Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/ogosUJwXiswyo-9OkxZZlWlAN1Y.roa
File: ogosUJwXiswyo-9OkxZZlWlAN1Y.roa (raw, json)
Hash identifier: RsfD2sgAYdu+oeWLmVoNZ54yri6YCTyIYgDq+RTtNHQ=
Subject key identifier: A2:0A:2C:50:9C:17:8A:CC:32:A3:EF:4E:93:16:59:95:69:40:37:56
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 01856BD34D100FEFD3470F029A455E90AE7D
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/ogosUJwXiswyo-9OkxZZlWlAN1Y.roa
Signing time: Sun 01 Jan 2023 05:34:47 +0000
ROA not before: Sun 01 Jan 2023 05:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39526
IP address blocks: 193.111.29.0/24 maxlen: 32
2001:67c:2124::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:4d:10:0f:ef:d3:47:0f:02:9a:45:5e:90:ae:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Jan 1 05:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a20a2c509c178acc32a3ef4e9316599569403756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:eb:a3:46:a8:2f:14:31:0c:53:cf:61:e3:04:
fe:9b:d3:8e:3c:45:7e:d6:c8:18:61:a9:f3:aa:93:
c5:28:0d:07:47:0b:ce:3c:29:12:ee:6a:92:2b:56:
28:01:aa:b4:f4:04:27:cf:17:93:84:01:2b:89:4b:
b1:bc:11:f3:00:ec:76:3b:8e:9d:b0:f4:b8:9a:e8:
32:3d:61:52:a1:a8:91:b6:ee:d6:48:e9:a9:56:95:
df:c8:97:d6:c9:67:73:57:23:ce:2f:0c:04:f7:16:
e2:a3:4f:eb:e2:79:b3:ed:8a:05:ca:fe:c1:4f:16:
82:7c:71:35:52:68:8d:9e:d9:bd:e2:98:fc:3d:76:
03:67:d1:e8:1f:2a:b9:a5:e7:5c:08:3c:9f:05:c8:
cc:22:98:c1:3d:1e:41:14:fa:52:cc:02:5b:7c:4f:
8f:00:ef:95:f7:66:18:db:a9:db:14:e6:9a:51:1a:
71:84:47:8a:e3:9e:c7:b7:6a:df:a1:58:10:73:f4:
d1:64:38:71:6f:3f:ec:2b:fc:8a:59:93:b3:a8:ac:
b6:3d:c3:c4:8d:fd:bb:b1:d2:44:a0:2e:ac:86:2e:
2c:b3:7a:ae:08:c3:4b:68:f4:ab:cc:34:60:4d:46:
2b:d5:61:ce:6f:dd:fa:56:40:70:ce:01:ef:84:e6:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:2C:50:9C:17:8A:CC:32:A3:EF:4E:93:16:59:95:69:40:37:56
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/ogosUJwXiswyo-9OkxZZlWlAN1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.29.0/24
IPv6:
2001:67c:2124::/48
Signature Algorithm: sha256WithRSAEncryption
84:9f:56:fd:64:b5:aa:92:c0:71:1a:50:d6:b3:69:aa:83:ba:
01:f4:f5:2b:6c:a4:b0:16:ef:06:a3:93:3a:ec:b8:6d:5f:32:
f6:8d:0f:dc:4c:8b:bf:7a:8e:40:4f:a8:7d:d8:bb:3d:95:50:
0b:b5:a9:e3:12:07:f3:ed:cc:d4:05:61:37:d1:02:5e:a0:ac:
7c:70:4c:96:71:3c:4b:97:c8:39:e4:f7:4d:80:54:ed:3f:36:
50:76:31:a4:34:1c:0e:85:4c:7d:ac:4b:e9:59:d4:9d:5d:ad:
49:e5:d2:0a:fa:6a:15:c7:03:70:74:19:f0:ce:49:b7:5b:22:
b0:6d:12:45:ec:bb:e8:c3:2d:96:1b:20:bf:07:b5:75:82:f8:
2e:f3:13:48:27:bc:8c:76:ef:01:b7:ca:97:42:df:a6:e1:8e:
fd:cc:b4:36:a8:94:8c:73:c7:c3:ac:d1:9e:19:49:82:7e:39:
6c:b0:5b:a8:79:a4:2f:bf:58:5b:76:21:b1:ba:36:12:88:44:
de:8d:6a:65:52:7d:1f:04:1e:15:dd:0f:2d:2a:cc:88:5f:97:
b4:d0:54:dd:1b:74:44:c9:47:d0:a2:ff:b3:eb:e2:d1:49:fe:
2e:39:1b:a4:17:42:ec:45:84:7b:91:70:37:23:55:2d:2f:38:
76:8f:f3:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVr000QD+/TRw8CmkVekK59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDczMTI4ZGU1NDk3NmRiNjJkOWJkMTYxNGU3N2M0M2Rl
ZTM5YjUwHhcNMjMwMTAxMDUzNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjBhMmM1MDljMTc4YWNjMzJhM2VmNGU5MzE2NTk5NTY5NDAzNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOujRqgvFDEMU89h4wT+m9OOPEV+
1sgYYanzqpPFKA0HRwvOPCkS7mqSK1YoAaq09AQnzxeThAEriUuxvBHzAOx2O46d
sPS4mugyPWFSoaiRtu7WSOmpVpXfyJfWyWdzVyPOLwwE9xbio0/r4nmz7YoFyv7B
TxaCfHE1UmiNntm94pj8PXYDZ9HoHyq5pedcCDyfBcjMIpjBPR5BFPpSzAJbfE+P
AO+V92YY26nbFOaaURpxhEeK457Ht2rfoVgQc/TRZDhxbz/sK/yKWZOzqKy2PcPE
jf27sdJEoC6shi4ss3quCMNLaPSrzDRgTUYr1WHOb936VkBwzgHvhOY8OwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKIKLFCcF4rMMqPvTpMWWZVpQDdWMB8GA1UdIwQY
MBaAFLVHMSjeVJdtti2b0WFOd8Q97jm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQt
ZTkwNDMxODM0MmVlLzEvb2dvc1VKd1hpc3d5by05T2t4WlpsV2xBTjFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQtZTkwNDMxODM0MmVl
LzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwW8dMA8E
AgACMAkDBwAgAQZ8ISQwDQYJKoZIhvcNAQELBQADggEBAISfVv1ktaqSwHEaUNaz
aaqDugH09StspLAW7wajkzrsuG1fMvaND9xMi796jkBPqH3Yuz2VUAu1qeMSB/Pt
zNQFYTfRAl6grHxwTJZxPEuXyDnk902AVO0/NlB2MaQ0HA6FTH2sS+lZ1J1drUnl
0gr6ahXHA3B0GfDOSbdbIrBtEkXsu+jDLZYbIL8HtXWC+C7zE0gnvIx27wG3ypdC
36bhjv3MtDaolIxzx8Os0Z4ZSYJ+OWywW6h5pC+/WFt2IbG6NhKIRN6NamVSfR8E
HhXdDy0qzIhfl7TQVN0bdETJR9Ci/7Pr4tFJ/i45G6QXQuxFhHuRcDcjVS0vOHaP
86g=
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:58:53 2025 by rpki-client