Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/y9NA3c1YL51ghkpFHZzNHgWIMYI.roa
File: y9NA3c1YL51ghkpFHZzNHgWIMYI.roa (raw, json)
Hash identifier: 51rw6BDy+Sh3Mc5sAT+aSJB+6Y2j/CPzJoSqX34xP1c=
Subject key identifier: CB:D3:40:DD:CD:58:2F:9D:60:86:4A:45:1D:9C:CD:1E:05:88:31:82
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 0184CE0F9DAA18C9E5C79E820F474A6EE1BA
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/y9NA3c1YL51ghkpFHZzNHgWIMYI.roa
Signing time: Thu 01 Dec 2022 14:20:40 +0000
ROA not before: Thu 01 Dec 2022 14:20:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25075
IP address blocks: 193.201.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:0f:9d:aa:18:c9:e5:c7:9e:82:0f:47:4a:6e:e1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Dec 1 14:20:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbd340ddcd582f9d60864a451d9ccd1e05883182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9f:4f:36:56:a6:09:93:2c:03:e4:be:62:ca:
70:15:a5:e0:6b:49:49:af:a4:d5:b1:82:bb:2c:e6:
0a:3e:24:fd:71:68:f0:20:c1:d5:e5:b6:43:a8:f1:
bc:7b:b1:c8:f2:71:2b:4f:e1:28:30:7c:77:b1:9f:
2d:78:14:b3:57:b4:c7:58:62:81:b2:92:5d:a1:61:
20:98:64:85:f6:5c:64:ea:90:18:93:db:6c:f0:f6:
60:77:91:e1:66:56:cc:1e:6d:6c:54:6a:4f:e2:10:
9c:a7:d2:2f:95:a1:b0:2f:74:02:60:81:96:2e:b2:
a9:1c:34:64:51:60:df:a8:fc:83:9f:f3:6d:5b:21:
8b:e1:4c:26:3c:58:6c:a3:36:ac:ca:bf:13:db:71:
ba:6c:46:2d:6e:7e:86:08:7b:48:e3:0e:18:37:96:
ae:0a:94:82:6a:34:7e:2d:41:94:9f:e9:d0:f6:37:
fe:f4:14:a7:f3:5e:96:90:f5:66:79:19:9b:6a:2e:
06:c6:50:f8:11:13:45:30:52:02:f3:8f:28:00:53:
f5:3f:e7:81:c4:60:fa:59:09:01:7b:21:92:6d:62:
25:43:21:62:f1:6b:b2:a6:aa:ab:5f:85:f6:cc:01:
04:84:96:8e:b6:28:3b:4f:bb:58:b3:35:e1:b1:fc:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:40:DD:CD:58:2F:9D:60:86:4A:45:1D:9C:CD:1E:05:88:31:82
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/y9NA3c1YL51ghkpFHZzNHgWIMYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.164.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b6:51:99:9c:36:f2:ee:93:b3:12:ce:d8:4d:b6:8e:2a:66:
40:91:fd:cb:b3:98:71:df:cb:86:67:5e:74:bb:c0:e5:7c:72:
8f:64:a3:78:01:9a:b7:55:e0:ed:18:fa:ad:43:33:c0:bd:ba:
ef:58:af:1f:e6:0c:89:67:40:e7:40:5e:f6:6c:07:56:95:b1:
9c:ae:4c:f8:ca:73:77:2d:fb:b0:60:cb:3e:d9:2f:29:55:0f:
d8:4f:af:65:31:90:50:26:54:59:49:a9:ac:27:9d:27:9a:8e:
e1:65:a9:49:70:00:5b:30:09:b6:b5:62:19:62:25:bf:d4:e6:
a1:12:8d:07:08:9c:28:85:26:9f:7b:32:e4:21:d9:a9:94:12:
57:c5:00:e3:40:66:b4:cb:1f:d0:ea:e7:dc:a5:e6:83:21:64:
00:c6:93:63:fc:4a:ad:60:83:79:3f:00:aa:38:28:8f:6c:41:
7f:f5:e8:eb:a6:cb:66:b2:58:89:df:94:e3:f1:d2:c4:96:22:
8a:4d:51:bf:d4:dd:1b:8b:4e:1f:be:d9:7f:86:8e:03:b5:ad:
c0:2a:ed:b9:ae:84:98:c6:9e:12:d6:6c:84:2f:59:24:7b:b7:
15:a3:50:8f:f4:3a:67:07:cf:d3:0a:64:c1:68:ba:51:0f:20:
d7:f6:17:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTOD52qGMnlx56CD0dKbuG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWJhMmU2NTk3OTRiMTIyMTVkZjFmYThhYmUzZmNiZDY2
ODZkZjcwHhcNMjIxMjAxMTQyMDQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmQzNDBkZGNkNTgyZjlkNjA4NjRhNDUxZDljY2QxZTA1ODgzMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg59PNlamCZMsA+S+YspwFaXga0lJ
r6TVsYK7LOYKPiT9cWjwIMHV5bZDqPG8e7HI8nErT+EoMHx3sZ8teBSzV7THWGKB
spJdoWEgmGSF9lxk6pAYk9ts8PZgd5HhZlbMHm1sVGpP4hCcp9IvlaGwL3QCYIGW
LrKpHDRkUWDfqPyDn/NtWyGL4UwmPFhsozasyr8T23G6bEYtbn6GCHtI4w4YN5au
CpSCajR+LUGUn+nQ9jf+9BSn816WkPVmeRmbai4GxlD4ERNFMFIC848oAFP1P+eB
xGD6WQkBeyGSbWIlQyFi8WuypqqrX4X2zAEEhJaOtig7T7tYszXhsfygpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvTQN3NWC+dYIZKRR2czR4FiDGCMB8GA1UdIwQY
MBaAFOzrouZZeUsSIV3x+oq+P8vWaG33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2Qt
ZWJlMmRjNDAxNjE2LzEveTlOQTNjMVlMNTFnaGtwRkhaek5IZ1dJTVlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2QtZWJlMmRjNDAxNjE2
LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcmkMA0G
CSqGSIb3DQEBCwUAA4IBAQB3tlGZnDby7pOzEs7YTbaOKmZAkf3Ls5hx38uGZ150
u8DlfHKPZKN4AZq3VeDtGPqtQzPAvbrvWK8f5gyJZ0DnQF72bAdWlbGcrkz4ynN3
LfuwYMs+2S8pVQ/YT69lMZBQJlRZSamsJ50nmo7hZalJcABbMAm2tWIZYiW/1Oah
Eo0HCJwohSafezLkIdmplBJXxQDjQGa0yx/Q6ufcpeaDIWQAxpNj/EqtYIN5PwCq
OCiPbEF/9ejrpstmsliJ35Tj8dLEliKKTVG/1N0bi04fvtl/ho4Dta3AKu25roSY
xp4S1myEL1kke7cVo1CP9DpnB8/TCmTBaLpRDyDX9hec
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:38 2025 by rpki-client