Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/RlCLG7a5jLKk45190Gwd5Aw5LOs.roa
File: RlCLG7a5jLKk45190Gwd5Aw5LOs.roa (raw, json)
Hash identifier: CfdVD7pbx5lNy9bbUPA48+ZvMnnZFveFKyUkYJlB8WA=
Subject key identifier: 46:50:8B:1B:B6:B9:8C:B2:A4:E3:9D:7D:D0:6C:1D:E4:0C:39:2C:EB
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01857315F83D63B6ACCFD85F79E57E78E23B
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/RlCLG7a5jLKk45190Gwd5Aw5LOs.roa
Signing time: Mon 02 Jan 2023 15:24:57 +0000
ROA not before: Mon 02 Jan 2023 15:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 194.169.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f8:3d:63:b6:ac:cf:d8:5f:79:e5:7e:78:e2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 2 15:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46508b1bb6b98cb2a4e39d7dd06c1de40c392ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:91:f1:f1:b2:49:ff:e9:cf:79:8f:16:08:
c8:b4:92:f1:8a:2c:8a:12:0f:a6:dd:a0:b0:88:d5:
2a:a5:8b:97:9c:64:b2:5d:38:ec:ba:db:91:6a:51:
2d:f9:78:2f:69:9e:b3:43:a1:26:77:fd:41:b7:1e:
90:ab:49:7c:44:6a:03:a0:98:1a:7b:ad:ba:99:59:
b1:6d:6d:06:3b:67:76:d0:72:91:26:46:d3:6a:d0:
a5:09:9c:3a:aa:81:80:26:0c:15:8a:8d:24:40:42:
e7:bf:f6:6f:0d:24:98:bc:c8:69:6f:85:e3:a1:0e:
55:3a:ba:71:34:f4:93:2f:1c:e6:de:dc:e4:a0:ac:
10:72:6e:19:44:e5:21:ef:58:40:28:0b:72:5b:95:
12:24:a3:fc:ed:74:11:59:82:d8:71:60:0e:51:b1:
f5:b5:46:2c:d2:6d:13:05:c9:1b:49:45:8e:20:06:
5f:ee:ed:1d:4e:90:e8:58:c2:1e:20:43:b9:ae:89:
34:e3:64:83:ae:5c:db:cc:72:db:63:0d:72:d2:15:
28:a2:11:21:61:f8:98:5a:78:f7:9d:d8:84:7e:ba:
67:4d:f8:39:0e:7b:5e:7b:2e:d5:ad:79:dd:90:fd:
c9:3d:c3:34:23:be:3c:99:2f:41:04:94:c0:c3:40:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:8B:1B:B6:B9:8C:B2:A4:E3:9D:7D:D0:6C:1D:E4:0C:39:2C:EB
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/RlCLG7a5jLKk45190Gwd5Aw5LOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
66:96:ee:69:03:40:4e:c9:86:fb:63:92:79:8e:86:9e:31:43:
d5:15:ab:63:1f:0b:de:55:22:17:fa:22:1d:df:66:43:2c:6d:
cf:fb:89:9c:0a:ef:33:82:b6:1a:71:4d:7b:10:b4:21:1f:cc:
4a:1b:85:d5:f9:b3:99:18:e6:be:c1:38:9f:51:cb:99:b7:8f:
a7:9a:a1:1e:03:7e:91:5f:30:0e:b4:8a:a6:1a:45:e1:ae:11:
fa:f6:36:04:e6:76:70:ca:55:a5:ef:79:6b:15:9e:41:ba:7f:
4a:37:80:f2:74:8a:2c:e4:57:f5:45:82:50:93:f1:2a:f4:3d:
3d:77:49:ce:89:04:57:67:48:a0:c1:98:92:8a:59:4b:85:53:
7c:68:d4:9c:59:45:e3:31:53:e7:6e:30:1a:ab:54:4a:11:22:
b3:74:f7:34:cd:27:a7:7c:59:aa:e1:a2:e2:8e:a2:9e:e6:df:
a5:6e:0d:0a:fc:13:7c:20:31:60:48:92:8e:a3:5e:5a:58:81:
79:7b:58:31:1a:2c:30:3c:a5:f9:d2:5d:00:3a:0b:e0:69:cb:
68:75:40:d2:06:1f:05:81:0f:e5:e2:5e:5a:2a:df:8f:75:87:
dc:d8:58:25:1b:02:bc:0e:32:c2:da:10:25:63:a7:e7:59:1b:
c0:d5:27:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFfg9Y7asz9hfeeV+eOI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjMwMTAyMTUyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjUwOGIxYmI2Yjk4Y2IyYTRlMzlkN2RkMDZjMWRlNDBjMzkyY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zKR8fGySf/pz3mPFgjItJLxiiyK
Eg+m3aCwiNUqpYuXnGSyXTjsutuRalEt+XgvaZ6zQ6Emd/1Btx6Qq0l8RGoDoJga
e626mVmxbW0GO2d20HKRJkbTatClCZw6qoGAJgwVio0kQELnv/ZvDSSYvMhpb4Xj
oQ5VOrpxNPSTLxzm3tzkoKwQcm4ZROUh71hAKAtyW5USJKP87XQRWYLYcWAOUbH1
tUYs0m0TBckbSUWOIAZf7u0dTpDoWMIeIEO5rok042SDrlzbzHLbYw1y0hUoohEh
YfiYWnj3ndiEfrpnTfg5Dnteey7VrXndkP3JPcM0I748mS9BBJTAw0BzUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZQixu2uYyypOOdfdBsHeQMOSzrMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvUmxDTEc3YTVqTEtrNDUxOTBHd2Q1QXc1TE9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqkwMA0G
CSqGSIb3DQEBCwUAA4IBAQBmlu5pA0BOyYb7Y5J5joaeMUPVFatjHwveVSIX+iId
32ZDLG3P+4mcCu8zgrYacU17ELQhH8xKG4XV+bOZGOa+wTifUcuZt4+nmqEeA36R
XzAOtIqmGkXhrhH69jYE5nZwylWl73lrFZ5Bun9KN4DydIos5Ff1RYJQk/Eq9D09
d0nOiQRXZ0igwZiSillLhVN8aNScWUXjMVPnbjAaq1RKESKzdPc0zSenfFmq4aLi
jqKe5t+lbg0K/BN8IDFgSJKOo15aWIF5e1gxGiwwPKX50l0AOgvgactodUDSBh8F
gQ/l4l5aKt+PdYfc2FglGwK8DjLC2hAlY6fnWRvA1ScO
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:25 2025 by rpki-client