Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/1-J6s6BwyBI2_jte4cKeiewdyti0.roa
File: 1-J6s6BwyBI2_jte4cKeiewdyti0.roa (raw, json)
Hash identifier: KFc31MtB8oyFrXAqybUZmxUPdi82GT/qsZCacsB4JIE=
Subject key identifier: F8:9E:AC:E8:1C:32:04:8D:BF:8E:D7:B8:70:A7:A2:7B:07:72:B6:2D
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 178B8D99
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/1-J6s6BwyBI2_jte4cKeiewdyti0.roa
Signing time: Sat 01 Jan 2022 15:04:59 +0000
ROA not before: Sat 01 Jan 2022 15:04:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197214
IP address blocks: 87.243.67.0/24 maxlen: 24
87.243.66.0/24 maxlen: 24
87.243.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395021721 (0x178b8d99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Jan 1 15:04:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f89eace81c32048dbf8ed7b870a7a27b0772b62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b5:7d:82:ca:5a:0f:1c:4c:f1:c9:47:07:68:
4c:f9:35:14:26:6c:3a:83:95:a9:55:03:d5:9f:fd:
74:48:a8:6e:79:7d:4b:40:2b:d5:c6:88:02:ae:fc:
9d:4a:5b:30:a9:27:79:ee:0e:70:e4:6c:1f:26:6d:
6d:93:9b:81:86:fa:29:6d:6a:10:61:4d:ef:8f:db:
98:9f:11:38:22:e4:8f:85:b0:74:e5:1e:b8:90:1d:
ef:b2:90:ed:bc:67:35:38:f2:34:d5:c4:80:1a:58:
41:87:39:00:66:2c:89:6a:ae:0c:35:ba:2d:36:33:
d7:b7:19:30:bd:1f:f1:d9:21:a4:04:4d:81:29:dd:
69:85:7b:15:8b:d5:26:9b:a5:18:48:95:cc:32:4a:
cc:40:ef:45:3d:88:5b:24:a6:53:41:32:7d:1e:e3:
b5:2f:0c:b2:82:f3:92:e9:01:4e:d3:aa:21:23:0b:
99:d4:c3:4b:72:c6:63:04:e0:f0:f8:12:18:8c:7d:
77:df:0e:f8:3e:65:ba:89:f7:3a:de:c8:da:e8:9d:
37:00:ef:eb:fc:c9:79:8d:7c:d9:b6:d5:2f:fd:8b:
d1:d2:e4:9c:c5:9d:50:ef:e2:07:4e:23:2d:c9:b0:
e6:70:ad:4f:a3:88:07:5e:a9:52:b7:a6:b1:ab:f5:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9E:AC:E8:1C:32:04:8D:BF:8E:D7:B8:70:A7:A2:7B:07:72:B6:2D
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/1-J6s6BwyBI2_jte4cKeiewdyti0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.243.65.0-87.243.67.255
Signature Algorithm: sha256WithRSAEncryption
f8:72:1d:69:04:ae:c9:42:f7:75:8d:e9:a8:8e:23:47:dd:ab:
99:51:bc:12:78:b3:d3:b8:d2:2f:7b:44:df:d7:3a:26:bb:67:
20:60:d1:2b:47:e1:52:1e:d0:81:2c:eb:b9:2d:ba:52:e6:54:
66:e1:ed:16:1c:37:63:d6:b1:5c:24:ff:11:61:a3:5c:4e:53:
a9:ea:f9:32:8b:a6:09:b1:ce:37:8d:c4:3f:95:4c:e3:8f:2d:
e5:14:0d:4a:67:fa:5c:fc:91:36:80:11:ee:99:06:31:6a:bf:
fe:85:7e:f2:87:62:5c:d5:da:23:88:fa:25:43:21:88:ce:0c:
31:c0:4d:88:65:6b:2c:f6:e7:00:7b:c3:56:f3:ee:c2:ce:96:
bf:a2:52:87:1b:bb:3b:81:8f:f6:ef:51:6f:59:99:bc:7b:54:
bb:c1:fd:cd:47:8e:bc:f8:67:80:dc:34:97:94:35:e7:7c:3a:
a0:31:76:56:09:ae:cd:1a:aa:b8:d9:d9:d4:b0:8a:bb:de:ae:
98:18:ee:65:38:c3:16:00:7e:cf:7a:1c:31:a9:66:50:70:08:
29:8c:dc:94:a0:a4:4c:8b:58:17:15:5f:83:8c:e4:6d:e3:6c:
41:af:16:6b:f6:25:d8:dd:02:65:2a:28:69:33:8b:d9:14:7d:
2f:3f:62:ae
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIEF4uNmTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MGQ0MzU3ODRkYThjMjE4ZTBmZjEwN2NkY2ZlMjRjYTQ1NjljOTQ5MB4XDTIyMDEw
MTE1MDQ1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjg5ZWFjZTgxYzMy
MDQ4ZGJmOGVkN2I4NzBhN2EyN2IwNzcyYjYyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOK1fYLKWg8cTPHJRwdoTPk1FCZsOoOVqVUD1Z/9dEiobnl9
S0Ar1caIAq78nUpbMKknee4OcORsHyZtbZObgYb6KW1qEGFN74/bmJ8ROCLkj4Ww
dOUeuJAd77KQ7bxnNTjyNNXEgBpYQYc5AGYsiWquDDW6LTYz17cZML0f8dkhpARN
gSndaYV7FYvVJpulGEiVzDJKzEDvRT2IWySmU0EyfR7jtS8MsoLzkukBTtOqISML
mdTDS3LGYwTg8PgSGIx9d98O+D5luon3Ot7I2uidNwDv6/zJeY182bbVL/2L0dLk
nMWdUO/iB04jLcmw5nCtT6OIB16pUremsav1NcsCAwEAAaOCAhIwggIOMB0GA1Ud
DgQWBBT4nqzoHDIEjb+O17hwp6J7B3K2LTAfBgNVHSMEGDAWgBTg1DV4TajCGOD/
EHzc/iTKRWnJSTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzROUTFlRTJvd2hqZ194QjgzUDRreWtWcHlVay5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvYTA1ZWJhLTlkODUtNDg5Yi1hZWM3LWVkNDJkM2E2MjVhNC8x
LzEtSjZzNkJ3eUJJMl9qdGU0Y0tlaWV3ZHl0aTAucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVk
L2EwNWViYS05ZDg1LTQ4OWItYWVjNy1lZDQyZDNhNjI1YTQvMS80TlExZUUyb3do
amdfeEI4M1A0a3lrVnB5VWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAFfzQQMEAlfzQDANBgkqhkiG
9w0BAQsFAAOCAQEA+HIdaQSuyUL3dY3pqI4jR92rmVG8Eniz07jSL3tE39c6Jrtn
IGDRK0fhUh7QgSzruS26UuZUZuHtFhw3Y9axXCT/EWGjXE5Tqer5MoumCbHON43E
P5VM448t5RQNSmf6XPyRNoAR7pkGMWq//oV+8odiXNXaI4j6JUMhiM4MMcBNiGVr
LPbnAHvDVvPuws6Wv6JShxu7O4GP9u9Rb1mZvHtUu8H9zUeOvPhngNw0l5Q153w6
oDF2VgmuzRqquNnZ1LCKu96umBjuZTjDFgB+z3ocMalmUHAIKYzclKCkTItYFxVf
g4zkbeNsQa8Wa/Yl2N0CZSooaTOL2RR9Lz9irg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:00:41 2025 by rpki-client