Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/pQEOIqnwJaoRYqkgTOQfHaP1pIs.roa
File: pQEOIqnwJaoRYqkgTOQfHaP1pIs.roa (raw, json)
Hash identifier: 6D5xarKjfGYDbcxY18bPDp904Mq6xg1i1INb0mPUgcg=
Subject key identifier: A5:01:0E:22:A9:F0:25:AA:11:62:A9:20:4C:E4:1F:1D:A3:F5:A4:8B
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 01856EAFD87A805A23AC0B191D4CF883DE73
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/pQEOIqnwJaoRYqkgTOQfHaP1pIs.roa
Signing time: Sun 01 Jan 2023 18:54:55 +0000
ROA not before: Sun 01 Jan 2023 18:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8426
IP address blocks: 138.248.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d8:7a:80:5a:23:ac:0b:19:1d:4c:f8:83:de:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Jan 1 18:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5010e22a9f025aa1162a9204ce41f1da3f5a48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d6:47:60:16:56:2a:7d:b3:97:f1:8a:b6:2c:
f8:39:c5:25:79:b3:e0:99:3e:ce:fb:dc:f1:7f:5e:
9c:8b:dd:62:87:42:c1:34:8d:32:ee:51:9e:23:8d:
d0:b6:24:a8:8b:e3:09:a3:e5:1f:31:06:a8:7d:56:
b8:c8:e5:58:0e:3b:97:5e:df:10:bc:03:93:49:67:
72:ef:f9:80:38:2b:77:e1:2e:11:50:e6:15:a0:a8:
41:65:84:65:a6:32:1c:9b:cb:95:e1:48:ca:10:4c:
cb:36:23:af:c1:4e:cc:69:36:80:bf:71:98:e0:9b:
89:96:e2:e6:2d:6b:79:6a:52:fb:82:cc:12:e7:77:
a4:3c:89:55:e6:dc:f7:df:3f:c8:9e:45:fd:09:b8:
b9:25:82:65:f7:03:76:f6:27:73:01:26:22:aa:17:
87:d8:ed:47:cc:3e:a2:14:cb:a7:30:0e:4d:0e:4d:
88:35:64:46:0c:76:8b:d9:9b:c6:d3:d4:6e:ed:93:
63:e6:b0:2b:ed:db:7d:24:d6:88:4a:a6:ef:2d:9c:
01:ba:66:e5:6d:e8:9b:49:42:3c:fa:fc:7b:2c:52:
80:7c:e7:e6:42:bf:0d:7c:90:20:24:5e:01:7a:2b:
31:37:52:38:1f:ed:b5:05:ce:be:da:86:b1:fa:69:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:01:0E:22:A9:F0:25:AA:11:62:A9:20:4C:E4:1F:1D:A3:F5:A4:8B
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/pQEOIqnwJaoRYqkgTOQfHaP1pIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.248.0.0/20
Signature Algorithm: sha256WithRSAEncryption
44:54:79:a3:ec:40:ac:62:5e:73:c9:10:fc:8f:07:6c:1e:3c:
6e:a2:5e:ca:b3:2d:a4:ed:00:6c:f0:9b:ae:a4:36:c1:7b:53:
09:ff:5a:04:f9:05:9d:88:8c:7c:ac:5b:36:f6:f2:f0:95:94:
ab:ba:ad:84:0f:cf:5e:aa:7f:d2:09:1b:c2:a0:5f:af:15:d2:
4a:e2:1c:9c:8a:a0:de:f5:b6:9e:f2:20:a9:02:f8:59:d2:4b:
51:d9:56:a1:ed:ea:8b:a1:a8:98:bc:77:03:6c:fd:70:94:fb:
75:04:af:d0:a2:3a:98:c7:d1:84:58:d3:9f:b3:bb:b2:5b:d2:
60:e1:10:0d:88:ed:84:4f:d0:20:97:1b:74:3c:7e:25:c5:02:
d7:f1:3e:66:f6:56:c1:37:cf:8d:16:b1:2c:47:a6:da:88:70:
c7:65:79:20:8a:7a:43:03:e2:c2:4d:a3:da:63:85:c5:5e:30:
2d:ee:9f:66:54:cc:26:8f:1d:ee:02:c8:6d:73:b8:82:c2:ba:
db:76:23:65:c5:38:18:2e:2f:25:ac:85:13:e4:26:5f:50:07:
20:5e:73:bc:f5:2e:ce:3e:90:1b:1e:af:93:5f:1b:c0:36:bd:
98:da:02:fb:5e:1a:96:e8:25:d0:3e:0d:2e:89:ed:19:98:a1:
b4:07:df:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVur9h6gFojrAsZHUz4g95zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YmE5MWQ2MjY1MDRjY2JjNjRkODk3NDBiNjNjYjJlYjQy
MzRmNzAwHhcNMjMwMTAxMTg1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTAxMGUyMmE5ZjAyNWFhMTE2MmE5MjA0Y2U0MWYxZGEzZjVhNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdZHYBZWKn2zl/GKtiz4OcUlebPg
mT7O+9zxf16ci91ih0LBNI0y7lGeI43QtiSoi+MJo+UfMQaofVa4yOVYDjuXXt8Q
vAOTSWdy7/mAOCt34S4RUOYVoKhBZYRlpjIcm8uV4UjKEEzLNiOvwU7MaTaAv3GY
4JuJluLmLWt5alL7gswS53ekPIlV5tz33z/InkX9Cbi5JYJl9wN29idzASYiqheH
2O1HzD6iFMunMA5NDk2INWRGDHaL2ZvG09Ru7ZNj5rAr7dt9JNaISqbvLZwBumbl
beibSUI8+vx7LFKAfOfmQr8NfJAgJF4BeisxN1I4H+21Bc6+2oax+mlmwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKUBDiKp8CWqEWKpIEzkHx2j9aSLMB8GA1UdIwQY
MBaAFOS6kdYmUEzLxk2JdAtjyy60I09wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgt
Y2JmMThkMmQ2NmMzLzEvcFFFT0lxbndKYW9SWXFrZ1RPUWZIYVAxcElzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgtY2JmMThkMmQ2NmMz
LzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEivgAMA0G
CSqGSIb3DQEBCwUAA4IBAQBEVHmj7ECsYl5zyRD8jwdsHjxuol7Ksy2k7QBs8Juu
pDbBe1MJ/1oE+QWdiIx8rFs29vLwlZSruq2ED89eqn/SCRvCoF+vFdJK4hyciqDe
9bae8iCpAvhZ0ktR2Vah7eqLoaiYvHcDbP1wlPt1BK/QojqYx9GEWNOfs7uyW9Jg
4RANiO2ET9Aglxt0PH4lxQLX8T5m9lbBN8+NFrEsR6baiHDHZXkginpDA+LCTaPa
Y4XFXjAt7p9mVMwmjx3uAshtc7iCwrrbdiNlxTgYLi8lrIUT5CZfUAcgXnO89S7O
PpAbHq+TXxvANr2Y2gL7XhqW6CXQPg0uie0ZmKG0B996
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:02 2025 by rpki-client