Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/c_wI7rPIFdy5I4-mAlNx9nG3MTA.roa
File: c_wI7rPIFdy5I4-mAlNx9nG3MTA.roa (raw, json)
Hash identifier: kT5yHiaC0SBVH3tZyB2RTELyf4niR7Jk6hC1QsGRJS8=
Subject key identifier: 73:FC:08:EE:B3:C8:15:DC:B9:23:8F:A6:02:53:71:F6:71:B7:31:30
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 01856D0ABB0ED0805514CAE7321A693F922F
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/c_wI7rPIFdy5I4-mAlNx9nG3MTA.roa
Signing time: Sun 01 Jan 2023 11:14:57 +0000
ROA not before: Sun 01 Jan 2023 11:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208378
IP address blocks: 193.138.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:bb:0e:d0:80:55:14:ca:e7:32:1a:69:3f:92:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Jan 1 11:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73fc08eeb3c815dcb9238fa6025371f671b73130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:6e:f4:90:f2:43:01:3f:2e:4e:b4:e1:08:
77:f0:75:36:65:db:56:34:d8:15:ba:6b:3b:46:a9:
7c:a8:6d:52:64:ee:fd:f0:b6:c7:2e:0a:33:0a:3f:
ac:1f:8f:26:ce:7d:a4:e9:e9:1c:e2:be:72:83:90:
b3:f2:60:49:2e:85:1d:a7:39:56:d5:a7:c2:a3:48:
53:71:1e:f0:42:a8:a8:9d:9b:96:74:03:2f:0d:20:
ea:2e:98:88:a9:4c:7a:db:42:cf:c8:94:18:e6:46:
ab:a7:00:96:b0:6c:d5:24:3f:ca:93:a8:a3:65:c1:
a9:e3:47:e1:d3:08:eb:80:af:38:86:f1:3a:49:eb:
bf:f8:8a:42:7c:19:03:ec:e5:84:3d:36:03:95:71:
e2:9f:2a:37:35:d9:ad:e8:d2:02:4f:14:5f:10:7e:
93:f1:ee:5d:ba:e7:40:07:dc:d4:95:e5:13:4d:24:
d2:b7:db:8c:0b:bc:bc:68:0a:a3:ea:a0:21:32:6d:
3d:db:38:5f:ce:29:37:eb:7b:63:52:fa:d4:94:e3:
9c:e8:cb:4d:65:a9:31:5f:65:2f:30:d6:37:3b:54:
16:cf:61:75:eb:66:80:95:ef:2f:f4:40:b6:2e:87:
ca:3c:62:13:68:68:8d:7c:71:f7:33:3f:2b:1f:de:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:08:EE:B3:C8:15:DC:B9:23:8F:A6:02:53:71:F6:71:B7:31:30
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/c_wI7rPIFdy5I4-mAlNx9nG3MTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.29.0/24
Signature Algorithm: sha256WithRSAEncryption
01:84:d1:bf:4b:3f:a0:d1:6b:ac:3c:85:a6:60:98:11:65:e6:
82:c1:dc:80:3f:ff:33:17:9d:dd:f2:0b:64:10:9d:89:37:87:
59:a8:25:49:ca:88:79:fa:c8:e7:d6:79:64:c9:ea:48:c2:78:
ba:20:d1:0a:cf:76:c6:aa:b7:89:d6:16:94:8a:b1:50:53:69:
d1:3c:c0:21:b2:1e:0a:87:44:5b:46:bd:95:ed:b8:9a:19:59:
91:7f:8f:9a:c8:a9:c6:35:c1:1f:a2:67:03:d3:54:9a:86:bd:
ad:9a:59:f2:a0:47:4b:62:f0:0d:2b:58:ef:6e:7a:61:58:34:
b3:91:f3:f5:00:29:ba:8b:3b:a2:a5:e9:0f:a4:71:ab:ed:93:
83:bc:67:9d:66:75:4c:89:2a:94:db:d8:04:b0:b0:35:45:c6:
46:95:f5:30:2c:19:00:41:bc:50:e2:8b:e1:a9:ba:ec:2a:21:
25:f3:00:86:89:11:6d:2b:a9:62:4c:61:82:1a:1a:30:f0:dd:
aa:28:90:c3:34:32:67:8e:e5:89:3d:dc:6c:7d:64:a7:34:e8:
c1:96:61:e3:29:94:71:a3:92:9a:96:7c:0c:b6:3b:16:d5:c5:
71:2b:ff:13:34:94:c8:00:8f:95:1c:7a:e5:1b:e7:e0:12:e5:
82:a6:be:da
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVtCrsO0IBVFMrnMhppP5IvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2Y2NmVkNzQyOGEzOWU2M2YwZDI3MzYwMzdmNDMxYzQx
YWEzNGYwHhcNMjMwMTAxMTExNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2ZjMDhlZWIzYzgxNWRjYjkyMzhmYTYwMjUzNzFmNjcxYjczMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzlu9JDyQwE/Lk604Qh38HU2ZdtW
NNgVums7Rql8qG1SZO798LbHLgozCj+sH48mzn2k6ekc4r5yg5Cz8mBJLoUdpzlW
1afCo0hTcR7wQqionZuWdAMvDSDqLpiIqUx620LPyJQY5karpwCWsGzVJD/Kk6ij
ZcGp40fh0wjrgK84hvE6Seu/+IpCfBkD7OWEPTYDlXHinyo3Ndmt6NICTxRfEH6T
8e5duudAB9zUleUTTSTSt9uMC7y8aAqj6qAhMm092zhfzik363tjUvrUlOOc6MtN
ZakxX2UvMNY3O1QWz2F162aAle8v9EC2LofKPGITaGiNfHH3Mz8rH95/owIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHP8CO6zyBXcuSOPpgJTcfZxtzEwMB8GA1UdIwQY
MBaAFPnPZu10KKOeY/DSc2A39DHEGqNPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jOW03WFFvbzU1ajhOSnpZRGYwTWNRYW8wOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgw
LWU2MzM3MDNmY2JlZC8xL2Nfd0k3clBJRmR5NUk0LW1BbE54OW5HM01UQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgwLWU2MzM3MDNmY2Jl
ZC8xLzEtYzltN1hRb281NWo4Tkp6WURmME1jUWFvMDguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBih0w
DQYJKoZIhvcNAQELBQADggEBAAGE0b9LP6DRa6w8haZgmBFl5oLB3IA//zMXnd3y
C2QQnYk3h1moJUnKiHn6yOfWeWTJ6kjCeLog0QrPdsaqt4nWFpSKsVBTadE8wCGy
HgqHRFtGvZXtuJoZWZF/j5rIqcY1wR+iZwPTVJqGva2aWfKgR0ti8A0rWO9uemFY
NLOR8/UAKbqLO6Kl6Q+kcavtk4O8Z51mdUyJKpTb2ASwsDVFxkaV9TAsGQBBvFDi
i+GpuuwqISXzAIaJEW0rqWJMYYIaGjDw3aookMM0MmeO5Yk93Gx9ZKc06MGWYeMp
lHGjkpqWfAy2OxbVxXEr/xM0lMgAj5UceuUb5+AS5YKmvto=
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:47:26 2025 by rpki-client