Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/JDSOp3wW-NDwriK_sb5Um0aQPHE.roa
File: JDSOp3wW-NDwriK_sb5Um0aQPHE.roa (raw, json)
Hash identifier: Qc3/mqiUpv79d+/IFCfAPflL5+FD5hT3haQmKgEEDWM=
Subject key identifier: 24:34:8E:A7:7C:16:F8:D0:F0:AE:22:BF:B1:BE:54:9B:46:90:3C:71
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 059142D4
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/JDSOp3wW-NDwriK_sb5Um0aQPHE.roa
Signing time: Sat 01 Jan 2022 05:03:21 +0000
ROA not before: Sat 01 Jan 2022 05:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41227
IP address blocks: 194.34.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93405908 (0x59142d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Jan 1 05:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24348ea77c16f8d0f0ae22bfb1be549b46903c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:aa:30:b8:65:3e:aa:33:69:bc:35:d9:3e:
44:07:3c:86:ed:5c:98:db:f2:f9:2d:44:ec:da:67:
90:21:e2:d0:24:24:57:ac:3a:94:ef:41:22:92:1e:
c7:f1:9a:3c:b7:4e:5c:78:70:47:ce:b0:c4:0d:48:
df:3d:dd:3a:e6:c4:11:38:6c:f2:5a:cf:64:e9:d8:
44:cd:3c:ba:35:28:12:2b:22:fb:e7:fa:6e:86:9c:
d9:0c:cc:c1:2e:1d:7b:c1:31:d9:e9:81:6e:be:fa:
21:80:22:3d:49:01:ab:20:7f:07:e3:55:96:fa:23:
cf:2a:04:4f:86:14:78:eb:ce:16:30:ce:09:d2:00:
df:a2:72:2b:f0:b9:94:0a:4e:3d:55:ea:d6:ba:26:
b5:03:82:1d:3e:22:e6:12:ec:a1:d5:91:10:bb:d7:
a5:23:a0:c0:43:3c:e0:75:80:95:8f:34:d1:40:3f:
8e:4c:e9:35:f7:22:00:42:56:30:61:82:8b:9b:ac:
e3:fb:87:28:48:9f:c4:67:dd:98:ef:ef:4c:c5:d0:
f6:77:53:91:31:1e:f8:3a:c1:79:4a:cf:49:c2:10:
42:0d:93:b8:5b:25:29:b3:8d:90:cc:80:34:d9:34:
ae:91:8a:42:3e:39:b1:4e:f6:97:02:63:e5:0a:cc:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:8E:A7:7C:16:F8:D0:F0:AE:22:BF:B1:BE:54:9B:46:90:3C:71
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/JDSOp3wW-NDwriK_sb5Um0aQPHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.162.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b1:a8:93:1a:9c:41:f8:9c:93:e3:07:74:4b:a1:e5:b4:18:
f9:85:92:9f:be:9d:ac:5f:5d:df:40:51:06:a9:b6:f0:38:93:
27:8f:92:2c:76:f0:b3:de:46:27:98:74:bc:4a:9e:5e:a4:38:
c3:64:0f:29:29:6f:f3:71:3b:1a:e4:c0:d5:c7:ef:df:6f:b8:
a4:19:b9:d4:75:18:b0:f6:5c:59:4b:82:a3:65:24:92:46:20:
fc:a2:99:d8:4e:a2:06:35:6a:a7:3d:6a:d9:a2:99:aa:26:7a:
70:1b:12:30:78:3c:4e:6e:85:7f:8e:6b:21:86:48:b6:d7:85:
1a:9f:14:08:08:41:25:f7:4e:82:6d:f2:7b:84:68:13:b1:a3:
e4:25:43:ae:b1:8d:2c:cc:b7:d1:e6:e6:ca:f8:4e:7e:20:2d:
c8:de:a6:39:36:a4:0f:4e:a1:a0:84:c5:7b:53:b2:8b:08:bf:
9a:69:c9:95:4f:cb:e6:25:b2:4e:74:1c:3c:a9:6d:95:da:17:
fd:fe:69:a2:b5:73:f4:27:c8:01:d7:7f:3e:21:58:02:42:45:
b8:25:6b:43:19:5a:4f:80:ab:ca:23:55:f8:66:cd:d4:89:33:
d1:22:53:19:d7:9a:bb:13:4d:bd:e2:9b:bd:71:ec:cb:7f:34:
42:77:7e:20
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBZFC1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NTlkNTZjNTJjNzczM2Y4M2JlNzc0YWZhNDdiYmQ1NWQyODc5N2FjMB4XDTIyMDEw
MTA1MDMyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjQzNDhlYTc3YzE2
ZjhkMGYwYWUyMmJmYjFiZTU0OWI0NjkwM2M3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANghqjC4ZT6qM2m8Ndk+RAc8hu1cmNvy+S1E7NpnkCHi0CQk
V6w6lO9BIpIex/GaPLdOXHhwR86wxA1I3z3dOubEEThs8lrPZOnYRM08ujUoEisi
++f6boac2QzMwS4de8Ex2emBbr76IYAiPUkBqyB/B+NVlvojzyoET4YUeOvOFjDO
CdIA36JyK/C5lApOPVXq1romtQOCHT4i5hLsodWRELvXpSOgwEM84HWAlY800UA/
jkzpNfciAEJWMGGCi5us4/uHKEifxGfdmO/vTMXQ9ndTkTEe+DrBeUrPScIQQg2T
uFslKbONkMyANNk0rpGKQj45sU72lwJj5QrMsV8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQkNI6nfBb40PCuIr+xvlSbRpA8cTAfBgNVHSMEGDAWgBT1nVbFLHcz+Dvn
dK+ke71V0oeXrDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlaMVd4U3gzTV9nNzUzU3ZwSHU5VmRLSGw2dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWYvY2MxMDEzLTVkY2ItNGViYy1iNzllLTVjMDY3YjhiOTFhNS8x
L0pEU09wM3dXLU5Ed3JpS19zYjVVbTBhUVBIRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYv
Y2MxMDEzLTVkY2ItNGViYy1iNzllLTVjMDY3YjhiOTFhNS8xLzlaMVd4U3gzTV9n
NzUzU3ZwSHU5VmRLSGw2dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIiojANBgkqhkiG9w0BAQsFAAOC
AQEAbbGokxqcQfick+MHdEuh5bQY+YWSn76drF9d30BRBqm28DiTJ4+SLHbws95G
J5h0vEqeXqQ4w2QPKSlv83E7GuTA1cfv32+4pBm51HUYsPZcWUuCo2UkkkYg/KKZ
2E6iBjVqpz1q2aKZqiZ6cBsSMHg8Tm6Ff45rIYZItteFGp8UCAhBJfdOgm3ye4Ro
E7Gj5CVDrrGNLMy30ebmyvhOfiAtyN6mOTakD06hoITFe1Oyiwi/mmnJlU/L5iWy
TnQcPKltldoX/f5porVz9CfIAdd/PiFYAkJFuCVrQxlaT4CryiNV+GbN1Ikz0SJT
GdeauxNNveKbvXHsy380Qnd+IA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:24 2025 by rpki-client