Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/FDIVJJIxWLu5hHpKp_TVZiRd9Rs.roa
File: FDIVJJIxWLu5hHpKp_TVZiRd9Rs.roa (raw, json)
Hash identifier: CM74c/qyJsLivAPzLTOvBuXnRmlNJAbBuk4qWp2MUoc=
Subject key identifier: 14:32:15:24:92:31:58:BB:B9:84:7A:4A:A7:F4:D5:66:24:5D:F5:1B
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 0188619439B6F1D92F74EAD466BC97B48CDB
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/FDIVJJIxWLu5hHpKp_TVZiRd9Rs.roa
Signing time: Sun 28 May 2023 08:58:03 +0000
ROA not before: Sun 28 May 2023 08:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59645
IP address blocks: 193.104.168.0/24 maxlen: 24
195.191.196.0/23 maxlen: 24
2a06:d1c1:e::/48 maxlen: 48
2a06:d1c0:dead::/48 maxlen: 48
2a06:d1c0:deae::/48 maxlen: 48
2a06:d1c0:f761::/48 maxlen: 48
2a06:d1c0:deac::/48 maxlen: 48
2a06:d1c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:61:94:39:b6:f1:d9:2f:74:ea:d4:66:bc:97:b4:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: May 28 08:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14321524923158bbb9847a4aa7f4d566245df51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:0c:22:10:28:57:34:ac:ec:75:26:a2:ff:
e5:6e:e2:d7:3c:e5:b3:ff:16:e0:57:dc:55:8b:3b:
94:8b:2b:1a:1a:74:ac:ae:6a:39:a3:93:86:25:bc:
de:c7:24:08:8e:44:cc:2b:13:fd:4a:ac:c7:89:b4:
a7:53:40:9a:59:3f:bb:5c:d6:36:9a:a2:c2:36:61:
d1:39:73:f0:69:99:df:c8:41:7e:8f:e2:4d:6c:ab:
93:e9:aa:59:00:dc:d3:1e:f5:05:a2:be:5b:21:77:
32:85:f8:97:80:63:7d:a3:21:12:68:a6:da:71:28:
18:40:4d:6a:e9:b2:04:a8:14:27:39:f1:c5:df:27:
2b:7e:da:41:8f:12:fb:20:21:6b:03:92:17:ad:62:
2c:3c:40:44:52:bb:87:3c:7e:e9:30:62:14:45:28:
4f:50:67:45:a0:7a:21:44:d7:6f:91:94:a7:73:3d:
d0:9a:f6:30:c6:81:84:ee:d6:5d:f7:d1:86:18:f0:
cd:9e:2a:a6:ec:50:45:c5:ce:a1:89:f3:e1:c7:15:
bb:9b:e4:fd:60:91:b9:81:61:cb:27:e4:98:ca:65:
38:c6:0d:c5:82:be:44:5c:c0:07:75:47:7e:01:49:
60:fe:91:f1:27:8d:a3:e5:c7:ca:c7:c9:5a:e2:cd:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:32:15:24:92:31:58:BB:B9:84:7A:4A:A7:F4:D5:66:24:5D:F5:1B
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/FDIVJJIxWLu5hHpKp_TVZiRd9Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.168.0/24
195.191.196.0/23
IPv6:
2a06:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
14:0b:fe:71:e9:7e:f8:aa:80:8f:bb:8d:19:bc:17:88:37:e3:
d2:9d:1b:60:ed:8b:53:d3:50:ef:64:bf:c1:c5:6f:eb:d9:a8:
43:8e:de:86:1f:0e:c3:e4:74:42:a3:76:0f:a7:5c:f8:18:64:
a5:d5:a0:6a:ac:94:9e:96:14:8d:f9:37:2a:31:c7:8d:76:52:
18:37:77:e7:83:63:2d:02:71:f6:b3:14:c9:6d:b4:77:c9:d8:
3e:ca:41:c3:6c:43:e0:77:c1:8c:38:45:bb:93:c9:0b:99:24:
3a:8d:af:80:ec:48:9a:0c:fe:49:b9:16:ff:0d:c8:18:92:f0:
17:94:52:3b:b3:a5:1e:fa:7f:98:bd:31:08:ca:38:43:42:df:
be:43:25:fb:b0:b9:23:48:c5:29:d9:56:dc:69:d1:61:be:c6:
8c:02:ed:97:db:eb:b8:0e:ef:3d:ed:bd:d8:95:7e:2a:40:92:
b2:a0:2b:da:04:91:f4:c4:43:89:0f:a7:27:ce:8d:d1:8d:2a:
d0:aa:83:c2:c2:06:5a:fa:3f:87:4a:a3:67:98:fe:9b:81:1d:
04:fe:b5:5e:d8:7b:e4:84:07:0e:7b:08:7d:5d:e3:5a:6b:64:
b9:f4:62:25:f0:e2:2c:84:39:7d:40:10:e1:95:8f:fc:57:12:
d4:e0:83:b4
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYhhlDm28dkvdOrUZryXtIzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi
ZjQ3NWQwHhcNMjMwNTI4MDg1ODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDMyMTUyNDkyMzE1OGJiYjk4NDdhNGFhN2Y0ZDU2NjI0NWRmNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTQMIhAoVzSs7HUmov/lbuLXPOWz
/xbgV9xVizuUiysaGnSsrmo5o5OGJbzexyQIjkTMKxP9SqzHibSnU0CaWT+7XNY2
mqLCNmHROXPwaZnfyEF+j+JNbKuT6apZANzTHvUFor5bIXcyhfiXgGN9oyESaKba
cSgYQE1q6bIEqBQnOfHF3ycrftpBjxL7ICFrA5IXrWIsPEBEUruHPH7pMGIURShP
UGdFoHohRNdvkZSncz3QmvYwxoGE7tZd99GGGPDNniqm7FBFxc6hifPhxxW7m+T9
YJG5gWHLJ+SYymU4xg3Fgr5EXMAHdUd+AUlg/pHxJ42j5cfKx8la4s0CowIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBQyFSSSMVi7uYR6Sqf01WYkXfUbMB8GA1UdIwQY
MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt
YmNmNzcwMjY5MzlkLzEvRkRJVkpKSXhXTHU1aEhwS3BfVFZaaVJkOVJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk
LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwWioAwQB
w7/EMA0EAgACMAcDBQMqBtHAMA0GCSqGSIb3DQEBCwUAA4IBAQAUC/5x6X74qoCP
u40ZvBeIN+PSnRtg7YtT01DvZL/BxW/r2ahDjt6GHw7D5HRCo3YPp1z4GGSl1aBq
rJSelhSN+TcqMceNdlIYN3fng2MtAnH2sxTJbbR3ydg+ykHDbEPgd8GMOEW7k8kL
mSQ6ja+A7EiaDP5JuRb/DcgYkvAXlFI7s6Ue+n+YvTEIyjhDQt++QyX7sLkjSMUp
2VbcadFhvsaMAu2X2+u4Du897b3YlX4qQJKyoCvaBJH0xEOJD6cnzo3RjSrQqoPC
wgZa+j+HSqNnmP6bgR0E/rVe2HvkhAcOewh9XeNaa2S59GIl8OIshDl9QBDhlY/8
VxLU4IO0
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:00:48 2025 by rpki-client