Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/adQVg2Amr_VZWQMIe9RLHTdJ6xw.roa
File: adQVg2Amr_VZWQMIe9RLHTdJ6xw.roa (raw, json)
Hash identifier: aRRuJWMtfM7maI8zrqjo6TLMgTZzp/HZXQAqKuKmXc8=
Subject key identifier: 69:D4:15:83:60:26:AF:F5:59:59:03:08:7B:D4:4B:1D:37:49:EB:1C
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 0188D7B06E64753931AF86058A810FF43611
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/adQVg2Amr_VZWQMIe9RLHTdJ6xw.roa
Signing time: Tue 20 Jun 2023 07:24:03 +0000
ROA not before: Tue 20 Jun 2023 07:24:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210573
IP address blocks: 156.17.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:b0:6e:64:75:39:31:af:86:05:8a:81:0f:f4:36:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jun 20 07:24:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69d415836026aff5595903087bd44b1d3749eb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:8e:f7:48:9a:55:e8:cb:64:98:a2:9a:24:
c1:19:87:e3:1c:09:f5:29:d4:7c:a2:29:b9:7a:70:
24:0c:6d:88:ef:99:be:74:ea:ae:4a:79:28:d0:98:
44:b6:43:a2:99:99:a7:22:89:bf:f3:04:a0:36:60:
70:0a:c5:f3:1d:77:4b:39:13:17:33:fb:9b:03:5f:
86:55:b6:2e:d3:3f:ee:e3:29:63:89:02:04:eb:f4:
c5:91:c1:57:c2:82:0d:42:19:37:b3:8a:82:7a:c9:
ef:4e:4d:65:39:49:9d:29:6a:c5:bd:ca:5c:3e:a6:
d6:44:e7:80:de:44:0b:74:aa:cb:d4:ea:a7:3b:1a:
df:12:0c:8a:b2:48:f4:11:9c:c7:50:36:51:f7:2a:
99:a6:1f:45:cd:50:4d:51:f3:28:39:52:e3:3c:3f:
e5:ae:fc:dc:7d:5c:2a:06:83:fc:65:f5:b6:31:17:
c8:b1:8c:38:c4:da:84:66:e5:4a:62:6e:00:40:9c:
0c:e2:fc:18:57:28:8c:37:45:f4:f8:ab:bb:09:55:
5d:47:0e:fc:8a:c4:c2:fc:9c:30:47:a2:bb:84:3f:
a5:84:f7:f0:aa:20:38:f6:4b:e2:b6:44:27:70:33:
d9:76:76:a9:d1:51:05:24:40:b9:83:4d:86:68:9f:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D4:15:83:60:26:AF:F5:59:59:03:08:7B:D4:4B:1D:37:49:EB:1C
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/adQVg2Amr_VZWQMIe9RLHTdJ6xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.17.215.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f3:f5:92:ed:24:f4:b1:1a:4d:4a:7b:09:7f:1c:cf:44:1c:
7b:ca:9b:d4:34:67:ba:9b:3b:5a:a8:eb:89:c0:e5:71:b5:33:
58:27:b1:e7:76:e0:1b:84:52:cc:d3:73:53:30:e1:85:8c:c3:
f6:42:6c:e2:8a:77:a4:fc:ab:a2:25:cd:68:0c:ab:53:57:ef:
6a:eb:e8:86:5c:5a:d6:2a:f9:1b:4c:f9:82:7d:de:ea:89:6a:
3d:e4:2d:13:46:5c:b9:7c:13:c4:db:3b:1c:43:c2:7e:cf:77:
68:83:b1:26:2c:08:df:e2:41:6d:ab:a5:e4:f0:76:8d:55:a4:
8e:3b:75:77:d7:b5:79:d9:fe:5e:db:91:28:87:b3:0b:40:39:
7f:f8:b1:91:76:53:00:f8:6b:db:ec:0e:5e:d3:e8:ec:73:67:
b2:86:be:9a:50:a1:22:ca:fe:84:ca:c9:84:2f:c7:d7:12:f3:
64:2c:c5:6d:b1:1a:9b:40:62:31:c4:29:23:47:b6:23:79:5f:
ec:59:51:83:09:a9:5e:d3:67:e3:18:a8:78:a2:25:6c:fd:08:
a9:04:63:d8:8e:90:11:fc:61:1a:fe:99:ae:b3:dc:e4:18:63:
4d:be:e6:84:01:0e:d2:3b:75:c6:3f:f7:09:b1:85:4b:c9:35:
e0:32:77:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjXsG5kdTkxr4YFioEP9DYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj
ZDVhYWUwHhcNMjMwNjIwMDcyNDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWQ0MTU4MzYwMjZhZmY1NTk1OTAzMDg3YmQ0NGIxZDM3NDllYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6GO90iaVejLZJiimiTBGYfjHAn1
KdR8oim5enAkDG2I75m+dOquSnko0JhEtkOimZmnIom/8wSgNmBwCsXzHXdLORMX
M/ubA1+GVbYu0z/u4yljiQIE6/TFkcFXwoINQhk3s4qCesnvTk1lOUmdKWrFvcpc
PqbWROeA3kQLdKrL1OqnOxrfEgyKskj0EZzHUDZR9yqZph9FzVBNUfMoOVLjPD/l
rvzcfVwqBoP8ZfW2MRfIsYw4xNqEZuVKYm4AQJwM4vwYVyiMN0X0+Ku7CVVdRw78
isTC/JwwR6K7hD+lhPfwqiA49kvitkQncDPZdnap0VEFJEC5g02GaJ90xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnUFYNgJq/1WVkDCHvUSx03SescMB8GA1UdIwQY
MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt
ZjZiNzhlMmIxN2ExLzEvYWRRVmcyQW1yX1ZaV1FNSWU5UkxIVGRKNnh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex
LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnBHXMA0G
CSqGSIb3DQEBCwUAA4IBAQBy8/WS7ST0sRpNSnsJfxzPRBx7ypvUNGe6mztaqOuJ
wOVxtTNYJ7HnduAbhFLM03NTMOGFjMP2Qmziinek/KuiJc1oDKtTV+9q6+iGXFrW
KvkbTPmCfd7qiWo95C0TRly5fBPE2zscQ8J+z3dog7EmLAjf4kFtq6Xk8HaNVaSO
O3V317V52f5e25Eoh7MLQDl/+LGRdlMA+Gvb7A5e0+jsc2eyhr6aUKEiyv6EysmE
L8fXEvNkLMVtsRqbQGIxxCkjR7YjeV/sWVGDCale02fjGKh4oiVs/QipBGPYjpAR
/GEa/pmus9zkGGNNvuaEAQ7SO3XGP/cJsYVLyTXgMncF
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:35 2025 by rpki-client