Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/bxy5_XKVV_Oib3DBZDbRwop9JvM.roa
File: bxy5_XKVV_Oib3DBZDbRwop9JvM.roa (raw, json)
Hash identifier: mc1WmxNfPl83OvOtAOMbiYUiZSfXE3AxePA1KuKJ5BA=
Subject key identifier: 6F:1C:B9:FD:72:95:57:F3:A2:6F:70:C1:64:36:D1:C2:8A:7D:26:F3
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 01856B81200BE346928A9B17DFBC0ADD8FFB
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/bxy5_XKVV_Oib3DBZDbRwop9JvM.roa
Signing time: Sun 01 Jan 2023 04:05:02 +0000
ROA not before: Sun 01 Jan 2023 04:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204448
IP address blocks: 89.25.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:20:0b:e3:46:92:8a:9b:17:df:bc:0a:dd:8f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 04:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f1cb9fd729557f3a26f70c16436d1c28a7d26f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:fa:00:f4:f3:3a:e9:55:6e:60:c0:b2:94:
7c:6c:87:9e:af:f3:a9:94:4b:5c:9e:63:cc:f9:61:
31:28:b1:de:ec:3e:c2:99:c1:35:cf:2a:f3:24:f2:
7c:b6:00:15:2d:a2:ca:c4:41:93:6a:61:c4:a5:e8:
42:8a:7c:d9:4e:2a:2d:32:7f:56:4d:9e:ee:0a:7a:
1f:9f:07:4c:02:ae:79:5f:50:be:7d:dc:ba:55:95:
88:de:f9:c4:e5:84:77:76:81:3b:a5:f9:bd:31:3e:
0c:6d:34:15:c5:2a:f7:9a:b5:13:5b:1d:06:ab:e5:
1f:d2:61:be:18:dc:b1:f4:50:9b:7b:68:b9:03:31:
02:32:00:f8:32:88:c4:cb:54:88:30:47:c3:0f:d6:
3e:57:dc:a8:0e:8a:8b:a5:2c:25:2c:50:73:3d:f0:
d8:75:ed:7b:37:12:8d:05:9f:2c:d5:94:05:bb:9f:
ad:f1:d8:92:b3:77:a5:48:d7:1d:ac:8c:a4:69:a3:
05:c9:bb:2c:e7:9b:68:3d:18:03:be:d9:d6:33:5e:
2d:c6:27:dd:7c:f0:6d:f7:ef:96:62:ff:df:df:d0:
48:9f:26:6c:35:99:89:6c:83:94:76:9c:de:02:4b:
2e:82:ee:ed:e7:16:09:da:a7:48:a4:b6:e4:19:95:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1C:B9:FD:72:95:57:F3:A2:6F:70:C1:64:36:D1:C2:8A:7D:26:F3
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/bxy5_XKVV_Oib3DBZDbRwop9JvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.34.0/24
Signature Algorithm: sha256WithRSAEncryption
38:25:f8:bb:92:df:a4:fe:54:4d:ef:d5:ec:68:85:c3:e7:0f:
65:15:67:6b:21:6f:5a:a2:ac:55:e8:5d:de:b4:0e:36:05:21:
ba:bf:de:56:4f:6c:72:57:f0:a4:4d:d6:f2:12:69:b5:fe:9e:
ad:90:68:ec:7e:75:d3:27:62:a2:70:b7:ef:47:c4:df:75:43:
62:ef:a7:21:b6:f5:14:04:18:1d:04:49:ca:82:b9:47:bd:b8:
c5:87:6c:1b:02:ef:38:65:36:a5:34:d1:bc:b5:a3:36:8e:08:
af:ed:7f:fe:39:3e:db:f3:f7:f4:6b:02:39:98:a7:e2:29:21:
cf:4c:0e:19:2c:25:2b:97:43:75:40:4b:99:61:46:19:65:d2:
2c:f3:52:a4:ab:de:72:93:69:fc:b2:b4:51:49:37:eb:1c:c3:
36:30:83:6d:da:d9:c0:e7:7e:23:4e:4a:75:31:b7:91:16:7d:
2d:83:a0:b4:b3:3d:4d:58:51:a6:a1:ac:ce:6a:e8:82:17:a5:
2d:77:97:61:08:e3:9f:12:9c:64:ec:8c:e4:2c:74:9c:88:91:
95:3b:79:22:4f:3b:1e:31:d1:4d:d1:90:1a:da:18:12:fc:c7:
fb:85:b7:b2:a9:52:b4:c9:be:ca:82:5f:aa:ca:a0:07:0c:f8:
a9:ea:de:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrgSAL40aSipsX37wK3Y/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw
MWFiNDEwHhcNMjMwMTAxMDQwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjFjYjlmZDcyOTU1N2YzYTI2ZjcwYzE2NDM2ZDFjMjhhN2QyNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxf6APTzOulVbmDAspR8bIeer/Op
lEtcnmPM+WExKLHe7D7CmcE1zyrzJPJ8tgAVLaLKxEGTamHEpehCinzZTiotMn9W
TZ7uCnofnwdMAq55X1C+fdy6VZWI3vnE5YR3doE7pfm9MT4MbTQVxSr3mrUTWx0G
q+Uf0mG+GNyx9FCbe2i5AzECMgD4MojEy1SIMEfDD9Y+V9yoDoqLpSwlLFBzPfDY
de17NxKNBZ8s1ZQFu5+t8diSs3elSNcdrIykaaMFybss55toPRgDvtnWM14txifd
fPBt9++WYv/f39BInyZsNZmJbIOUdpzeAksugu7t5xYJ2qdIpLbkGZUiBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG8cuf1ylVfzom9wwWQ20cKKfSbzMB8GA1UdIwQY
MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt
Y2Y5ZGM1YmFhYTc5LzEvYnh5NV9YS1ZWX09pYjNEQlpEYlJ3b3A5SnZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5
LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRkiMA0G
CSqGSIb3DQEBCwUAA4IBAQA4Jfi7kt+k/lRN79XsaIXD5w9lFWdrIW9aoqxV6F3e
tA42BSG6v95WT2xyV/CkTdbyEmm1/p6tkGjsfnXTJ2KicLfvR8TfdUNi76chtvUU
BBgdBEnKgrlHvbjFh2wbAu84ZTalNNG8taM2jgiv7X/+OT7b8/f0awI5mKfiKSHP
TA4ZLCUrl0N1QEuZYUYZZdIs81Kkq95yk2n8srRRSTfrHMM2MINt2tnA534jTkp1
MbeRFn0tg6C0sz1NWFGmoazOauiCF6Utd5dhCOOfEpxk7IzkLHSciJGVO3kiTzse
MdFN0ZAa2hgS/Mf7hbeyqVK0yb7Kgl+qyqAHDPip6t6s
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:18 2025 by rpki-client