Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/VUW9jkHG5seY1nde8nhQ5V6QvIw.roa
File: VUW9jkHG5seY1nde8nhQ5V6QvIw.roa (raw, json)
Hash identifier: e8vWt/tPAp4B+uW6iN81VJtfFKL0B2hnv8r7/KigQV4=
Subject key identifier: 55:45:BD:8E:41:C6:E6:C7:98:D6:77:5E:F2:78:50:E5:5E:90:BC:8C
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0188B0542183DF5AD88DFD5BDA8DEF4C0C8E
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/VUW9jkHG5seY1nde8nhQ5V6QvIw.roa
Signing time: Mon 12 Jun 2023 15:58:03 +0000
ROA not before: Mon 12 Jun 2023 15:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212939
IP address blocks: 195.238.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:54:21:83:df:5a:d8:8d:fd:5b:da:8d:ef:4c:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jun 12 15:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5545bd8e41c6e6c798d6775ef27850e55e90bc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:78:5d:0e:43:c4:82:91:77:fc:6e:7c:cc:
15:f7:6d:da:3e:aa:6c:fa:17:4d:9d:e8:5b:58:55:
10:bb:9a:67:3a:45:7c:2f:27:84:60:98:ca:f9:fb:
76:35:2a:8e:ba:4c:0c:2c:22:32:ec:73:30:9e:7e:
76:4a:f5:c6:03:e1:3b:51:29:25:b2:35:41:4c:e0:
d8:9f:76:6f:41:a5:6e:3e:bc:cf:53:e9:f8:92:25:
76:60:ef:1d:79:e5:90:d6:34:e6:91:ec:c3:56:a9:
d7:c2:b0:28:89:24:db:b0:49:e1:4c:47:e3:7a:a7:
b5:45:c6:f8:33:41:79:ea:22:82:19:99:ac:14:65:
59:bc:46:da:b9:06:30:e4:aa:66:92:ca:a6:cd:bb:
e1:c7:9e:75:cb:79:3d:53:70:ad:1a:82:ea:fc:8f:
33:25:4a:e6:3b:78:d3:11:ec:c9:d2:29:4d:3a:68:
56:bb:5f:00:43:93:82:4b:95:b0:99:57:69:01:b4:
9f:28:dd:da:59:49:ae:be:52:1e:90:64:df:30:22:
7a:80:ce:87:37:54:b4:74:dd:eb:76:2c:93:df:59:
84:b9:d3:27:1c:c4:14:36:34:fb:93:86:c5:c3:36:
91:a9:2f:ac:73:b3:6e:24:13:3d:60:75:1c:09:58:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:BD:8E:41:C6:E6:C7:98:D6:77:5E:F2:78:50:E5:5E:90:BC:8C
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/VUW9jkHG5seY1nde8nhQ5V6QvIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bd:cc:5f:71:e8:12:f8:9e:28:3d:24:81:49:1e:d8:f3:ae:
14:4f:69:d7:53:b7:86:96:0d:e8:6c:8c:a9:da:7b:f2:74:db:
88:ed:9f:c6:bd:eb:63:23:16:41:36:25:99:e1:cc:54:bf:39:
38:98:e3:e9:5f:80:84:c1:83:b6:45:5b:cc:e6:43:fd:1d:a2:
8e:0f:4c:cd:ee:99:9c:3a:c0:77:82:d2:0d:f5:a3:a5:9c:35:
63:5e:99:59:10:d1:a7:a7:1e:90:40:e3:ce:09:95:23:42:22:
60:8a:8a:58:e6:e1:55:a4:8e:11:36:45:fe:b7:f7:64:0a:fe:
96:f8:11:c5:9e:46:6f:9f:07:79:ba:29:f6:89:ec:02:60:dd:
89:43:54:aa:c6:f7:a8:6a:b3:00:c2:ab:e4:46:b9:47:5c:3e:
e9:37:b4:f6:6f:ed:ae:6b:6b:36:36:7e:86:31:e4:ab:52:18:
44:5b:a0:e0:d0:84:ac:61:c7:46:da:ae:cf:0b:b3:8a:15:b5:
2e:c1:0d:a9:cd:66:b8:e3:a1:fc:ea:f9:b8:14:fa:2c:d2:6c:
18:c5:a4:3e:46:b5:36:9d:af:80:15:69:60:02:fc:52:47:b1:
5f:23:9b:81:7d:d6:2e:fd:68:8c:cd:18:ba:1e:09:f5:34:d9:
fd:53:76:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiwVCGD31rYjf1b2o3vTAyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk
ZmQ5YTgwHhcNMjMwNjEyMTU1ODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTQ1YmQ4ZTQxYzZlNmM3OThkNjc3NWVmMjc4NTBlNTVlOTBiYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGB4XQ5DxIKRd/xufMwV923aPqps
+hdNnehbWFUQu5pnOkV8LyeEYJjK+ft2NSqOukwMLCIy7HMwnn52SvXGA+E7USkl
sjVBTODYn3ZvQaVuPrzPU+n4kiV2YO8deeWQ1jTmkezDVqnXwrAoiSTbsEnhTEfj
eqe1Rcb4M0F56iKCGZmsFGVZvEbauQYw5Kpmksqmzbvhx551y3k9U3CtGoLq/I8z
JUrmO3jTEezJ0ilNOmhWu18AQ5OCS5WwmVdpAbSfKN3aWUmuvlIekGTfMCJ6gM6H
N1S0dN3rdiyT31mEudMnHMQUNjT7k4bFwzaRqS+sc7NuJBM9YHUcCVjz7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFVFvY5BxubHmNZ3XvJ4UOVekLyMMB8GA1UdIwQY
MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt
MThkMWE0MDZhYWVkLzEvVlVXOWprSEc1c2VZMW5kZThuaFE1VjZRdkl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk
LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+73MA0G
CSqGSIb3DQEBCwUAA4IBAQA8vcxfcegS+J4oPSSBSR7Y864UT2nXU7eGlg3obIyp
2nvydNuI7Z/GvetjIxZBNiWZ4cxUvzk4mOPpX4CEwYO2RVvM5kP9HaKOD0zN7pmc
OsB3gtIN9aOlnDVjXplZENGnpx6QQOPOCZUjQiJgiopY5uFVpI4RNkX+t/dkCv6W
+BHFnkZvnwd5uin2iewCYN2JQ1SqxveoarMAwqvkRrlHXD7pN7T2b+2ua2s2Nn6G
MeSrUhhEW6Dg0ISsYcdG2q7PC7OKFbUuwQ2pzWa446H86vm4FPos0mwYxaQ+RrU2
na+AFWlgAvxSR7FfI5uBfdYu/WiMzRi6Hgn1NNn9U3Yl
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:27 2025 by rpki-client