Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/vNbE02Agz2GpMtYVUHyMPoUmqIU.roa
File: vNbE02Agz2GpMtYVUHyMPoUmqIU.roa (raw, json)
Hash identifier: K6q92ojqkpIM6+XNgpkLgwD1XRieXDBgk0RXkEOKhdI=
Subject key identifier: BC:D6:C4:D3:60:20:CF:61:A9:32:D6:15:50:7C:8C:3E:85:26:A8:85
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 01831C5DA8FC831F8E028CA5DEDDB404152F
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/vNbE02Agz2GpMtYVUHyMPoUmqIU.roa
Signing time: Thu 08 Sep 2022 09:10:43 +0000
ROA not before: Thu 08 Sep 2022 09:10:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209659
IP address blocks: 94.142.251.0/24 maxlen: 24
2a12:5bc1::/48 maxlen: 48
2a12:5bc0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:5d:a8:fc:83:1f:8e:02:8c:a5:de:dd:b4:04:15:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Sep 8 09:10:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcd6c4d36020cf61a932d615507c8c3e8526a885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:00:ad:80:fe:eb:ca:86:e7:40:cc:e6:e1:
f7:d3:ea:ba:64:fc:ec:dc:cf:24:0c:a0:aa:42:bf:
9a:02:fb:58:16:63:e5:35:3c:35:4e:26:5f:a0:1e:
16:15:f5:f2:96:a6:f8:d9:1f:73:a6:86:05:c4:77:
02:60:e8:cb:f7:7a:9a:ef:bf:76:5f:30:c3:8a:14:
08:72:6e:15:ab:c7:02:07:90:08:94:62:d4:44:f8:
24:f2:f9:d5:96:b3:26:82:f3:2d:52:03:6f:9f:66:
89:5a:a7:b2:d9:e8:2a:59:2f:c3:e8:35:2d:7d:36:
e8:e7:03:e1:2e:22:3a:c4:83:ac:9e:6f:85:25:08:
bf:65:23:82:4e:6b:57:bd:b1:17:b1:21:35:93:dd:
a4:8c:9d:a7:83:1b:44:37:c9:70:e7:08:f1:a2:8c:
c1:c5:7a:a5:88:c6:88:e7:e8:d1:9a:d4:45:32:62:
19:46:84:d9:14:9c:a7:50:7d:81:f3:2a:d3:6d:c5:
47:7e:3d:ab:15:ea:ad:36:25:05:94:21:ee:0c:92:
71:94:bd:62:8a:0e:de:b4:70:82:83:e5:1f:af:79:
cb:80:d0:04:ab:6e:6f:d5:e7:c3:fa:ad:6b:7c:6e:
c9:1a:36:3a:cb:22:23:6e:71:38:8b:96:83:e7:f2:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D6:C4:D3:60:20:CF:61:A9:32:D6:15:50:7C:8C:3E:85:26:A8:85
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/vNbE02Agz2GpMtYVUHyMPoUmqIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.251.0/24
IPv6:
2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ad:21:63:59:1b:8e:5a:53:fb:77:51:59:5b:87:39:98:68:31:
3c:bc:41:65:12:18:fd:71:42:64:0b:51:d4:a5:8f:d5:57:5f:
af:12:22:cd:f8:4b:76:38:fa:e2:7f:7e:18:1c:ea:f3:33:8c:
d6:dd:67:f8:fb:06:14:5c:00:88:5b:34:27:eb:00:5c:00:f1:
31:eb:f4:83:28:0e:68:d3:d2:8e:b7:ce:6c:6b:31:10:ce:88:
6a:5c:5f:7d:49:f4:07:ea:46:7b:7a:cc:03:80:ce:ab:d4:e6:
27:23:1e:9e:4d:6f:a8:e5:d5:da:0c:d3:92:92:22:2a:8b:81:
d9:10:2a:35:76:56:3d:0c:15:07:c8:f4:75:73:f2:3e:fb:d5:
e3:bf:35:5f:dd:be:f0:eb:9b:e9:7f:82:75:be:07:af:78:49:
e4:8f:da:43:3b:57:69:31:fe:04:26:48:1e:a7:fe:33:82:54:
73:4f:5c:d1:38:ed:31:ac:55:d0:4c:95:bd:8a:ad:c5:75:47:
ed:00:ac:2c:4c:40:95:05:ed:c3:19:9b:81:fc:c0:39:b4:78:
a7:92:19:98:5c:63:93:a3:ff:fc:8d:88:06:5d:d9:96:60:a0:
92:de:15:ab:33:4a:de:c5:75:03:95:48:9f:d4:7a:b5:74:43:
78:bd:9a:d0
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYMcXaj8gx+OAoyl3t20BBUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMTZmMGU5YWZmMzlhOGIxOTZjNDgzZTA4NWRlNzlmMjQ2
ZDlmZGQwHhcNMjIwOTA4MDkxMDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2Q2YzRkMzYwMjBjZjYxYTkzMmQ2MTU1MDdjOGMzZTg1MjZhODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCMArYD+68qG50DM5uH30+q6ZPzs
3M8kDKCqQr+aAvtYFmPlNTw1TiZfoB4WFfXylqb42R9zpoYFxHcCYOjL93qa7792
XzDDihQIcm4Vq8cCB5AIlGLURPgk8vnVlrMmgvMtUgNvn2aJWqey2egqWS/D6DUt
fTbo5wPhLiI6xIOsnm+FJQi/ZSOCTmtXvbEXsSE1k92kjJ2ngxtEN8lw5wjxoozB
xXqliMaI5+jRmtRFMmIZRoTZFJynUH2B8yrTbcVHfj2rFeqtNiUFlCHuDJJxlL1i
ig7etHCCg+Ufr3nLgNAEq25v1efD+q1rfG7JGjY6yyIjbnE4i5aD5/KZ4wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFLzWxNNgIM9hqTLWFVB8jD6FJqiFMB8GA1UdIwQY
MBaAFEEW8Omv85qLGWxIPghd558kbZ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAt
MjQwZDFmZmQwOWI4LzEvdk5iRTAyQWd6MkdwTXRZVlVIeU1Qb1VtcUlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAtMjQwZDFmZmQwOWI4
LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAXo77MBgE
AgACMBIwEAMFBioSW8ADBwAqElvBAAAwDQYJKoZIhvcNAQELBQADggEBAK0hY1kb
jlpT+3dRWVuHOZhoMTy8QWUSGP1xQmQLUdSlj9VXX68SIs34S3Y4+uJ/fhgc6vMz
jNbdZ/j7BhRcAIhbNCfrAFwA8THr9IMoDmjT0o63zmxrMRDOiGpcX31J9AfqRnt6
zAOAzqvU5icjHp5Nb6jl1doM05KSIiqLgdkQKjV2Vj0MFQfI9HVz8j771eO/NV/d
vvDrm+l/gnW+B694SeSP2kM7V2kx/gQmSB6n/jOCVHNPXNE47TGsVdBMlb2KrcV1
R+0ArCxMQJUF7cMZm4H8wDm0eKeSGZhcY5Oj//yNiAZd2ZZgoJLeFaszSt7FdQOV
SJ/UerV0Q3i9mtA=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:49 2025 by rpki-client