Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/xcsEiqrL8vCzLJjuwQ42xpa46VU.roa
File: xcsEiqrL8vCzLJjuwQ42xpa46VU.roa (raw, json)
Hash identifier: sNahhKtf1ZBZ6MTQuHCgYYWtCBwlvN1mc2re0rAyez0=
Subject key identifier: C5:CB:04:8A:AA:CB:F2:F0:B3:2C:98:EE:C1:0E:36:C6:96:B8:E9:55
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 069AD15B
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/xcsEiqrL8vCzLJjuwQ42xpa46VU.roa
Signing time: Sat 01 Jan 2022 13:06:50 +0000
ROA not before: Sat 01 Jan 2022 13:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 131.117.201.0/24 maxlen: 24
131.117.202.0/24 maxlen: 24
131.117.203.0/24 maxlen: 24
131.117.204.0/24 maxlen: 24
131.117.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110809435 (0x69ad15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Jan 1 13:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5cb048aaacbf2f0b32c98eec10e36c696b8e955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:7d:f1:6f:b8:ef:0f:12:c4:85:c7:b8:a9:
2d:cc:f6:86:cf:13:1e:72:b1:89:6f:2f:26:3e:2f:
87:61:a8:47:a4:c6:07:ac:b5:ae:e8:01:1c:9c:43:
b2:6b:04:d9:01:e4:5f:56:bc:44:31:d0:80:10:f2:
8c:0d:f4:1c:b2:c8:5a:74:d1:f0:53:93:aa:40:db:
1c:5e:19:6e:0f:25:c9:7c:7d:c4:f7:d7:a5:5e:7d:
94:dc:19:c6:05:9a:7c:8c:8f:bb:4d:6e:a6:f1:76:
1e:29:c7:77:e2:7b:86:4e:02:45:43:10:7d:ef:b0:
37:a9:9a:52:23:0c:01:32:09:f5:63:28:9f:1d:5b:
ac:e3:1f:b0:3f:a4:f3:37:e7:6a:11:71:73:ec:e9:
42:a1:08:51:14:2a:5c:8e:02:b9:1d:70:18:56:8f:
40:05:5a:02:c0:31:97:14:d7:27:60:4e:62:85:3e:
19:3d:54:4a:a2:58:3d:35:45:ed:e2:cf:b6:75:1f:
94:a3:f8:87:c0:57:eb:da:f2:f7:25:38:3f:f6:6f:
c1:1f:02:fa:73:db:5d:65:ad:0b:1c:92:cb:a4:8e:
3a:c1:28:b8:79:b0:10:e9:c5:db:ea:d5:e4:a3:d0:
fd:16:00:88:df:08:45:f4:09:a2:23:53:0e:6b:49:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CB:04:8A:AA:CB:F2:F0:B3:2C:98:EE:C1:0E:36:C6:96:B8:E9:55
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/xcsEiqrL8vCzLJjuwQ42xpa46VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.117.200.0-131.117.204.255
Signature Algorithm: sha256WithRSAEncryption
70:bb:f1:c1:67:1f:86:4c:b5:9a:0b:93:4e:7a:56:61:8c:d9:
be:60:64:b6:d7:cc:be:ce:80:66:d8:8d:03:50:2f:8b:08:ed:
7e:7c:fa:a8:a3:b1:fe:4a:a8:05:a7:60:77:b8:be:14:26:99:
f6:1f:c2:0a:0a:a5:15:5c:3d:f0:39:6d:11:99:6c:dd:80:37:
02:b0:49:6a:fa:c5:1d:ee:7c:a0:7e:48:79:41:1c:05:db:0e:
3d:c6:36:b5:97:0f:b3:be:3a:1e:7e:65:21:c8:41:5a:8e:ab:
a6:dc:c2:2c:fc:24:1f:12:40:fe:b8:68:18:0a:b6:fe:43:d4:
54:0a:e0:22:af:76:36:8c:42:74:22:1f:e6:09:40:34:87:e7:
e0:9f:cf:41:a7:bd:d0:95:51:5f:36:95:56:d6:c3:50:98:02:
3f:1e:79:80:3e:84:03:24:11:f7:9f:3c:5b:62:98:cf:4e:35:
93:f8:f2:b0:b5:67:3a:5b:13:e5:1b:f3:1d:c5:70:79:e7:28:
d8:0a:71:60:99:1c:8b:e0:29:3a:8d:fe:73:1b:80:dd:0c:4c:
52:db:20:7e:7b:7b:8b:73:fa:30:8c:0b:16:e6:a3:3e:40:ce:
1f:10:d6:fc:ab:ad:42:20:48:19:08:c7:36:4a:a7:2e:3c:90:
8e:a9:02:92
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBprRWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MGJlZWQ2ZWRlOWViMjg1YmQyYTZhYmI5ODVhZGNkYmU4ZjI3NzlhMB4XDTIyMDEw
MTEzMDY1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzVjYjA0OGFhYWNi
ZjJmMGIzMmM5OGVlYzEwZTM2YzY5NmI4ZTk1NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKXcffFvuO8PEsSFx7ipLcz2hs8THnKxiW8vJj4vh2GoR6TG
B6y1rugBHJxDsmsE2QHkX1a8RDHQgBDyjA30HLLIWnTR8FOTqkDbHF4Zbg8lyXx9
xPfXpV59lNwZxgWafIyPu01upvF2HinHd+J7hk4CRUMQfe+wN6maUiMMATIJ9WMo
nx1brOMfsD+k8zfnahFxc+zpQqEIURQqXI4CuR1wGFaPQAVaAsAxlxTXJ2BOYoU+
GT1USqJYPTVF7eLPtnUflKP4h8BX69ry9yU4P/ZvwR8C+nPbXWWtCxySy6SOOsEo
uHmwEOnF2+rV5KPQ/RYAiN8IRfQJoiNTDmtJAzsCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTFywSKqsvy8LMsmO7BDjbGlrjpVTAfBgNVHSMEGDAWgBSwvu1u3p6yhb0q
aruYWtzb6PJ3mjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NMN3RidDZlc29XOUttcTdtRnJjMi1qeWQ1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvYWQwZDZkLWY5NDktNDZkYi05ODFmLWIzOGQ3ZjcwOWQ3MC8x
L3hjc0VpcXJMOHZDekxKanV3UTQyeHBhNDZWVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
YWQwZDZkLWY5NDktNDZkYi05ODFmLWIzOGQ3ZjcwOWQ3MC8xL3NMN3RidDZlc29X
OUttcTdtRnJjMi1qeWQ1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQDg3XIAwQAg3XMMA0GCSqGSIb3
DQEBCwUAA4IBAQBwu/HBZx+GTLWaC5NOelZhjNm+YGS218y+zoBm2I0DUC+LCO1+
fPqoo7H+SqgFp2B3uL4UJpn2H8IKCqUVXD3wOW0RmWzdgDcCsElq+sUd7nygfkh5
QRwF2w49xja1lw+zvjoefmUhyEFajqum3MIs/CQfEkD+uGgYCrb+Q9RUCuAir3Y2
jEJ0Ih/mCUA0h+fgn89Bp73QlVFfNpVW1sNQmAI/HnmAPoQDJBH3nzxbYpjPTjWT
+PKwtWc6WxPlG/MdxXB55yjYCnFgmRyL4Ck6jf5zG4DdDExS2yB+e3uLc/owjAsW
5qM+QM4fENb8q61CIEgZCMc2SqcuPJCOqQKS
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:21 2025 by rpki-client