Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/pKjmiI9SpgMVtgaV6jY48Y7R7us.roa
File: pKjmiI9SpgMVtgaV6jY48Y7R7us.roa (raw, json)
Hash identifier: edcymljnQiciWjN9xW0EJGRLe+CgD4RAJ79/8t5NZGY=
Subject key identifier: A4:A8:E6:88:8F:52:A6:03:15:B6:06:95:EA:36:38:F1:8E:D1:EE:EB
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 0185710C21706B1EA58B29FB4E0B9C4ECD4B
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/pKjmiI9SpgMVtgaV6jY48Y7R7us.roa
Signing time: Mon 02 Jan 2023 05:54:58 +0000
ROA not before: Mon 02 Jan 2023 05:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12941
IP address blocks: 193.141.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:21:70:6b:1e:a5:8b:29:fb:4e:0b:9c:4e:cd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Jan 2 05:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4a8e6888f52a60315b60695ea3638f18ed1eeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:84:8f:23:bc:a1:07:b0:46:36:5f:95:97:9f:
4e:ef:ba:0c:80:05:3e:e7:64:b5:f6:5c:00:bf:c9:
fb:56:cc:fd:12:c6:34:8f:ce:6c:cb:19:94:c0:ab:
43:82:19:4b:8c:b4:eb:a3:72:b2:53:ce:7e:e4:6a:
c4:ce:0b:e9:12:2b:3e:24:9d:9b:a8:bb:f3:b0:e6:
35:d5:0a:5c:74:b7:d3:6c:31:0b:b5:15:d6:00:58:
4e:37:32:3e:d5:6a:d0:4f:d8:3a:f3:f7:ab:36:f4:
69:01:ca:92:2b:6d:8c:19:57:74:83:87:99:ae:ad:
83:be:e4:de:f1:23:62:59:b0:ac:47:9d:f8:67:ce:
27:dc:bc:9c:4b:d4:0c:ea:2c:9b:10:dc:27:fc:18:
87:c7:34:35:1a:17:6f:10:6b:0c:5c:3f:2c:63:f2:
9c:21:0e:b0:ad:22:bf:44:53:f2:a6:2b:1a:6d:51:
be:57:d6:ab:8c:83:eb:da:fa:98:98:57:c4:74:45:
78:53:b6:5b:89:bc:1f:39:42:3a:69:21:80:27:7f:
fa:7d:06:24:5e:4f:83:cb:75:8a:d5:f6:a9:c5:c4:
2d:57:bb:0c:af:22:96:51:5e:e4:66:04:b6:fd:ba:
2e:8f:cf:e1:61:84:44:77:54:26:a2:b4:a4:7d:82:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:E6:88:8F:52:A6:03:15:B6:06:95:EA:36:38:F1:8E:D1:EE:EB
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/pKjmiI9SpgMVtgaV6jY48Y7R7us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:46:47:46:7d:4b:a7:83:0a:9f:a6:8b:aa:76:7a:c4:1a:29:
b7:51:9e:b5:6e:0f:9c:38:54:ae:11:ee:49:c5:a8:e5:9a:ec:
b2:a2:50:6b:63:8d:ad:c6:db:75:95:d0:40:ff:52:17:f3:7f:
f4:98:22:f4:8d:0b:45:10:ec:dd:bb:88:bb:df:8f:34:d7:76:
7e:21:e7:fb:72:40:f1:f2:b2:7f:76:97:e6:a1:dd:62:ab:5f:
32:96:aa:ac:84:7b:37:74:da:f7:31:ba:04:29:a3:b0:8b:c0:
03:7e:95:f7:c2:f1:c1:e6:e0:9d:0e:c4:59:cf:ba:9c:f5:60:
64:0a:ba:07:cd:a7:ff:84:36:8f:4f:19:90:7f:0e:02:a7:85:
95:85:61:f6:39:81:67:d5:cb:78:88:a0:db:22:4c:a5:26:49:
cb:b6:73:20:f6:47:7f:b2:12:dc:fc:1f:3f:18:45:d1:55:2f:
64:4f:4c:e8:d3:e0:f8:c0:d4:73:ea:8b:a3:bd:29:70:e1:73:
cf:65:9c:ac:63:b7:0b:54:82:50:51:d1:33:26:e3:d8:9c:1a:
81:ee:c5:39:3d:9c:96:9e:7e:94:9b:6a:ca:ee:82:08:c4:86:
67:4c:74:76:d7:fb:9f:f8:8f:ab:ae:20:a3:07:ef:e3:0e:05:
21:5c:49:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDCFwax6liyn7TgucTs1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTQ5YWIzZjE4ZWMzZWQzNmZmMmE4MWQ0ODlhZjEwNjk5
Y2IzOTIwHhcNMjMwMTAyMDU1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGE4ZTY4ODhmNTJhNjAzMTViNjA2OTVlYTM2MzhmMThlZDFlZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYSPI7yhB7BGNl+Vl59O77oMgAU+
52S19lwAv8n7Vsz9EsY0j85syxmUwKtDghlLjLTro3KyU85+5GrEzgvpEis+JJ2b
qLvzsOY11QpcdLfTbDELtRXWAFhONzI+1WrQT9g68/erNvRpAcqSK22MGVd0g4eZ
rq2DvuTe8SNiWbCsR534Z84n3LycS9QM6iybENwn/BiHxzQ1GhdvEGsMXD8sY/Kc
IQ6wrSK/RFPypisabVG+V9arjIPr2vqYmFfEdEV4U7ZbibwfOUI6aSGAJ3/6fQYk
Xk+Dy3WK1fapxcQtV7sMryKWUV7kZgS2/bouj8/hYYREd1QmorSkfYJybQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKSo5oiPUqYDFbYGleo2OPGO0e7rMB8GA1UdIwQY
MBaAFAgUmrPxjsPtNv8qgdSJrxBpnLOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMt
ZDg3MTEyY2E5OWFlLzEvcEtqbWlJOVNwZ01WdGdhVjZqWTQ4WTdSN3VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMtZDg3MTEyY2E5OWFl
LzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY1rMA0G
CSqGSIb3DQEBCwUAA4IBAQCPRkdGfUungwqfpouqdnrEGim3UZ61bg+cOFSuEe5J
xajlmuyyolBrY42txtt1ldBA/1IX83/0mCL0jQtFEOzdu4i7348013Z+Ief7ckDx
8rJ/dpfmod1iq18ylqqshHs3dNr3MboEKaOwi8ADfpX3wvHB5uCdDsRZz7qc9WBk
CroHzaf/hDaPTxmQfw4Cp4WVhWH2OYFn1ct4iKDbIkylJknLtnMg9kd/shLc/B8/
GEXRVS9kT0zo0+D4wNRz6oujvSlw4XPPZZysY7cLVIJQUdEzJuPYnBqB7sU5PZyW
nn6Um2rK7oIIxIZnTHR21/uf+I+rriCjB+/jDgUhXElV
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:15 2025 by rpki-client