Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/9QipGIzIpx1rjigy6ROiPnDYOBQ.roa
File: 9QipGIzIpx1rjigy6ROiPnDYOBQ.roa (raw, json)
Hash identifier: bH3Q8CwYXbEbHftAFGigNexh9nmegj0Z96F1P/TLlgI=
Subject key identifier: F5:08:A9:18:8C:C8:A7:1D:6B:8E:28:32:E9:13:A2:3E:70:D8:38:14
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 01856E1D2F4FFBBF85147E1E45CB63AB2A29
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/9QipGIzIpx1rjigy6ROiPnDYOBQ.roa
Signing time: Sun 01 Jan 2023 16:14:44 +0000
ROA not before: Sun 01 Jan 2023 16:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.29.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:2f:4f:fb:bf:85:14:7e:1e:45:cb:63:ab:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Jan 1 16:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f508a9188cc8a71d6b8e2832e913a23e70d83814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:86:5f:db:82:3d:fd:92:d9:0f:ab:1b:91:f3:
b6:00:3c:32:e4:94:44:24:01:3d:3d:4c:ed:68:06:
51:2b:18:55:9a:62:c6:f3:8f:50:02:ec:1c:38:d0:
71:dc:61:2d:a0:58:63:69:a9:f8:d0:9c:6e:f2:cc:
5e:96:7e:70:1c:20:5c:9e:b5:a0:e3:93:ce:07:ec:
0b:00:09:69:4a:35:56:ba:de:24:f9:8e:04:3c:03:
58:c9:a9:ed:a2:bf:3f:b0:28:9f:52:32:ea:d0:1f:
3b:2f:b8:be:10:8c:24:38:61:b1:1e:52:c5:d4:9b:
10:c1:f1:2e:00:7c:50:da:c4:03:8f:76:23:d3:43:
00:11:40:bd:0a:46:82:db:4a:26:88:47:65:27:bb:
26:f7:06:d9:80:e5:84:f4:ed:4a:14:38:6e:32:aa:
50:63:d3:f2:30:2c:00:a0:95:a8:fe:6f:8b:83:14:
7a:a5:c9:cf:e6:b9:06:68:99:f4:50:c9:71:b1:69:
5b:b5:4d:a6:ab:a9:33:d8:9a:ae:a1:a0:6b:52:6e:
01:f7:9f:bb:20:60:b1:94:0a:c8:14:e9:d4:21:d6:
22:2a:e6:5a:43:a8:c7:99:82:c0:59:02:ee:06:50:
ad:75:31:06:df:de:d0:07:5c:f4:0a:d9:b4:62:b3:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:A9:18:8C:C8:A7:1D:6B:8E:28:32:E9:13:A2:3E:70:D8:38:14
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/9QipGIzIpx1rjigy6ROiPnDYOBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d3:9a:3f:e3:55:77:93:11:b4:41:f8:d9:e6:f0:0e:a8:0a:
77:ff:72:85:e6:e1:d1:c3:88:30:6f:54:1f:44:ea:ed:81:79:
61:b0:59:d1:6e:eb:71:26:2a:76:18:16:1f:74:15:78:d0:db:
17:de:3a:96:a8:17:9f:c4:d8:0a:7c:55:4a:9c:3d:bc:41:39:
3a:8b:4a:1a:75:1b:ef:23:ca:1f:05:30:1a:85:ec:b8:7c:79:
9a:b9:45:e2:4b:35:e1:49:35:35:ea:6d:b7:57:e6:8a:4e:3e:
84:a6:6d:c1:48:c1:c7:e3:a1:28:0a:4d:44:56:c0:71:aa:cf:
2a:7a:a4:c0:52:6c:eb:9f:49:75:a6:a7:d4:d8:76:08:57:9e:
94:a6:2c:67:d8:5f:bf:0f:45:e2:c0:d1:d2:cf:e2:c0:57:9a:
f9:91:1c:18:3b:e0:07:94:68:e6:ed:e3:ab:70:f5:0f:d8:14:
c3:ce:bf:be:9c:e8:1f:b0:b2:bb:dd:83:b1:86:2c:53:52:14:
6f:49:f0:15:35:73:a6:e1:b0:83:6a:d6:f4:3e:63:3e:9e:e3:
48:7d:20:6c:bb:e8:f4:82:81:1b:f5:ec:db:3c:6e:fe:b4:66:
5a:f6:48:6a:7a:9c:6a:fb:09:d7:de:2a:04:14:78:f9:34:b5:
3b:68:99:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuHS9P+7+FFH4eRctjqyopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMDBhMTY5YzhlNjk2Y2ExNjliNTk5YzdhMTcxMTkzZmZm
MDZkMmEwHhcNMjMwMTAxMTYxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTA4YTkxODhjYzhhNzFkNmI4ZTI4MzJlOTEzYTIzZTcwZDgzODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoZf24I9/ZLZD6sbkfO2ADwy5JRE
JAE9PUztaAZRKxhVmmLG849QAuwcONBx3GEtoFhjaan40Jxu8sxeln5wHCBcnrWg
45POB+wLAAlpSjVWut4k+Y4EPANYyantor8/sCifUjLq0B87L7i+EIwkOGGxHlLF
1JsQwfEuAHxQ2sQDj3Yj00MAEUC9CkaC20omiEdlJ7sm9wbZgOWE9O1KFDhuMqpQ
Y9PyMCwAoJWo/m+LgxR6pcnP5rkGaJn0UMlxsWlbtU2mq6kz2JquoaBrUm4B95+7
IGCxlArIFOnUIdYiKuZaQ6jHmYLAWQLuBlCtdTEG397QB1z0Ctm0YrPRkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPUIqRiMyKcda44oMukToj5w2DgUMB8GA1UdIwQY
MBaAFAEAoWnI5pbKFptZnHoXEZP/8G0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80NmM5NWMtN2YyMS00Y2M3LThlOGYt
YjU2NmFlYjk1ZjkzLzEvOVFpcEdJeklweDFyamlneTZST2lQbkRZT0JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80NmM5NWMtN2YyMS00Y2M3LThlOGYtYjU2NmFlYjk1Zjkz
LzEvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR0vMA0G
CSqGSIb3DQEBCwUAA4IBAQB/05o/41V3kxG0QfjZ5vAOqAp3/3KF5uHRw4gwb1Qf
ROrtgXlhsFnRbutxJip2GBYfdBV40NsX3jqWqBefxNgKfFVKnD28QTk6i0oadRvv
I8ofBTAahey4fHmauUXiSzXhSTU16m23V+aKTj6Epm3BSMHH46EoCk1EVsBxqs8q
eqTAUmzrn0l1pqfU2HYIV56Upixn2F+/D0XiwNHSz+LAV5r5kRwYO+AHlGjm7eOr
cPUP2BTDzr++nOgfsLK73YOxhixTUhRvSfAVNXOm4bCDatb0PmM+nuNIfSBsu+j0
goEb9ezbPG7+tGZa9khqepxq+wnX3ioEFHj5NLU7aJkZ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:15 2025 by rpki-client