Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/KIxhiLWI_-ri7pojVnIzzB6-HFA.roa
File: KIxhiLWI_-ri7pojVnIzzB6-HFA.roa (raw, json)
Hash identifier: oVd0GucXw+DdOsGA+TC1/ZXggZeMlZXdaUZB6y6cfZY=
Subject key identifier: 28:8C:61:88:B5:88:FF:EA:E2:EE:9A:23:56:72:33:CC:1E:BE:1C:50
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 0188C3A890C5F2E3B6386B9F9D1941930757
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/KIxhiLWI_-ri7pojVnIzzB6-HFA.roa
Signing time: Fri 16 Jun 2023 10:03:04 +0000
ROA not before: Fri 16 Jun 2023 10:03:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213273
IP address blocks: 81.163.192.0/23 maxlen: 23
81.163.194.0/24 maxlen: 24
2a13:1a81::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:a8:90:c5:f2:e3:b6:38:6b:9f:9d:19:41:93:07:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Jun 16 10:03:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=288c6188b588ffeae2ee9a23567233cc1ebe1c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:38:57:2a:71:47:9a:9c:95:8b:0b:10:69:de:
fb:91:ce:11:92:e4:3b:a5:bf:09:55:52:9d:d3:81:
c1:5a:d0:6a:cb:7c:bc:fd:6a:64:d7:23:1b:4f:a3:
8a:04:66:c0:22:a5:e8:56:ab:cc:bc:92:a3:c9:ec:
9a:80:61:c4:b5:bf:89:21:d7:e6:5c:01:3e:93:b6:
7e:20:09:30:95:24:f0:81:4a:da:18:02:3d:ea:b8:
19:e6:bd:70:4c:81:71:33:14:54:17:3c:32:73:9e:
d9:14:ba:de:14:1b:53:dd:bb:cd:77:35:76:e2:17:
ef:6b:2e:74:c3:40:c5:ec:96:6f:c7:f1:84:14:17:
da:b0:0c:10:ee:16:97:ae:63:c5:33:d6:9e:e2:2e:
84:c4:66:c7:17:8d:38:33:c1:b6:f5:fa:45:79:32:
9a:89:a5:c0:2f:cc:38:bd:7f:1c:e9:df:0b:6d:e8:
6d:32:2c:1a:e1:c5:45:76:25:ad:03:ee:7f:76:ff:
bc:ba:66:1c:f5:6b:f7:e3:20:55:71:52:a7:7b:54:
ce:43:c9:5f:53:ab:91:1d:5b:0d:5b:78:82:c1:2f:
8d:48:c5:a1:27:2b:40:90:cb:1d:3e:d3:48:bb:a6:
4c:0e:65:ea:a2:28:83:de:d5:2c:45:f1:ab:78:1c:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8C:61:88:B5:88:FF:EA:E2:EE:9A:23:56:72:33:CC:1E:BE:1C:50
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/KIxhiLWI_-ri7pojVnIzzB6-HFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.192.0-81.163.194.255
IPv6:
2a13:1a81::/32
Signature Algorithm: sha256WithRSAEncryption
3f:27:bf:98:46:5e:85:da:db:8a:2e:4f:81:b9:d9:8c:5b:90:
c0:52:47:4c:84:2f:2d:48:27:d3:08:09:4f:b0:2a:9a:bd:2f:
81:43:23:5b:d2:6e:56:5e:f0:bf:c1:b0:63:1e:37:20:cf:1e:
3c:f3:d3:94:7a:65:af:5c:96:ec:aa:32:88:80:37:32:41:1c:
d6:5e:05:07:b5:ac:50:d8:bb:67:74:5e:42:e8:97:48:ec:d3:
a4:e8:33:e2:15:94:45:7f:ae:48:c8:37:e4:8f:57:82:08:7c:
4e:96:a1:3c:9e:68:bf:04:c0:04:5d:ed:31:ae:d4:4a:49:29:
41:1e:b9:f2:90:e5:e2:b2:68:6d:d1:46:e9:e9:02:39:b1:5e:
7b:c3:81:b1:98:39:92:39:12:b8:44:c9:de:66:20:3d:7b:91:
af:75:84:cb:56:ea:0f:b2:3c:85:a8:15:9f:3c:bd:c2:f5:0f:
ec:6b:32:05:a7:c5:e8:99:18:ce:1e:b2:8c:c9:eb:2e:05:64:
6f:ed:92:ed:0d:f3:0b:fe:d0:c0:64:d7:d5:a1:8f:d5:54:6a:
cb:6e:99:b5:13:ea:2a:20:47:16:21:af:30:9c:85:5c:a9:ab:
a3:0a:a5:cc:4a:df:d7:7a:09:b4:5c:0f:bd:03:e7:13:8b:a1:
e6:ba:23:44
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYjDqJDF8uO2OGufnRlBkwdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWEyZjY3ZDI0NWNiYTk1MThiMDE3MDYxYTcxNjkyZWU3
OWU3ZmYwHhcNMjMwNjE2MTAwMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODhjNjE4OGI1ODhmZmVhZTJlZTlhMjM1NjcyMzNjYzFlYmUxYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zhXKnFHmpyViwsQad77kc4RkuQ7
pb8JVVKd04HBWtBqy3y8/Wpk1yMbT6OKBGbAIqXoVqvMvJKjyeyagGHEtb+JIdfm
XAE+k7Z+IAkwlSTwgUraGAI96rgZ5r1wTIFxMxRUFzwyc57ZFLreFBtT3bvNdzV2
4hfvay50w0DF7JZvx/GEFBfasAwQ7haXrmPFM9ae4i6ExGbHF404M8G29fpFeTKa
iaXAL8w4vX8c6d8LbehtMiwa4cVFdiWtA+5/dv+8umYc9Wv34yBVcVKne1TOQ8lf
U6uRHVsNW3iCwS+NSMWhJytAkMsdPtNIu6ZMDmXqoiiD3tUsRfGreBwtgQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFCiMYYi1iP/q4u6aI1ZyM8wevhxQMB8GA1UdIwQY
MBaAFBhaL2fSRcupUYsBcGGnFpLueef/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTkt
YmIwMThjZmJlYWEyLzEvS0l4aGlMV0lfLXJpN3BvalZuSXp6QjYtSEZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTktYmIwMThjZmJlYWEy
LzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAZRo8AD
BABRo8IwDQQCAAIwBwMFACoTGoEwDQYJKoZIhvcNAQELBQADggEBAD8nv5hGXoXa
24ouT4G52YxbkMBSR0yELy1IJ9MICU+wKpq9L4FDI1vSblZe8L/BsGMeNyDPHjzz
05R6Za9cluyqMoiANzJBHNZeBQe1rFDYu2d0XkLol0js06ToM+IVlEV/rkjIN+SP
V4IIfE6WoTyeaL8EwARd7TGu1EpJKUEeufKQ5eKyaG3RRunpAjmxXnvDgbGYOZI5
ErhEyd5mID17ka91hMtW6g+yPIWoFZ88vcL1D+xrMgWnxeiZGM4esozJ6y4FZG/t
ku0N8wv+0MBk19Whj9VUastumbUT6iogRxYhrzCchVypq6MKpcxK39d6CbRcD70D
5xOLoea6I0Q=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:30:02 2025 by rpki-client