Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/vxi3sfH8NaHumAuWXXYmqJEJbGs.roa
File: vxi3sfH8NaHumAuWXXYmqJEJbGs.roa (raw, json)
Hash identifier: At1Bkg4hWdDxhGJqkALSH6b+LHDYaAfZAcPljrkvrQQ=
Subject key identifier: BF:18:B7:B1:F1:FC:35:A1:EE:98:0B:96:5D:76:26:A8:91:09:6C:6B
Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial: 01856DD3EE2250E43992DEBDDE86468B6A95
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/vxi3sfH8NaHumAuWXXYmqJEJbGs.roa
Signing time: Sun 01 Jan 2023 14:54:43 +0000
ROA not before: Sun 01 Jan 2023 14:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12843
IP address blocks: 194.24.242.0/24 maxlen: 24
194.24.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:ee:22:50:e4:39:92:de:bd:de:86:46:8b:6a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Validity
Not Before: Jan 1 14:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf18b7b1f1fc35a1ee980b965d7626a891096c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:31:2f:35:be:fe:e0:96:c6:f5:c4:11:06:02:
1e:bc:75:8d:43:a1:b9:13:bc:7e:96:74:ae:41:ac:
7d:f8:68:7a:e3:10:fd:6c:90:c5:f5:0b:0a:c0:6f:
9e:c3:52:04:6c:e0:b7:d3:8a:9b:bc:b5:e0:de:6c:
4b:9e:a2:2d:cf:f3:ea:56:ad:6a:41:d6:f4:29:2c:
14:35:7a:5e:f6:f7:86:05:56:e8:f5:b8:f0:af:11:
17:31:56:67:ac:da:d9:25:fe:b7:83:99:f6:8a:ac:
ac:9b:9d:e4:b7:8c:30:e2:36:7e:22:1a:2d:30:fb:
e3:0f:75:c0:23:f4:a8:3b:00:d1:8d:15:7c:75:98:
1d:ae:39:72:4e:50:7b:fb:99:f8:a6:51:f0:d2:33:
02:2a:5a:cd:7c:5b:94:8d:55:4c:56:2a:7b:d0:d6:
50:ee:48:78:09:ac:20:49:3f:ad:19:c4:50:85:0f:
2f:08:cf:21:7b:2b:71:b0:ef:f0:98:9f:5d:d9:7a:
e7:03:27:4b:d2:f2:8d:a5:54:98:90:2a:b9:3b:86:
d7:01:ca:cf:97:a5:d1:2a:98:b7:84:ec:61:31:b8:
2a:62:e2:2c:89:bc:bb:ab:7e:7a:af:30:ba:f7:e5:
9c:59:1d:d3:79:0b:9d:41:45:45:05:03:54:30:5f:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:18:B7:B1:F1:FC:35:A1:EE:98:0B:96:5D:76:26:A8:91:09:6C:6B
X509v3 Authority Key Identifier:
keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/vxi3sfH8NaHumAuWXXYmqJEJbGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.242.0/23
Signature Algorithm: sha256WithRSAEncryption
72:8a:79:d0:cd:d0:3d:61:25:4b:e2:f7:90:55:e2:1d:99:14:
71:84:cd:0c:96:c6:12:71:8f:c0:70:32:52:fd:a7:91:4d:e1:
58:01:44:97:da:42:2e:bd:0b:0e:1b:6a:55:d1:e7:ac:47:26:
f3:ce:54:60:b0:00:f4:a0:ec:86:71:e2:af:38:57:a0:75:f1:
cf:d6:95:7b:ea:3c:38:83:a6:3d:49:fe:42:09:66:62:7d:95:
52:05:21:58:a2:c8:bb:05:24:4c:fe:ae:0c:ac:1a:2f:9f:6d:
ce:e5:da:25:fa:ff:71:44:0d:51:3c:62:48:ce:7f:41:99:54:
43:33:c9:9e:2a:0b:1b:28:e4:7d:5e:cc:c4:99:6c:70:42:93:
93:ce:90:1a:a2:06:a7:f5:9d:2a:ed:24:f2:67:ac:39:0d:25:
94:70:d1:66:c4:81:5e:b0:26:b7:8b:df:b3:45:dc:f4:5d:67:
c3:e5:01:a2:61:16:3f:2d:ea:3e:a8:8c:6b:b7:3d:58:cf:e6:
81:0f:f1:21:1a:66:eb:80:b2:a8:9a:54:46:de:8d:7e:3c:88:
b6:0e:c4:a1:ff:ed:6c:4c:e4:d1:71:58:c5:97:13:74:47:c5:
01:c1:c9:f6:d4:80:77:72:ed:d6:a0:15:d5:83:d0:e2:e0:0d:
14:60:f0:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt0+4iUOQ5kt693oZGi2qVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTRiMGNjMmMzZjZiNzU3ZmY1MmNiYTE2NWQ5ZmZhODhj
ZWQzMGYwHhcNMjMwMTAxMTQ1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjE4YjdiMWYxZmMzNWExZWU5ODBiOTY1ZDc2MjZhODkxMDk2YzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTEvNb7+4JbG9cQRBgIevHWNQ6G5
E7x+lnSuQax9+Gh64xD9bJDF9QsKwG+ew1IEbOC304qbvLXg3mxLnqItz/PqVq1q
Qdb0KSwUNXpe9veGBVbo9bjwrxEXMVZnrNrZJf63g5n2iqysm53kt4ww4jZ+Ihot
MPvjD3XAI/SoOwDRjRV8dZgdrjlyTlB7+5n4plHw0jMCKlrNfFuUjVVMVip70NZQ
7kh4CawgST+tGcRQhQ8vCM8heytxsO/wmJ9d2XrnAydL0vKNpVSYkCq5O4bXAcrP
l6XRKpi3hOxhMbgqYuIsiby7q356rzC69+WcWR3TeQudQUVFBQNUMF9XXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL8Yt7Hx/DWh7pgLll12JqiRCWxrMB8GA1UdIwQY
MBaAFHZUsMwsP2t1f/UsuhZdn/qIztMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEt
OGIxNTZkYjRmZjM1LzEvdnhpM3NmSDhOYUh1bUF1V1hYWW1xSkVKYkdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEtOGIxNTZkYjRmZjM1
LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwhjyMA0G
CSqGSIb3DQEBCwUAA4IBAQByinnQzdA9YSVL4veQVeIdmRRxhM0MlsYScY/AcDJS
/aeRTeFYAUSX2kIuvQsOG2pV0eesRybzzlRgsAD0oOyGceKvOFegdfHP1pV76jw4
g6Y9Sf5CCWZifZVSBSFYosi7BSRM/q4MrBovn23O5dol+v9xRA1RPGJIzn9BmVRD
M8meKgsbKOR9XszEmWxwQpOTzpAaogan9Z0q7STyZ6w5DSWUcNFmxIFesCa3i9+z
Rdz0XWfD5QGiYRY/Leo+qIxrtz1Yz+aBD/EhGmbrgLKomlRG3o1+PIi2DsSh/+1s
TOTRcVjFlxN0R8UBwcn21IB3cu3WoBXVg9Di4A0UYPB4
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:40:48 2025 by rpki-client