Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/Pb0Pypz7E19P7WQPvL6Ng46zcBw.roa
File: Pb0Pypz7E19P7WQPvL6Ng46zcBw.roa (raw, json)
Hash identifier: 01iSyIouFNJapZCnMvpkU6XtL128bx+3ZSBMYVdqlqA=
Subject key identifier: 3D:BD:0F:CA:9C:FB:13:5F:4F:ED:64:0F:BC:BE:8D:83:8E:B3:70:1C
Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial: 01856EF42424EE5D43EF68EFB1B481CBA656
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/Pb0Pypz7E19P7WQPvL6Ng46zcBw.roa
Signing time: Sun 01 Jan 2023 20:09:31 +0000
ROA not before: Sun 01 Jan 2023 20:09:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57702
IP address blocks: 192.58.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:24:24:ee:5d:43:ef:68:ef:b1:b4:81:cb:a6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Validity
Not Before: Jan 1 20:09:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dbd0fca9cfb135f4fed640fbcbe8d838eb3701c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:5b:54:8d:7e:21:6a:ad:ee:9e:a9:d4:78:
8b:24:94:51:24:ad:90:76:6b:7a:98:71:2b:61:80:
87:b7:40:f8:a9:dd:5f:20:65:22:c7:35:b1:25:b9:
8a:ce:82:ef:2a:85:3c:6a:28:c7:ab:24:87:8c:21:
ce:ee:88:d9:39:fb:67:77:67:ee:2a:20:0a:0c:c7:
79:a4:82:5c:98:b2:7b:de:27:2b:33:1e:3d:8f:47:
50:4b:cd:29:f1:f8:c6:35:40:71:bf:fc:01:85:de:
5e:23:9b:f7:2f:41:e7:bf:b4:06:3d:75:ea:c8:5e:
01:bc:c7:07:b1:b6:bd:73:ff:97:74:0f:bf:00:e6:
c9:e8:dd:ad:07:df:02:a2:47:1a:be:db:91:a2:0f:
0a:12:9f:07:6e:6e:7b:d7:24:da:28:d4:0f:6d:42:
50:5a:1a:f2:1d:28:ae:61:04:25:a1:f5:2e:46:83:
f5:3d:b0:80:72:6d:5d:a1:2e:6e:18:89:9f:e9:f5:
c3:86:be:f6:27:e9:f4:a7:83:12:ae:24:f4:4e:b5:
59:c2:12:ae:b1:8a:d7:e5:0b:ce:82:4e:ff:22:55:
1c:d5:ec:c4:96:eb:7d:93:75:29:92:a8:ac:bc:6d:
18:20:06:4b:3d:00:8e:d5:d8:c8:f2:c1:96:7a:cb:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BD:0F:CA:9C:FB:13:5F:4F:ED:64:0F:BC:BE:8D:83:8E:B3:70:1C
X509v3 Authority Key Identifier:
keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/Pb0Pypz7E19P7WQPvL6Ng46zcBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.29.0/24
Signature Algorithm: sha256WithRSAEncryption
74:60:c8:df:97:4b:3e:c8:ea:60:71:5d:9a:b5:df:c6:e3:c9:
7f:b4:db:77:fa:8f:c9:fd:b2:0e:32:bf:af:ad:4d:db:01:54:
2a:83:41:7f:85:3b:ac:29:38:91:53:e5:7e:5e:cb:d8:42:bc:
91:cd:5c:ad:c1:84:71:77:49:60:f3:63:fe:0b:e8:3e:9f:ec:
d4:ec:27:c4:31:f3:31:30:36:85:3f:06:a0:ba:17:aa:7f:f6:
1a:aa:40:08:15:1b:a3:b1:61:80:30:ea:fc:f8:cf:9f:36:14:
b7:ba:a7:91:87:f8:8e:cb:91:02:a7:cf:d0:71:04:ae:68:38:
a4:71:83:71:cf:2e:ad:f3:11:04:23:ba:f3:15:78:7d:09:72:
c4:94:bd:f7:03:41:78:11:04:4c:7b:dd:72:65:09:1e:39:f9:
e9:48:eb:4e:bd:36:cc:ca:82:58:b6:e0:0d:b0:ec:62:e8:41:
b3:28:21:fb:04:e8:3b:75:ef:80:4e:5b:33:fc:c8:e6:95:d3:
ef:93:4b:ed:bc:76:77:67:2a:af:c7:03:e0:b9:a0:4c:f2:6f:
2a:0c:7c:05:48:5c:65:01:69:a0:7f:0e:8c:ba:42:c0:c2:07:
61:38:c0:22:46:27:98:4e:b5:12:1a:2a:a9:b9:6f:48:05:8b:
0c:f9:2d:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu9CQk7l1D72jvsbSBy6ZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGE0N2Q1ODJiYjBlOTY4MGY4OTI1OGFiOTZkMDU4Njdk
MzUyZWYwHhcNMjMwMTAxMjAwOTMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGJkMGZjYTljZmIxMzVmNGZlZDY0MGZiY2JlOGQ4MzhlYjM3MDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeZbVI1+IWqt7p6p1HiLJJRRJK2Q
dmt6mHErYYCHt0D4qd1fIGUixzWxJbmKzoLvKoU8aijHqySHjCHO7ojZOftnd2fu
KiAKDMd5pIJcmLJ73icrMx49j0dQS80p8fjGNUBxv/wBhd5eI5v3L0Hnv7QGPXXq
yF4BvMcHsba9c/+XdA+/AObJ6N2tB98CokcavtuRog8KEp8Hbm571yTaKNQPbUJQ
WhryHSiuYQQlofUuRoP1PbCAcm1doS5uGImf6fXDhr72J+n0p4MSriT0TrVZwhKu
sYrX5QvOgk7/IlUc1ezElut9k3UpkqisvG0YIAZLPQCO1djI8sGWesvGBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD29D8qc+xNfT+1kD7y+jYOOs3AcMB8GA1UdIwQY
MBaAFFpKR9WCuw6WgPiSWKuW0Fhn01LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTct
NmIwMDY1NTA4OTk2LzEvUGIwUHlwejdFMTlQN1dRUHZMNk5nNDZ6Y0J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTctNmIwMDY1NTA4OTk2
LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDodMA0G
CSqGSIb3DQEBCwUAA4IBAQB0YMjfl0s+yOpgcV2atd/G48l/tNt3+o/J/bIOMr+v
rU3bAVQqg0F/hTusKTiRU+V+XsvYQryRzVytwYRxd0lg82P+C+g+n+zU7CfEMfMx
MDaFPwaguheqf/YaqkAIFRujsWGAMOr8+M+fNhS3uqeRh/iOy5ECp8/QcQSuaDik
cYNxzy6t8xEEI7rzFXh9CXLElL33A0F4EQRMe91yZQkeOfnpSOtOvTbMyoJYtuAN
sOxi6EGzKCH7BOg7de+ATlsz/MjmldPvk0vtvHZ3ZyqvxwPguaBM8m8qDHwFSFxl
AWmgfw6MukLAwgdhOMAiRieYTrUSGiqpuW9IBYsM+S2O
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:39 2025 by rpki-client