Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/2R6_g-cho7w_icsEryoVtjEeoTQ.roa
File: 2R6_g-cho7w_icsEryoVtjEeoTQ.roa (raw, json)
Hash identifier: /k/Hgn69w3D3SXjAf0Pb3bI0koU3xjgpQaZTAs7Y6NU=
Subject key identifier: D9:1E:BF:83:E7:21:A3:BC:3F:89:CB:04:AF:2A:15:B6:31:1E:A1:34
Certificate issuer: /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial: 018571F0E5FB00DE6A0E16172784D92172C3
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/2R6_g-cho7w_icsEryoVtjEeoTQ.roa
Signing time: Mon 02 Jan 2023 10:04:50 +0000
ROA not before: Mon 02 Jan 2023 10:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197864
IP address blocks: 195.225.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:e5:fb:00:de:6a:0e:16:17:27:84:d9:21:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
Validity
Not Before: Jan 2 10:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d91ebf83e721a3bc3f89cb04af2a15b6311ea134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:0b:e9:0b:93:f2:fb:d0:29:46:47:7e:09:
21:7f:c6:e3:85:93:2a:a9:41:04:00:4c:33:71:c4:
a0:3a:19:7c:bb:85:6b:a3:6a:86:9a:dc:de:b9:a6:
17:66:58:42:99:42:c8:70:f5:5b:f5:c4:9f:f1:fa:
03:da:91:bd:f3:c5:00:18:6a:de:2d:aa:b3:43:d2:
f1:05:d5:b6:c3:53:5a:a7:49:3f:01:9d:5f:2c:5a:
27:52:4c:7b:d7:d8:d8:4c:7f:28:01:49:5e:8a:d1:
1f:11:34:27:8f:3e:4d:de:ab:e8:a5:af:75:86:e2:
67:c1:36:e4:de:4f:20:d2:15:b4:9b:0a:b1:ec:e9:
69:0d:d6:0c:77:64:9f:96:23:cd:f3:f1:14:22:27:
58:ed:6d:eb:71:d6:72:06:7b:9d:14:c4:38:5e:69:
f7:4d:28:97:20:21:76:e9:f2:99:6e:ab:12:89:8a:
29:f1:3b:9a:0a:eb:3e:ce:b8:41:33:66:ec:9d:30:
af:60:15:ec:92:87:fb:6f:af:f5:83:4d:ba:10:25:
f2:4f:26:6f:72:8d:f3:35:97:e9:80:82:81:c7:ef:
64:eb:4d:73:d0:33:df:c8:66:d8:f4:58:a2:27:7c:
9b:5c:bc:e0:8a:2c:ed:01:4e:fe:c0:24:53:0d:ea:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1E:BF:83:E7:21:A3:BC:3F:89:CB:04:AF:2A:15:B6:31:1E:A1:34
X509v3 Authority Key Identifier:
keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/2R6_g-cho7w_icsEryoVtjEeoTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.50.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3c:ad:d0:9e:22:4b:e4:34:66:02:77:b9:e7:dc:8d:32:e8:
f3:58:ca:2c:76:6a:79:a7:36:57:a0:a3:a9:db:81:a5:4f:58:
0d:d0:fa:05:b5:1d:b8:34:86:d5:f6:75:6e:fe:42:89:15:6a:
fa:8a:de:1b:2e:64:10:e8:08:ab:6d:f9:26:12:37:45:e7:74:
79:0e:f8:c3:69:54:39:d0:7f:c1:54:c7:7e:7c:b7:94:74:8d:
1e:d2:96:58:8a:f8:80:ea:ab:43:01:6a:37:d7:d2:e0:51:3c:
e8:50:96:84:60:41:13:5d:a1:fd:4c:36:ea:17:c2:2f:73:55:
5f:7a:6e:61:2a:b1:ab:1e:db:df:39:98:f5:41:8b:53:73:ab:
d6:49:76:94:6b:9e:2e:63:e8:c3:b0:87:5b:25:3e:93:d7:05:
1b:d9:88:b6:97:63:33:7e:79:20:3a:60:c3:4b:49:ef:10:fd:
03:97:55:c6:a6:6f:9d:93:85:20:bb:81:c8:ba:3b:4e:fd:e8:
82:77:80:69:82:62:fb:74:7b:d0:96:39:0c:2b:cd:21:67:dc:
f7:38:be:90:20:e3:b6:fc:ed:41:3e:03:a7:87:c7:84:d9:e9:
8e:5f:e5:af:ee:9a:cc:f6:13:f5:6f:70:41:9e:4e:24:60:7c:
f3:fe:76:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx8OX7AN5qDhYXJ4TZIXLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjZjMjM4ZjdmZmRhY2YxNWM4MDJlMzIwYjUyZTA5ODA4
NjljZWMwHhcNMjMwMTAyMTAwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTFlYmY4M2U3MjFhM2JjM2Y4OWNiMDRhZjJhMTViNjMxMWVhMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX8L6QuT8vvQKUZHfgkhf8bjhZMq
qUEEAEwzccSgOhl8u4Vro2qGmtzeuaYXZlhCmULIcPVb9cSf8foD2pG988UAGGre
LaqzQ9LxBdW2w1Nap0k/AZ1fLFonUkx719jYTH8oAUleitEfETQnjz5N3qvopa91
huJnwTbk3k8g0hW0mwqx7OlpDdYMd2SfliPN8/EUIidY7W3rcdZyBnudFMQ4Xmn3
TSiXICF26fKZbqsSiYop8TuaCus+zrhBM2bsnTCvYBXskof7b6/1g026ECXyTyZv
co3zNZfpgIKBx+9k601z0DPfyGbY9FiiJ3ybXLzgiiztAU7+wCRTDeoaAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNkev4PnIaO8P4nLBK8qFbYxHqE0MB8GA1UdIwQY
MBaAFJZmwjj3/9rPFcgC4yC1LgmAhpzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzIt
YTAwMGQ3NjllMDI2LzEvMlI2X2ctY2hvN3dfaWNzRXJ5b1Z0akVlb1RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzItYTAwMGQ3NjllMDI2
LzEvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+EyMA0G
CSqGSIb3DQEBCwUAA4IBAQBYPK3QniJL5DRmAne559yNMujzWMosdmp5pzZXoKOp
24GlT1gN0PoFtR24NIbV9nVu/kKJFWr6it4bLmQQ6AirbfkmEjdF53R5DvjDaVQ5
0H/BVMd+fLeUdI0e0pZYiviA6qtDAWo319LgUTzoUJaEYEETXaH9TDbqF8Ivc1Vf
em5hKrGrHtvfOZj1QYtTc6vWSXaUa54uY+jDsIdbJT6T1wUb2Yi2l2MzfnkgOmDD
S0nvEP0Dl1XGpm+dk4Ugu4HIujtO/eiCd4BpgmL7dHvQljkMK80hZ9z3OL6QIOO2
/O1BPgOnh8eE2emOX+Wv7prM9hP1b3BBnk4kYHzz/nYt
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:57 2025 by rpki-client