Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/dGWc9_9WCaZM4OT7JoiK7vJtCLU.roa
File: dGWc9_9WCaZM4OT7JoiK7vJtCLU.roa (raw, json)
Hash identifier: jGnQLBfRt3E35ANXQ2qNUKnUzMmSlq5SOn/MNNjjT6E=
Subject key identifier: 74:65:9C:F7:FF:56:09:A6:4C:E0:E4:FB:26:88:8A:EE:F2:6D:08:B5
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 018A67BA2895A13FA8EE8F6EA8C2B0D68423
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/dGWc9_9WCaZM4OT7JoiK7vJtCLU.roa
Signing time: Tue 05 Sep 2023 23:42:47 +0000
ROA not before: Tue 05 Sep 2023 23:42:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 193.25.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:67:ba:28:95:a1:3f:a8:ee:8f:6e:a8:c2:b0:d6:84:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Sep 5 23:42:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74659cf7ff5609a64ce0e4fb26888aeef26d08b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:f3:f5:81:43:4f:eb:0c:ef:b1:43:58:8a:
f6:e5:de:58:e7:35:51:8e:de:ed:8c:c5:f2:c1:d1:
ee:ff:3f:61:8a:68:7e:fb:a7:b2:94:0d:a6:9c:df:
5a:c7:d1:15:b6:a2:05:c1:17:05:54:f5:87:25:8e:
ef:4b:57:6a:d5:a5:46:6d:06:98:34:34:c2:0c:0f:
14:77:01:a9:28:06:0f:2e:12:8d:09:e0:8e:4a:16:
f3:b1:f9:48:da:6a:34:b5:d5:cd:81:60:d6:25:3c:
18:03:94:df:12:e6:38:35:59:cb:38:40:46:74:8f:
59:56:64:ed:79:66:be:35:dc:03:a0:92:75:62:bf:
1a:a1:b3:a8:27:8b:17:d6:68:e0:19:7f:8e:e5:bc:
f9:be:58:01:1a:9e:2b:19:33:e2:a1:be:ec:7b:a8:
53:43:0f:5b:56:f1:12:16:06:21:d6:bd:02:64:11:
d1:2d:a8:60:96:68:55:f5:40:8e:8b:e9:86:80:b5:
e6:00:0e:2b:ce:54:04:0c:99:aa:2f:a7:6b:4f:ea:
fe:58:d1:fb:0c:0c:59:08:cc:e8:4e:48:2e:be:28:
21:74:23:bd:f3:a0:48:2b:9e:8b:a7:e8:08:aa:77:
39:7a:a0:d9:08:8f:3f:7e:80:f0:84:d3:ff:ed:a4:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:9C:F7:FF:56:09:A6:4C:E0:E4:FB:26:88:8A:EE:F2:6D:08:B5
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/dGWc9_9WCaZM4OT7JoiK7vJtCLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.215.0/24
Signature Algorithm: sha256WithRSAEncryption
85:26:0c:d7:20:8f:ea:e7:17:6a:c9:40:67:d4:88:fe:8f:26:
9c:13:2b:fa:9b:34:e7:a8:92:33:ae:3a:7c:c9:c2:f3:4a:1f:
a3:9f:e1:01:c0:53:93:cf:c6:8d:0a:d5:5f:78:f1:a0:43:5f:
63:45:3d:50:c7:08:43:62:ee:44:84:0c:6b:a9:41:2e:4c:c8:
56:59:ab:46:5f:77:fa:93:67:8b:3d:03:cd:61:6e:f0:95:a3:
b8:7e:2b:86:ba:59:28:a5:ab:57:10:4e:ea:69:b5:c0:21:f1:
98:55:4c:e6:11:7e:9f:c4:42:c0:e4:25:17:0f:0f:4a:54:b8:
0c:24:58:36:49:70:bd:42:27:bd:53:c3:d0:16:53:7d:76:2c:
5c:e3:cc:53:14:63:2f:21:50:e2:5d:9d:69:04:5e:39:9c:50:
23:fd:06:40:2c:5c:0e:0a:08:46:ef:97:e0:70:d4:16:ef:2b:
17:b0:d3:95:ec:cc:a3:c5:de:ab:aa:ba:09:f8:d9:6a:f6:39:
4e:57:12:c6:bc:a9:0b:67:56:36:02:dd:6a:3f:c6:a8:23:7c:
39:2d:03:c8:7a:5e:42:db:21:2f:fa:dd:dc:60:5a:56:59:2c:
5c:e4:13:14:8f:02:2c:b8:84:ef:64:fd:e8:82:2c:f2:0f:7a:
a5:a3:15:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpnuiiVoT+o7o9uqMKw1oQjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw
NDE5NGUwHhcNMjMwOTA1MjM0MjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDY1OWNmN2ZmNTYwOWE2NGNlMGU0ZmIyNjg4OGFlZWYyNmQwOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNnz9YFDT+sM77FDWIr25d5Y5zVR
jt7tjMXywdHu/z9himh++6eylA2mnN9ax9EVtqIFwRcFVPWHJY7vS1dq1aVGbQaY
NDTCDA8UdwGpKAYPLhKNCeCOShbzsflI2mo0tdXNgWDWJTwYA5TfEuY4NVnLOEBG
dI9ZVmTteWa+NdwDoJJ1Yr8aobOoJ4sX1mjgGX+O5bz5vlgBGp4rGTPiob7se6hT
Qw9bVvESFgYh1r0CZBHRLahglmhV9UCOi+mGgLXmAA4rzlQEDJmqL6drT+r+WNH7
DAxZCMzoTkguvighdCO986BIK56Lp+gIqnc5eqDZCI8/foDwhNP/7aQU7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHRlnPf/VgmmTODk+yaIiu7ybQi1MB8GA1UdIwQY
MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt
MWFkNDdjY2QyZDlhLzEvZEdXYzlfOVdDYVpNNE9UN0pvaUs3dkp0Q0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh
LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRnXMA0G
CSqGSIb3DQEBCwUAA4IBAQCFJgzXII/q5xdqyUBn1Ij+jyacEyv6mzTnqJIzrjp8
ycLzSh+jn+EBwFOTz8aNCtVfePGgQ19jRT1QxwhDYu5EhAxrqUEuTMhWWatGX3f6
k2eLPQPNYW7wlaO4fiuGulkopatXEE7qabXAIfGYVUzmEX6fxELA5CUXDw9KVLgM
JFg2SXC9Qie9U8PQFlN9dixc48xTFGMvIVDiXZ1pBF45nFAj/QZALFwOCghG75fg
cNQW7ysXsNOV7Myjxd6rqroJ+Nlq9jlOVxLGvKkLZ1Y2At1qP8aoI3w5LQPIel5C
2yEv+t3cYFpWWSxc5BMUjwIsuITvZP3ogizyD3qloxW9
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:58 2025 by rpki-client