Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/Vv1MdlyAJYDuMIy8jWXIx50q6Cw.roa
File: Vv1MdlyAJYDuMIy8jWXIx50q6Cw.roa (raw, json)
Hash identifier: xdSVGNvefiyOsqGxU5wftX69S97Yed+UohF9zvjzU/k=
Subject key identifier: 56:FD:4C:76:5C:80:25:80:EE:30:8C:BC:8D:65:C8:C7:9D:2A:E8:2C
Certificate issuer: /CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Certificate serial: 0189CA8EB7A15FD894A9BC393ED6B1E67965
Authority key identifier: 30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/Vv1MdlyAJYDuMIy8jWXIx50q6Cw.roa
Signing time: Sun 06 Aug 2023 11:14:58 +0000
ROA not before: Sun 06 Aug 2023 11:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31184
IP address blocks: 193.22.253.0/24 maxlen: 24
195.74.40.0/22 maxlen: 24
2a13:6140::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:8e:b7:a1:5f:d8:94:a9:bc:39:3e:d6:b1:e6:79:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Validity
Not Before: Aug 6 11:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56fd4c765c802580ee308cbc8d65c8c79d2ae82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:ad:b4:18:ab:96:f5:eb:74:c8:b2:77:15:
38:57:0a:60:25:e8:4f:64:8a:2e:fb:4e:49:a1:67:
be:81:75:45:b4:a6:4e:b2:94:5a:e6:d0:ed:50:fb:
fd:67:bb:3e:79:4b:a2:8a:c1:a9:1b:8e:15:17:20:
71:5b:c4:f7:1b:3b:0c:37:6a:6a:68:99:e1:de:f9:
82:4f:e4:8b:1b:77:2d:25:24:d8:bb:aa:1f:e5:7a:
74:75:f9:dc:49:e8:98:a1:a8:9c:42:84:2f:86:8c:
74:cc:9a:4d:06:75:b2:4a:78:fb:bd:fa:56:22:af:
fa:e0:b4:5b:57:57:9f:5a:bf:5d:cd:ec:fb:a9:76:
d9:5f:d6:c8:b8:3a:01:96:66:3c:68:75:8b:dc:31:
bc:d9:3b:d9:29:19:1e:26:9d:9d:79:70:29:18:ac:
36:be:bf:0a:72:48:c5:6e:41:e4:cb:98:68:08:ab:
8e:ab:e8:cb:5b:c6:80:22:a8:5f:06:f5:49:94:b0:
7d:e7:90:ce:93:7f:c6:27:32:ad:28:70:0f:52:a4:
7c:79:e8:e2:c8:1c:6a:1d:37:5d:ad:c8:e1:51:59:
5e:23:b0:58:e1:88:34:a4:66:f1:f3:c5:f1:6b:02:
83:8f:eb:40:da:b8:71:88:13:42:e4:89:24:89:3f:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:4C:76:5C:80:25:80:EE:30:8C:BC:8D:65:C8:C7:9D:2A:E8:2C
X509v3 Authority Key Identifier:
keyid:30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/Vv1MdlyAJYDuMIy8jWXIx50q6Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.253.0/24
195.74.40.0/22
IPv6:
2a13:6140::/29
Signature Algorithm: sha256WithRSAEncryption
69:79:88:be:68:fc:a2:65:b7:05:2e:73:27:42:32:71:16:86:
92:45:76:66:47:42:6a:63:f3:4b:b6:97:4b:81:ed:e6:d0:a6:
ee:a0:0e:54:94:73:82:c0:06:8f:8b:5d:93:21:b7:8b:e6:bf:
2e:cd:5b:a9:f4:24:9e:49:e0:a0:98:26:01:e3:0f:0c:62:8c:
30:f1:1c:ee:a6:ee:f7:63:f5:2c:07:12:84:7e:9a:e8:af:10:
54:a1:77:ce:37:10:b2:06:60:f5:ef:28:93:fd:2b:0b:0f:91:
2e:ea:2d:99:97:97:a5:74:da:a6:3a:ca:43:7e:7b:8b:b6:9f:
36:45:b4:d1:36:47:a4:d2:90:14:a6:82:3b:15:41:b4:12:80:
8e:43:c2:f7:96:5d:08:49:19:0e:35:72:e0:66:ca:5e:72:92:
34:a8:84:05:59:e1:25:5d:35:8b:26:e5:aa:c1:c1:fd:50:13:
07:54:92:0f:23:29:27:16:3a:ef:87:3a:59:3b:f7:41:41:d8:
e3:31:03:b8:74:fa:30:99:58:46:be:ac:fc:6a:25:08:fd:c6:
74:0f:dc:b4:0d:c8:c6:06:9c:1e:96:92:8b:ad:43:1e:2e:a9:
ea:83:79:28:fd:4a:59:57:e2:32:e5:b9:d2:81:aa:c5:bd:e4:
56:b3:10:07
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYnKjrehX9iUqbw5Ptax5nllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNDYwZDczYjViYmNiYjVlZWU5N2E0YTM5ZWViNTU1NzJk
MzVhODAwHhcNMjMwODA2MTExNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmZkNGM3NjVjODAyNTgwZWUzMDhjYmM4ZDY1YzhjNzlkMmFlODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB6ttBirlvXrdMiydxU4VwpgJehP
ZIou+05JoWe+gXVFtKZOspRa5tDtUPv9Z7s+eUuiisGpG44VFyBxW8T3GzsMN2pq
aJnh3vmCT+SLG3ctJSTYu6of5Xp0dfncSeiYoaicQoQvhox0zJpNBnWySnj7vfpW
Iq/64LRbV1efWr9dzez7qXbZX9bIuDoBlmY8aHWL3DG82TvZKRkeJp2deXApGKw2
vr8KckjFbkHky5hoCKuOq+jLW8aAIqhfBvVJlLB955DOk3/GJzKtKHAPUqR8eeji
yBxqHTddrcjhUVleI7BY4Yg0pGbx88XxawKDj+tA2rhxiBNC5IkkiT9CDwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFb9THZcgCWA7jCMvI1lyMedKugsMB8GA1UdIwQY
MBaAFDBGDXO1u8u17ul6SjnutVVy01qAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUVZTmM3Vzd5N1h1NlhwS09lNjFWWExUV29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83ZWJkZWUtYTYwMC00Nzc2LThmMDIt
ZmVhOTJjYmUyZDJjLzEvVnYxTWRseUFKWUR1TUl5OGpXWEl4NTBxNkN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83ZWJkZWUtYTYwMC00Nzc2LThmMDItZmVhOTJjYmUyZDJj
LzEvTUVZTmM3Vzd5N1h1NlhwS09lNjFWWExUV29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwRb9AwQC
w0ooMA0EAgACMAcDBQMqE2FAMA0GCSqGSIb3DQEBCwUAA4IBAQBpeYi+aPyiZbcF
LnMnQjJxFoaSRXZmR0JqY/NLtpdLge3m0KbuoA5UlHOCwAaPi12TIbeL5r8uzVup
9CSeSeCgmCYB4w8MYoww8Rzupu73Y/UsBxKEfprorxBUoXfONxCyBmD17yiT/SsL
D5Eu6i2Zl5eldNqmOspDfnuLtp82RbTRNkek0pAUpoI7FUG0EoCOQ8L3ll0ISRkO
NXLgZspecpI0qIQFWeElXTWLJuWqwcH9UBMHVJIPIyknFjrvhzpZO/dBQdjjMQO4
dPowmVhGvqz8aiUI/cZ0D9y0DcjGBpwelpKLrUMeLqnqg3ko/UpZV+Iy5bnSgarF
veRWsxAH
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:03 2025 by rpki-client