Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1URkzLoUwEf0uXq1oJJvTlXZdWA.roa
File: 1URkzLoUwEf0uXq1oJJvTlXZdWA.roa (raw, json)
Hash identifier: b+P7kBkXSdoYNJMkI+v+WMNYwqyk64VXQSDfoe8yGk0=
Subject key identifier: D5:44:64:CC:BA:14:C0:47:F4:B9:7A:B5:A0:92:6F:4E:55:D9:75:60
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0186A2A55509AB00F4B42484ADDE1CFC67AF
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1URkzLoUwEf0uXq1oJJvTlXZdWA.roa
Signing time: Thu 02 Mar 2023 14:06:29 +0000
ROA not before: Thu 02 Mar 2023 14:06:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199646
IP address blocks: 217.113.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:a5:55:09:ab:00:f4:b4:24:84:ad:de:1c:fc:67:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Mar 2 14:06:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d54464ccba14c047f4b97ab5a0926f4e55d97560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:9d:14:e0:27:b6:78:4f:12:9d:27:3f:07:
f3:18:34:04:10:2f:27:8f:e8:44:a9:0e:5a:e6:a9:
81:14:03:85:96:54:75:56:e8:3a:94:8c:c8:d0:f2:
a6:53:bd:e5:6c:d1:d4:e6:cb:30:d8:d9:d1:db:73:
44:e9:f3:60:79:34:54:0d:cf:72:48:f9:3f:2d:52:
04:96:1a:f7:1c:a3:37:38:12:8f:95:cd:0a:b0:2a:
74:e5:b2:b8:fa:41:6d:13:03:6f:35:37:0f:0e:87:
d9:9a:64:dc:e3:ac:e5:54:88:5a:5d:5e:d1:55:55:
bd:bd:60:08:64:31:c3:6b:ca:fd:24:9f:d4:17:90:
37:bd:6b:8f:0e:cc:c9:c9:db:44:ec:e1:c7:a9:b9:
61:6a:be:e7:67:a6:ec:81:45:7a:68:d9:c3:bf:0e:
a4:ac:8e:0a:43:b6:5c:a6:4d:bb:98:4f:18:e6:0f:
6a:49:25:d8:ad:61:aa:28:1c:a2:cf:8b:bb:c9:68:
69:5b:17:b3:2f:18:a1:42:ed:28:4b:ee:d2:37:84:
f8:59:86:ef:4a:c1:52:bc:31:05:78:8f:5b:95:df:
1c:80:d6:b3:44:60:42:2a:3e:f7:d8:79:2c:f5:bb:
e1:6a:79:d7:e8:61:79:24:e7:bc:27:c0:1d:68:0d:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:64:CC:BA:14:C0:47:F4:B9:7A:B5:A0:92:6F:4E:55:D9:75:60
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1URkzLoUwEf0uXq1oJJvTlXZdWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.31.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0f:c2:9a:8a:36:5f:6e:69:98:2e:07:3b:51:59:94:1a:0c:
0c:e3:f8:92:46:72:8c:62:f4:0c:91:29:3b:69:89:69:19:2b:
d1:94:c9:f6:41:f5:3b:1e:f2:ef:19:b2:36:90:ea:9c:d7:ba:
04:32:43:84:4b:a9:7d:c8:20:75:ca:59:51:f4:0e:a4:a0:df:
52:32:93:a2:6b:37:30:70:af:bd:aa:6b:66:6e:56:3c:c9:b0:
df:97:9b:43:b8:70:df:56:8b:24:2e:9c:cb:63:5b:28:9c:67:
0c:19:0e:dd:36:6a:d4:ac:56:63:9d:d8:1b:bf:6a:58:bd:70:
fb:56:67:e8:bc:9c:ea:82:0a:8e:d8:ee:e7:c0:9c:77:6c:7e:
35:2b:f6:73:05:65:be:7a:c1:85:cb:2d:8e:5a:48:99:4b:dc:
fa:f9:8e:20:bb:d0:42:e2:ee:df:38:c8:d4:cb:1e:dd:6a:78:
c5:39:2e:c1:4c:7e:e2:e6:7e:ec:b1:ea:11:ca:e9:62:1b:bc:
eb:38:1c:61:1d:bd:b6:8c:05:1b:13:5d:b1:ef:01:03:f5:17:
b5:31:8f:08:06:be:1d:70:11:11:5c:de:38:a4:a3:bb:0b:88:
32:89:89:91:f9:a7:3f:59:f4:f7:90:9f:9d:ff:e3:42:74:5f:
ae:65:76:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaipVUJqwD0tCSErd4c/GevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwMzAyMTQwNjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTQ0NjRjY2JhMTRjMDQ3ZjRiOTdhYjVhMDkyNmY0ZTU1ZDk3NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5edFOAntnhPEp0nPwfzGDQEEC8n
j+hEqQ5a5qmBFAOFllR1Vug6lIzI0PKmU73lbNHU5ssw2NnR23NE6fNgeTRUDc9y
SPk/LVIElhr3HKM3OBKPlc0KsCp05bK4+kFtEwNvNTcPDofZmmTc46zlVIhaXV7R
VVW9vWAIZDHDa8r9JJ/UF5A3vWuPDszJydtE7OHHqblhar7nZ6bsgUV6aNnDvw6k
rI4KQ7Zcpk27mE8Y5g9qSSXYrWGqKByiz4u7yWhpWxezLxihQu0oS+7SN4T4WYbv
SsFSvDEFeI9bld8cgNazRGBCKj732Hks9bvhannX6GF5JOe8J8AdaA3+jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNVEZMy6FMBH9Ll6taCSb05V2XVgMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvMVVSa3pMb1V3RWYwdVhxMW9KSnZUbFhaZFdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XEfMA0G
CSqGSIb3DQEBCwUAA4IBAQBWD8KaijZfbmmYLgc7UVmUGgwM4/iSRnKMYvQMkSk7
aYlpGSvRlMn2QfU7HvLvGbI2kOqc17oEMkOES6l9yCB1yllR9A6koN9SMpOiazcw
cK+9qmtmblY8ybDfl5tDuHDfVoskLpzLY1sonGcMGQ7dNmrUrFZjndgbv2pYvXD7
VmfovJzqggqO2O7nwJx3bH41K/ZzBWW+esGFyy2OWkiZS9z6+Y4gu9BC4u7fOMjU
yx7danjFOS7BTH7i5n7sseoRyuliG7zrOBxhHb22jAUbE12x7wED9Re1MY8IBr4d
cBERXN44pKO7C4gyiYmR+ac/WfT3kJ+d/+NCdF+uZXY1
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:40:53 2025 by rpki-client