Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/eVR0q7rqbo_pydKWLrpAB-BWuQA.roa
File: eVR0q7rqbo_pydKWLrpAB-BWuQA.roa (raw, json)
Hash identifier: B4v2Pa1I9ZHihg3YvtBJ3JsoBeUllb4v4zgjffJC17M=
Subject key identifier: 79:54:74:AB:BA:EA:6E:8F:E9:C9:D2:96:2E:BA:40:07:E0:56:B9:00
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 0185720C88A0A16A111A53D0D6DE98811DE5
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/eVR0q7rqbo_pydKWLrpAB-BWuQA.roa
Signing time: Mon 02 Jan 2023 10:35:02 +0000
ROA not before: Mon 02 Jan 2023 10:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34002
IP address blocks: 209.222.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:88:a0:a1:6a:11:1a:53:d0:d6:de:98:81:1d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Jan 2 10:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=795474abbaea6e8fe9c9d2962eba4007e056b900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:37:83:4c:b5:cf:6c:9f:6d:d3:2c:32:08:87:
1c:ce:34:6c:f9:85:63:4a:b6:c4:67:bd:a4:c7:6c:
39:5a:2e:92:76:33:c7:ce:24:76:22:a3:45:53:64:
ba:e3:3f:2e:eb:6a:5e:90:bf:ee:6b:13:bf:0a:46:
4f:6c:27:af:03:7d:df:bd:20:34:0e:45:14:e6:75:
b4:89:52:f3:4a:a0:1c:9d:e1:49:81:a2:2a:3f:99:
f0:5f:8e:7d:6c:69:6c:94:f3:35:7a:e4:02:a3:6e:
4b:2c:bb:2a:d3:71:ef:a2:33:04:fa:9b:38:30:e9:
97:f4:b7:98:2d:b7:b1:5f:c8:9f:99:7e:1b:c5:69:
d5:bf:6b:c3:ed:02:3c:7b:74:74:1c:ab:2f:28:ce:
20:b4:47:47:38:82:87:60:85:91:7f:9c:d8:fb:a7:
16:2b:12:24:ab:fe:67:49:4f:34:34:c4:e7:cb:ff:
dd:c9:16:b4:59:87:c5:a8:c2:dd:d1:36:5b:33:4f:
dd:8d:80:2e:d7:48:e4:0c:19:0d:87:26:1c:13:75:
a6:c5:e8:2a:8d:ce:81:46:00:9c:6b:dc:d5:c2:6d:
8e:7e:a2:1f:3d:23:24:9c:88:70:13:ac:c6:8e:7e:
0b:11:d9:27:11:7e:ce:3c:7e:4c:66:91:48:6d:fb:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:74:AB:BA:EA:6E:8F:E9:C9:D2:96:2E:BA:40:07:E0:56:B9:00
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/eVR0q7rqbo_pydKWLrpAB-BWuQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.222.77.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ba:38:79:6e:5a:03:23:6b:2b:44:7a:fd:8c:c5:fd:8e:b5:
99:5b:28:33:ea:b1:c4:f1:37:93:cd:e5:61:d9:ea:29:50:ee:
7a:95:a3:4a:92:9f:57:4e:5f:ab:11:b9:cb:90:1f:21:91:54:
cd:e3:1d:a0:4c:06:38:be:1b:fe:90:d3:2c:c1:0f:87:cf:35:
6a:d6:c0:94:22:bb:08:fd:a7:80:8f:2a:3c:7b:92:d6:8f:82:
6d:7e:ec:96:26:00:fa:8c:2b:05:73:28:39:08:c4:48:1b:be:
cf:2d:56:a8:a8:21:12:79:70:66:f1:bd:81:68:59:a1:92:24:
18:f8:14:bf:75:de:41:d9:9e:ad:f8:ba:00:53:12:7b:ed:aa:
48:b3:44:b6:7e:1d:0f:2f:08:29:65:91:e1:5b:75:2a:f4:3c:
51:30:04:30:09:09:fe:76:b9:62:ff:0c:15:e7:de:4e:45:4e:
30:43:d7:07:31:28:36:eb:94:87:10:f3:2e:65:a7:7a:56:1b:
81:2b:21:b0:ae:cf:df:ef:36:2d:1b:ff:1c:98:19:62:80:3a:
a3:f8:ce:de:40:64:ee:9e:1a:16:26:df:4f:08:3a:9b:f2:53:
b7:ec:b6:46:c3:18:ba:ab:fe:89:41:f4:73:91:bf:5d:86:e7:
9c:48:f5:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyDIigoWoRGlPQ1t6YgR3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj
ZmJmYWYwHhcNMjMwMTAyMTAzNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTU0NzRhYmJhZWE2ZThmZTljOWQyOTYyZWJhNDAwN2UwNTZiOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzeDTLXPbJ9t0ywyCIcczjRs+YVj
SrbEZ72kx2w5Wi6SdjPHziR2IqNFU2S64z8u62pekL/uaxO/CkZPbCevA33fvSA0
DkUU5nW0iVLzSqAcneFJgaIqP5nwX459bGlslPM1euQCo25LLLsq03HvojME+ps4
MOmX9LeYLbexX8ifmX4bxWnVv2vD7QI8e3R0HKsvKM4gtEdHOIKHYIWRf5zY+6cW
KxIkq/5nSU80NMTny//dyRa0WYfFqMLd0TZbM0/djYAu10jkDBkNhyYcE3Wmxegq
jc6BRgCca9zVwm2OfqIfPSMknIhwE6zGjn4LEdknEX7OPH5MZpFIbftP7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHlUdKu66m6P6cnSli66QAfgVrkAMB8GA1UdIwQY
MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et
YTczMGNjZmRhZGM1LzEvZVZSMHE3cnFib19weWRLV0xycEFCLUJXdVFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1
LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d5NMA0G
CSqGSIb3DQEBCwUAA4IBAQBgujh5bloDI2srRHr9jMX9jrWZWygz6rHE8TeTzeVh
2eopUO56laNKkp9XTl+rEbnLkB8hkVTN4x2gTAY4vhv+kNMswQ+HzzVq1sCUIrsI
/aeAjyo8e5LWj4JtfuyWJgD6jCsFcyg5CMRIG77PLVaoqCESeXBm8b2BaFmhkiQY
+BS/dd5B2Z6t+LoAUxJ77apIs0S2fh0PLwgpZZHhW3Uq9DxRMAQwCQn+drli/wwV
595ORU4wQ9cHMSg265SHEPMuZad6VhuBKyGwrs/f7zYtG/8cmBligDqj+M7eQGTu
nhoWJt9PCDqb8lO37LZGwxi6q/6JQfRzkb9dhuecSPUF
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:56 2025 by rpki-client