwW6RGTZoB8MaGdLTgtUCF/cdnqi5QCYvO/ywQZf0lH8V/HgZuuCwM4pVQs1
UdVVKDX7Mh9DJqJvLiSeSRsEvOf+0KZ42RdLxnk4IiYEanY2LmPOqIw9KAedS9LP
kqc8xVat1ZD4QJaSYXua6VUyCEYMVoMzdY/3cdu7ZGkxMfQVO91VBxlgriLtfeb6
U+5CXCijhDpAR+0zch7v+oAZqul5rLC5gb6UQHPvSqUeenvZKehrunQDlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEtIkF4lTD375MDCrdl6SkJekpwPMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvUzBpUVhpVk1QZnZrd01LdDJYcEtRbDZTbkE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtEpMA0G
CSqGSIb3DQEBCwUAA4IBAQALx+b2N4Pe5tuvb7qOQDHfDVhh9NYXp1BuNrTg7NGj
rjGIICtomtzU37clSPp9X5t/kX42Hfb2+JLkh5cwUIE0CpdWXiOk6cWJdOB8+ffO
9HF4OBTzUoiYNxTXSq4JaSj2rxlZh714OKG3GlJ81QnUV17H0yd9Okc7JqKUhFDf
qaeoQQSDZpWFuYKIm20l9hx8yzOBAlH978JK8EKQPREYW0GDIRDhIgcLzBoESkO/
V4uBr3SQYIg18evWqid1gWIexK2wxOD1xLgbrbv/GT2zLpioqyTOhU6hxh1XBx9y
8BtA9nFfEjGY5v+5pJzWGMJ5XbHc2Ez3mEBTge3esOYx
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:30:51 2025 by rpki-client