Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/glZzj9McLHHUDA45QtlBhXUoWGo.roa
File: glZzj9McLHHUDA45QtlBhXUoWGo.roa (raw, json)
Hash identifier: BVc4eJ3H61aEzylR91KVrYSzCWEHl+0jnb7PhqVHjQk=
Subject key identifier: 82:56:73:8F:D3:1C:2C:71:D4:0C:0E:39:42:D9:41:85:75:28:58:6A
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018A929C47D54F9CA3B6A5E30C8CC5DAB851
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/glZzj9McLHHUDA45QtlBhXUoWGo.roa
Signing time: Thu 14 Sep 2023 07:33:50 +0000
ROA not before: Thu 14 Sep 2023 07:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206728
IP address blocks: 217.197.107.0/24 maxlen: 24
217.196.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:9c:47:d5:4f:9c:a3:b6:a5:e3:0c:8c:c5:da:b8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Sep 14 07:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8256738fd31c2c71d40c0e3942d941857528586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:32:41:27:63:55:1f:10:31:43:c9:ff:07:
1e:55:5f:f4:1a:e1:9e:2c:80:ab:dd:bf:0e:98:f7:
0d:4a:e6:8b:d5:cf:96:74:6c:f6:4f:3c:3f:ef:ee:
0d:2d:62:d3:e5:ab:a2:78:a0:1a:b6:10:29:8a:bf:
71:b4:fb:b2:4a:c4:67:9e:11:c2:ad:9f:66:ba:c4:
65:c9:83:9c:03:86:b5:26:74:8b:e9:55:84:85:9d:
23:bb:b1:df:d9:80:f6:6c:ce:a4:c5:56:1a:20:ce:
6e:a1:88:fd:8f:32:24:5a:d0:d2:67:4c:c1:e7:67:
4b:d6:1f:98:a0:a5:94:a9:ae:4c:57:a8:aa:31:11:
33:e6:16:73:a0:23:25:76:9c:0b:44:5a:c8:aa:45:
82:1d:03:ca:19:19:2e:99:4c:58:7e:9e:b1:cf:cc:
90:76:49:d1:40:6b:cd:c7:52:59:3d:d2:23:f8:de:
0a:c1:c3:d2:d6:18:e5:32:96:ff:4c:b6:cd:88:b2:
cf:42:98:11:4f:e7:4a:c2:87:2e:5b:f8:3c:ee:ee:
0b:4d:ab:8f:4e:e5:a9:06:9c:6f:30:16:5c:c4:b0:
00:ba:ca:56:01:27:a1:2f:ff:49:fb:6f:47:b0:96:
ab:37:63:d4:11:5b:49:fe:62:4b:33:99:6b:54:b9:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:56:73:8F:D3:1C:2C:71:D4:0C:0E:39:42:D9:41:85:75:28:58:6A
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/glZzj9McLHHUDA45QtlBhXUoWGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.102.0/24
217.197.107.0/24
Signature Algorithm: sha256WithRSAEncryption
65:21:71:84:87:10:23:63:5b:63:6e:92:9f:41:18:7b:29:e2:
a2:2b:2f:87:31:ca:4c:ec:4d:44:a9:fc:61:37:5d:08:23:bc:
51:9b:71:9b:11:f1:07:ef:84:3c:ed:92:c4:4f:77:2a:ec:9e:
9b:45:da:32:dd:6d:8d:d9:c5:78:51:7f:cc:63:c7:75:d6:f3:
16:1e:ed:ac:b9:37:32:b4:bc:62:82:3a:c2:a1:b4:cc:d1:33:
c9:87:da:4c:82:1e:82:d0:94:bf:24:07:54:c8:1c:50:22:a5:
ee:38:d4:4d:1c:4a:32:ce:8f:7a:95:4d:2e:4d:81:10:4a:fd:
05:91:cb:95:89:74:50:f1:62:66:ba:e8:aa:d3:61:89:48:c2:
8e:d5:51:37:18:8b:60:63:8c:1c:a0:0f:0d:26:9b:94:4e:40:
85:f0:3c:fd:bf:61:9b:f9:d4:04:ce:3d:02:7c:ce:d4:6e:d9:
62:c0:c7:85:c2:f2:ee:25:fa:cc:1c:a0:35:a1:26:07:6e:69:
6a:a5:46:96:56:2d:5c:9c:66:8a:39:4b:e9:7a:db:8e:a1:02:
20:ec:48:9f:8e:36:66:4d:ab:54:77:96:fa:07:ba:54:d4:ee:
5d:ca:fe:51:f6:6d:d4:88:ac:5b:65:9d:4f:b2:4b:29:ee:06:
e1:ee:c3:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqSnEfVT5yjtqXjDIzF2rhRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjMwOTE0MDczMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjU2NzM4ZmQzMWMyYzcxZDQwYzBlMzk0MmQ5NDE4NTc1Mjg1ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+UyQSdjVR8QMUPJ/wceVV/0GuGe
LICr3b8OmPcNSuaL1c+WdGz2Tzw/7+4NLWLT5auieKAathApir9xtPuySsRnnhHC
rZ9musRlyYOcA4a1JnSL6VWEhZ0ju7Hf2YD2bM6kxVYaIM5uoYj9jzIkWtDSZ0zB
52dL1h+YoKWUqa5MV6iqMREz5hZzoCMldpwLRFrIqkWCHQPKGRkumUxYfp6xz8yQ
dknRQGvNx1JZPdIj+N4KwcPS1hjlMpb/TLbNiLLPQpgRT+dKwocuW/g87u4LTauP
TuWpBpxvMBZcxLAAuspWASehL/9J+29HsJarN2PUEVtJ/mJLM5lrVLlT0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIJWc4/THCxx1AwOOULZQYV1KFhqMB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvZ2xaemo5TWNMSEhVREE0NVF0bEJoWFVvV0dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2cRmAwQA
2cVrMA0GCSqGSIb3DQEBCwUAA4IBAQBlIXGEhxAjY1tjbpKfQRh7KeKiKy+HMcpM
7E1EqfxhN10II7xRm3GbEfEH74Q87ZLET3cq7J6bRdoy3W2N2cV4UX/MY8d11vMW
Hu2suTcytLxigjrCobTM0TPJh9pMgh6C0JS/JAdUyBxQIqXuONRNHEoyzo96lU0u
TYEQSv0FkcuViXRQ8WJmuuiq02GJSMKO1VE3GItgY4wcoA8NJpuUTkCF8Dz9v2Gb
+dQEzj0CfM7UbtliwMeFwvLuJfrMHKA1oSYHbmlqpUaWVi1cnGaKOUvpetuOoQIg
7EifjjZmTatUd5b6B7pU1O5dyv5R9m3UiKxbZZ1Psksp7gbh7sMF
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:05 2025 by rpki-client