Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/csvy-SlA2o4ckDeFEqU-9Ho4iDQ.roa
File: csvy-SlA2o4ckDeFEqU-9Ho4iDQ.roa (raw, json)
Hash identifier: hPb3aIYTesvMm5zmD3n3ch2kdCCpJ6ETKsZAToN8nXc=
Subject key identifier: 72:CB:F2:F9:29:40:DA:8E:1C:90:37:85:12:A5:3E:F4:7A:38:88:34
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 04B50EF8
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/csvy-SlA2o4ckDeFEqU-9Ho4iDQ.roa
Signing time: Sat 01 Jan 2022 06:02:07 +0000
ROA not before: Sat 01 Jan 2022 06:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29037
IP address blocks: 185.9.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78974712 (0x4b50ef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jan 1 06:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72cbf2f92940da8e1c90378512a53ef47a388834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:1a:8a:df:c2:67:bd:1b:d9:8c:79:ff:70:
20:81:75:e7:a2:ff:13:ac:d8:da:6b:8d:a3:d9:f0:
b2:e2:94:1a:18:8a:db:99:36:0d:28:ed:e1:9f:23:
25:90:5a:60:e0:f4:e5:d1:88:53:8d:1a:44:08:b1:
1f:4e:e4:17:0a:49:1e:a1:a9:be:8e:5e:eb:30:02:
08:ef:0e:69:d4:bd:39:f7:36:72:97:be:97:68:f1:
e3:9b:bb:2a:9a:a8:db:8c:8c:88:50:66:e3:03:d0:
60:cd:2f:82:89:ac:2c:f1:10:1a:f3:44:a1:89:b1:
29:a1:7c:2b:8a:b4:3d:6a:98:54:b1:be:96:68:cc:
c3:1f:e2:e3:37:63:85:49:53:29:33:a9:e4:66:65:
2c:86:9c:9a:66:ac:8a:48:02:e7:2c:a8:de:c2:ea:
46:6f:94:38:31:ec:23:d0:ad:09:d8:74:0a:e2:89:
eb:19:79:6e:e3:14:ed:64:1f:87:ae:bc:4b:58:2f:
7d:a3:a8:55:6b:0f:14:d1:f6:60:1e:cc:a9:25:0a:
d6:11:4d:8c:69:56:bc:2a:bc:5c:3f:3f:69:16:ec:
fb:f8:74:7a:a8:a0:fd:f0:8b:ab:e9:df:c1:5c:c8:
84:d9:26:e5:a5:72:36:93:c1:30:d6:54:a4:b6:4c:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CB:F2:F9:29:40:DA:8E:1C:90:37:85:12:A5:3E:F4:7A:38:88:34
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/csvy-SlA2o4ckDeFEqU-9Ho4iDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.12.0/22
Signature Algorithm: sha256WithRSAEncryption
86:42:88:f1:ad:9d:da:70:50:6a:67:96:02:d7:ab:e5:84:bc:
3d:2b:3a:74:12:4a:fb:89:13:f5:f6:40:2e:1f:f7:92:81:29:
52:31:6b:7e:7d:9a:35:45:b1:f2:10:b5:7a:74:3e:fe:96:a0:
71:2a:09:c7:88:bb:c6:72:fb:5a:fe:14:06:34:8f:09:35:da:
45:45:cd:26:9a:0d:11:e0:3e:31:c4:af:17:f6:01:14:24:61:
7d:1f:b3:ba:af:8e:e6:c1:da:4b:b4:35:69:59:35:b0:b4:ee:
af:d7:c1:34:d9:04:31:2c:c4:64:0e:82:6a:76:db:ec:4d:c3:
71:91:a8:93:c4:d1:92:c9:5f:38:46:a4:6c:84:9c:74:00:a5:
72:4b:04:af:6b:ec:aa:d8:e7:13:d9:35:06:50:2c:ba:d1:eb:
41:b4:84:1e:03:83:dd:33:cc:33:94:f9:fd:43:36:d0:d5:fa:
7c:2e:44:19:bc:3b:f3:ee:e0:ff:d5:9a:99:10:45:02:b8:7a:
2d:58:27:d7:cd:bc:74:30:40:6b:e6:5b:6d:85:c1:bb:10:d6:
9d:07:7f:93:0f:3f:b2:7c:92:68:10:37:8a:f1:fe:ee:ec:b7:
1d:94:92:73:cc:85:c4:46:6e:0c:a9:26:ff:9d:70:29:31:d1:
dc:41:0c:91
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBLUO+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZGZiMDc0ZDQ3YjdlMGJjODkxZWQwNmVhOGZjNjdlMzhlY2Y1MGExMB4XDTIyMDEw
MTA2MDIwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzJjYmYyZjkyOTQw
ZGE4ZTFjOTAzNzg1MTJhNTNlZjQ3YTM4ODgzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALGrGorfwme9G9mMef9wIIF156L/E6zY2muNo9nwsuKUGhiK
25k2DSjt4Z8jJZBaYOD05dGIU40aRAixH07kFwpJHqGpvo5e6zACCO8OadS9Ofc2
cpe+l2jx45u7Kpqo24yMiFBm4wPQYM0vgomsLPEQGvNEoYmxKaF8K4q0PWqYVLG+
lmjMwx/i4zdjhUlTKTOp5GZlLIacmmasikgC5yyo3sLqRm+UODHsI9CtCdh0CuKJ
6xl5buMU7WQfh668S1gvfaOoVWsPFNH2YB7MqSUK1hFNjGlWvCq8XD8/aRbs+/h0
eqig/fCLq+nfwVzIhNkm5aVyNpPBMNZUpLZMPmUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRyy/L5KUDajhyQN4USpT70ejiINDAfBgNVHSMEGDAWgBRd+wdNR7fgvIke
0G6o/Gfjjs9QoTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hmc0hUVWUzNEx5Skh0QnVxUHhuNDQ3UFVLRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDIvNDJmYzkyLTE2NjMtNDY4OC1hMzFkLWNmNmE2M2U0ZWZiNi8x
L2NzdnktU2xBMm80Y2tEZUZFcVUtOUhvNGlEUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIv
NDJmYzkyLTE2NjMtNDY4OC1hMzFkLWNmNmE2M2U0ZWZiNi8xL1hmc0hUVWUzNEx5
Skh0QnVxUHhuNDQ3UFVLRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkJDDANBgkqhkiG9w0BAQsFAAOC
AQEAhkKI8a2d2nBQameWAter5YS8PSs6dBJK+4kT9fZALh/3koEpUjFrfn2aNUWx
8hC1enQ+/pagcSoJx4i7xnL7Wv4UBjSPCTXaRUXNJpoNEeA+McSvF/YBFCRhfR+z
uq+O5sHaS7Q1aVk1sLTur9fBNNkEMSzEZA6Canbb7E3DcZGok8TRkslfOEakbISc
dAClcksEr2vsqtjnE9k1BlAsutHrQbSEHgOD3TPMM5T5/UM20NX6fC5EGbw78+7g
/9WamRBFArh6LVgn1828dDBAa+ZbbYXBuxDWnQd/kw8/snySaBA3ivH+7uy3HZSS
c8yFxEZuDKkm/51wKTHR3EEMkQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:24 2025 by rpki-client