Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/cPH-H4UFaa5zd5BQwEW4clyaV_A.roa
File: cPH-H4UFaa5zd5BQwEW4clyaV_A.roa (raw, json)
Hash identifier: +X8x7jzY2CCkSplm/pyCg8TXBB7/n2xc/b9oytcoqLQ=
Subject key identifier: 70:F1:FE:1F:85:05:69:AE:73:77:90:50:C0:45:B8:72:5C:9A:57:F0
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 01857094F92E16BC2A0FAFEF80DA3687B5B4
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/cPH-H4UFaa5zd5BQwEW4clyaV_A.roa
Signing time: Mon 02 Jan 2023 03:44:49 +0000
ROA not before: Mon 02 Jan 2023 03:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207695
IP address blocks: 193.22.106.0/24 maxlen: 24
193.22.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f9:2e:16:bc:2a:0f:af:ef:80:da:36:87:b5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 2 03:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70f1fe1f850569ae73779050c045b8725c9a57f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:9a:50:06:cf:c4:6f:db:9e:40:5d:12:30:
67:f3:a1:b7:ee:84:b4:db:cf:ae:b3:76:c7:36:19:
18:f9:0e:de:16:18:07:58:8c:42:ec:76:1f:37:90:
6b:40:ce:98:37:43:bc:b4:fe:a8:ab:0f:c9:98:28:
da:80:bb:b4:7a:d2:a7:34:df:fe:7d:f2:d1:41:e0:
ee:be:b6:45:e1:d5:b1:b7:c6:1d:14:fc:6f:38:a5:
64:13:8b:7b:14:8d:22:0a:9a:26:c5:8a:60:fd:b6:
c8:49:30:33:96:bd:0d:19:7d:79:06:4f:aa:aa:5d:
fc:fb:39:e1:ea:6e:69:f9:13:1c:58:0a:15:ea:27:
7d:c9:c1:9a:17:8d:2b:9c:f9:1f:ab:b8:4a:8b:42:
fb:63:21:e6:84:9a:eb:e9:bd:42:90:31:a6:77:de:
19:79:3d:84:37:95:d7:20:c3:32:45:dd:a8:2f:35:
11:ae:71:2c:44:24:b5:9a:82:a6:e2:b7:44:44:9a:
9f:ca:a3:a7:08:c4:0d:70:c0:dc:76:a5:63:4c:5a:
83:42:e1:25:aa:48:43:e1:1d:11:6f:b4:34:9a:10:
ee:e2:91:88:7a:7c:04:de:29:2f:97:d7:4a:14:0f:
8b:60:25:8e:82:50:31:74:5d:00:df:48:27:56:57:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F1:FE:1F:85:05:69:AE:73:77:90:50:C0:45:B8:72:5C:9A:57:F0
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/cPH-H4UFaa5zd5BQwEW4clyaV_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.1.0/24
193.22.106.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6a:ea:a8:e5:be:52:ce:94:2f:6e:e1:a4:da:cd:47:f5:6f:
0d:9b:b8:be:1f:56:14:16:59:a8:2d:8c:45:d0:f4:51:21:62:
cd:19:6f:24:bc:99:38:48:fe:35:07:71:8b:76:00:94:d8:89:
62:f6:1a:a8:b0:f7:67:43:13:4f:39:02:f8:dd:a6:7d:49:f9:
a1:4f:2b:14:5f:00:8c:9b:bd:ae:44:cf:6e:3a:07:7b:33:81:
69:ee:76:25:b0:38:d8:1e:5b:64:c6:99:dc:eb:61:18:57:63:
39:bc:0b:ed:84:c3:61:9b:55:1f:62:da:46:bf:df:96:17:eb:
64:32:4f:82:9a:4a:4c:2b:c8:04:c0:d4:bb:f2:c6:07:83:85:
86:f4:5b:3f:9c:1d:ca:3c:3d:7c:db:e8:17:91:98:c5:d7:e7:
58:54:31:7c:3e:0d:c4:13:f5:a5:c7:05:d0:67:25:0b:fa:0f:
2d:a1:21:1a:17:cd:38:e2:87:a9:21:c2:3e:07:fa:af:bb:0b:
d3:16:45:3a:ed:c0:ab:a1:b1:9a:64:35:df:17:b9:d3:5f:17:
e0:d1:67:21:3b:83:02:1f:27:74:6e:7e:cb:c8:71:81:c0:05:
70:0e:0d:ff:4b:80:46:b8:30:e0:5f:34:ea:86:5a:1e:c4:d9:
85:bc:d1:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwlPkuFrwqD6/vgNo2h7W0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZTkyYzM0MWU3Njk0NDNmZGUxZDI3NTY2MDQ0YjRiNjUx
NTkwNjAwHhcNMjMwMTAyMDM0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGYxZmUxZjg1MDU2OWFlNzM3NzkwNTBjMDQ1Yjg3MjVjOWE1N2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa6aUAbPxG/bnkBdEjBn86G37oS0
28+us3bHNhkY+Q7eFhgHWIxC7HYfN5BrQM6YN0O8tP6oqw/JmCjagLu0etKnNN/+
ffLRQeDuvrZF4dWxt8YdFPxvOKVkE4t7FI0iCpomxYpg/bbISTAzlr0NGX15Bk+q
ql38+znh6m5p+RMcWAoV6id9ycGaF40rnPkfq7hKi0L7YyHmhJrr6b1CkDGmd94Z
eT2EN5XXIMMyRd2oLzURrnEsRCS1moKm4rdERJqfyqOnCMQNcMDcdqVjTFqDQuEl
qkhD4R0Rb7Q0mhDu4pGIenwE3ikvl9dKFA+LYCWOglAxdF0A30gnVlf2nwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHDx/h+FBWmuc3eQUMBFuHJcmlfwMB8GA1UdIwQY
MBaAFGbpLDQedpRD/eHSdWYES0tlFZBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYt
YzFkMjk2ZjhmZDA3LzEvY1BILUg0VUZhYTV6ZDVCUXdFVzRjbHlhVl9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYtYzFkMjk2ZjhmZDA3
LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRYBAwQA
wRZqMA0GCSqGSIb3DQEBCwUAA4IBAQBcauqo5b5SzpQvbuGk2s1H9W8Nm7i+H1YU
FlmoLYxF0PRRIWLNGW8kvJk4SP41B3GLdgCU2Ili9hqosPdnQxNPOQL43aZ9Sfmh
TysUXwCMm72uRM9uOgd7M4Fp7nYlsDjYHltkxpnc62EYV2M5vAvthMNhm1UfYtpG
v9+WF+tkMk+CmkpMK8gEwNS78sYHg4WG9Fs/nB3KPD182+gXkZjF1+dYVDF8Pg3E
E/WlxwXQZyUL+g8toSEaF8044oepIcI+B/qvuwvTFkU67cCrobGaZDXfF7nTXxfg
0WchO4MCHyd0bn7LyHGBwAVwDg3/S4BGuDDgXzTqhloexNmFvNHT
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:39 2025 by rpki-client