Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/a0E7RA7ozzhzQaFqzhbjyKC-97Y.roa
File: a0E7RA7ozzhzQaFqzhbjyKC-97Y.roa (raw, json)
Hash identifier: S034mTjU+iCaVxxehy2iaZQwuQVDJxsRmXIzILZybYk=
Subject key identifier: 6B:41:3B:44:0E:E8:CF:38:73:41:A1:6A:CE:16:E3:C8:A0:BE:F7:B6
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 0914622C
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/a0E7RA7ozzhzQaFqzhbjyKC-97Y.roa
Signing time: Sat 01 Jan 2022 02:59:35 +0000
ROA not before: Sat 01 Jan 2022 02:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16134
IP address blocks: 195.234.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152330796 (0x914622c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: Jan 1 02:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b413b440ee8cf387341a16ace16e3c8a0bef7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:4a:b3:a4:4d:36:0f:57:be:a6:ad:e5:73:
e7:2a:43:40:1a:96:55:e1:7a:a1:18:ea:e4:95:21:
f9:a4:4b:49:cf:03:ad:8d:ac:3f:98:6a:22:08:7e:
ce:58:65:c4:c2:6f:8a:b6:49:2f:b5:87:42:e6:f2:
61:86:69:5f:74:29:5b:63:0d:9c:1d:83:86:9f:e3:
20:f7:e1:e2:2e:5c:69:98:71:04:67:c0:6e:cd:aa:
6c:6a:25:12:87:e0:1e:df:01:57:95:75:e4:01:16:
d1:a4:39:23:10:36:87:1a:99:f4:ed:70:29:be:53:
8a:91:a6:01:55:a5:3a:45:8b:ea:92:20:4d:0f:6a:
23:96:c4:c1:8f:71:c1:81:80:e8:e4:19:6a:2e:81:
00:fd:a5:d4:b8:0d:6b:e9:e0:84:88:3f:f0:88:48:
0b:5c:71:5a:31:a5:95:09:96:09:d6:8e:e3:77:cb:
c9:ad:1e:c8:1e:c1:86:59:dc:54:55:9d:66:49:62:
25:81:32:2c:44:43:d7:94:80:1b:33:ce:9d:17:cd:
0a:95:44:39:9e:4b:fe:b1:e5:60:c8:0e:6f:33:8b:
e1:26:84:2a:ef:00:db:9d:1e:9e:9f:5e:59:1b:f0:
27:4d:13:7b:29:6b:5d:60:94:6a:c7:7d:50:f7:96:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:41:3B:44:0E:E8:CF:38:73:41:A1:6A:CE:16:E3:C8:A0:BE:F7:B6
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/a0E7RA7ozzhzQaFqzhbjyKC-97Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:60:a6:f1:7c:4e:89:52:92:6a:13:a0:16:c6:c0:36:69:76:
dc:f0:a4:4f:4a:f0:67:36:49:21:c3:d9:97:81:11:f8:04:5b:
8f:9f:1e:ee:f4:6a:2d:9c:2c:fb:9b:ad:c3:8b:05:ea:d2:ee:
02:14:7c:9e:bf:22:14:84:67:15:4c:25:09:17:fc:e8:b3:c8:
0f:c5:14:62:71:9f:57:af:e3:c3:9e:6b:2f:19:9d:c2:ad:6e:
95:27:f7:fa:50:96:2c:29:f2:9f:52:ba:cf:38:a4:1d:49:2e:
a3:2d:82:06:c4:4f:87:6e:65:31:35:3e:6a:15:d2:0a:62:9d:
11:59:7c:f5:b0:ea:a0:c9:a3:4a:c0:7c:13:99:b6:e3:84:74:
04:09:23:38:57:32:4c:90:68:44:61:e0:38:50:ea:95:e6:7e:
51:7f:99:70:07:c8:82:9c:4f:60:79:c8:44:9e:ff:02:b1:c4:
8f:fa:2f:71:43:83:e7:f6:5d:41:5d:c0:75:dc:30:10:07:13:
4f:ff:9e:6d:9e:a5:94:99:bc:a9:1b:a2:db:d6:06:2a:48:34:
74:8f:40:c5:c6:8a:e2:1a:db:f6:3b:67:26:59:5d:4f:f0:39:
4a:70:36:ec:2d:91:1d:8a:cb:9c:b2:bc:f2:2d:a6:98:b8:77:
0c:be:1a:6b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECRRiLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZGY1YjcxMmYyZTQ5MzJjMWMwMzAzMTJkMTk0YTU5Nzg4M2YzZDVlMB4XDTIyMDEw
MTAyNTkzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmI0MTNiNDQwZWU4
Y2YzODczNDFhMTZhY2UxNmUzYzhhMGJlZjdiNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANl3SrOkTTYPV76mreVz5ypDQBqWVeF6oRjq5JUh+aRLSc8D
rY2sP5hqIgh+zlhlxMJvirZJL7WHQubyYYZpX3QpW2MNnB2Dhp/jIPfh4i5caZhx
BGfAbs2qbGolEofgHt8BV5V15AEW0aQ5IxA2hxqZ9O1wKb5TipGmAVWlOkWL6pIg
TQ9qI5bEwY9xwYGA6OQZai6BAP2l1LgNa+nghIg/8IhIC1xxWjGllQmWCdaO43fL
ya0eyB7BhlncVFWdZkliJYEyLERD15SAGzPOnRfNCpVEOZ5L/rHlYMgObzOL4SaE
Ku8A250enp9eWRvwJ00TeylrXWCUasd9UPeW3kkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRrQTtEDujPOHNBoWrOFuPIoL73tjAfBgNVHSMEGDAWgBS99bcS8uSTLBwD
AxLRlKWXiD89XjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZmVzNFdkxra3l3Y0F3TVMwWlNsbDRnX1BWNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvY2UwMDc3LWM3MDEtNGNlZC05ZDUzLTZjNWMzNDU4NmY2ZS8x
L2EwRTdSQTdvenpoelFhRnF6aGJqeUtDLTk3WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
Y2UwMDc3LWM3MDEtNGNlZC05ZDUzLTZjNWMzNDU4NmY2ZS8xL3ZmVzNFdkxra3l3
Y0F3TVMwWlNsbDRnX1BWNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMPqPTANBgkqhkiG9w0BAQsFAAOC
AQEAPGCm8XxOiVKSahOgFsbANml23PCkT0rwZzZJIcPZl4ER+ARbj58e7vRqLZws
+5utw4sF6tLuAhR8nr8iFIRnFUwlCRf86LPID8UUYnGfV6/jw55rLxmdwq1ulSf3
+lCWLCnyn1K6zzikHUkuoy2CBsRPh25lMTU+ahXSCmKdEVl89bDqoMmjSsB8E5m2
44R0BAkjOFcyTJBoRGHgOFDqleZ+UX+ZcAfIgpxPYHnIRJ7/ArHEj/ovcUOD5/Zd
QV3AddwwEAcTT/+ebZ6llJm8qRui29YGKkg0dI9AxcaK4hrb9jtnJlldT/A5SnA2
7C2RHYrLnLK88i2mmLh3DL4aaw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:52:07 2025 by rpki-client