Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/XxH7OEP31ZVG-grWLKJRlEBOy0E.roa
File: XxH7OEP31ZVG-grWLKJRlEBOy0E.roa (raw, json)
Hash identifier: oJrCmorG9T2a9z8cbNCLXWuR1FcNRQjoXq85n9BHazc=
Subject key identifier: 5F:11:FB:38:43:F7:D5:95:46:FA:0A:D6:2C:A2:51:94:40:4E:CB:41
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 084ECB1E
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/XxH7OEP31ZVG-grWLKJRlEBOy0E.roa
Signing time: Sat 01 Jan 2022 16:05:12 +0000
ROA not before: Sat 01 Jan 2022 16:05:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8881
IP address blocks: 193.111.212.0/24 maxlen: 24
193.111.212.0/22 maxlen: 22
2001:67c:2878::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139381534 (0x84ecb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Jan 1 16:05:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f11fb3843f7d59546fa0ad62ca25194404ecb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:be:bd:ca:4c:23:31:23:6e:e4:4a:b6:d5:
61:1c:dd:e7:97:cf:f1:97:48:06:e5:46:a1:38:fb:
fe:8d:a4:76:a9:78:63:be:b4:13:cc:5e:51:82:6a:
24:5a:39:e6:4b:5d:fb:36:9e:86:a2:94:68:10:71:
b6:1e:aa:98:71:79:dd:8e:cb:8d:b2:2e:63:7d:24:
ba:2d:80:28:28:ad:c5:a1:62:bd:74:9c:97:01:10:
89:82:aa:b7:69:e3:35:98:c6:e0:b5:74:6b:f5:8e:
94:10:65:38:99:ee:53:90:3c:22:ba:10:a2:71:61:
cf:0e:ed:3b:45:8b:65:16:d5:16:4e:3b:42:16:9e:
ae:22:1e:cd:44:7f:f9:b1:a3:85:77:ea:44:24:50:
a3:54:aa:8a:db:aa:2b:65:77:22:d3:0a:76:67:dd:
ef:2e:66:56:d5:05:a3:b8:2a:bf:97:25:d7:ad:31:
d1:55:4d:e7:0c:e5:73:e3:69:da:33:a0:70:c9:19:
e4:5d:8c:b8:d3:26:8c:dc:ab:8b:27:b2:84:bf:48:
2b:44:25:f9:84:65:80:2b:12:35:bc:79:57:8d:83:
c3:5d:72:13:60:3d:69:8d:e0:6e:a5:39:29:54:5e:
75:ba:fa:83:bc:54:84:ec:89:37:83:1a:fe:3c:b2:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:11:FB:38:43:F7:D5:95:46:FA:0A:D6:2C:A2:51:94:40:4E:CB:41
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/XxH7OEP31ZVG-grWLKJRlEBOy0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.212.0/22
IPv6:
2001:67c:2878::/48
Signature Algorithm: sha256WithRSAEncryption
55:82:14:f0:43:fc:a2:6e:6a:e6:15:81:d3:db:00:5a:6d:06:
4e:9e:58:a5:23:91:59:b2:f7:d0:f3:61:a7:8d:e0:67:17:38:
fd:bc:6a:ed:4b:9f:17:cb:b0:78:16:7a:91:38:a6:2a:55:e8:
0f:6d:6c:89:63:c4:89:a0:36:c5:da:37:2f:77:36:c3:48:bd:
d2:89:8b:cd:a5:d9:5a:6f:12:08:4d:af:73:78:fb:7e:66:49:
27:a9:0a:45:3a:8f:9b:31:b5:54:8b:50:59:de:aa:84:0b:eb:
b5:02:dc:e5:5b:83:0f:e6:af:f6:f4:f9:42:d5:7a:dd:7b:3e:
52:46:75:ba:8d:ab:1f:aa:c5:37:2e:64:44:24:9c:68:68:d5:
93:00:b5:9e:28:6c:de:e5:31:c8:c3:dd:18:99:74:5d:9e:05:
2e:70:ef:81:09:4e:ef:2e:1d:db:c1:5a:f0:09:4b:25:37:3d:
5d:9b:c1:78:98:82:e4:be:8f:bd:21:45:b0:72:de:a8:88:e6:
39:38:0a:d4:32:6b:ee:ca:5a:35:be:69:12:4c:b7:09:ea:0c:
54:a7:1a:d8:c7:63:f3:9f:f0:70:5b:8b:97:56:1d:52:4f:08:
7e:6d:fc:a3:9a:a1:20:e6:a2:ea:ac:a4:73:36:64:67:84:ad:
f6:fc:30:ce
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECE7LHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTUwNWYyZTY3YTFlNjA0YjNmOTYzY2U0YzM2N2QxOTU4YmQ0Yjc4MB4XDTIyMDEw
MTE2MDUxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWYxMWZiMzg0M2Y3
ZDU5NTQ2ZmEwYWQ2MmNhMjUxOTQ0MDRlY2I0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANtyvr3KTCMxI27kSrbVYRzd55fP8ZdIBuVGoTj7/o2kdql4
Y760E8xeUYJqJFo55ktd+zaehqKUaBBxth6qmHF53Y7LjbIuY30kui2AKCitxaFi
vXSclwEQiYKqt2njNZjG4LV0a/WOlBBlOJnuU5A8IroQonFhzw7tO0WLZRbVFk47
QhaeriIezUR/+bGjhXfqRCRQo1SqituqK2V3ItMKdmfd7y5mVtUFo7gqv5cl160x
0VVN5wzlc+Np2jOgcMkZ5F2MuNMmjNyriyeyhL9IK0Ql+YRlgCsSNbx5V42Dw11y
E2A9aY3gbqU5KVRedbr6g7xUhOyJN4Ma/jyyniMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRfEfs4Q/fVlUb6CtYsolGUQE7LQTAfBgNVHSMEGDAWgBSeUF8uZ6HmBLP5
Y85MNn0ZWL1LeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25sQmZMbWVoNWdTei1XUE9URFo5R1ZpOVMzZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvZmI3ODY0LTU3OTUtNDIwOC1hYmUwLTA4NTQyNDU0ZDE2Yi8x
L1h4SDdPRVAzMVpWRy1ncldMS0pSbEVCT3kwRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
ZmI3ODY0LTU3OTUtNDIwOC1hYmUwLTA4NTQyNDU0ZDE2Yi8xL25sQmZMbWVoNWdT
ei1XUE9URFo5R1ZpOVMzZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAsFv1DAPBAIAAjAJAwcAIAEGfCh4
MA0GCSqGSIb3DQEBCwUAA4IBAQBVghTwQ/yibmrmFYHT2wBabQZOnlilI5FZsvfQ
82GnjeBnFzj9vGrtS58Xy7B4FnqROKYqVegPbWyJY8SJoDbF2jcvdzbDSL3SiYvN
pdlabxIITa9zePt+ZkknqQpFOo+bMbVUi1BZ3qqEC+u1AtzlW4MP5q/29PlC1Xrd
ez5SRnW6jasfqsU3LmREJJxoaNWTALWeKGze5THIw90YmXRdngUucO+BCU7vLh3b
wVrwCUslNz1dm8F4mILkvo+9IUWwct6oiOY5OArUMmvuylo1vmkSTLcJ6gxUpxrY
x2Pzn/BwW4uXVh1STwh+bfyjmqEg5qLqrKRzNmRnhK32/DDO
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:36:43 2025 by rpki-client