Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/FObiv253OPKG5DRZc7R2PhlOtz4.roa
File: FObiv253OPKG5DRZc7R2PhlOtz4.roa (raw, json)
Hash identifier: YHNIDafpwvEPUMOYlQTE/xu8ErY3Wp7MUq4vNAgwC5k=
Subject key identifier: 14:E6:E2:BF:6E:77:38:F2:86:E4:34:59:73:B4:76:3E:19:4E:B7:3E
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 02F73DFC
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/FObiv253OPKG5DRZc7R2PhlOtz4.roa
Signing time: Sat 01 Jan 2022 07:53:22 +0000
ROA not before: Sat 01 Jan 2022 07:53:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60267
IP address blocks: 185.72.15.0/24 maxlen: 24
193.242.164.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49757692 (0x2f73dfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 1 07:53:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14e6e2bf6e7738f286e4345973b4763e194eb73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:bc:a7:5e:4b:0e:0c:4f:b3:84:24:a8:09:
4f:4d:09:5f:c0:ad:82:73:db:d7:32:f5:51:13:b9:
f7:aa:29:81:9e:bd:ea:de:47:90:ad:14:d9:40:a2:
b4:e6:5b:72:da:fe:d4:82:41:2c:46:53:60:ea:c5:
64:f0:1f:6a:cd:19:de:0c:ed:2a:bb:29:47:58:af:
68:17:e0:23:ec:99:77:5e:69:03:21:ee:79:bd:8b:
aa:73:fd:a4:80:34:9d:09:0f:93:10:7c:f3:8a:df:
4b:b5:f1:a6:55:50:93:61:30:f4:40:5b:b4:c8:96:
54:75:6d:22:09:92:d3:67:cd:4e:b7:44:47:22:45:
21:cd:c1:e2:1a:22:3f:92:bb:8b:3d:77:bd:7a:7e:
53:9c:7e:58:09:a2:98:9d:da:97:a7:30:40:bc:4a:
1e:cb:49:cf:7a:97:8c:b5:37:cf:40:f7:70:ba:d6:
73:90:73:49:87:46:ed:21:bd:13:c3:1a:51:fc:28:
62:36:5f:3c:65:00:d7:73:3c:00:65:60:65:6b:20:
6a:c4:63:fd:17:9f:21:3c:a2:79:45:22:1a:6e:56:
11:8f:bf:73:46:24:af:fb:4d:7e:11:54:c1:c4:61:
ec:e5:08:73:50:e0:a2:a9:41:35:f7:61:e0:64:61:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E6:E2:BF:6E:77:38:F2:86:E4:34:59:73:B4:76:3E:19:4E:B7:3E
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/FObiv253OPKG5DRZc7R2PhlOtz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.15.0/24
193.242.164.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:f6:0c:11:a3:ce:d3:27:18:ed:2a:14:9c:5b:9c:a8:a4:8c:
0f:57:e3:4a:4e:1a:07:84:ab:50:5b:4d:c2:d0:62:e5:11:19:
dc:ac:34:f4:ae:16:c2:84:c0:a5:09:16:28:19:3f:b8:9a:ff:
d3:4f:70:79:e9:07:6c:76:fe:ac:2b:bf:c3:7c:12:82:e8:a8:
d2:7b:59:b3:d2:df:ee:97:ae:ba:b4:43:00:ec:15:9b:a2:30:
b9:08:79:78:94:e3:c7:7e:a7:41:f5:48:e3:44:24:42:14:8d:
bb:59:75:f5:38:b9:e1:8b:de:fc:c7:29:80:55:60:e8:76:25:
7b:2c:29:8a:1a:e9:84:27:4a:de:4b:16:32:cb:dc:13:a6:bf:
ff:22:12:e7:8f:ff:01:0c:01:88:d8:5e:3c:65:fd:d7:35:1e:
10:66:ff:46:64:c9:66:0d:5c:a9:a0:99:c7:7e:e6:b0:05:d8:
d9:a9:fd:d9:00:36:95:1c:80:f2:fd:e0:5a:48:8b:7d:e1:ae:
de:3d:4b:38:23:e8:c1:92:bb:4e:33:98:26:20:83:14:9a:0d:
65:f9:f6:f2:04:88:f3:17:e1:f0:be:85:5b:c2:19:c6:7b:22:
3f:83:34:d7:da:3e:e6:a9:9f:c1:4b:34:d9:05:2e:42:db:5c:
93:51:84:41
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAvc9/DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MDk0YTQyNTU5NWU5MjNjNGI1M2I5YzAwMGFhOGYxOWFkOTIzZjIwMB4XDTIyMDEw
MTA3NTMyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTRlNmUyYmY2ZTc3
MzhmMjg2ZTQzNDU5NzNiNDc2M2UxOTRlYjczZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtYvKdeSw4MT7OEJKgJT00JX8CtgnPb1zL1URO596opgZ69
6t5HkK0U2UCitOZbctr+1IJBLEZTYOrFZPAfas0Z3gztKrspR1ivaBfgI+yZd15p
AyHueb2LqnP9pIA0nQkPkxB884rfS7XxplVQk2Ew9EBbtMiWVHVtIgmS02fNTrdE
RyJFIc3B4hoiP5K7iz13vXp+U5x+WAmimJ3al6cwQLxKHstJz3qXjLU3z0D3cLrW
c5BzSYdG7SG9E8MaUfwoYjZfPGUA13M8AGVgZWsgasRj/RefITyieUUiGm5WEY+/
c0Ykr/tNfhFUwcRh7OUIc1DgoqlBNfdh4GRhjYcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQU5uK/bnc48obkNFlztHY+GU63PjAfBgNVHSMEGDAWgBRwlKQlWV6SPEtT
ucAAqo8ZrZI/IDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NKU2tKVmxla2p4TFU3bkFBS3FQR2EyU1B5QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmEvOTYzMTcwLTU4YmUtNDZiYi1hNWRlLTc3NzM3M2U2MDU1ZS8x
L0ZPYml2MjUzT1BLRzVEUlpjN1IyUGhsT3R6NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEv
OTYzMTcwLTU4YmUtNDZiYi1hNWRlLTc3NzM3M2U2MDU1ZS8xL2NKU2tKVmxla2p4
TFU3bkFBS3FQR2EyU1B5QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALlIDwMEAcHypDANBgkqhkiG9w0B
AQsFAAOCAQEAuvYMEaPO0ycY7SoUnFucqKSMD1fjSk4aB4SrUFtNwtBi5REZ3Kw0
9K4WwoTApQkWKBk/uJr/009weekHbHb+rCu/w3wSguio0ntZs9Lf7peuurRDAOwV
m6IwuQh5eJTjx36nQfVI40QkQhSNu1l19Ti54Yve/McpgFVg6HYleywpihrphCdK
3ksWMsvcE6a//yIS54//AQwBiNhePGX91zUeEGb/RmTJZg1cqaCZx37msAXY2an9
2QA2lRyA8v3gWkiLfeGu3j1LOCPowZK7TjOYJiCDFJoNZfn28gSI8xfh8L6FW8IZ
xnsiP4M019o+5qmfwUs02QUuQttck1GEQQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:25 2025 by rpki-client