Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/V759a9PSYp5d96KJaWX81rH-PTY.roa
File: V759a9PSYp5d96KJaWX81rH-PTY.roa (raw, json)
Hash identifier: WyEBg4I4Gd3zVPH+8G07awLRHDCyjgUiN7RJ0mZarEs=
Subject key identifier: 57:BE:7D:6B:D3:D2:62:9E:5D:F7:A2:89:69:65:FC:D6:B1:FE:3D:36
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 07646638
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/V759a9PSYp5d96KJaWX81rH-PTY.roa
Signing time: Sat 01 Jan 2022 13:59:58 +0000
ROA not before: Sat 01 Jan 2022 13:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57460
IP address blocks: 195.238.112.0/22 maxlen: 22
195.238.112.0/24 maxlen: 24
195.238.115.0/24 maxlen: 24
195.238.113.0/24 maxlen: 24
195.238.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124020280 (0x7646638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Jan 1 13:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57be7d6bd3d2629e5df7a2896965fcd6b1fe3d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:34:a0:1a:78:e7:32:32:ce:14:7b:2d:b9:
5a:e8:12:e0:fb:21:9e:16:a8:44:ac:7f:10:d8:e9:
b2:c2:95:18:55:4c:c8:5c:75:a7:4e:72:94:e0:ce:
08:cc:e7:ce:1f:ed:b6:c4:b4:a1:94:6f:7c:c1:b3:
e0:4f:a5:56:b4:2f:6d:3f:aa:b8:5a:b2:56:16:d6:
53:5f:27:bb:99:23:f2:d0:75:66:20:93:6e:3f:f3:
98:55:02:34:56:24:0c:5f:68:9d:a7:ce:0d:50:d4:
52:ec:47:1a:5d:20:16:7c:10:3b:a7:db:2e:04:c7:
c9:9a:68:ac:8c:61:51:83:96:15:af:e3:2b:87:33:
3d:09:e4:60:f1:4d:46:20:73:84:c8:69:32:49:b1:
f4:5f:12:a2:c2:6f:74:59:40:30:db:fb:7e:8f:dd:
41:cb:f1:7e:44:2f:66:4b:e9:5c:fb:2f:a5:d0:60:
12:fb:83:84:da:19:ce:78:cb:0e:18:21:34:b3:42:
c8:4b:28:53:67:98:4b:fd:d1:33:3c:6c:de:63:dc:
c0:f4:21:75:cf:2f:25:0c:51:7e:7f:41:04:00:62:
63:cc:99:66:20:05:a3:32:db:26:b4:f8:f7:33:57:
f6:13:fb:dd:e7:8a:71:0f:be:ea:a2:92:58:92:13:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BE:7D:6B:D3:D2:62:9E:5D:F7:A2:89:69:65:FC:D6:B1:FE:3D:36
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/V759a9PSYp5d96KJaWX81rH-PTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:84:70:db:99:37:db:18:1f:50:70:90:77:81:a3:da:4c:c4:
3e:f6:cf:df:d2:86:37:6e:e5:a3:0f:59:89:24:d2:47:40:f8:
d0:a3:5c:14:de:97:ca:be:f8:da:d2:71:9d:d9:67:0f:2c:a8:
30:c2:12:17:f5:30:cd:05:16:28:1e:a7:73:31:7a:05:13:24:
30:65:6d:59:f7:86:1f:a7:ea:c0:92:56:2d:95:e8:dd:72:bb:
fc:a3:f5:d2:fe:e7:ea:32:7a:05:92:f9:28:55:92:0e:40:58:
71:4b:22:14:a7:1d:77:b9:b0:4f:c0:9d:18:68:97:65:50:f8:
bc:d2:5e:5a:2d:66:d3:03:a0:f0:72:4c:25:72:81:22:0f:2f:
19:5a:27:04:6b:f8:13:6e:e4:1c:e0:cf:52:36:cc:53:6f:c5:
06:79:20:ca:c7:c0:56:4d:59:d0:56:54:b8:41:77:87:a5:38:
86:a4:2f:38:a6:3a:dc:73:45:8a:2b:9f:c0:88:dd:db:7d:71:
8a:14:47:3e:21:38:26:99:5f:dd:6b:71:71:c2:6b:ad:da:91:
e1:12:1a:ea:d0:45:28:4a:d7:68:72:70:8c:83:71:ba:d0:52:
83:9f:f1:4f:7d:6f:fe:f6:6f:99:68:ce:66:68:0b:da:02:b5:
bc:ff:86:6d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB2RmODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MWU2ZWE4MzkyNmJjNDc4Yzc4NTQ3MWQ4MDVhNWMxMjEwYThjOTkzMB4XDTIyMDEw
MTEzNTk1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTdiZTdkNmJkM2Qy
NjI5ZTVkZjdhMjg5Njk2NWZjZDZiMWZlM2QzNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJUbNKAaeOcyMs4Uey25WugS4PshnhaoRKx/ENjpssKVGFVM
yFx1p05ylODOCMznzh/ttsS0oZRvfMGz4E+lVrQvbT+quFqyVhbWU18nu5kj8tB1
ZiCTbj/zmFUCNFYkDF9onafODVDUUuxHGl0gFnwQO6fbLgTHyZporIxhUYOWFa/j
K4czPQnkYPFNRiBzhMhpMkmx9F8SosJvdFlAMNv7fo/dQcvxfkQvZkvpXPsvpdBg
EvuDhNoZznjLDhghNLNCyEsoU2eYS/3RMzxs3mPcwPQhdc8vJQxRfn9BBABiY8yZ
ZiAFozLbJrT49zNX9hP73eeKcQ++6qKSWJITlF8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRXvn1r09Jinl33oolpZfzWsf49NjAfBgNVHSMEGDAWgBRh5uqDkmvEeMeF
Rx2AWlwSEKjJkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1llYnFnNUpyeEhqSGhVY2RnRnBjRWhDb3laTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvNzRiZjQxLWQ2YTctNGZiNS04MDFjLTMzY2MzYWRiMWU3OC8x
L1Y3NTlhOVBTWXA1ZDk2S0phV1g4MXJILVBUWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
NzRiZjQxLWQ2YTctNGZiNS04MDFjLTMzY2MzYWRiMWU3OC8xL1llYnFnNUpyeEhq
SGhVY2RnRnBjRWhDb3laTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsPucDANBgkqhkiG9w0BAQsFAAOC
AQEAj4Rw25k32xgfUHCQd4Gj2kzEPvbP39KGN27low9ZiSTSR0D40KNcFN6Xyr74
2tJxndlnDyyoMMISF/UwzQUWKB6nczF6BRMkMGVtWfeGH6fqwJJWLZXo3XK7/KP1
0v7n6jJ6BZL5KFWSDkBYcUsiFKcdd7mwT8CdGGiXZVD4vNJeWi1m0wOg8HJMJXKB
Ig8vGVonBGv4E27kHODPUjbMU2/FBnkgysfAVk1Z0FZUuEF3h6U4hqQvOKY63HNF
iiufwIjd231xihRHPiE4Jplf3WtxccJrrdqR4RIa6tBFKErXaHJwjINxutBSg5/x
T31v/vZvmWjOZmgL2gK1vP+GbQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:50 2025 by rpki-client