Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/_1Yk0p_UzHbxblCkanxd8jPqCcM.roa
File: _1Yk0p_UzHbxblCkanxd8jPqCcM.roa (raw, json)
Hash identifier: sEktLVWm5jlITVs9NHF2PaWqNU3YEi+uYtKnIYxv7Qs=
Subject key identifier: FF:56:24:D2:9F:D4:CC:76:F1:6E:50:A4:6A:7C:5D:F2:33:EA:09:C3
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 0184531EABFF439708D2AB80E2ED3BC867B2
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/_1Yk0p_UzHbxblCkanxd8jPqCcM.roa
Signing time: Mon 07 Nov 2022 17:23:49 +0000
ROA not before: Mon 07 Nov 2022 17:23:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35057
IP address blocks: 194.31.236.0/24 maxlen: 24
194.31.237.0/24 maxlen: 24
194.31.245.0/24 maxlen: 24
2a0e:3307::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:53:1e:ab:ff:43:97:08:d2:ab:80:e2:ed:3b:c8:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Nov 7 17:23:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff5624d29fd4cc76f16e50a46a7c5df233ea09c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:6c:54:9a:b3:84:df:7f:29:60:49:cb:98:
42:f3:77:15:af:0a:16:fd:96:9e:a3:45:b0:69:67:
f0:a5:09:64:63:4d:0c:4c:cd:49:61:e2:37:1a:3a:
a0:b0:12:fa:1d:26:50:14:d9:6c:3c:37:0e:b4:84:
0b:6d:1c:49:f4:79:6c:53:30:7a:a7:0b:d2:a0:54:
fd:ae:50:31:50:f4:40:0e:99:78:2a:29:e9:8b:02:
a6:63:a6:65:76:28:9b:fe:de:fe:0b:d5:62:6e:a9:
78:58:ff:82:69:8b:c5:9f:d5:b9:7f:33:b8:08:b1:
da:f5:aa:32:2a:a8:9d:61:99:e2:34:5d:dc:f2:d0:
9c:ad:ce:27:e8:52:cd:29:7d:b2:bd:10:17:ad:b3:
18:fc:e2:9d:f9:d2:6a:c6:d2:da:9f:12:aa:41:b2:
61:bf:81:40:7c:47:6c:18:ec:0f:ba:46:aa:6a:86:
d8:24:2d:a3:f4:c4:ae:15:2d:43:0f:3a:8c:88:20:
dd:0e:b7:ac:e5:da:0b:5b:29:35:1c:d4:fc:c7:22:
f3:f1:69:1a:50:49:b9:fd:f1:04:e2:d1:50:c4:d4:
07:b5:6c:89:e0:f2:e4:6c:5f:e2:40:0e:d2:96:f2:
38:63:70:86:8b:56:73:23:eb:6d:12:95:10:25:1b:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:24:D2:9F:D4:CC:76:F1:6E:50:A4:6A:7C:5D:F2:33:EA:09:C3
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/_1Yk0p_UzHbxblCkanxd8jPqCcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.236.0/23
194.31.245.0/24
IPv6:
2a0e:3307::/32
Signature Algorithm: sha256WithRSAEncryption
8c:d1:d3:22:64:df:f3:87:2b:94:82:56:b8:2d:b3:e9:87:47:
23:de:14:2b:98:45:98:8f:7a:88:1a:d3:44:3a:9b:68:4a:80:
1b:68:c0:26:15:46:c1:b8:5a:c3:14:29:08:ea:cc:42:2e:e7:
56:94:51:c0:52:75:29:95:6e:ac:3f:e8:f1:d6:ba:f9:a3:57:
0a:26:7e:c1:67:62:d7:b7:98:c5:6c:3d:09:2a:22:0a:e3:a1:
3e:69:e8:c3:51:82:ca:7f:a8:ef:d7:db:14:29:c7:36:b7:f3:
0b:2b:0f:f6:8b:fd:bb:ed:cf:b8:a1:2c:0f:e7:57:da:e3:2b:
03:44:e2:5d:74:9e:f9:f1:96:c1:8b:7e:9d:ec:5e:f6:cd:4e:
ce:56:59:c0:d5:e1:47:15:70:ca:6f:3f:11:89:a5:0f:46:83:
15:5c:9e:c1:78:d6:0e:b0:66:8a:cd:57:1e:40:8b:2b:7f:bc:
dc:25:58:c5:2c:f8:60:c4:2c:41:d7:66:b7:a8:b7:9b:e0:d6:
10:aa:84:eb:7d:14:c9:ce:c6:94:d4:a4:d7:f7:c1:45:ef:1c:
a4:dd:53:2e:a9:68:4c:71:ab:1b:55:ee:86:9d:37:0b:0d:ac:
0b:92:5f:64:66:58:3a:6e:ec:a4:0f:97:f8:2e:2e:a6:d7:e7:
8d:6a:73:66
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYRTHqv/Q5cI0quA4u07yGeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0
NTlmZWQwHhcNMjIxMTA3MTcyMzQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjU2MjRkMjlmZDRjYzc2ZjE2ZTUwYTQ2YTdjNWRmMjMzZWEwOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl49sVJqzhN9/KWBJy5hC83cVrwoW
/Zaeo0WwaWfwpQlkY00MTM1JYeI3GjqgsBL6HSZQFNlsPDcOtIQLbRxJ9HlsUzB6
pwvSoFT9rlAxUPRADpl4KinpiwKmY6Zldiib/t7+C9Vibql4WP+CaYvFn9W5fzO4
CLHa9aoyKqidYZniNF3c8tCcrc4n6FLNKX2yvRAXrbMY/OKd+dJqxtLanxKqQbJh
v4FAfEdsGOwPukaqaobYJC2j9MSuFS1DDzqMiCDdDres5doLWyk1HNT8xyLz8Wka
UEm5/fEE4tFQxNQHtWyJ4PLkbF/iQA7SlvI4Y3CGi1ZzI+ttEpUQJRvQWQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFP9WJNKf1Mx28W5QpGp8XfIz6gnDMB8GA1UdIwQY
MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt
MzBmZjJjODNmMDAxLzEvXzFZazBwX1V6SGJ4YmxDa2FueGQ4alBxQ2NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx
LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwh/sAwQA
wh/1MA0EAgACMAcDBQAqDjMHMA0GCSqGSIb3DQEBCwUAA4IBAQCM0dMiZN/zhyuU
gla4LbPph0cj3hQrmEWYj3qIGtNEOptoSoAbaMAmFUbBuFrDFCkI6sxCLudWlFHA
UnUplW6sP+jx1rr5o1cKJn7BZ2LXt5jFbD0JKiIK46E+aejDUYLKf6jv19sUKcc2
t/MLKw/2i/277c+4oSwP51fa4ysDROJddJ758ZbBi36d7F72zU7OVlnA1eFHFXDK
bz8RiaUPRoMVXJ7BeNYOsGaKzVceQIsrf7zcJVjFLPhgxCxB12a3qLeb4NYQqoTr
fRTJzsaU1KTX98FF7xyk3VMuqWhMcasbVe6GnTcLDawLkl9kZlg6buykD5f4Li6m
1+eNanNm
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:48:10 2025 by rpki-client