Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/eTDV6VihOWEWuUYIwLwjQNzDPrY.roa
File: eTDV6VihOWEWuUYIwLwjQNzDPrY.roa (raw, json)
Hash identifier: YD4tSICOzVajFn8kuJVijg95RgYhnZqGYTAEtqgbsE4=
Subject key identifier: 79:30:D5:E9:58:A1:39:61:16:B9:46:08:C0:BC:23:40:DC:C3:3E:B6
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 301D7750
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/eTDV6VihOWEWuUYIwLwjQNzDPrY.roa
Signing time: Sat 01 Jan 2022 04:57:43 +0000
ROA not before: Sat 01 Jan 2022 04:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201601
IP address blocks: 80.64.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807237456 (0x301d7750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Jan 1 04:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7930d5e958a1396116b94608c0bc2340dcc33eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:7d:5b:9b:f4:58:d3:4b:f5:60:e7:d9:71:
4c:41:e0:54:6d:d3:35:bd:6f:1d:75:a7:ee:96:89:
45:38:ef:9d:57:f3:52:ce:2e:df:aa:94:2c:3e:32:
99:f1:7f:fb:ff:98:39:ed:b8:3e:f2:f8:ab:00:70:
bf:21:51:1d:fe:b4:66:e7:8c:9e:2b:46:96:62:07:
c9:22:7f:94:43:40:70:94:21:54:d3:e7:3d:11:87:
51:5e:e4:dc:d1:82:3b:69:a2:ae:f7:6b:20:88:a1:
d8:a6:9d:76:52:d8:9e:d2:62:fd:d0:0b:fd:05:47:
02:09:e5:d7:9d:1a:20:b6:f2:20:61:0a:49:fe:5d:
5b:e7:63:7d:41:4f:98:96:76:0c:fa:6a:d3:53:94:
72:f5:15:8d:f0:8d:eb:bd:db:8c:07:97:bb:d0:96:
14:57:03:80:fe:f1:d8:da:f1:4c:a2:dc:26:23:59:
ac:53:33:e7:7c:a5:92:6a:81:29:76:f9:83:38:0b:
b2:b9:b9:73:7b:5a:bc:21:21:70:c8:1c:32:36:48:
6f:89:27:cc:ba:99:c8:66:a7:49:ba:d5:3b:55:01:
a1:b7:1c:eb:3a:88:60:2e:00:05:5c:1c:ee:05:ae:
6a:aa:0b:b4:b5:ab:d7:14:bf:3c:53:d1:b5:4c:27:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:30:D5:E9:58:A1:39:61:16:B9:46:08:C0:BC:23:40:DC:C3:3E:B6
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/eTDV6VihOWEWuUYIwLwjQNzDPrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.107.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ce:c3:fd:56:76:ca:d7:d4:d1:27:20:77:ff:0d:73:bf:2a:
c8:24:57:9d:af:cd:c7:0a:b0:2f:f5:f8:b2:a9:30:0e:0d:84:
4d:fe:5e:7c:de:db:0c:c2:29:64:a0:15:70:3d:75:3b:33:4c:
5a:b3:eb:01:35:8c:a3:ab:e8:7d:5b:a7:b0:59:27:a3:b9:5a:
bd:ea:97:5e:c6:08:db:26:d4:14:98:cd:ba:e2:bc:fa:b4:65:
7a:d3:ae:2a:c3:28:2c:78:48:c6:95:16:c6:ab:e4:33:ad:3c:
ea:6a:c5:eb:60:6f:61:f3:1d:9f:8d:1e:76:df:53:56:5e:b3:
cc:ea:11:9d:e5:d0:f8:8c:6f:fd:77:f5:c3:dd:84:dc:c6:f8:
66:26:62:cc:58:11:70:e6:2c:16:36:26:ee:4f:db:5c:c1:36:
82:51:b1:50:10:4e:ab:48:6b:a0:9c:45:bb:39:74:56:83:c4:
f1:04:44:68:50:40:e2:47:90:23:cf:6a:91:d8:64:8b:48:88:
1f:b5:47:50:9e:d0:dc:b8:65:16:e2:1d:ae:91:c8:21:2f:c0:
73:68:9b:e2:f3:47:3b:c3:4b:59:f4:f9:88:6f:e5:30:68:58:
3e:97:60:dc:ad:0b:fb:16:0b:34:b8:e4:60:0a:8b:f7:28:45:
41:65:31:e0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMB13UDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NjhhZTgwM2I5YmEzODg1NTQwMTgyN2IzZWVjZTE0NTA1YTljMGY2MB4XDTIyMDEw
MTA0NTc0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzkzMGQ1ZTk1OGEx
Mzk2MTE2Yjk0NjA4YzBiYzIzNDBkY2MzM2ViNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOZfVub9FjTS/Vg59lxTEHgVG3TNb1vHXWn7paJRTjvnVfz
Us4u36qULD4ymfF/+/+YOe24PvL4qwBwvyFRHf60ZueMnitGlmIHySJ/lENAcJQh
VNPnPRGHUV7k3NGCO2mirvdrIIih2KaddlLYntJi/dAL/QVHAgnl150aILbyIGEK
Sf5dW+djfUFPmJZ2DPpq01OUcvUVjfCN673bjAeXu9CWFFcDgP7x2NrxTKLcJiNZ
rFMz53ylkmqBKXb5gzgLsrm5c3tavCEhcMgcMjZIb4knzLqZyGanSbrVO1UBobcc
6zqIYC4ABVwc7gWuaqoLtLWr1xS/PFPRtUwn2kMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR5MNXpWKE5YRa5RgjAvCNA3MM+tjAfBgNVHSMEGDAWgBRWiugDubo4hVQB
gns+7OFFBanA9jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Zvcm9BN202T0lWVUFZSjdQdXpoUlFXcHdQWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvMjc4ZDVmLTllZTYtNDQ3Ny05ZmUwLThlYWU4Yjc1ZTljYS8x
L2VURFY2VmloT1dFV3VVWUl3THdqUU56RFByWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
Mjc4ZDVmLTllZTYtNDQ3Ny05ZmUwLThlYWU4Yjc1ZTljYS8xL1Zvcm9BN202T0lW
VUFZSjdQdXpoUlFXcHdQWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBAazANBgkqhkiG9w0BAQsFAAOC
AQEAhs7D/VZ2ytfU0Scgd/8Nc78qyCRXna/NxwqwL/X4sqkwDg2ETf5efN7bDMIp
ZKAVcD11OzNMWrPrATWMo6vofVunsFkno7laveqXXsYI2ybUFJjNuuK8+rRletOu
KsMoLHhIxpUWxqvkM6086mrF62BvYfMdn40edt9TVl6zzOoRneXQ+Ixv/Xf1w92E
3Mb4ZiZizFgRcOYsFjYm7k/bXME2glGxUBBOq0hroJxFuzl0VoPE8QREaFBA4keQ
I89qkdhki0iIH7VHUJ7Q3LhlFuIdrpHIIS/Ac2ib4vNHO8NLWfT5iG/lMGhYPpdg
3K0L+xYLNLjkYAqL9yhFQWUx4A==
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:26:18 2025 by rpki-client