Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/G7bqQPQ7jzV-hnHvDrKVsaTFzSY.roa
File: G7bqQPQ7jzV-hnHvDrKVsaTFzSY.roa (raw, json)
Hash identifier: jvKzt/6hfJEAZySVSsgxBlj1JskhahZ4y5BVkzRAiNM=
Subject key identifier: 1B:B6:EA:40:F4:3B:8F:35:7E:86:71:EF:0E:B2:95:B1:A4:C5:CD:26
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 018572FA7FCC1DF05FC558350FDFD5B91083
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/G7bqQPQ7jzV-hnHvDrKVsaTFzSY.roa
Signing time: Mon 02 Jan 2023 14:54:57 +0000
ROA not before: Mon 02 Jan 2023 14:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49801
IP address blocks: 194.34.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:7f:cc:1d:f0:5f:c5:58:35:0f:df:d5:b9:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Jan 2 14:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bb6ea40f43b8f357e8671ef0eb295b1a4c5cd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:c2:6f:4d:f3:b4:bf:05:35:4a:e3:45:76:
62:78:8e:82:26:d1:69:be:b7:53:1c:8b:78:1c:1d:
63:9e:52:be:08:a5:d9:8a:01:e7:ad:6c:ba:b0:97:
94:00:d7:78:2a:de:cb:ff:10:0d:5b:2e:43:fd:9b:
47:b9:3c:20:12:f1:a4:38:2f:c6:47:7d:7b:e2:7e:
9b:84:c9:33:f7:f0:ff:48:56:75:4c:c3:db:f8:5a:
f9:8f:99:be:de:0e:c7:f9:b5:92:93:22:bd:47:df:
57:53:b2:c4:14:0d:ca:5e:74:1a:a3:79:c4:6c:61:
6b:97:84:21:6f:54:ba:d2:85:ae:8e:f4:c9:21:53:
1f:7b:11:d2:e2:da:b4:55:ad:1d:d1:75:a9:38:4d:
b8:59:6c:2f:44:d2:0a:65:a0:36:84:64:f1:fd:55:
70:30:86:13:a8:18:30:dd:a7:4b:24:ef:29:49:3e:
83:1e:52:ad:e9:1a:59:1a:75:57:ba:a3:d8:0d:94:
6c:fa:da:b1:92:5d:29:94:24:fc:34:2f:ab:27:85:
c3:f6:56:df:d9:38:df:eb:29:5c:ae:02:9c:49:d5:
bd:2b:5c:da:c9:13:b9:78:2e:4c:bb:f5:4a:0c:c4:
ee:27:68:0a:66:71:3e:16:43:79:1b:b4:b4:49:5c:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:EA:40:F4:3B:8F:35:7E:86:71:EF:0E:B2:95:B1:A4:C5:CD:26
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/G7bqQPQ7jzV-hnHvDrKVsaTFzSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.161.0/24
Signature Algorithm: sha256WithRSAEncryption
02:93:ec:cc:81:08:c0:77:66:22:04:8d:0c:32:3a:b1:03:b6:
95:b0:3b:9b:da:42:22:2a:e5:b6:a6:6e:14:e8:6f:6c:ef:17:
1a:7c:73:16:90:2b:d8:80:d9:99:c1:85:fc:27:21:c1:55:2c:
13:d8:51:fb:60:3f:ec:77:34:68:80:ab:96:56:16:92:71:e6:
33:ac:d7:12:4f:d3:83:a6:37:34:bd:a3:7d:a4:26:3e:7a:08:
8f:d0:a8:d9:d1:df:d6:7b:3a:13:a8:75:b5:c5:02:07:01:53:
7f:a3:ec:be:7b:37:63:6d:25:69:f2:11:30:7c:31:97:15:d7:
b5:8a:f5:12:95:de:84:db:2c:2b:23:79:8f:5f:96:08:68:b2:
6c:64:c6:c8:4e:32:77:4c:c9:d8:13:ce:29:3e:a8:e7:28:c9:
c0:2e:89:91:91:1d:d1:7e:df:05:86:03:f6:55:bb:16:a1:79:
7a:00:89:93:be:89:be:e2:b7:c1:f9:cb:25:6c:94:c3:5b:62:
35:ad:f9:5d:d4:97:8b:56:ff:fc:44:35:b5:90:59:e9:34:64:
54:cb:7a:ad:0b:b6:c9:9d:65:f2:e3:54:1a:69:12:14:16:c5:
d5:99:3e:3e:81:04:20:13:cf:5d:4d:d9:ec:fb:ef:ce:e0:b7:
6d:37:ac:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy+n/MHfBfxVg1D9/VuRCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OWQ1NmM1MmM3NzMzZjgzYmU3NzRhZmE0N2JiZDU1ZDI4
Nzk3YWMwHhcNMjMwMTAyMTQ1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmI2ZWE0MGY0M2I4ZjM1N2U4NjcxZWYwZWIyOTViMWE0YzVjZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRbCb03ztL8FNUrjRXZieI6CJtFp
vrdTHIt4HB1jnlK+CKXZigHnrWy6sJeUANd4Kt7L/xANWy5D/ZtHuTwgEvGkOC/G
R3174n6bhMkz9/D/SFZ1TMPb+Fr5j5m+3g7H+bWSkyK9R99XU7LEFA3KXnQao3nE
bGFrl4Qhb1S60oWujvTJIVMfexHS4tq0Va0d0XWpOE24WWwvRNIKZaA2hGTx/VVw
MIYTqBgw3adLJO8pST6DHlKt6RpZGnVXuqPYDZRs+tqxkl0plCT8NC+rJ4XD9lbf
2Tjf6ylcrgKcSdW9K1zayRO5eC5Mu/VKDMTuJ2gKZnE+FkN5G7S0SVybKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBu26kD0O481foZx7w6ylbGkxc0mMB8GA1UdIwQY
MBaAFPWdVsUsdzP4O+d0r6R7vVXSh5esMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVoxV3hTeDNNX2c3NTNTdnBIdTlWZEtIbDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYzEwMTMtNWRjYi00ZWJjLWI3OWUt
NWMwNjdiOGI5MWE1LzEvRzdicVFQUTdqelYtaG5IdkRyS1ZzYVRGelNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYzEwMTMtNWRjYi00ZWJjLWI3OWUtNWMwNjdiOGI5MWE1
LzEvOVoxV3hTeDNNX2c3NTNTdnBIdTlWZEtIbDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiKhMA0G
CSqGSIb3DQEBCwUAA4IBAQACk+zMgQjAd2YiBI0MMjqxA7aVsDub2kIiKuW2pm4U
6G9s7xcafHMWkCvYgNmZwYX8JyHBVSwT2FH7YD/sdzRogKuWVhaSceYzrNcST9OD
pjc0vaN9pCY+egiP0KjZ0d/WezoTqHW1xQIHAVN/o+y+ezdjbSVp8hEwfDGXFde1
ivUSld6E2ywrI3mPX5YIaLJsZMbITjJ3TMnYE84pPqjnKMnALomRkR3Rft8FhgP2
VbsWoXl6AImTvom+4rfB+cslbJTDW2I1rfld1JeLVv/8RDW1kFnpNGRUy3qtC7bJ
nWXy41QaaRIUFsXVmT4+gQQgE89dTdns++/O4LdtN6xw
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:36:50 2025 by rpki-client