Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/Cyv4SkFhNxhBu15zXFDeyeys78U.roa
File: Cyv4SkFhNxhBu15zXFDeyeys78U.roa (raw, json)
Hash identifier: PYRR3AGWGjObf4+pdN+M3M9X/hDT3g6a7XFxw4xusCA=
Subject key identifier: 0B:2B:F8:4A:41:61:37:18:41:BB:5E:73:5C:50:DE:C9:EC:AC:EF:C5
Certificate issuer: /CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Certificate serial: 01856F94B3DA1170D8304D52FF9625B60989
Authority key identifier: BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/Cyv4SkFhNxhBu15zXFDeyeys78U.roa
Signing time: Sun 01 Jan 2023 23:04:54 +0000
ROA not before: Sun 01 Jan 2023 23:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49995
IP address blocks: 195.178.10.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b3:da:11:70:d8:30:4d:52:ff:96:25:b6:09:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Validity
Not Before: Jan 1 23:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b2bf84a4161371841bb5e735c50dec9ecacefc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:43:c2:4b:d6:84:a2:49:5a:0e:d3:b3:b6:
d9:80:a0:d8:43:d0:f2:e1:55:d5:9b:5b:fe:fe:5e:
da:b6:c1:82:b7:f3:6d:58:4f:69:fb:1e:89:50:98:
b1:5e:63:53:3b:b9:8d:5f:1b:da:b9:84:72:b4:48:
b1:3b:89:dd:66:b3:98:1d:4f:e1:9d:96:3c:73:47:
20:f6:e5:9d:b9:82:2f:96:fb:21:c9:d3:c3:02:6d:
cd:b9:24:0e:8c:9d:1a:bd:cb:3e:a4:d7:1f:dd:a4:
7d:fe:0a:5b:f3:07:91:ed:17:ed:71:0a:4c:c8:37:
d5:24:3a:b5:d9:0f:95:88:3c:0a:69:69:ea:62:d9:
b4:69:eb:aa:bd:35:05:f0:1f:f5:85:65:04:fd:57:
6d:2a:28:40:fc:6a:4b:8f:c5:6b:3d:0f:c7:28:27:
cb:3a:5a:82:6d:58:bd:06:a0:13:e2:08:91:a4:0c:
ae:db:16:eb:db:c6:91:ca:96:39:86:f4:91:e0:7e:
87:1a:16:9a:b9:58:3c:94:19:89:18:ef:8d:df:8c:
89:e0:6d:67:a2:af:52:24:ce:27:21:e4:05:6d:b5:
c6:11:9e:56:51:23:a6:81:08:65:60:f9:15:5c:05:
75:66:f6:90:4a:89:5d:05:8a:4d:1f:c8:77:2f:22:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2B:F8:4A:41:61:37:18:41:BB:5E:73:5C:50:DE:C9:EC:AC:EF:C5
X509v3 Authority Key Identifier:
keyid:BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/Cyv4SkFhNxhBu15zXFDeyeys78U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.10.0/23
Signature Algorithm: sha256WithRSAEncryption
22:bd:14:b9:26:ff:50:e4:fb:83:d7:95:a4:9a:91:76:fa:0d:
92:91:0f:6c:e2:2c:49:77:0d:42:8d:9e:33:ce:5a:c0:f2:d7:
a7:08:ba:bf:7b:88:f2:79:3d:be:da:ce:e9:09:0f:94:3c:67:
e0:89:a1:86:e3:a9:0c:18:52:ff:97:e9:17:31:c0:2a:f3:34:
b2:2b:60:28:b3:af:96:41:c6:e9:a8:04:87:51:b6:f0:59:2e:
7b:02:7e:9d:14:7b:fc:2f:7a:9e:a0:ba:e1:ee:79:85:b6:ff:
e7:23:a1:7a:cb:53:7a:b3:2b:64:bb:19:21:57:10:a2:03:46:
19:64:e4:b1:a9:88:cc:72:cb:ea:f3:db:42:68:b1:e9:a2:eb:
2b:b9:b7:16:bf:7e:5f:09:5e:0a:86:bc:4d:9f:73:49:6e:1f:
f5:b9:6d:ce:fb:03:6e:8b:4c:43:19:b3:6f:28:72:7d:1b:a8:
23:75:95:05:9f:a1:3e:eb:e0:ab:ec:07:ef:9b:4b:16:9a:77:
f5:0b:72:b6:94:e9:35:31:c4:03:79:92:72:2d:65:47:04:c2:
aa:66:9c:21:eb:c9:42:3a:9a:4a:2a:3f:9f:0a:a4:81:2f:78:
21:71:8a:4a:6f:29:2d:27:9f:17:75:a1:36:1d:51:31:c7:17:
55:bf:ae:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvlLPaEXDYME1S/5YltgmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmMxZDk1OGZmMDk0Y2FmMTM0NmNjNjZmNzE2Y2NlYjZk
YzUwMDkwHhcNMjMwMTAxMjMwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjJiZjg0YTQxNjEzNzE4NDFiYjVlNzM1YzUwZGVjOWVjYWNlZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzhDwkvWhKJJWg7Ts7bZgKDYQ9Dy
4VXVm1v+/l7atsGCt/NtWE9p+x6JUJixXmNTO7mNXxvauYRytEixO4ndZrOYHU/h
nZY8c0cg9uWduYIvlvshydPDAm3NuSQOjJ0avcs+pNcf3aR9/gpb8weR7RftcQpM
yDfVJDq12Q+ViDwKaWnqYtm0aeuqvTUF8B/1hWUE/VdtKihA/GpLj8VrPQ/HKCfL
OlqCbVi9BqAT4giRpAyu2xbr28aRypY5hvSR4H6HGhaauVg8lBmJGO+N34yJ4G1n
oq9SJM4nIeQFbbXGEZ5WUSOmgQhlYPkVXAV1ZvaQSoldBYpNH8h3LyL/rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAsr+EpBYTcYQbtec1xQ3snsrO/FMB8GA1UdIwQY
MBaAFLpsHZWP8JTK8TRsxm9xbM623FAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW13ZGxZX3dsTXJ4Tkd6R2IzRnN6cmJjVUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lMDIwMzUtNzNhZS00ZmQyLTgwYzEt
ZTE1MWQ0ZDM5YjQxLzEvQ3l2NFNrRmhOeGhCdTE1elhGRGV5ZXlzNzhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lMDIwMzUtNzNhZS00ZmQyLTgwYzEtZTE1MWQ0ZDM5YjQx
LzEvdW13ZGxZX3dsTXJ4Tkd6R2IzRnN6cmJjVUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7IKMA0G
CSqGSIb3DQEBCwUAA4IBAQAivRS5Jv9Q5PuD15WkmpF2+g2SkQ9s4ixJdw1CjZ4z
zlrA8tenCLq/e4jyeT2+2s7pCQ+UPGfgiaGG46kMGFL/l+kXMcAq8zSyK2Aos6+W
QcbpqASHUbbwWS57An6dFHv8L3qeoLrh7nmFtv/nI6F6y1N6sytkuxkhVxCiA0YZ
ZOSxqYjMcsvq89tCaLHpousrubcWv35fCV4KhrxNn3NJbh/1uW3O+wNui0xDGbNv
KHJ9G6gjdZUFn6E+6+Cr7Afvm0sWmnf1C3K2lOk1McQDeZJyLWVHBMKqZpwh68lC
OppKKj+fCqSBL3ghcYpKbyktJ58XdaE2HVExxxdVv64N
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:46:51 2025 by rpki-client