Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/JMHt9bclTZzcug8HxbHQIj5-Tqs.roa
File: JMHt9bclTZzcug8HxbHQIj5-Tqs.roa (raw, json)
Hash identifier: Si7zD5+3Yp1wByl5a4VLOBZ4GA0xf9xEXtTVcf0HVng=
Subject key identifier: 24:C1:ED:F5:B7:25:4D:9C:DC:BA:0F:07:C5:B1:D0:22:3E:7E:4E:AB
Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial: 01856F1D811BB0794E0FEC2BCF821A4EF395
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/JMHt9bclTZzcug8HxbHQIj5-Tqs.roa
Signing time: Sun 01 Jan 2023 20:54:42 +0000
ROA not before: Sun 01 Jan 2023 20:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24971
IP address blocks: 130.193.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:81:1b:b0:79:4e:0f:ec:2b:cf:82:1a:4e:f3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
Validity
Not Before: Jan 1 20:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24c1edf5b7254d9cdcba0f07c5b1d0223e7e4eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:4b:60:e3:9c:7b:3f:24:5f:67:75:d5:20:
c6:57:3c:22:c8:78:f9:21:11:9e:f6:03:cd:47:3a:
cc:53:db:7a:2e:2f:b1:93:6d:7c:af:44:fb:cb:95:
26:4e:15:4f:77:15:5d:0a:02:e9:6f:ca:17:08:5d:
3b:67:c1:8d:72:be:95:6c:81:cb:b8:e3:00:4a:84:
a3:69:19:5f:d0:c4:c2:4e:fc:f4:68:bb:bf:43:0d:
72:9d:c5:e2:4f:99:31:02:3b:01:97:24:65:53:0b:
9d:44:65:70:40:55:eb:7e:2e:c6:76:e9:13:08:b2:
f0:cb:3e:6a:68:1c:47:f6:c9:ac:08:f5:12:87:0e:
61:22:28:b0:f2:c0:6d:65:5b:81:63:7f:ad:40:29:
e7:c7:88:81:3b:c2:a9:9f:b3:80:63:08:5a:09:76:
e1:ff:1f:44:35:b3:c9:81:fa:b6:fe:d9:23:a7:f6:
05:58:8d:1a:79:3e:20:24:6e:ed:37:e1:5c:02:45:
20:5c:37:14:32:3f:f8:2a:35:9f:95:64:1d:4e:9c:
fa:02:2b:11:2b:4b:6d:ae:e2:16:98:7a:47:bd:50:
5c:11:78:aa:3a:8d:d2:6c:64:95:a9:c6:c1:bd:7a:
c7:f3:6d:9b:2e:a5:95:df:5b:c3:8b:e9:30:ae:7c:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:ED:F5:B7:25:4D:9C:DC:BA:0F:07:C5:B1:D0:22:3E:7E:4E:AB
X509v3 Authority Key Identifier:
keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/JMHt9bclTZzcug8HxbHQIj5-Tqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:64:bd:2c:5f:02:a1:07:49:0d:8b:12:57:6b:02:d4:65:2c:
9e:5d:2c:9d:f8:8a:96:22:ab:4c:e4:e3:4b:d3:bc:72:3b:c3:
27:8a:3e:63:5b:3d:bd:77:96:02:f9:bc:5a:ef:89:fb:68:4f:
b6:8b:e7:11:b5:b1:eb:63:77:fd:fe:cb:28:21:a5:0b:9e:de:
77:87:21:06:64:3e:8f:e6:74:a4:62:18:3a:01:93:22:be:10:
03:eb:6d:bc:36:20:d8:3b:9a:28:67:eb:c7:12:de:6f:3d:66:
fb:52:7e:22:67:92:5b:90:20:80:7b:e6:f6:24:63:e6:fc:a8:
aa:62:99:93:ee:60:b4:a4:8c:51:a8:66:f8:ab:3d:76:1b:50:
88:ac:1a:9d:32:64:eb:12:f7:9e:d2:a3:2b:39:be:41:67:6f:
61:74:7b:63:7d:31:e3:7e:63:40:9e:f7:b4:c4:07:c4:39:82:
dd:55:aa:6d:49:4c:df:7f:fa:11:1b:b5:60:6c:10:a4:5b:19:
a6:9c:f3:fa:83:b8:e4:53:7a:10:3f:8d:8b:04:ce:55:c5:ed:
b9:ba:0e:2b:46:a9:9a:35:1f:15:c5:1b:54:b3:a5:a1:15:0f:
8f:ac:29:8e:a2:e9:2b:30:6e:80:dd:97:77:36:97:4f:3b:f0:
22:9a:5e:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvHYEbsHlOD+wrz4IaTvOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NWI0YWJhYjcxNmFkMTQwN2E5MDJlNTE3NjU2MGVjYzM3
Yzk2NmQwHhcNMjMwMTAxMjA1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGMxZWRmNWI3MjU0ZDljZGNiYTBmMDdjNWIxZDAyMjNlN2U0ZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP9LYOOcez8kX2d11SDGVzwiyHj5
IRGe9gPNRzrMU9t6Li+xk218r0T7y5UmThVPdxVdCgLpb8oXCF07Z8GNcr6VbIHL
uOMASoSjaRlf0MTCTvz0aLu/Qw1yncXiT5kxAjsBlyRlUwudRGVwQFXrfi7GdukT
CLLwyz5qaBxH9smsCPUShw5hIiiw8sBtZVuBY3+tQCnnx4iBO8Kpn7OAYwhaCXbh
/x9ENbPJgfq2/tkjp/YFWI0aeT4gJG7tN+FcAkUgXDcUMj/4KjWflWQdTpz6AisR
K0ttruIWmHpHvVBcEXiqOo3SbGSVqcbBvXrH822bLqWV31vDi+kwrnx0/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCTB7fW3JU2c3LoPB8Wx0CI+fk6rMB8GA1UdIwQY
MBaAFDZbSrq3Fq0UB6kC5RdlYOzDfJZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2Njgt
MzZlYWY3OTQ4NTMxLzEvSk1IdDliY2xUWnpjdWc4SHhiSFFJajUtVHFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2NjgtMzZlYWY3OTQ4NTMx
LzEvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsEQMA0G
CSqGSIb3DQEBCwUAA4IBAQCOZL0sXwKhB0kNixJXawLUZSyeXSyd+IqWIqtM5ONL
07xyO8Mnij5jWz29d5YC+bxa74n7aE+2i+cRtbHrY3f9/ssoIaULnt53hyEGZD6P
5nSkYhg6AZMivhAD6228NiDYO5ooZ+vHEt5vPWb7Un4iZ5JbkCCAe+b2JGPm/Kiq
YpmT7mC0pIxRqGb4qz12G1CIrBqdMmTrEvee0qMrOb5BZ29hdHtjfTHjfmNAnve0
xAfEOYLdVaptSUzff/oRG7VgbBCkWxmmnPP6g7jkU3oQP42LBM5Vxe25ug4rRqma
NR8VxRtUs6WhFQ+PrCmOoukrMG6A3Zd3NpdPO/Aiml5v
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:00:29 2025 by rpki-client