Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/nL7daqoWK-co5QTvvuV2zukOjg4.roa
File: nL7daqoWK-co5QTvvuV2zukOjg4.roa (raw, json)
Hash identifier: zPlEC5wqzb78mn2uqjYpF0wpbip4t6v6HvSn1Pc8nyA=
Subject key identifier: 9C:BE:DD:6A:AA:16:2B:E7:28:E5:04:EF:BE:E5:76:CE:E9:0E:8E:0E
Certificate issuer: /CN=5be39da3aaa52d130ff074fb049221966d2b57c6
Certificate serial: 018572837940527D720F1BE1445304888E16
Authority key identifier: 5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/nL7daqoWK-co5QTvvuV2zukOjg4.roa
Signing time: Mon 02 Jan 2023 12:44:56 +0000
ROA not before: Mon 02 Jan 2023 12:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208240
IP address blocks: 193.176.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:79:40:52:7d:72:0f:1b:e1:44:53:04:88:8e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be39da3aaa52d130ff074fb049221966d2b57c6
Validity
Not Before: Jan 2 12:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cbedd6aaa162be728e504efbee576cee90e8e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:db:68:25:d6:3e:c4:63:81:bc:ba:92:0c:
ba:54:44:21:85:84:02:a7:be:c8:4e:77:f9:3c:9d:
75:cd:76:11:6d:18:58:ea:15:9e:7f:87:4b:91:18:
86:b8:18:76:5f:66:33:8f:16:cb:bb:d4:07:f2:2e:
58:88:56:28:61:1b:c8:24:2d:57:11:c6:3b:76:c1:
9b:18:36:41:fa:4d:66:26:e9:18:51:3c:a2:c9:21:
f6:1c:75:1a:d9:91:20:e4:f4:91:b0:bc:19:f1:d4:
e0:9f:94:b8:43:7e:53:0f:a6:57:56:3e:81:4b:0e:
dc:2c:92:fa:4f:c2:45:f8:94:f6:ba:c1:b8:9d:5c:
f7:9c:dc:22:91:c4:3b:98:0f:a4:07:74:13:ae:a4:
25:3a:5c:8a:74:92:73:c1:91:bd:75:f6:7e:d0:fc:
ef:59:b9:57:e6:88:48:89:70:f5:75:ab:b9:ea:13:
ec:6e:b3:2c:99:ac:4b:2d:f9:f0:37:20:f4:bd:6b:
82:83:3b:32:fe:e0:e2:f8:0a:ee:4e:fd:6b:8d:8e:
2d:a6:24:71:05:02:6b:1b:d0:e1:8d:bf:75:28:be:
ef:88:53:b2:41:39:98:80:c5:4a:5b:36:8d:73:77:
da:33:09:c4:c2:b0:0b:65:5c:e1:85:c3:f0:e2:e9:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BE:DD:6A:AA:16:2B:E7:28:E5:04:EF:BE:E5:76:CE:E9:0E:8E:0E
X509v3 Authority Key Identifier:
keyid:5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/nL7daqoWK-co5QTvvuV2zukOjg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.221.0/24
Signature Algorithm: sha256WithRSAEncryption
81:41:0f:fc:9c:83:4f:62:e0:a9:36:6f:f7:bd:a5:c3:d1:22:
9d:64:35:9b:89:19:b1:b1:15:8e:b0:18:91:40:1c:78:d3:46:
1f:08:2c:0a:65:79:9a:1f:94:ce:51:bf:00:45:0c:58:eb:eb:
ab:02:49:d0:1d:95:54:4f:83:d0:99:a5:8e:71:99:d1:d2:70:
61:82:e7:1e:07:db:a9:5c:25:8a:48:9d:90:0d:de:4b:e3:8f:
96:bf:af:2e:f0:4d:13:7c:26:43:bb:af:f3:d0:d5:75:74:54:
b1:08:1e:72:7b:f2:f0:e7:78:c4:2e:50:ce:0a:ee:04:23:ac:
4d:a3:8d:06:06:ca:e4:7f:da:48:1b:44:92:fc:d1:f6:05:67:
cd:fe:84:2b:94:5d:5e:c3:00:4f:d1:e7:8d:40:15:b1:40:aa:
ea:96:1e:34:b8:31:8d:4f:07:ed:e0:34:5a:71:a7:52:03:b3:
85:57:1c:06:1f:c3:36:ba:ef:10:2e:c2:22:82:37:e7:95:6a:
53:41:55:a2:78:69:74:06:41:1f:f5:ca:63:34:26:e7:a4:43:
98:19:ba:4a:b5:33:3b:4d:8b:0d:4a:f0:ba:14:93:6b:f5:79:
c0:2b:41:4a:7a:f7:70:e3:e7:c8:64:98:e2:7f:4d:04:64:57:
7e:a4:53:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyg3lAUn1yDxvhRFMEiI4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZTM5ZGEzYWFhNTJkMTMwZmYwNzRmYjA0OTIyMTk2NmQy
YjU3YzYwHhcNMjMwMTAyMTI0NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2JlZGQ2YWFhMTYyYmU3MjhlNTA0ZWZiZWU1NzZjZWU5MGU4ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuifbaCXWPsRjgby6kgy6VEQhhYQC
p77ITnf5PJ11zXYRbRhY6hWef4dLkRiGuBh2X2YzjxbLu9QH8i5YiFYoYRvIJC1X
EcY7dsGbGDZB+k1mJukYUTyiySH2HHUa2ZEg5PSRsLwZ8dTgn5S4Q35TD6ZXVj6B
Sw7cLJL6T8JF+JT2usG4nVz3nNwikcQ7mA+kB3QTrqQlOlyKdJJzwZG9dfZ+0Pzv
WblX5ohIiXD1dau56hPsbrMsmaxLLfnwNyD0vWuCgzsy/uDi+AruTv1rjY4tpiRx
BQJrG9Dhjb91KL7viFOyQTmYgMVKWzaNc3faMwnEwrALZVzhhcPw4umYFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJy+3WqqFivnKOUE777lds7pDo4OMB8GA1UdIwQY
MBaAFFvjnaOqpS0TD/B0+wSSIZZtK1fGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMWU2NmEtNTE2Yi00ZDY0LWE2NDUt
ZTg3MmMwZDQwOGEzLzEvbkw3ZGFxb1dLLWNvNVFUdnZ1VjJ6dWtPamc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9iMWU2NmEtNTE2Yi00ZDY0LWE2NDUtZTg3MmMwZDQwOGEz
LzEvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbDdMA0G
CSqGSIb3DQEBCwUAA4IBAQCBQQ/8nINPYuCpNm/3vaXD0SKdZDWbiRmxsRWOsBiR
QBx400YfCCwKZXmaH5TOUb8ARQxY6+urAknQHZVUT4PQmaWOcZnR0nBhguceB9up
XCWKSJ2QDd5L44+Wv68u8E0TfCZDu6/z0NV1dFSxCB5ye/Lw53jELlDOCu4EI6xN
o40GBsrkf9pIG0SS/NH2BWfN/oQrlF1ewwBP0eeNQBWxQKrqlh40uDGNTwft4DRa
cadSA7OFVxwGH8M2uu8QLsIigjfnlWpTQVWieGl0BkEf9cpjNCbnpEOYGbpKtTM7
TYsNSvC6FJNr9XnAK0FKevdw4+fIZJjif00EZFd+pFPx
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:46 2025 by rpki-client