Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/pczpPMgebKKx-Tm6jZpljo71rs0.roa
File: pczpPMgebKKx-Tm6jZpljo71rs0.roa (raw, json)
Hash identifier: 5tVSMt4oDI1dkQjkfn/CVpQyGBiwA4ZyWHRRIeyWcWg=
Subject key identifier: A5:CC:E9:3C:C8:1E:6C:A2:B1:F9:39:BA:8D:9A:65:8E:8E:F5:AE:CD
Certificate issuer: /CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Certificate serial: 06EE9CFD
Authority key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/pczpPMgebKKx-Tm6jZpljo71rs0.roa
Signing time: Sat 01 Jan 2022 11:59:29 +0000
ROA not before: Sat 01 Jan 2022 11:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15923
IP address blocks: 193.41.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116301053 (0x6ee9cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Validity
Not Before: Jan 1 11:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5cce93cc81e6ca2b1f939ba8d9a658e8ef5aecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:7c:4d:c8:1f:d3:47:a2:09:f6:65:33:20:
57:af:8a:e7:ee:db:ac:a4:cb:dd:f3:b1:03:7c:cf:
d7:85:1a:30:6a:ea:bc:8b:f1:ba:07:5d:47:1c:83:
42:4f:86:88:70:9f:44:13:6d:0c:39:d4:53:5e:ff:
d3:f1:7e:4a:1f:4c:95:d0:c0:f7:71:61:4b:2e:01:
cc:1d:6c:c0:6f:f4:e8:7e:ef:70:be:50:de:fd:b6:
37:90:52:5f:37:a9:a2:79:7c:d2:a8:a0:b9:9c:7d:
62:ed:f2:5a:66:5b:d7:74:a9:d5:d2:d6:2b:b3:60:
7d:6a:5c:d9:ba:9e:7d:5b:79:5f:75:e9:6f:34:39:
81:6d:18:49:ba:5c:0e:c7:95:33:53:09:79:89:30:
6e:77:f4:97:23:98:73:a7:cf:76:ce:43:bd:a0:fe:
24:77:04:df:20:21:b1:8f:c3:ac:2b:3d:ab:28:06:
b3:00:df:2a:f9:e9:04:1d:35:ad:83:4e:98:a1:d5:
4a:89:fb:90:8e:20:d6:17:15:e4:49:b1:c6:c8:ce:
46:a5:2d:d7:d1:17:83:f6:0e:ef:0c:66:77:0c:dc:
b1:78:46:bd:d3:52:cf:e7:57:c3:a9:f0:4c:24:5e:
cb:b4:ad:64:dc:1e:14:92:41:69:a2:b5:6c:4f:4b:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:E9:3C:C8:1E:6C:A2:B1:F9:39:BA:8D:9A:65:8E:8E:F5:AE:CD
X509v3 Authority Key Identifier:
keyid:C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/pczpPMgebKKx-Tm6jZpljo71rs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.6.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:2d:06:85:e3:34:e2:f6:00:0c:b6:1e:9d:2c:60:55:fb:8d:
be:d2:22:70:20:d9:fd:0f:08:e4:82:bd:0d:5b:d3:81:1b:95:
66:0c:db:b2:69:68:9f:a4:e1:6f:a1:eb:d8:be:75:f6:f5:c9:
83:36:c6:5c:c3:4c:03:34:55:36:10:3b:b9:2f:33:83:c1:cc:
5f:2d:41:7d:cc:e8:82:39:d9:13:c9:8d:7f:e0:a6:62:25:71:
23:e8:c7:ef:45:4b:96:cc:cf:ed:2e:e6:7b:b5:fa:35:1c:9a:
da:bb:1d:a0:df:b1:e7:f7:00:f2:aa:f3:61:b4:cf:9a:a0:32:
e0:de:24:89:eb:05:0d:27:e7:5a:b5:e8:6d:74:db:4e:9e:74:
5b:70:65:86:a7:c0:05:0f:2f:4b:f2:9c:b4:e8:96:b5:dd:c3:
1f:dc:2e:84:d7:14:62:cb:21:f6:d8:bb:c1:f9:50:7b:5f:1e:
e0:76:64:7f:7d:d2:85:1b:e4:e5:12:a7:5c:b4:31:95:54:cb:
33:6c:f9:28:86:ea:d8:df:54:49:c4:a6:3e:2b:96:b1:48:57:
62:ed:3d:bd:92:56:7f:f9:1c:d2:84:c1:0a:73:0b:6d:00:09:
1d:f1:ef:7b:e0:41:42:72:f3:db:93:8d:85:4c:b2:03:4e:a7:
18:1f:03:a0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBu6c/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MWJmZDE5YzMzZTliM2QzMzM1M2NmZWI2NDE3OWVmNzNkMzIzMzJiMB4XDTIyMDEw
MTExNTkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTVjY2U5M2NjODFl
NmNhMmIxZjkzOWJhOGQ5YTY1OGU4ZWY1YWVjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL16fE3IH9NHogn2ZTMgV6+K5+7brKTL3fOxA3zP14UaMGrq
vIvxugddRxyDQk+GiHCfRBNtDDnUU17/0/F+Sh9MldDA93FhSy4BzB1swG/06H7v
cL5Q3v22N5BSXzeponl80qiguZx9Yu3yWmZb13Sp1dLWK7NgfWpc2bqefVt5X3Xp
bzQ5gW0YSbpcDseVM1MJeYkwbnf0lyOYc6fPds5DvaD+JHcE3yAhsY/DrCs9qygG
swDfKvnpBB01rYNOmKHVSon7kI4g1hcV5EmxxsjORqUt19EXg/YO7wxmdwzcsXhG
vdNSz+dXw6nwTCRey7StZNweFJJBaaK1bE9LtWkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSlzOk8yB5sorH5ObqNmmWOjvWuzTAfBgNVHSMEGDAWgBTBv9GcM+mz0zNT
z+tkF573PTIzKzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3diX1JuRFBwczlNelU4X3JaQmVlOXoweU15cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvZmI0MWY5LTNjMmUtNGNjMy1iMjRkLTVkOGM3YWRjNzk2Mi8x
L3BjenBQTWdlYktLeC1UbTZqWnBsam83MXJzMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
ZmI0MWY5LTNjMmUtNGNjMy1iMjRkLTVkOGM3YWRjNzk2Mi8xL3diX1JuRFBwczlN
elU4X3JaQmVlOXoweU15cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcEpBjANBgkqhkiG9w0BAQsFAAOC
AQEAiy0GheM04vYADLYenSxgVfuNvtIicCDZ/Q8I5IK9DVvTgRuVZgzbsmlon6Th
b6Hr2L519vXJgzbGXMNMAzRVNhA7uS8zg8HMXy1BfczogjnZE8mNf+CmYiVxI+jH
70VLlszP7S7me7X6NRya2rsdoN+x5/cA8qrzYbTPmqAy4N4kiesFDSfnWrXobXTb
Tp50W3BlhqfABQ8vS/KctOiWtd3DH9wuhNcUYssh9ti7wflQe18e4HZkf33ShRvk
5RKnXLQxlVTLM2z5KIbq2N9UScSmPiuWsUhXYu09vZJWf/kc0oTBCnMLbQAJHfHv
e+BBQnLz25ONhUyyA06nGB8DoA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:48:43 2025 by rpki-client