Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9NbwYa_O-e5i2xj_izUO0rfvqPo.roa
File: 9NbwYa_O-e5i2xj_izUO0rfvqPo.roa (raw, json)
Hash identifier: 3TW4ufUGUcEKqIq4VourvWk6BAyIk+Z50B4qlAO6IYY=
Subject key identifier: F4:D6:F0:61:AF:CE:F9:EE:62:DB:18:FF:8B:35:0E:D2:B7:EF:A8:FA
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01856DC19BC9CB03969724D5CADB5F6E651D
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9NbwYa_O-e5i2xj_izUO0rfvqPo.roa
Signing time: Sun 01 Jan 2023 14:34:42 +0000
ROA not before: Sun 01 Jan 2023 14:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210609
IP address blocks: 185.124.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9b:c9:cb:03:96:97:24:d5:ca:db:5f:6e:65:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 14:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4d6f061afcef9ee62db18ff8b350ed2b7efa8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:2a:2f:9e:d6:cd:fd:90:d5:5a:a1:7a:13:
83:a4:96:d2:e8:07:76:35:c2:ab:5e:52:c4:ce:0f:
83:fd:9c:2a:70:2a:a1:42:22:74:b8:4c:f5:a5:72:
ac:ab:cb:b8:7c:5e:f4:72:6e:47:07:4c:3f:a1:af:
ca:85:26:0c:71:0e:cc:96:ca:11:30:fc:f3:8d:f5:
f6:0a:23:f1:b6:16:eb:03:db:69:69:f0:c4:36:2d:
0c:2d:c0:82:85:71:45:95:eb:0d:1e:9b:24:2e:fd:
ba:63:6e:43:c5:ea:e1:69:53:4a:c6:3b:1d:28:44:
f0:e0:55:f9:4d:e7:6a:d8:98:bc:64:7f:f6:65:37:
c8:31:e0:87:89:32:5a:f0:14:66:3e:50:81:b0:b0:
84:38:19:c4:75:10:63:ca:36:ee:24:72:39:fd:16:
a1:43:98:78:98:a2:f5:cd:f0:cd:9c:ac:9b:a1:ca:
35:c1:57:05:dc:ad:22:2c:df:bf:6d:fc:60:48:51:
2c:e2:9c:70:63:1a:02:8a:6b:ea:73:34:25:dc:88:
69:a1:ed:bc:8a:74:6f:bb:25:c4:55:d0:20:4f:06:
b0:e1:28:7a:03:87:34:07:73:e0:85:2d:b0:94:d1:
0b:5c:5d:f2:8d:ca:48:ce:0a:ef:3f:30:f5:c0:cf:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D6:F0:61:AF:CE:F9:EE:62:DB:18:FF:8B:35:0E:D2:B7:EF:A8:FA
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9NbwYa_O-e5i2xj_izUO0rfvqPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.172.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ef:5f:8d:6a:23:14:d2:36:c5:bd:6a:16:6b:d8:48:36:a0:
b8:39:16:88:0d:bb:2c:cf:23:d1:a3:a5:7d:9e:cd:74:c6:36:
db:b4:8f:98:cc:d4:e6:b6:f0:86:28:dc:a6:1e:7f:f2:50:f7:
f3:8e:2a:cd:29:fe:d6:14:07:51:31:a8:8f:1b:56:51:67:33:
65:a6:5f:2b:07:c6:13:03:61:65:40:fa:af:e6:74:85:83:13:
40:4e:f8:1f:93:54:cc:e3:41:b9:77:a9:55:92:ed:49:82:31:
84:f4:02:24:2e:c8:6d:d2:1e:52:7b:c8:19:37:60:91:03:8b:
74:1b:ad:b9:c0:53:7e:93:c5:dc:84:0f:3a:ce:ac:43:0d:8e:
08:d5:7d:79:a0:1b:cc:bd:3c:de:cc:db:88:cb:69:e9:73:9c:
c2:f9:dd:06:d8:ff:33:34:1c:59:10:b0:8d:4e:e8:4a:a4:7a:
e3:52:d7:cc:c3:bf:15:bf:55:fa:71:23:cc:0f:a5:6d:7d:7f:
00:6b:51:5c:f8:ba:0b:f4:76:66:cd:2f:85:73:32:b2:9b:73:
b0:cc:70:20:16:58:48:54:f7:f8:50:f2:47:6c:e1:99:d2:ae:
8f:a2:28:0f:1a:90:21:0d:40:0a:0d:d4:c1:a8:97:b1:64:3c:
f2:03:d7:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtwZvJywOWlyTVyttfbmUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMwMTAxMTQzNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGQ2ZjA2MWFmY2VmOWVlNjJkYjE4ZmY4YjM1MGVkMmI3ZWZhOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjoqL57Wzf2Q1VqhehODpJbS6Ad2
NcKrXlLEzg+D/ZwqcCqhQiJ0uEz1pXKsq8u4fF70cm5HB0w/oa/KhSYMcQ7MlsoR
MPzzjfX2CiPxthbrA9tpafDENi0MLcCChXFFlesNHpskLv26Y25DxerhaVNKxjsd
KETw4FX5Tedq2Ji8ZH/2ZTfIMeCHiTJa8BRmPlCBsLCEOBnEdRBjyjbuJHI5/Rah
Q5h4mKL1zfDNnKyboco1wVcF3K0iLN+/bfxgSFEs4pxwYxoCimvqczQl3Ihpoe28
inRvuyXEVdAgTwaw4Sh6A4c0B3PghS2wlNELXF3yjcpIzgrvPzD1wM9klQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPTW8GGvzvnuYtsY/4s1DtK376j6MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvOU5id1lhX08tZTVpMnhqX2l6VU8wcmZ2cVBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXysMA0G
CSqGSIb3DQEBCwUAA4IBAQAy71+NaiMU0jbFvWoWa9hINqC4ORaIDbsszyPRo6V9
ns10xjbbtI+YzNTmtvCGKNymHn/yUPfzjirNKf7WFAdRMaiPG1ZRZzNlpl8rB8YT
A2FlQPqv5nSFgxNATvgfk1TM40G5d6lVku1JgjGE9AIkLsht0h5Se8gZN2CRA4t0
G625wFN+k8XchA86zqxDDY4I1X15oBvMvTzezNuIy2npc5zC+d0G2P8zNBxZELCN
TuhKpHrjUtfMw78Vv1X6cSPMD6VtfX8Aa1Fc+LoL9HZmzS+FczKym3OwzHAgFlhI
VPf4UPJHbOGZ0q6PoigPGpAhDUAKDdTBqJexZDzyA9dI
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:22 2025 by rpki-client