Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/C7-9pFLqwS0wc8p88p0dY_rIHJM.roa
File: C7-9pFLqwS0wc8p88p0dY_rIHJM.roa (raw, json)
Hash identifier: IKwYR2kbhaKTwBH9ES/rT4T7wtrdbKcb4ti1quwr8wc=
Subject key identifier: 0B:BF:BD:A4:52:EA:C1:2D:30:73:CA:7C:F2:9D:1D:63:FA:C8:1C:93
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 018570D548F9011BEEF128769C9E9CBC5C5F
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/C7-9pFLqwS0wc8p88p0dY_rIHJM.roa
Signing time: Mon 02 Jan 2023 04:55:04 +0000
ROA not before: Mon 02 Jan 2023 04:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204146
IP address blocks: 194.31.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:48:f9:01:1b:ee:f1:28:76:9c:9e:9c:bc:5c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Jan 2 04:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bbfbda452eac12d3073ca7cf29d1d63fac81c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:be:ac:4c:39:dc:65:59:ac:e5:d6:aa:a1:
1d:d6:cb:5f:59:a7:f2:0a:78:67:34:b3:32:30:29:
4b:cc:7a:64:f1:63:36:3b:56:b1:4a:bc:79:c6:a6:
55:a8:2a:74:2e:f3:4e:f3:cb:56:40:6d:00:df:54:
be:11:95:32:ec:3d:5a:e9:79:e9:cc:3f:7e:b4:bb:
99:1e:e8:f0:2b:59:49:fa:f2:a6:28:bb:52:8a:3e:
82:51:e9:9e:b2:9c:b8:66:3b:93:9c:9e:1d:47:2a:
65:63:f2:8c:c7:79:c4:8b:e4:58:9c:89:a4:f5:3a:
76:30:a4:8c:b0:53:7e:54:24:58:f5:77:10:23:b4:
7c:fc:17:49:3c:3e:ac:14:67:16:ee:ee:62:bf:8b:
12:d0:96:6e:82:90:96:28:7b:77:00:de:84:1b:60:
18:8d:54:17:e5:16:4a:4a:7e:40:5a:4c:22:4e:95:
0e:03:fd:74:59:65:b6:26:73:b3:44:b4:cd:46:d4:
74:6e:18:6f:7f:8f:ad:0a:92:83:eb:bf:8e:76:64:
6f:b8:af:05:1f:da:17:bb:d3:02:87:06:1d:11:d7:
89:95:8e:bf:2e:b1:fc:a9:65:d4:09:9c:b7:19:be:
a1:26:5f:2c:57:36:bc:6b:9d:bb:16:a1:37:75:18:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BF:BD:A4:52:EA:C1:2D:30:73:CA:7C:F2:9D:1D:63:FA:C8:1C:93
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/C7-9pFLqwS0wc8p88p0dY_rIHJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.112.0/21
Signature Algorithm: sha256WithRSAEncryption
53:64:07:ee:c4:81:79:ff:62:40:be:d9:9c:18:c0:ec:a5:89:
b7:4b:3e:96:0b:91:30:f0:a5:de:b0:b9:00:e4:89:bf:f9:e5:
9d:c2:7a:4a:26:ad:66:9d:95:1f:14:5b:da:54:70:7d:52:96:
cf:f8:a0:93:98:6f:fa:1a:65:ef:9b:88:71:41:22:11:2a:7d:
42:aa:e9:3e:e2:01:9b:b3:2e:73:20:a5:16:7c:d0:14:2e:0d:
6c:a4:6f:a0:e8:b2:99:b1:f3:7e:c9:7d:6f:5a:f7:50:be:ec:
1e:51:ca:e7:d6:bb:a4:26:19:87:13:73:23:a6:7c:a3:aa:70:
53:60:f7:5a:89:6b:0e:34:72:0b:65:b1:a8:67:c2:e3:57:64:
91:af:9e:c5:99:e2:50:8b:93:bf:cf:a6:79:e2:54:3f:9a:b5:
ee:bf:00:c6:9c:72:62:29:1d:b1:42:22:32:47:95:14:02:55:
52:7a:33:53:91:69:b6:f1:65:9d:36:22:35:b7:a3:ff:09:18:
94:60:0b:5f:33:6c:7b:a6:80:d0:52:57:94:a4:d0:95:af:1e:
bb:b9:cc:8a:80:37:27:a5:5d:5a:ae:e9:69:b3:d8:79:b8:71:
e6:02:00:d7:72:e0:06:75:06:f0:7f:28:1c:c3:20:3f:22:72:
1a:68:a7:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw1Uj5ARvu8Sh2nJ6cvFxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjBmNjQ2YmM3ZjQ4OGNhZjVlYmRjYTgwNzJjMDlkNjNm
NjFhMjEwHhcNMjMwMTAyMDQ1NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmJmYmRhNDUyZWFjMTJkMzA3M2NhN2NmMjlkMWQ2M2ZhYzgxYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk66+rEw53GVZrOXWqqEd1stfWafy
CnhnNLMyMClLzHpk8WM2O1axSrx5xqZVqCp0LvNO88tWQG0A31S+EZUy7D1a6Xnp
zD9+tLuZHujwK1lJ+vKmKLtSij6CUemespy4ZjuTnJ4dRyplY/KMx3nEi+RYnImk
9Tp2MKSMsFN+VCRY9XcQI7R8/BdJPD6sFGcW7u5iv4sS0JZugpCWKHt3AN6EG2AY
jVQX5RZKSn5AWkwiTpUOA/10WWW2JnOzRLTNRtR0bhhvf4+tCpKD67+OdmRvuK8F
H9oXu9MChwYdEdeJlY6/LrH8qWXUCZy3Gb6hJl8sVza8a527FqE3dRh8HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAu/vaRS6sEtMHPKfPKdHWP6yByTMB8GA1UdIwQY
MBaAFNpg9ka8f0iMr169yoBywJ1j9hohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEt
ZGFiOWY4YmE4ZmI2LzEvQzctOXBGTHF3UzB3YzhwODhwMGRZX3JJSEpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEtZGFiOWY4YmE4ZmI2
LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwh9wMA0G
CSqGSIb3DQEBCwUAA4IBAQBTZAfuxIF5/2JAvtmcGMDspYm3Sz6WC5Ew8KXesLkA
5Im/+eWdwnpKJq1mnZUfFFvaVHB9UpbP+KCTmG/6GmXvm4hxQSIRKn1Cquk+4gGb
sy5zIKUWfNAULg1spG+g6LKZsfN+yX1vWvdQvuweUcrn1rukJhmHE3MjpnyjqnBT
YPdaiWsONHILZbGoZ8LjV2SRr57FmeJQi5O/z6Z54lQ/mrXuvwDGnHJiKR2xQiIy
R5UUAlVSejNTkWm28WWdNiI1t6P/CRiUYAtfM2x7poDQUleUpNCVrx67ucyKgDcn
pV1arulps9h5uHHmAgDXcuAGdQbwfygcwyA/InIaaKfz
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:01 2025 by rpki-client