Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/0estyKF6leWQ0rCcjMICQboAe0g.roa
File: 0estyKF6leWQ0rCcjMICQboAe0g.roa (raw, json)
Hash identifier: nV9js5q1dzrTcAyfFXhR78QZ3PD+TYj4G/4xuQYzEu0=
Subject key identifier: D1:EB:2D:C8:A1:7A:95:E5:90:D2:B0:9C:8C:C2:02:41:BA:00:7B:48
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 0186D7F0449DF6FDDE8AF55C7B03894730FE
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/0estyKF6leWQ0rCcjMICQboAe0g.roa
Signing time: Sun 12 Mar 2023 22:28:13 +0000
ROA not before: Sun 12 Mar 2023 22:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 198.56.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d7:f0:44:9d:f6:fd:de:8a:f5:5c:7b:03:89:47:30:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Mar 12 22:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1eb2dc8a17a95e590d2b09c8cc20241ba007b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:69:38:2f:cf:02:d4:d1:24:5e:35:dc:63:
b8:c4:92:6d:6d:a6:74:ac:26:73:87:cd:e2:17:67:
6a:63:91:40:46:fe:1f:7d:74:97:bd:9f:c4:55:66:
19:4a:1a:4a:6d:cf:ac:3f:96:8c:ce:9d:1e:5f:43:
a4:c3:27:9a:89:1f:c7:9e:76:62:08:64:1e:c8:f7:
2c:7d:0a:fe:e8:48:b9:eb:ec:92:bd:24:93:76:cd:
bc:84:18:0c:cf:bb:b0:c8:94:e9:de:bb:69:65:3e:
e8:3c:6c:d1:3d:cb:79:2c:41:de:f7:e2:29:ac:7d:
5e:0a:ad:2b:3e:ca:cc:f3:b8:e1:b4:fb:0b:06:48:
9c:27:e2:46:3f:d4:17:eb:92:e3:34:0c:a8:7d:7b:
4e:76:c7:38:04:c8:01:3e:48:be:62:6a:e6:73:7e:
2c:c3:73:40:6e:79:35:a3:3b:65:ad:72:8e:22:b4:
f3:d4:0d:a0:8c:73:6a:60:df:8c:c6:fb:d8:3d:1b:
67:d8:45:b3:c3:1a:63:f1:0c:c7:98:96:4a:47:20:
e9:40:44:ff:bf:d6:a5:32:1b:45:fc:4c:49:66:7d:
24:07:47:eb:a6:f4:0a:85:40:23:eb:85:aa:3a:3d:
8b:a9:6f:e4:17:81:a2:f7:2d:30:11:5d:f7:4c:ae:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EB:2D:C8:A1:7A:95:E5:90:D2:B0:9C:8C:C2:02:41:BA:00:7B:48
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/0estyKF6leWQ0rCcjMICQboAe0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.56.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a7:e4:99:4c:ec:08:e3:93:72:e6:72:9f:04:da:23:e9:ed:8d:
5c:41:83:22:9e:a7:2c:c1:7b:8e:70:34:dd:e7:96:91:f9:6d:
79:7a:60:39:46:f3:10:f1:26:df:15:7a:bd:d2:49:0e:45:51:
5a:70:4e:a4:65:bf:30:58:c6:52:2b:30:32:f2:37:da:7b:c6:
4e:b6:88:7c:94:f4:3a:07:0f:b7:91:df:c3:16:1b:33:58:a0:
de:90:a3:13:4a:e5:35:ea:09:4a:9a:07:34:64:c3:2a:98:3a:
4c:c8:fc:7d:c1:84:22:67:a6:19:ed:bc:be:2a:f0:7f:2e:95:
9c:81:94:b2:ef:44:2d:df:1e:90:27:fc:1f:9f:1b:a8:a2:09:
aa:14:87:b4:bd:c2:7d:7a:b2:af:d2:1b:74:65:dc:cb:5a:d9:
b0:08:c5:ca:17:8c:a8:de:fc:20:a1:2a:d2:e9:71:a8:62:29:
87:9b:d3:60:85:d6:30:e4:40:78:e3:7a:15:29:e9:54:b2:c2:
6e:74:03:01:ce:db:23:5e:bb:e4:99:08:0a:33:3f:81:8f:54:
2d:9a:03:75:d0:e1:c2:98:52:a9:39:49:d5:67:76:cf:31:82:
06:d4:47:73:5a:27:2d:3d:a1:ef:3a:1a:b0:bf:5b:43:17:2d:
d0:f4:af:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbX8ESd9v3eivVcewOJRzD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMmIzMGQ4OWIxYmNmZjY5OWY2NDFmODgwMjY5NDJkMTZh
NzJiY2MwHhcNMjMwMzEyMjIyODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWViMmRjOGExN2E5NWU1OTBkMmIwOWM4Y2MyMDI0MWJhMDA3YjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gFpOC/PAtTRJF413GO4xJJtbaZ0
rCZzh83iF2dqY5FARv4ffXSXvZ/EVWYZShpKbc+sP5aMzp0eX0OkwyeaiR/HnnZi
CGQeyPcsfQr+6Ei56+ySvSSTds28hBgMz7uwyJTp3rtpZT7oPGzRPct5LEHe9+Ip
rH1eCq0rPsrM87jhtPsLBkicJ+JGP9QX65LjNAyofXtOdsc4BMgBPki+Ymrmc34s
w3NAbnk1oztlrXKOIrTz1A2gjHNqYN+MxvvYPRtn2EWzwxpj8QzHmJZKRyDpQET/
v9alMhtF/ExJZn0kB0frpvQKhUAj64WqOj2LqW/kF4Gi9y0wEV33TK4cQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNHrLcihepXlkNKwnIzCAkG6AHtIMB8GA1UdIwQY
MBaAFIIrMNibG8/2mfZB+IAmlC0WpyvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEt
OTE0ZDVkYzUxOTdmLzEvMGVzdHlLRjZsZVdRMHJDY2pNSUNRYm9BZTBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEtOTE0ZDVkYzUxOTdm
LzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxjiAMA0G
CSqGSIb3DQEBCwUAA4IBAQCn5JlM7Ajjk3Lmcp8E2iPp7Y1cQYMinqcswXuOcDTd
55aR+W15emA5RvMQ8SbfFXq90kkORVFacE6kZb8wWMZSKzAy8jfae8ZOtoh8lPQ6
Bw+3kd/DFhszWKDekKMTSuU16glKmgc0ZMMqmDpMyPx9wYQiZ6YZ7by+KvB/LpWc
gZSy70Qt3x6QJ/wfnxuoogmqFIe0vcJ9erKv0ht0ZdzLWtmwCMXKF4yo3vwgoSrS
6XGoYimHm9NghdYw5EB443oVKelUssJudAMBztsjXrvkmQgKMz+Bj1QtmgN10OHC
mFKpOUnVZ3bPMYIG1EdzWictPaHvOhqwv1tDFy3Q9K+D
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:31 2025 by rpki-client