Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/vEAS_2y-SAVeVjEcSYVf8b4ZwZ0.roa
File: vEAS_2y-SAVeVjEcSYVf8b4ZwZ0.roa (raw, json)
Hash identifier: se/2j7vQutCtX4AYKgKiGAExZ6s/CfUQWzCIh4rgzQs=
Subject key identifier: BC:40:12:FF:6C:BE:48:05:5E:56:31:1C:49:85:5F:F1:BE:19:C1:9D
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 01856F9DD0CF8AE0C30618BD78EF4ED7CD07
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/vEAS_2y-SAVeVjEcSYVf8b4ZwZ0.roa
Signing time: Sun 01 Jan 2023 23:14:51 +0000
ROA not before: Sun 01 Jan 2023 23:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 192.109.202.0/24 maxlen: 24
192.109.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d0:cf:8a:e0:c3:06:18:bd:78:ef:4e:d7:cd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Jan 1 23:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc4012ff6cbe48055e56311c49855ff1be19c19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e6:e2:52:aa:87:10:fc:3c:c3:3d:7d:54:33:
a4:c2:eb:84:c8:59:7e:ff:a1:26:5b:3f:a6:d8:16:
6e:65:cc:26:3a:b2:ac:34:ac:41:f0:a1:d9:be:ef:
03:da:e1:a5:dc:b6:91:37:61:d0:d0:bb:ba:92:5e:
ef:3e:7b:13:54:06:1d:95:21:9a:1d:25:69:a1:98:
dd:0e:eb:d4:4a:68:99:82:a5:78:e5:d8:39:8e:0b:
47:0a:3f:74:9a:6b:53:cd:f2:e4:96:7e:34:71:61:
fa:dc:d8:17:bf:26:fe:57:21:4a:a8:b5:a7:68:3a:
c9:fa:38:74:01:96:5b:f6:dd:0e:e9:66:d1:32:2d:
11:43:2c:ab:6f:fd:d2:59:65:b7:a8:de:dc:38:7b:
42:56:58:07:39:f5:da:94:c4:e2:d5:36:cb:92:53:
90:b3:15:e8:a5:b9:a6:2e:56:e0:ec:59:ec:68:8e:
17:6e:b8:fb:46:1d:f3:80:87:db:7e:c9:46:c9:fd:
13:56:52:b1:36:2b:ca:b5:79:f3:63:d9:b0:c4:49:
44:64:54:31:4d:e1:f9:4f:45:2b:0e:03:9b:c4:79:
fb:5b:f6:b0:65:2b:18:44:50:0c:5d:66:fd:82:49:
ce:fc:86:79:5b:b0:37:1a:b2:03:f0:b9:84:2d:0d:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:12:FF:6C:BE:48:05:5E:56:31:1C:49:85:5F:F1:BE:19:C1:9D
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/vEAS_2y-SAVeVjEcSYVf8b4ZwZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.19.0/24
192.109.202.0/24
Signature Algorithm: sha256WithRSAEncryption
08:79:de:9d:7f:da:54:9b:9d:98:03:7d:c1:a2:19:1c:dd:a8:
48:34:11:f2:07:95:0d:76:99:2e:20:44:f0:d6:a2:a8:eb:fe:
1b:1a:25:07:39:3b:13:bb:8b:63:c3:25:73:43:b7:33:f4:c9:
27:c2:e7:94:e9:80:62:71:f5:39:34:ea:c4:87:0c:b3:f4:67:
ce:b5:04:2e:0e:65:71:f0:64:6d:f7:68:ad:18:89:12:66:18:
00:df:dc:b6:c9:35:9f:81:5e:9e:6b:50:9a:ac:ef:84:51:5e:
ee:0c:99:9e:7a:d8:43:02:5b:e1:e7:df:48:8c:7b:99:8d:18:
c0:cd:67:de:0b:24:06:10:52:57:71:2c:7c:4f:2d:a7:f6:36:
61:03:c2:07:2c:83:0b:2d:46:77:1d:ae:98:55:28:80:8c:06:
11:c1:41:c4:0d:5b:c5:40:3f:e9:ce:8c:96:aa:4b:ba:ed:2b:
0b:1b:44:8c:77:f4:52:1e:13:25:bc:a2:ec:cf:d4:1a:5d:95:
48:24:05:91:03:48:7d:9b:9e:5f:07:58:be:d5:e8:a2:57:ba:
c3:8d:9a:4e:f6:e6:44:e5:8e:de:86:6e:dc:42:35:08:fe:43:
ab:7d:1c:c8:4d:e2:82:77:51:a4:02:e5:49:cd:66:5c:59:7c:
c7:c4:50:85
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvndDPiuDDBhi9eO9O180HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDRiZDQ5OWY1ODQ5NGFjMGU4MjI2M2I1NTIwYTJjNjRk
NjQ3N2UwHhcNMjMwMTAxMjMxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzQwMTJmZjZjYmU0ODA1NWU1NjMxMWM0OTg1NWZmMWJlMTljMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ebiUqqHEPw8wz19VDOkwuuEyFl+
/6EmWz+m2BZuZcwmOrKsNKxB8KHZvu8D2uGl3LaRN2HQ0Lu6kl7vPnsTVAYdlSGa
HSVpoZjdDuvUSmiZgqV45dg5jgtHCj90mmtTzfLkln40cWH63NgXvyb+VyFKqLWn
aDrJ+jh0AZZb9t0O6WbRMi0RQyyrb/3SWWW3qN7cOHtCVlgHOfXalMTi1TbLklOQ
sxXopbmmLlbg7FnsaI4Xbrj7Rh3zgIfbfslGyf0TVlKxNivKtXnzY9mwxElEZFQx
TeH5T0UrDgObxHn7W/awZSsYRFAMXWb9gknO/IZ5W7A3GrID8LmELQ1DMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLxAEv9svkgFXlYxHEmFX/G+GcGdMB8GA1UdIwQY
MBaAFCDUvUmfWElKwOgiY7VSCixk1kd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzIt
ZDJlZTE1Mzk5ZDA2LzEvdkVBU18yeS1TQVZlVmpFY1NZVmY4YjRad1owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzItZDJlZTE1Mzk5ZDA2
LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwG0TAwQA
wG3KMA0GCSqGSIb3DQEBCwUAA4IBAQAIed6df9pUm52YA33Bohkc3ahINBHyB5UN
dpkuIETw1qKo6/4bGiUHOTsTu4tjwyVzQ7cz9MknwueU6YBicfU5NOrEhwyz9GfO
tQQuDmVx8GRt92itGIkSZhgA39y2yTWfgV6ea1CarO+EUV7uDJmeethDAlvh599I
jHuZjRjAzWfeCyQGEFJXcSx8Ty2n9jZhA8IHLIMLLUZ3Ha6YVSiAjAYRwUHEDVvF
QD/pzoyWqku67SsLG0SMd/RSHhMlvKLsz9QaXZVIJAWRA0h9m55fB1i+1eiiV7rD
jZpO9uZE5Y7ehm7cQjUI/kOrfRzITeKCd1GkAuVJzWZcWXzHxFCF
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:16 2025 by rpki-client