Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/sGQLk78YrkQLo_zt1VO2apYhBTU.roa
File: sGQLk78YrkQLo_zt1VO2apYhBTU.roa (raw, json)
Hash identifier: zjWWW8Ak+XBxEJwxI1vY31vghKgW9f1EZBFjzBuwKe0=
Subject key identifier: B0:64:0B:93:BF:18:AE:44:0B:A3:FC:ED:D5:53:B6:6A:96:21:05:35
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 018B62DDAA41004E0123B4416B6173E07D01
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/sGQLk78YrkQLo_zt1VO2apYhBTU.roa
Signing time: Tue 24 Oct 2023 18:06:16 +0000
ROA not before: Tue 24 Oct 2023 18:06:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200315
IP address blocks: 138.128.224.0/22 maxlen: 24
2a13:90c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:dd:aa:41:00:4e:01:23:b4:41:6b:61:73:e0:7d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Oct 24 18:06:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0640b93bf18ae440ba3fcedd553b66a96210535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:1f:b1:bf:c2:50:91:d6:82:87:6d:c6:3d:
fa:d8:a6:d1:a2:4c:8b:4e:d8:09:a5:c8:bf:3c:9a:
1e:9c:c7:16:53:d1:ee:36:d0:76:32:d9:c3:79:6b:
ca:fb:d8:9c:63:55:f2:e2:29:ac:86:bd:77:63:13:
dd:ad:52:e0:db:a1:c9:cb:fc:42:1d:eb:ad:b8:bd:
c6:76:f5:50:2e:3d:67:ce:4c:0d:2d:8c:fc:cb:c2:
18:68:70:26:cd:8b:32:fc:d4:92:70:19:0e:9f:32:
2b:95:3d:f7:9f:a8:fa:45:f5:45:f4:a6:16:48:a0:
ae:c8:37:a3:eb:25:fc:de:51:0a:41:f7:5b:3b:f0:
5f:a6:ed:47:61:86:7a:11:80:10:5d:88:81:18:59:
56:67:af:72:5d:f1:65:9f:b4:44:1c:74:7f:b2:55:
fd:3d:4a:f6:76:2e:86:9c:54:de:0a:7c:66:b6:83:
e3:47:2f:3d:7a:d5:b7:e5:9d:b9:97:ec:d1:ac:d9:
3b:54:cd:59:22:77:45:43:89:f1:50:96:65:2b:06:
f9:13:9a:91:87:d7:2a:f4:b4:c8:c6:d9:36:e3:29:
46:3a:b3:40:7b:00:cf:c1:b8:76:ad:4a:1e:cb:3a:
56:8f:c8:49:0b:e7:8b:6f:29:ff:e8:a9:21:79:80:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:0B:93:BF:18:AE:44:0B:A3:FC:ED:D5:53:B6:6A:96:21:05:35
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/sGQLk78YrkQLo_zt1VO2apYhBTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.128.224.0/22
IPv6:
2a13:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:08:ca:7f:cc:38:15:7a:05:06:72:f6:91:0b:44:f2:12:ef:
de:78:59:6a:df:d8:bd:3e:81:12:7f:74:9d:c2:a5:74:77:1b:
41:b5:ad:58:30:38:fb:ec:57:8c:ae:d1:2c:8c:00:db:ae:b6:
f8:0a:2e:0d:cb:10:14:b8:ed:32:b9:6f:e3:b2:d7:db:2d:d6:
4d:b0:ab:7c:92:c9:65:5d:5b:24:33:b4:f0:d1:d1:89:34:e4:
77:73:6d:05:95:18:b1:b3:90:11:b2:f0:23:27:50:7d:3a:e9:
3a:21:08:d1:fe:43:2c:40:38:c6:be:55:cd:81:db:b8:1e:9f:
53:2d:b5:e4:4a:5e:e6:d0:5d:48:6f:21:59:a2:0a:21:79:94:
76:47:fa:20:1d:18:8a:2b:86:f9:21:c2:d4:67:92:77:50:c9:
93:46:df:9e:ac:14:cc:9e:f6:63:07:94:61:ed:c3:3f:c1:55:
94:6a:e5:ba:4b:51:ba:aa:a3:83:ac:e0:63:30:6c:bb:c2:be:
7c:3c:58:4f:cf:db:d4:ee:7e:9e:2c:90:f9:25:51:28:d6:63:
27:47:a8:5c:bd:95:8d:a6:c8:36:15:c9:4b:c3:ef:af:e8:fc:
8d:ea:39:10:76:c9:46:5a:8b:34:af:6f:02:31:18:45:b1:c7:
d4:1b:36:cd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYti3apBAE4BI7RBa2Fz4H0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMWFjYTM0MTYzNTE2NmY4MDJmOThhOTdlMDAyODBjY2Vl
NjRjZTIwHhcNMjMxMDI0MTgwNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDY0MGI5M2JmMThhZTQ0MGJhM2ZjZWRkNTUzYjY2YTk2MjEwNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK0fsb/CUJHWgodtxj362KbRokyL
TtgJpci/PJoenMcWU9HuNtB2MtnDeWvK+9icY1Xy4imshr13YxPdrVLg26HJy/xC
HeutuL3GdvVQLj1nzkwNLYz8y8IYaHAmzYsy/NSScBkOnzIrlT33n6j6RfVF9KYW
SKCuyDej6yX83lEKQfdbO/Bfpu1HYYZ6EYAQXYiBGFlWZ69yXfFln7REHHR/slX9
PUr2di6GnFTeCnxmtoPjRy89etW35Z25l+zRrNk7VM1ZIndFQ4nxUJZlKwb5E5qR
h9cq9LTIxtk24ylGOrNAewDPwbh2rUoeyzpWj8hJC+eLbyn/6KkheYAWLQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLBkC5O/GK5EC6P87dVTtmqWIQU1MB8GA1UdIwQY
MBaAFJ4ayjQWNRZvgC+YqX4AKAzO5kziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83OWZiYzAtMzM1MS00ZmZmLWI5ZDUt
NzU1NjFjYmYxMDRkLzEvc0dRTGs3OFlya1FMb196dDFWTzJhcFloQlRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS83OWZiYzAtMzM1MS00ZmZmLWI5ZDUtNzU1NjFjYmYxMDRk
LzEvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCioDgMA0E
AgACMAcDBQMqE5DAMA0GCSqGSIb3DQEBCwUAA4IBAQCrCMp/zDgVegUGcvaRC0Ty
Eu/eeFlq39i9PoESf3SdwqV0dxtBta1YMDj77FeMrtEsjADbrrb4Ci4NyxAUuO0y
uW/jstfbLdZNsKt8ksllXVskM7Tw0dGJNOR3c20FlRixs5ARsvAjJ1B9Ouk6IQjR
/kMsQDjGvlXNgdu4Hp9TLbXkSl7m0F1IbyFZogoheZR2R/ogHRiKK4b5IcLUZ5J3
UMmTRt+erBTMnvZjB5Rh7cM/wVWUauW6S1G6qqODrOBjMGy7wr58PFhPz9vU7n6e
LJD5JVEo1mMnR6hcvZWNpsg2FclLw++v6PyN6jkQdslGWos0r28CMRhFscfUGzbN
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:57 2025 by rpki-client