Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/ViyQeD2y61T_tcTQMXiNCH7HHQY.roa
File: ViyQeD2y61T_tcTQMXiNCH7HHQY.roa (raw, json)
Hash identifier: zG8/mpoVp6EecG0S5W9VvQNQRKeCFQbeqa06EjEkMW4=
Subject key identifier: 56:2C:90:78:3D:B2:EB:54:FF:B5:C4:D0:31:78:8D:08:7E:C7:1D:06
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 018571957D66D58FE36FED1A0C3EF32A4049
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/ViyQeD2y61T_tcTQMXiNCH7HHQY.roa
Signing time: Mon 02 Jan 2023 08:25:00 +0000
ROA not before: Mon 02 Jan 2023 08:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 166.108.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:7d:66:d5:8f:e3:6f:ed:1a:0c:3e:f3:2a:40:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jan 2 08:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=562c90783db2eb54ffb5c4d031788d087ec71d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:21:01:92:d8:b8:e2:d3:eb:66:9a:cb:49:93:
8f:c8:e1:11:82:a7:61:37:b8:c7:5a:91:9c:17:ec:
68:b3:40:f6:14:cf:ba:b4:bc:4d:57:70:88:3b:94:
f1:44:b1:b9:77:64:e7:e8:b6:92:04:0b:9e:0a:86:
7d:d6:d5:cc:dc:c9:26:17:3f:52:0d:1f:d1:e7:59:
9b:a5:ed:86:a6:f4:de:09:d2:12:c1:95:47:b8:f5:
8f:f9:41:85:30:1c:cb:02:ad:a7:23:3a:a6:83:a9:
e9:a8:2e:d6:31:28:70:e6:22:d0:0e:9a:99:ac:76:
37:0f:c1:08:46:15:97:72:79:c4:c6:11:ab:3a:92:
f7:49:fe:8b:60:25:40:37:73:9d:3f:8c:a7:bc:6e:
c6:2b:97:d2:99:c2:e7:39:0c:f7:ee:ae:71:c4:bb:
8f:2a:0a:3a:39:eb:9b:db:4b:68:32:74:cc:c8:cd:
81:22:0b:6e:1d:e5:b3:22:b4:38:70:da:84:8f:4f:
91:a4:9e:31:47:90:d4:a2:f5:fd:83:e4:40:3b:f2:
e2:20:8e:ed:7d:ec:e0:f9:6e:a1:37:b9:f4:89:eb:
7c:44:6a:89:45:b7:6b:ed:73:01:d1:e5:10:75:10:
3c:0b:c9:0a:31:63:96:fd:57:52:74:b0:c8:62:b5:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:90:78:3D:B2:EB:54:FF:B5:C4:D0:31:78:8D:08:7E:C7:1D:06
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/ViyQeD2y61T_tcTQMXiNCH7HHQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:73:52:f2:e6:58:20:c4:56:0a:6e:e5:a1:f0:02:16:25:36:
21:94:19:fd:e3:e0:61:4b:d5:e9:b5:47:23:0c:8c:1e:2a:96:
c8:3a:d6:41:7f:7c:56:c4:b3:17:f9:0e:05:98:3b:29:79:6b:
b3:c9:df:83:f2:0f:c5:11:7c:f0:f5:d3:4c:68:02:3d:88:0c:
c9:6f:a5:37:32:40:3e:17:63:b6:ca:b4:a8:7e:3d:40:db:fd:
a9:4c:89:5f:c5:bc:68:7f:eb:1a:94:51:4a:46:be:bc:05:2f:
66:6a:4f:01:c7:25:0f:93:40:00:1f:83:41:bf:d6:49:e7:5e:
1b:45:87:83:7f:73:3f:1a:0d:b9:aa:30:7b:26:db:2f:1c:4a:
d3:4f:96:12:ba:88:2c:cc:a8:22:9f:9a:c3:8e:e5:f8:2d:61:
7e:ef:c0:be:43:39:78:9a:91:e7:b4:80:72:8b:3b:69:5d:d3:
0c:79:32:db:69:1c:ee:9c:e8:72:ec:a3:7c:e3:9d:96:05:72:
40:d9:f2:00:89:25:c0:f3:d5:59:8b:ad:45:3d:f8:89:e4:8a:
25:75:aa:ee:e0:b6:b2:16:b1:d9:c0:5e:cd:a2:05:7b:a3:89:
ab:19:97:8f:56:14:8a:da:80:b2:74:21:18:0f:83:5b:d4:ab:
7f:95:65:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlX1m1Y/jb+0aDD7zKkBJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl
OTA5OGYwHhcNMjMwMTAyMDgyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjJjOTA3ODNkYjJlYjU0ZmZiNWM0ZDAzMTc4OGQwODdlYzcxZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/CEBkti44tPrZprLSZOPyOERgqdh
N7jHWpGcF+xos0D2FM+6tLxNV3CIO5TxRLG5d2Tn6LaSBAueCoZ91tXM3MkmFz9S
DR/R51mbpe2GpvTeCdISwZVHuPWP+UGFMBzLAq2nIzqmg6npqC7WMShw5iLQDpqZ
rHY3D8EIRhWXcnnExhGrOpL3Sf6LYCVAN3OdP4ynvG7GK5fSmcLnOQz37q5xxLuP
Kgo6Oeub20toMnTMyM2BIgtuHeWzIrQ4cNqEj0+RpJ4xR5DUovX9g+RAO/LiII7t
fezg+W6hN7n0iet8RGqJRbdr7XMB0eUQdRA8C8kKMWOW/VdSdLDIYrXZcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFYskHg9sutU/7XE0DF4jQh+xx0GMB8GA1UdIwQY
MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt
ZjA0ZmRjYzA5ZTUxLzEvVml5UWVEMnk2MVRfdGNUUU1YaU5DSDdISFFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx
LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpmy8MA0G
CSqGSIb3DQEBCwUAA4IBAQAMc1Ly5lggxFYKbuWh8AIWJTYhlBn94+BhS9XptUcj
DIweKpbIOtZBf3xWxLMX+Q4FmDspeWuzyd+D8g/FEXzw9dNMaAI9iAzJb6U3MkA+
F2O2yrSofj1A2/2pTIlfxbxof+salFFKRr68BS9mak8BxyUPk0AAH4NBv9ZJ514b
RYeDf3M/Gg25qjB7JtsvHErTT5YSuogszKgin5rDjuX4LWF+78C+Qzl4mpHntIBy
iztpXdMMeTLbaRzunOhy7KN8452WBXJA2fIAiSXA89VZi61FPfiJ5Ioldaru4Lay
FrHZwF7NogV7o4mrGZePVhSK2oCydCEYD4Nb1Kt/lWVQ
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:18:19 2025 by rpki-client