Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/b-MeMyhA6n36kF5lSOJ-TymRKQI.roa
File: b-MeMyhA6n36kF5lSOJ-TymRKQI.roa (raw, json)
Hash identifier: NmaKVirNm6VEc8aXr6G5NXRYGtL+nbsXEIj0zfSSSJM=
Subject key identifier: 6F:E3:1E:33:28:40:EA:7D:FA:90:5E:65:48:E2:7E:4F:29:91:29:02
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 0186316D3CADB3227AE53808FFBA72D6569B
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/b-MeMyhA6n36kF5lSOJ-TymRKQI.roa
Signing time: Wed 08 Feb 2023 14:28:07 +0000
ROA not before: Wed 08 Feb 2023 14:28:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196880
IP address blocks: 193.104.223.0/24 maxlen: 24
91.226.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:31:6d:3c:ad:b3:22:7a:e5:38:08:ff:ba:72:d6:56:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Feb 8 14:28:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fe31e332840ea7dfa905e6548e27e4f29912902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:df:11:be:77:ca:4e:d7:9d:a1:8b:a1:4d:
9b:3c:63:a5:56:c5:0e:af:a6:bb:4e:9a:2b:da:7b:
76:28:75:eb:73:53:2b:fe:47:45:12:4e:33:00:f9:
47:21:79:a4:11:af:9a:33:bf:e9:40:e6:8e:97:b8:
77:1a:cb:cb:ad:c8:2a:c9:73:a6:24:3e:40:f5:c9:
b9:93:9e:f5:0d:b9:e0:5b:75:f7:87:a1:11:15:93:
d9:a9:2a:91:cb:88:56:3a:5c:ef:f8:14:07:d0:bd:
af:7f:b3:6b:8c:15:2c:c7:df:d1:c5:37:62:9c:95:
05:e2:29:6e:b5:61:8f:88:89:e7:df:5a:77:49:aa:
a7:58:2c:1b:63:75:5d:98:ff:c7:8a:4d:5d:0f:d7:
a8:be:7f:2a:ca:87:56:77:18:99:07:aa:6e:e4:b6:
ee:27:ee:0f:bb:6a:19:c4:69:34:68:68:31:b0:27:
a8:12:1d:7a:85:c5:e8:01:79:c5:64:70:ce:0d:7f:
0f:e0:3f:cf:79:a4:08:d2:94:f5:7a:d9:fc:ba:ab:
2f:55:76:3b:e7:ae:3e:d5:3a:b9:c4:ef:f9:2e:57:
ba:05:6e:3c:bd:3b:23:1e:c2:e5:7d:82:b4:33:1e:
7e:9c:a4:bb:9d:83:42:6f:36:d5:83:c4:3a:54:6f:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:1E:33:28:40:EA:7D:FA:90:5E:65:48:E2:7E:4F:29:91:29:02
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/b-MeMyhA6n36kF5lSOJ-TymRKQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.147.0/24
193.104.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:66:91:c3:56:12:a0:21:3c:27:c3:d2:a1:4d:60:2a:08:fa:
39:63:61:9c:a3:0d:67:84:f5:56:ec:fe:de:74:96:05:66:82:
86:6a:66:15:3a:bc:e0:20:36:e9:63:9f:99:ef:34:0a:95:64:
16:8c:d1:e1:ca:3e:f3:24:a7:33:d2:2e:ca:50:b6:64:b9:ed:
b4:81:ea:4a:be:8e:8c:71:33:bd:dd:0b:84:a4:ea:97:f5:07:
af:49:bd:3c:54:9d:23:7e:da:4b:0d:fc:fd:d8:48:eb:53:89:
20:cc:b3:2a:43:4b:20:bc:9f:5f:5d:ff:a5:4e:5d:9a:81:21:
03:67:1c:73:0c:01:b2:21:35:c3:47:c1:37:64:f8:1f:91:96:
9c:c5:30:35:63:42:68:29:03:6e:e8:45:ce:44:24:ea:f9:1a:
46:b9:88:76:7b:28:31:61:b5:3a:7a:9d:73:ea:68:93:99:83:
b1:54:79:1a:b8:06:74:28:4b:59:6b:fc:92:51:ae:ed:15:b0:
8c:b0:d1:e7:bf:4c:aa:a2:ae:f0:ad:f6:3d:76:46:7a:c6:e8:
0e:c0:7f:34:2b:65:b7:06:78:72:b8:bb:da:66:cb:76:cd:ab:
c0:8d:f1:3b:52:7c:5b:ed:b8:23:47:16:0f:c3:cf:50:35:76:
e4:ad:f8:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYxbTytsyJ65TgI/7py1labMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTgwZDhjYTQ2NGFlNDQzMzBjMDJkNjA5N2QxYjNlMzQ2
N2UwODUwHhcNMjMwMjA4MTQyODA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmUzMWUzMzI4NDBlYTdkZmE5MDVlNjU0OGUyN2U0ZjI5OTEyOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmjfEb53yk7XnaGLoU2bPGOlVsUO
r6a7Tpor2nt2KHXrc1Mr/kdFEk4zAPlHIXmkEa+aM7/pQOaOl7h3GsvLrcgqyXOm
JD5A9cm5k571DbngW3X3h6ERFZPZqSqRy4hWOlzv+BQH0L2vf7NrjBUsx9/RxTdi
nJUF4ilutWGPiInn31p3SaqnWCwbY3VdmP/Hik1dD9eovn8qyodWdxiZB6pu5Lbu
J+4Pu2oZxGk0aGgxsCeoEh16hcXoAXnFZHDODX8P4D/PeaQI0pT1etn8uqsvVXY7
564+1Tq5xO/5Lle6BW48vTsjHsLlfYK0Mx5+nKS7nYNCbzbVg8Q6VG+5cwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG/jHjMoQOp9+pBeZUjifk8pkSkCMB8GA1UdIwQY
MBaAFA2YDYykZK5EMwwC1gl9Gz40Z+CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUt
ZjZmZjI4MWZiYzMyLzEvYi1NZU15aEE2bjM2a0Y1bFNPSi1UeW1SS1FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUtZjZmZjI4MWZiYzMy
LzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+KTAwQA
wWjfMA0GCSqGSIb3DQEBCwUAA4IBAQCOZpHDVhKgITwnw9KhTWAqCPo5Y2Gcow1n
hPVW7P7edJYFZoKGamYVOrzgIDbpY5+Z7zQKlWQWjNHhyj7zJKcz0i7KULZkue20
gepKvo6McTO93QuEpOqX9QevSb08VJ0jftpLDfz92EjrU4kgzLMqQ0sgvJ9fXf+l
Tl2agSEDZxxzDAGyITXDR8E3ZPgfkZacxTA1Y0JoKQNu6EXORCTq+RpGuYh2eygx
YbU6ep1z6miTmYOxVHkauAZ0KEtZa/ySUa7tFbCMsNHnv0yqoq7wrfY9dkZ6xugO
wH80K2W3BnhyuLvaZst2zavAjfE7Unxb7bgjRxYPw89QNXbkrfje
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:59 2025 by rpki-client