Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/1-EHU9Hn_tN25XpNaC3OYlFdb3vE.roa
File: 1-EHU9Hn_tN25XpNaC3OYlFdb3vE.roa (raw, json)
Hash identifier: R+tAZzYvJOzHvERxnfib73MFqfsz4NisQ2ySC1Bw610=
Subject key identifier: F8:41:D4:F4:79:FF:B4:DD:B9:5E:93:5A:0B:73:98:94:57:5B:DE:F1
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 023AACE5
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/1-EHU9Hn_tN25XpNaC3OYlFdb3vE.roa
Signing time: Sat 01 Jan 2022 04:04:10 +0000
ROA not before: Sat 01 Jan 2022 04:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211462
IP address blocks: 193.32.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37399781 (0x23aace5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Jan 1 04:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f841d4f479ffb4ddb95e935a0b739894575bdef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:65:d5:70:55:b1:25:51:da:60:c4:17:bb:
91:cd:28:4f:e5:35:59:21:85:f2:02:9c:1e:19:ee:
6a:d6:35:97:d0:a0:5b:59:82:66:49:43:55:7c:2b:
aa:2a:dd:ad:b0:f2:78:75:ff:e8:16:ca:57:81:75:
fa:2c:b2:f5:74:9b:91:82:33:46:51:83:78:8c:db:
1a:31:e2:e8:cd:11:0d:91:a3:c7:0c:5e:29:3a:77:
75:d1:05:c4:b6:30:8f:2e:0c:7b:04:1a:80:c4:d9:
c9:dc:dd:6c:cb:b6:a4:5c:0e:68:99:25:93:1f:9c:
82:4c:68:90:b5:2b:46:35:2a:9d:86:09:90:77:80:
a6:79:2d:e2:45:8b:64:01:55:e3:4c:65:bf:62:0b:
8a:f5:f1:31:12:15:2e:32:5f:8d:4d:90:03:41:bf:
0d:d4:12:0a:14:cf:43:8a:9c:cd:5f:d3:13:97:5d:
e9:67:b2:7d:44:26:a6:48:94:d1:d0:70:79:24:54:
77:a7:4f:c3:bf:7b:a8:dd:17:36:0f:60:ac:57:0b:
b3:a2:2b:04:80:8f:cf:e6:64:ce:f1:9e:6c:a9:c9:
1c:71:b5:a3:d6:c3:23:ca:a4:f3:ba:89:89:42:9b:
d4:40:88:cc:fd:b7:7e:67:8d:eb:7e:2a:13:a6:c8:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:41:D4:F4:79:FF:B4:DD:B9:5E:93:5A:0B:73:98:94:57:5B:DE:F1
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/1-EHU9Hn_tN25XpNaC3OYlFdb3vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.87.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:99:17:ce:00:62:0e:9d:b2:9c:3c:31:68:05:78:c1:72:69:
4c:c1:72:c4:6d:e3:bf:35:7b:c6:67:09:fb:63:57:df:34:29:
3b:7a:4a:a6:bd:80:f1:08:75:e7:2e:9c:b2:a3:33:92:2d:0f:
c7:89:1d:a4:19:e3:3f:7f:cc:c6:27:07:39:4f:82:e1:92:51:
7b:a2:30:d8:80:42:b3:cf:a1:1e:3c:7c:8d:ab:e4:cd:ea:fb:
43:1d:1d:f8:06:e9:02:53:48:db:5f:42:8c:a1:17:b2:34:36:
20:f7:26:08:38:70:e6:e4:a4:58:5c:0f:0b:b6:6f:0f:eb:b0:
9b:da:1a:52:9e:34:25:98:45:47:b9:32:56:a5:dc:c8:f2:bd:
31:b7:fa:b9:dc:5f:1d:75:75:e6:22:0f:83:46:90:8d:4a:d8:
85:ff:3e:1d:8e:a1:67:60:2a:1b:97:93:18:c0:c4:72:e0:6e:
9d:d1:52:f8:64:37:9a:bf:aa:22:46:6d:1e:d1:ca:86:a5:21:
64:5d:8f:db:3f:37:bc:57:3a:21:5f:ba:79:6f:a6:a7:43:ea:
ce:2d:3f:41:79:f6:d9:c9:08:8d:40:41:83:f8:ba:c9:95:ca:
99:57:07:01:16:00:10:54:50:b3:3c:8c:20:4d:19:b5:3c:ab:
e1:65:9a:51
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAjqs5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDZiOTc3NGM5NDg3NmM5ODMyMWRlMzIwMWIxMWI3NWExMzU4ZDE5MB4XDTIyMDEw
MTA0MDQxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjg0MWQ0ZjQ3OWZm
YjRkZGI5NWU5MzVhMGI3Mzk4OTQ1NzViZGVmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKoOZdVwVbElUdpgxBe7kc0oT+U1WSGF8gKcHhnuatY1l9Cg
W1mCZklDVXwrqirdrbDyeHX/6BbKV4F1+iyy9XSbkYIzRlGDeIzbGjHi6M0RDZGj
xwxeKTp3ddEFxLYwjy4MewQagMTZydzdbMu2pFwOaJklkx+cgkxokLUrRjUqnYYJ
kHeApnkt4kWLZAFV40xlv2ILivXxMRIVLjJfjU2QA0G/DdQSChTPQ4qczV/TE5dd
6WeyfUQmpkiU0dBweSRUd6dPw797qN0XNg9grFcLs6IrBICPz+ZkzvGebKnJHHG1
o9bDI8qk87qJiUKb1ECIzP23fmeN634qE6bID4MCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT4QdT0ef+03blek1oLc5iUV1ve8TAfBgNVHSMEGDAWgBSda5d0yUh2yYMh
3jIBsRt1oTWNGTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25XdVhkTWxJZHNtRElkNHlBYkViZGFFMWpSay5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvNDBjYjljLWM0MjYtNDhhYi05OTY4LWE1NmJkZmFkYjgxZS8x
LzEtRUhVOUhuX3ROMjVYcE5hQzNPWWxGZGIzdkUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdl
LzQwY2I5Yy1jNDI2LTQ4YWItOTk2OC1hNTZiZGZhZGI4MWUvMS9uV3VYZE1sSWRz
bURJZDR5QWJFYmRhRTFqUmsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBIFcwDQYJKoZIhvcNAQELBQAD
ggEBALqZF84AYg6dspw8MWgFeMFyaUzBcsRt4781e8ZnCftjV980KTt6Sqa9gPEI
decunLKjM5ItD8eJHaQZ4z9/zMYnBzlPguGSUXuiMNiAQrPPoR48fI2r5M3q+0Md
HfgG6QJTSNtfQoyhF7I0NiD3Jgg4cObkpFhcDwu2bw/rsJvaGlKeNCWYRUe5Mlal
3MjyvTG3+rncXx11deYiD4NGkI1K2IX/Ph2OoWdgKhuXkxjAxHLgbp3RUvhkN5q/
qiJGbR7RyoalIWRdj9s/N7xXOiFfunlvpqdD6s4tP0F59tnJCI1AQYP4usmVyplX
BwEWABBUULM8jCBNGbU8q+FlmlE=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:48:51 2025 by rpki-client