Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/17j92v3kKw_kdlbJqz_bDrjmfzg.roa
File: 17j92v3kKw_kdlbJqz_bDrjmfzg.roa (raw, json)
Hash identifier: n6/bi3tMGaelAlnkeCylbKn9DrCkX+6fldaWrDH1FTg=
Subject key identifier: D7:B8:FD:DA:FD:E4:2B:0F:E4:76:56:C9:AB:3F:DB:0E:B8:E6:7F:38
Certificate issuer: /CN=a220dda64843a4ee364b089356ca87995830fd77
Certificate serial: 01856D41B205C635C46D8AA78ADD6D70F013
Authority key identifier: A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/17j92v3kKw_kdlbJqz_bDrjmfzg.roa
Signing time: Sun 01 Jan 2023 12:15:00 +0000
ROA not before: Sun 01 Jan 2023 12:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25460
IP address blocks: 193.161.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:b2:05:c6:35:c4:6d:8a:a7:8a:dd:6d:70:f0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a220dda64843a4ee364b089356ca87995830fd77
Validity
Not Before: Jan 1 12:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7b8fddafde42b0fe47656c9ab3fdb0eb8e67f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:35:f1:97:4b:1c:5b:25:61:c3:82:6a:7d:
38:10:9e:9c:12:bd:00:22:f5:1b:22:d2:59:15:b8:
03:8e:a3:8f:8f:6e:20:77:58:97:a6:b4:ed:f7:0a:
f0:e6:07:40:06:11:26:6f:ca:2c:c2:fd:03:c0:b0:
fe:b5:68:38:76:b7:ca:09:12:18:eb:e5:cd:e7:5a:
64:ca:58:6a:96:18:cc:2c:ee:2d:0d:b0:07:ea:cb:
c3:3e:72:50:bd:98:d6:ed:5c:dd:79:43:86:6c:10:
91:10:ec:8a:77:1a:40:8c:4f:88:98:30:70:24:a4:
6b:1e:67:8a:e2:3c:0c:8b:00:5f:6a:72:2c:e2:f4:
70:3d:01:29:da:0d:e3:e1:7f:82:ce:bc:a9:0c:1e:
a6:00:07:2c:99:f3:d7:9f:7d:d8:04:12:f3:c3:d9:
c5:18:1a:df:91:c0:0a:d7:3f:db:81:dc:d7:14:35:
b9:d4:d1:b2:37:d7:ba:f1:d7:11:e5:5e:78:94:33:
87:42:f3:54:3b:35:a6:0c:6f:51:aa:a6:1e:d2:16:
37:df:64:96:a9:8f:fa:25:a2:33:04:a6:72:1f:e1:
6c:91:04:af:03:b1:73:2b:7d:c0:c5:1b:f0:c3:c7:
b8:fc:3e:0f:ff:fa:71:a5:f9:7c:2b:c7:b0:b8:52:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B8:FD:DA:FD:E4:2B:0F:E4:76:56:C9:AB:3F:DB:0E:B8:E6:7F:38
X509v3 Authority Key Identifier:
keyid:A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/17j92v3kKw_kdlbJqz_bDrjmfzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.4.0/22
Signature Algorithm: sha256WithRSAEncryption
15:0e:3b:07:ee:4c:b4:07:ad:6f:c8:1b:c4:e3:70:5f:bd:08:
2e:87:3c:a4:a6:f4:3d:40:f3:a4:b5:84:fe:6a:d3:cf:bb:21:
7a:9a:85:43:e1:8f:e2:23:22:ce:8d:e7:aa:f2:35:3a:bf:6a:
91:98:1f:a9:9f:7a:a8:d7:03:81:e3:1d:89:6b:6e:a4:ce:e6:
9b:a0:5a:23:e9:b0:04:d7:55:8d:4e:be:6c:fa:99:f4:f9:c8:
b6:f8:59:cb:8e:d8:2f:f9:d8:43:77:c3:38:20:cb:c1:66:44:
4f:22:ec:13:a0:66:4b:af:b8:6c:6d:a5:ff:25:c5:04:a1:ba:
90:2b:e0:1a:08:c5:1d:6d:00:51:f8:7c:d8:57:dc:a0:55:56:
35:45:6f:9f:78:56:82:a5:12:ca:1b:bc:b6:bf:1c:2c:f8:34:
4e:a3:d7:d3:0a:ad:f1:56:e8:0d:9d:96:ed:93:32:bd:14:a4:
c9:1e:76:c9:ba:eb:fb:31:9d:ba:d7:d9:73:35:78:22:6d:9d:
04:4c:25:38:f6:de:d5:25:58:6d:5d:bd:46:77:fd:1e:e5:6e:
51:2f:87:4b:8a:1e:63:84:74:1c:e7:56:9d:dd:43:cb:23:27:
65:5d:92:07:0c:3f:b0:44:e3:b2:f5:97:0a:85:8d:bc:c1:2e:
5e:87:3c:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtQbIFxjXEbYqnit1tcPATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMjBkZGE2NDg0M2E0ZWUzNjRiMDg5MzU2Y2E4Nzk5NTgz
MGZkNzcwHhcNMjMwMTAxMTIxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2I4ZmRkYWZkZTQyYjBmZTQ3NjU2YzlhYjNmZGIwZWI4ZTY3ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2s18ZdLHFslYcOCan04EJ6cEr0A
IvUbItJZFbgDjqOPj24gd1iXprTt9wrw5gdABhEmb8oswv0DwLD+tWg4drfKCRIY
6+XN51pkylhqlhjMLO4tDbAH6svDPnJQvZjW7VzdeUOGbBCREOyKdxpAjE+ImDBw
JKRrHmeK4jwMiwBfanIs4vRwPQEp2g3j4X+CzrypDB6mAAcsmfPXn33YBBLzw9nF
GBrfkcAK1z/bgdzXFDW51NGyN9e68dcR5V54lDOHQvNUOzWmDG9RqqYe0hY332SW
qY/6JaIzBKZyH+FskQSvA7FzK33AxRvww8e4/D4P//pxpfl8K8ewuFJNKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNe4/dr95CsP5HZWyas/2w645n84MB8GA1UdIwQY
MBaAFKIg3aZIQ6TuNksIk1bKh5lYMP13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lEZHBraERwTzQyU3dpVFZzcUhtVmd3X1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mZmE2ZDQtNTA4OS00NWE3LWEzOGYt
ZjVmODE0NTY1MWQzLzEvMTdqOTJ2M2tLd19rZGxiSnF6X2JEcmptZnpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mZmE2ZDQtNTA4OS00NWE3LWEzOGYtZjVmODE0NTY1MWQz
LzEvb2lEZHBraERwTzQyU3dpVFZzcUhtVmd3X1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwaEEMA0G
CSqGSIb3DQEBCwUAA4IBAQAVDjsH7ky0B61vyBvE43BfvQguhzykpvQ9QPOktYT+
atPPuyF6moVD4Y/iIyLOjeeq8jU6v2qRmB+pn3qo1wOB4x2Ja26kzuaboFoj6bAE
11WNTr5s+pn0+ci2+FnLjtgv+dhDd8M4IMvBZkRPIuwToGZLr7hsbaX/JcUEobqQ
K+AaCMUdbQBR+HzYV9ygVVY1RW+feFaCpRLKG7y2vxws+DROo9fTCq3xVugNnZbt
kzK9FKTJHnbJuuv7MZ2619lzNXgibZ0ETCU49t7VJVhtXb1Gd/0e5W5RL4dLih5j
hHQc51ad3UPLIydlXZIHDD+wROOy9ZcKhY28wS5ehzy4
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:30 2025 by rpki-client