Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/lDuR1CKrS9NXSBS44wQvA0ejOq0.roa
File: lDuR1CKrS9NXSBS44wQvA0ejOq0.roa (raw, json)
Hash identifier: IDlGb0ijKzL88Pktp1I2S27UTfKWXuDovu8SR7x1rzY=
Subject key identifier: 94:3B:91:D4:22:AB:4B:D3:57:48:14:B8:E3:04:2F:03:47:A3:3A:AD
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 0B0C75D6
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/lDuR1CKrS9NXSBS44wQvA0ejOq0.roa
Signing time: Sat 01 Jan 2022 03:56:54 +0000
ROA not before: Sat 01 Jan 2022 03:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197688
IP address blocks: 193.142.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185365974 (0xb0c75d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Jan 1 03:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=943b91d422ab4bd3574814b8e3042f0347a33aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:dd:f3:cb:aa:d3:0e:db:7b:81:31:fa:7b:
da:ca:fa:66:50:3c:f6:10:2b:b7:87:a5:8b:3a:d7:
8b:38:78:86:14:85:e1:24:45:cb:db:e8:06:11:50:
6e:58:70:b1:e2:00:56:9d:b0:66:fb:61:35:5b:3d:
24:92:67:7b:ce:02:61:9b:29:c8:40:93:a2:e6:63:
34:0b:75:9c:05:58:8a:d5:0f:a5:14:0f:a1:47:e8:
ec:7c:f5:4d:d2:7c:8f:3c:18:1a:68:63:dc:08:46:
e6:52:dc:50:bd:81:2f:fd:34:69:a6:78:8e:38:9f:
4b:15:50:a1:01:dd:15:3b:b0:c4:28:11:e9:ca:b9:
1f:59:fc:d0:24:7e:42:f8:f1:79:5c:aa:b3:bc:04:
46:71:ea:27:9c:5d:cf:44:40:5f:ed:8f:2e:d3:ad:
3d:91:4c:52:6e:76:15:58:5b:65:27:7b:e9:a7:09:
7f:da:1b:ff:5a:fa:2c:46:22:48:e0:47:15:f9:61:
ca:de:16:8e:82:74:2e:64:f2:2d:a8:36:8f:49:d6:
9c:d9:a0:ee:02:cb:59:1d:56:05:d5:03:98:0f:2f:
a9:0a:b5:69:97:26:8b:d8:00:34:2d:b4:5d:be:fc:
53:a8:cc:d6:12:f1:98:b1:7d:94:34:44:d3:ae:f4:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3B:91:D4:22:AB:4B:D3:57:48:14:B8:E3:04:2F:03:47:A3:3A:AD
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/lDuR1CKrS9NXSBS44wQvA0ejOq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1d:11:cc:24:5f:b7:76:d0:50:7e:c6:c0:b5:df:19:1a:e3:
d0:ef:3c:b4:75:36:22:82:25:e5:49:f6:2d:c7:47:b9:6c:3f:
40:f6:77:a8:58:68:68:61:14:48:6c:20:0c:7f:fd:65:5a:80:
85:40:6f:9e:48:6b:ba:a2:27:93:fb:66:0f:d1:78:25:ea:1c:
17:32:c4:cd:41:75:4a:1b:57:bd:ea:4d:68:53:f1:0b:8b:b3:
8f:f9:cb:d0:6b:7c:23:05:27:ca:e9:4c:ef:da:03:03:8b:f9:
51:21:16:ef:a6:b9:80:af:27:5b:d8:97:70:3d:f4:91:0c:9b:
dc:0d:c3:c1:b2:20:d7:6b:cd:ce:69:1c:69:a1:67:95:79:14:
4c:89:33:ed:88:2b:48:9f:a5:62:6c:bb:bb:aa:cf:33:4a:1b:
e3:e8:2f:95:8a:fb:f3:e2:fc:a6:84:1d:ce:b7:b9:fb:de:27:
ef:b8:11:5b:95:f7:31:14:71:ac:a3:93:e7:4b:3d:dc:71:8c:
1b:2f:8e:56:4e:0b:d7:3d:aa:67:1f:a3:46:cc:e4:5d:b4:ca:
02:a9:f4:8b:87:80:9b:e7:ca:60:59:83:8a:a3:aa:b9:02:88:
ed:49:dc:f5:05:ea:1a:96:a0:ba:b6:66:66:43:bf:a4:37:f7:
e8:4b:e7:77
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECwx11jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MjdiMWU1NmFjN2QwNzgwMmM0NTY3YzQ2Nzk0MzUxNTliNDIyMDk2MB4XDTIyMDEw
MTAzNTY1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQzYjkxZDQyMmFi
NGJkMzU3NDgxNGI4ZTMwNDJmMDM0N2EzM2FhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsu3fPLqtMO23uBMfp72sr6ZlA89hArt4elizrXizh4hhSF
4SRFy9voBhFQblhwseIAVp2wZvthNVs9JJJne84CYZspyECTouZjNAt1nAVYitUP
pRQPoUfo7Hz1TdJ8jzwYGmhj3AhG5lLcUL2BL/00aaZ4jjifSxVQoQHdFTuwxCgR
6cq5H1n80CR+QvjxeVyqs7wERnHqJ5xdz0RAX+2PLtOtPZFMUm52FVhbZSd76acJ
f9ob/1r6LEYiSOBHFflhyt4WjoJ0LmTyLag2j0nWnNmg7gLLWR1WBdUDmA8vqQq1
aZcmi9gANC20Xb78U6jM1hLxmLF9lDRE0670o5UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSUO5HUIqtL01dIFLjjBC8DR6M6rTAfBgNVHSMEGDAWgBSSex5WrH0HgCxF
Z8RnlDUVm0IgljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tuc2VWcXg5QjRBc1JXZkVaNVExRlp0Q0lKWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTcvZjExZGVhLTMwNWUtNDg5OC05MTkyLTM2NTM0N2Y0MTZjMC8x
L2xEdVIxQ0tyUzlOWFNCUzQ0d1F2QTBlak9xMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcv
ZjExZGVhLTMwNWUtNDg5OC05MTkyLTM2NTM0N2Y0MTZjMC8xL2tuc2VWcXg5QjRB
c1JXZkVaNVExRlp0Q0lKWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGOnzANBgkqhkiG9w0BAQsFAAOC
AQEATx0RzCRft3bQUH7GwLXfGRrj0O88tHU2IoIl5Un2LcdHuWw/QPZ3qFhoaGEU
SGwgDH/9ZVqAhUBvnkhruqInk/tmD9F4JeocFzLEzUF1ShtXvepNaFPxC4uzj/nL
0Gt8IwUnyulM79oDA4v5USEW76a5gK8nW9iXcD30kQyb3A3DwbIg12vNzmkcaaFn
lXkUTIkz7YgrSJ+lYmy7u6rPM0ob4+gvlYr78+L8poQdzre5+94n77gRW5X3MRRx
rKOT50s93HGMGy+OVk4L1z2qZx+jRszkXbTKAqn0i4eAm+fKYFmDiqOquQKI7Unc
9QXqGpagurZmZkO/pDf36Evndw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:26 2025 by rpki-client