Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/poMamzeujq6l1mJiIaPKCHudS2w.roa
File: poMamzeujq6l1mJiIaPKCHudS2w.roa (raw, json)
Hash identifier: VQhNkGY65hBZQ+AsC6iHHfDmAwHI6m6LhK6S76Enh10=
Subject key identifier: A6:83:1A:9B:37:AE:8E:AE:A5:D6:62:62:21:A3:CA:08:7B:9D:4B:6C
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 018571D7BC1585AF6AB67D51DC6848162680
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/poMamzeujq6l1mJiIaPKCHudS2w.roa
Signing time: Mon 02 Jan 2023 09:37:21 +0000
ROA not before: Mon 02 Jan 2023 09:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3215
IP address blocks: 83.137.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:bc:15:85:af:6a:b6:7d:51:dc:68:48:16:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 2 09:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6831a9b37ae8eaea5d6626221a3ca087b9d4b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:3a:46:e9:db:92:8c:c2:f7:71:c6:f6:03:
66:76:32:15:82:26:b2:e1:d0:4e:6c:a0:9c:52:a8:
ca:6b:a1:b4:ed:45:b5:41:72:59:ef:dd:dc:28:d7:
e9:65:7a:4b:ac:73:7b:bc:5c:51:c5:b9:4c:30:f9:
6c:cc:67:90:82:79:8c:09:a7:08:b3:84:be:cd:9b:
d0:cd:8c:24:b1:05:2a:80:f5:09:86:7a:fe:f0:4b:
6b:42:7a:b7:0e:f1:cf:90:da:19:32:ae:f0:02:b4:
aa:59:ec:af:19:27:de:0a:fc:57:48:6c:9a:2d:be:
4d:ce:a3:6f:97:3f:cb:4d:ef:d1:8c:dc:6e:83:1a:
66:ef:8d:d7:a4:17:76:f0:96:ad:cc:ce:b2:8f:d6:
12:e3:65:35:b6:f5:79:a3:d9:94:71:61:1f:3c:aa:
a2:51:75:73:d9:1f:50:8e:5c:a1:81:dd:95:ff:63:
2a:b4:58:17:7b:a4:2a:a1:10:49:cb:2f:80:37:50:
82:d3:49:c3:5f:a4:08:94:6a:e9:ad:eb:57:21:dc:
05:f7:5c:98:f5:88:ad:40:85:77:af:fc:c7:a1:49:
bc:66:8b:5f:6c:21:86:17:f2:75:36:7f:88:03:6d:
19:6a:2c:b1:8b:9a:d6:a7:2a:38:53:8d:7e:ba:dd:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:83:1A:9B:37:AE:8E:AE:A5:D6:62:62:21:A3:CA:08:7B:9D:4B:6C
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/poMamzeujq6l1mJiIaPKCHudS2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.241.0/24
Signature Algorithm: sha256WithRSAEncryption
85:04:b5:65:6f:60:b3:e4:2b:cf:51:48:d3:84:10:3e:92:63:
a2:b5:98:7e:d3:c0:94:50:33:e9:66:b1:7c:cb:53:9d:76:a7:
a0:c1:34:64:c1:24:77:7b:38:78:d2:91:93:fa:db:b8:10:65:
d7:11:1e:b9:33:57:2b:7a:e7:4f:e7:2b:0d:8d:b7:90:7c:9d:
0d:04:bc:5e:4c:a9:7e:78:74:74:aa:6c:8a:f4:6b:04:e7:35:
09:ee:20:2e:31:d5:ad:3d:c2:0e:ce:0e:28:49:f2:f8:77:35:
f8:75:ee:56:49:e8:37:d9:99:de:93:23:e4:03:c8:10:59:91:
0d:88:0a:9b:f9:0c:f6:e4:07:12:15:58:50:f4:e0:a0:3c:2b:
86:48:20:8d:b5:c3:7c:56:eb:97:e1:e2:c3:67:9a:18:5a:a6:
7c:dd:5e:44:a3:ae:c9:8d:52:1b:fa:91:ab:cb:f1:96:93:69:
dd:38:50:8d:df:0a:08:6e:b9:22:11:c6:e6:f3:eb:0d:17:6c:
87:3c:e9:f1:40:13:83:bb:ab:fa:33:5a:97:a3:ea:dd:17:6a:
b6:6c:de:5b:48:2a:9a:cb:33:48:5b:06:51:46:d8:4f:0b:d0:
10:55:44:9d:85:7e:b5:f7:57:43:36:f5:4b:cc:9c:67:24:0c:
55:ed:f2:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx17wVha9qtn1R3GhIFiaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2
ZjRkYjQwHhcNMjMwMTAyMDkzNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjgzMWE5YjM3YWU4ZWFlYTVkNjYyNjIyMWEzY2EwODdiOWQ0YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxak6RunbkozC93HG9gNmdjIVgiay
4dBObKCcUqjKa6G07UW1QXJZ793cKNfpZXpLrHN7vFxRxblMMPlszGeQgnmMCacI
s4S+zZvQzYwksQUqgPUJhnr+8EtrQnq3DvHPkNoZMq7wArSqWeyvGSfeCvxXSGya
Lb5NzqNvlz/LTe/RjNxugxpm743XpBd28JatzM6yj9YS42U1tvV5o9mUcWEfPKqi
UXVz2R9Qjlyhgd2V/2MqtFgXe6QqoRBJyy+AN1CC00nDX6QIlGrpretXIdwF91yY
9YitQIV3r/zHoUm8ZotfbCGGF/J1Nn+IA20Zaiyxi5rWpyo4U41+ut0CfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKaDGps3ro6updZiYiGjygh7nUtsMB8GA1UdIwQY
MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt
MmVlMmI3Mjk1ZGZmLzEvcG9NYW16ZXVqcTZsMW1KaUlhUEtDSHVkUzJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm
LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4nxMA0G
CSqGSIb3DQEBCwUAA4IBAQCFBLVlb2Cz5CvPUUjThBA+kmOitZh+08CUUDPpZrF8
y1OddqegwTRkwSR3ezh40pGT+tu4EGXXER65M1creudP5ysNjbeQfJ0NBLxeTKl+
eHR0qmyK9GsE5zUJ7iAuMdWtPcIOzg4oSfL4dzX4de5WSeg32ZnekyPkA8gQWZEN
iAqb+Qz25AcSFVhQ9OCgPCuGSCCNtcN8VuuX4eLDZ5oYWqZ83V5Eo67JjVIb+pGr
y/GWk2ndOFCN3woIbrkiEcbm8+sNF2yHPOnxQBODu6v6M1qXo+rdF2q2bN5bSCqa
yzNIWwZRRthPC9AQVUSdhX6191dDNvVLzJxnJAxV7fKe
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:30:30 2025 by rpki-client