Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/V9Swynf86GtR-YCKAcc88kH6BYg.roa
File: V9Swynf86GtR-YCKAcc88kH6BYg.roa (raw, json)
Hash identifier: aIycl9rX+xa40DAQLS8fEKvIbtaT8Mv6XHbh2JWQCcw=
Subject key identifier: 57:D4:B0:CA:77:FC:E8:6B:51:F9:80:8A:01:C7:3C:F2:41:FA:05:88
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 018571D7B0D52BBA18700CA5AAE4BC774B0C
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/V9Swynf86GtR-YCKAcc88kH6BYg.roa
Signing time: Mon 02 Jan 2023 09:37:18 +0000
ROA not before: Mon 02 Jan 2023 09:37:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209236
IP address blocks: 171.25.128.0/21 maxlen: 21
193.221.28.0/24 maxlen: 24
193.221.37.0/24 maxlen: 24
193.221.38.0/24 maxlen: 24
193.221.32.0/22 maxlen: 22
193.221.36.0/24 maxlen: 24
193.221.47.0/24 maxlen: 24
193.221.52.0/24 maxlen: 24
193.221.53.0/24 maxlen: 24
193.221.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:b0:d5:2b:ba:18:70:0c:a5:aa:e4:bc:77:4b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Jan 2 09:37:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57d4b0ca77fce86b51f9808a01c73cf241fa0588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:9a:f2:51:4f:c6:21:c3:3e:19:f6:27:b2:
e3:0d:29:82:0a:3c:c1:06:86:18:b4:8d:ea:f9:97:
16:f6:03:d7:c8:a3:fd:fe:29:42:40:39:11:cb:32:
cb:cd:1f:f2:19:8b:f3:86:6e:7b:6c:65:50:57:23:
e0:56:c7:0a:04:92:a5:2b:65:6a:1d:c3:2d:ce:1f:
fc:66:3c:a0:7b:4f:10:05:e2:a4:f6:a3:bd:94:8f:
ef:69:ec:15:6f:98:5e:51:cf:e7:f1:a8:a4:7d:8c:
27:46:a4:51:07:ab:27:77:c5:22:8f:ec:61:65:cf:
2c:72:26:14:44:ac:9d:2f:8d:96:3a:c5:7e:99:f3:
ac:67:26:c0:d7:08:d4:9b:e0:aa:ff:06:2b:bc:38:
8c:6d:59:e5:38:b9:e9:41:80:90:ff:9f:5c:2f:08:
86:20:06:a2:0b:b1:fd:ae:1d:59:8b:db:b8:c1:0d:
51:04:f1:62:4a:fd:6d:b4:c4:60:45:00:58:cb:bf:
c3:27:03:cd:b1:c3:cd:d4:ea:d0:a5:b6:5d:c3:8b:
e0:d8:4f:26:9f:7b:80:64:db:74:db:91:81:28:e5:
70:74:6b:68:fd:ac:5f:27:e1:af:06:0e:a2:71:7e:
42:2c:77:68:a8:32:2f:c3:c7:60:50:92:67:9e:26:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:B0:CA:77:FC:E8:6B:51:F9:80:8A:01:C7:3C:F2:41:FA:05:88
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/V9Swynf86GtR-YCKAcc88kH6BYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.128.0/21
193.221.28.0/24
193.221.32.0-193.221.38.255
193.221.47.0/24
193.221.52.0/23
193.221.59.0/24
Signature Algorithm: sha256WithRSAEncryption
34:78:d3:6f:f2:af:b5:7c:4b:d5:a5:7d:a1:47:2f:a9:23:4d:
85:d0:99:b5:ae:23:0f:8f:70:4c:60:b3:57:35:fe:92:22:75:
57:b0:03:be:11:aa:99:0e:76:26:73:f1:a4:bb:65:7f:53:11:
cd:01:7d:0b:bd:05:35:c7:ab:e5:a5:ff:c1:a7:3f:16:ae:d5:
4d:fc:8a:c6:d7:aa:9c:c3:1b:a8:a5:02:9f:b6:69:e9:76:5e:
5e:5d:db:7f:63:61:9f:74:45:64:03:bc:63:07:c7:ad:b0:07:
3c:ec:04:95:24:f6:9f:84:3d:46:21:c6:3a:53:e3:0c:74:bb:
3f:8a:b3:08:de:c9:8a:46:b5:c9:82:a3:4f:c9:30:fa:45:3a:
35:31:71:71:e9:57:4f:c8:2a:2a:96:48:99:ba:c2:35:a9:d4:
92:85:8f:9c:fb:9c:b5:c2:98:a5:65:fa:d3:39:d4:0d:84:fd:
13:ab:91:c9:56:f6:5b:fc:5f:7e:0c:a9:32:ba:28:b1:81:28:
9b:0e:d8:49:23:ed:65:e7:31:c4:0e:17:02:b0:2c:b9:48:0c:
c1:af:9a:55:84:a4:b1:a3:26:1e:e0:a3:f6:56:1f:e1:a9:5d:
c2:1c:b6:1e:ac:8f:d0:e8:e4:99:63:74:a6:1c:91:d6:09:06:
b2:3b:ae:bf
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYVx17DVK7oYcAylquS8d0sMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh
NGFlNDEwHhcNMjMwMTAyMDkzNzE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2Q0YjBjYTc3ZmNlODZiNTFmOTgwOGEwMWM3M2NmMjQxZmEwNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofKa8lFPxiHDPhn2J7LjDSmCCjzB
BoYYtI3q+ZcW9gPXyKP9/ilCQDkRyzLLzR/yGYvzhm57bGVQVyPgVscKBJKlK2Vq
HcMtzh/8Zjyge08QBeKk9qO9lI/vaewVb5heUc/n8aikfYwnRqRRB6snd8Uij+xh
Zc8sciYURKydL42WOsV+mfOsZybA1wjUm+Cq/wYrvDiMbVnlOLnpQYCQ/59cLwiG
IAaiC7H9rh1Zi9u4wQ1RBPFiSv1ttMRgRQBYy7/DJwPNscPN1OrQpbZdw4vg2E8m
n3uAZNt025GBKOVwdGto/axfJ+GvBg6icX5CLHdoqDIvw8dgUJJnniZWYwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFFfUsMp3/OhrUfmAigHHPPJB+gWIMB8GA1UdIwQY
MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt
MWIxMzYyYjliNmEyLzEvVjlTd3luZjg2R3RSLVlDS0FjYzg4a0g2QllnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy
LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQDqxmAAwQA
wd0cMAwDBAXB3SADBADB3SYDBADB3S8DBAHB3TQDBADB3TswDQYJKoZIhvcNAQEL
BQADggEBADR402/yr7V8S9WlfaFHL6kjTYXQmbWuIw+PcExgs1c1/pIidVewA74R
qpkOdiZz8aS7ZX9TEc0BfQu9BTXHq+Wl/8GnPxau1U38isbXqpzDG6ilAp+2ael2
Xl5d239jYZ90RWQDvGMHx62wBzzsBJUk9p+EPUYhxjpT4wx0uz+KswjeyYpGtcmC
o0/JMPpFOjUxcXHpV0/IKiqWSJm6wjWp1JKFj5z7nLXCmKVl+tM51A2E/ROrkclW
9lv8X34MqTK6KLGBKJsO2Ekj7WXnMcQOFwKwLLlIDMGvmlWEpLGjJh7go/ZWH+Gp
XcIcth6sj9Do5JljdKYckdYJBrI7rr8=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:47 2025 by rpki-client