Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/ZXw5Ez5EFe3XifOSFtIocTc44vk.roa
File: ZXw5Ez5EFe3XifOSFtIocTc44vk.roa (raw, json)
Hash identifier: RcCUf6LdlfNRR30kIrzvYdEuUEnPgAQfG+aAXSyTgA0=
Subject key identifier: 65:7C:39:13:3E:44:15:ED:D7:89:F3:92:16:D2:28:71:37:38:E2:F9
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 01840F88C6FB20049AC5DF09C82B7B7D03C9
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/ZXw5Ez5EFe3XifOSFtIocTc44vk.roa
Signing time: Tue 25 Oct 2022 14:25:32 +0000
ROA not before: Tue 25 Oct 2022 14:25:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197157
IP address blocks: 178.249.136.0/21 maxlen: 21
178.249.140.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:88:c6:fb:20:04:9a:c5:df:09:c8:2b:7b:7d:03:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Oct 25 14:25:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=657c39133e4415edd789f39216d228713738e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:73:67:e2:ab:a6:1c:e5:ae:3c:9d:97:a2:
9d:d7:e6:db:0c:18:22:7c:ad:a3:51:16:1f:82:84:
05:36:7d:f5:d7:10:95:37:c0:b5:d0:35:9f:c7:41:
e6:ce:47:72:c7:91:f5:91:2b:65:2f:5e:99:86:dc:
85:c4:67:35:49:30:6b:be:dd:e7:73:a0:0a:ab:de:
6e:38:c0:ec:1d:fe:ed:59:48:a3:c2:81:38:31:91:
32:85:91:4b:d7:71:a7:fe:21:e1:e6:05:80:5a:cc:
d9:79:44:be:08:ed:0c:6d:1b:1c:44:9f:94:a9:03:
1e:d0:65:e5:85:55:05:fa:4d:5b:84:d1:c5:46:2a:
77:9a:5e:fe:31:5e:66:92:55:f0:81:ee:dc:3c:9d:
a0:9c:5d:b8:f8:8c:e1:0f:e5:dc:3b:6a:58:a6:e8:
6a:ff:3a:e5:bb:cd:c5:74:8c:55:0c:a1:b6:79:5b:
f6:61:9d:9b:6e:ea:8e:09:a5:d3:1d:50:34:56:48:
d9:5e:9b:11:73:ca:2e:af:7f:f1:94:03:e1:62:bd:
e7:e6:db:46:22:10:5f:82:67:11:1a:30:1e:2a:3e:
35:b4:b7:9c:02:02:5d:36:39:b1:91:f4:44:b8:8b:
4e:5f:87:79:13:38:c6:7d:4c:40:82:77:77:3b:a2:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7C:39:13:3E:44:15:ED:D7:89:F3:92:16:D2:28:71:37:38:E2:F9
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/ZXw5Ez5EFe3XifOSFtIocTc44vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.136.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:31:c6:b3:cb:86:a4:f6:58:4c:59:ce:2f:1e:df:87:0c:1c:
91:d0:cc:4f:75:da:a2:6d:eb:21:d3:6b:6b:46:6a:50:f6:5b:
ff:13:36:60:2f:a4:b4:85:e3:02:3e:d4:e5:b9:f7:5f:71:a8:
44:bf:73:66:8c:bc:88:c2:2a:5c:62:49:a3:e4:4a:d9:50:7f:
45:a7:67:16:c6:b9:2b:9c:2f:c6:96:c1:4f:82:de:9d:b0:6a:
8a:95:bf:97:bf:17:ee:f8:91:1b:31:72:4d:ea:82:10:d6:a0:
a9:91:fb:88:d7:7d:97:aa:79:4f:d6:a4:a3:9a:7a:ed:b0:af:
42:91:c6:ff:38:a1:0b:5b:ad:d4:25:23:05:94:5d:8a:44:7f:
d0:b7:b6:2f:2a:83:a6:f2:09:f5:55:99:ea:a4:49:41:af:ce:
18:b1:a2:95:ce:a0:06:e8:88:68:4c:03:06:dc:c0:82:ff:f3:
02:06:e4:c9:33:be:c1:70:9f:d7:44:ed:36:de:30:7f:96:83:
45:f3:d7:31:00:ef:b4:9e:59:8e:84:f7:3b:31:15:51:90:b8:
73:2d:36:3b:de:6c:32:55:9f:bc:89:7f:4f:b0:4f:13:e9:d7:
ba:ae:76:e6:96:35:8a:b9:73:f3:32:98:ad:95:82:4a:af:5b:
57:c7:1e:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQPiMb7IASaxd8JyCt7fQPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODg1MTlkZTkxODE4NWZiNmUxZWJhZmQxZTA4MzVjYWEx
MTMyZTQwHhcNMjIxMDI1MTQyNTMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTdjMzkxMzNlNDQxNWVkZDc4OWYzOTIxNmQyMjg3MTM3MzhlMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOBzZ+Krphzlrjydl6Kd1+bbDBgi
fK2jURYfgoQFNn311xCVN8C10DWfx0Hmzkdyx5H1kStlL16ZhtyFxGc1STBrvt3n
c6AKq95uOMDsHf7tWUijwoE4MZEyhZFL13Gn/iHh5gWAWszZeUS+CO0MbRscRJ+U
qQMe0GXlhVUF+k1bhNHFRip3ml7+MV5mklXwge7cPJ2gnF24+IzhD+XcO2pYpuhq
/zrlu83FdIxVDKG2eVv2YZ2bbuqOCaXTHVA0VkjZXpsRc8our3/xlAPhYr3n5ttG
IhBfgmcRGjAeKj41tLecAgJdNjmxkfREuItOX4d5EzjGfUxAgnd3O6ISdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGV8ORM+RBXt14nzkhbSKHE3OOL5MB8GA1UdIwQY
MBaAFGmIUZ3pGBhftuHrr9Hgg1yqETLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS81MTUyNDAtYjU5NC00NjliLWE5OTIt
ZWM3MmQ2YWRhMDRhLzEvWlh3NUV6NUVGZTNYaWZPU0Z0SW9jVGM0NHZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS81MTUyNDAtYjU5NC00NjliLWE5OTItZWM3MmQ2YWRhMDRh
LzEvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsvmIMA0G
CSqGSIb3DQEBCwUAA4IBAQCuMcazy4ak9lhMWc4vHt+HDByR0MxPddqibesh02tr
RmpQ9lv/EzZgL6S0heMCPtTlufdfcahEv3NmjLyIwipcYkmj5ErZUH9Fp2cWxrkr
nC/GlsFPgt6dsGqKlb+Xvxfu+JEbMXJN6oIQ1qCpkfuI132XqnlP1qSjmnrtsK9C
kcb/OKELW63UJSMFlF2KRH/Qt7YvKoOm8gn1VZnqpElBr84YsaKVzqAG6IhoTAMG
3MCC//MCBuTJM77BcJ/XRO023jB/loNF89cxAO+0nlmOhPc7MRVRkLhzLTY73mwy
VZ+8iX9PsE8T6de6rnbmljWKuXPzMpitlYJKr1tXxx4u
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:02:28 2025 by rpki-client