Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/4mF5vJ5_vvTul5-yGhSBJxa659o.roa
File: 4mF5vJ5_vvTul5-yGhSBJxa659o.roa (raw, json)
Hash identifier: gOtrEv9gLSD/ToZuYzrxd19hx+8Y8ef+15IotH281ZA=
Subject key identifier: E2:61:79:BC:9E:7F:BE:F4:EE:97:9F:B2:1A:14:81:27:16:BA:E7:DA
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 0D867362
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/4mF5vJ5_vvTul5-yGhSBJxa659o.roa
Signing time: Sat 01 Jan 2022 15:01:05 +0000
ROA not before: Sat 01 Jan 2022 15:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58
IP address blocks: 93.88.72.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226915170 (0xd867362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 15:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e26179bc9e7fbef4ee979fb21a14812716bae7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:ec:46:d4:36:c3:1c:c3:ac:cb:12:dd:09:
42:7f:b9:75:2d:e3:22:fa:92:05:65:a5:cb:2b:4a:
ef:bd:e2:df:f8:fe:2d:41:f0:ef:1e:1e:79:8c:47:
a8:20:c0:3d:cc:39:98:a7:7f:b6:89:2c:99:d0:61:
66:1b:c0:90:87:51:71:ed:59:d3:44:f3:0f:ac:a0:
0f:19:ff:94:05:1a:14:a5:0b:69:d8:a0:67:4a:49:
6e:95:7d:df:68:e7:ee:02:5f:18:00:ca:01:cd:1c:
fe:4e:0e:01:f7:5d:17:f0:71:39:31:cd:e6:c7:48:
3e:92:32:cd:e4:48:c0:11:09:f1:bf:d1:ea:26:84:
1d:d8:fa:eb:1e:ea:40:c0:2e:4c:13:7b:41:69:70:
04:7d:03:06:5f:3c:17:c0:41:4b:b1:18:9d:c0:21:
27:78:17:23:3c:2b:e5:d6:c9:0b:0c:63:0d:40:12:
ec:39:96:3b:c1:e7:99:ef:4b:c2:d6:f3:6b:9d:5f:
6b:e9:61:c8:29:c8:ff:f4:2c:ab:6b:63:75:b2:b0:
16:9f:7a:50:93:31:75:8d:ec:7f:34:f6:ad:00:1f:
7f:f7:f1:94:cf:56:f1:48:82:41:19:25:16:2c:12:
cb:64:55:a6:a4:17:b8:07:6f:33:2e:bb:21:c6:d3:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:61:79:BC:9E:7F:BE:F4:EE:97:9F:B2:1A:14:81:27:16:BA:E7:DA
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/4mF5vJ5_vvTul5-yGhSBJxa659o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.72.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:3a:c9:2c:b3:89:ae:e1:6b:6c:d3:a6:39:be:4d:28:4c:f0:
4c:cd:b3:ff:c5:c3:91:ec:ad:7e:28:02:c2:36:e7:98:f6:52:
1b:69:7e:04:a2:56:ae:4e:77:f1:8b:3b:df:d1:c0:20:97:fd:
d5:ec:a5:79:b8:66:bb:8a:71:3c:62:02:97:46:81:b7:53:5e:
5d:48:75:a6:47:72:72:06:fc:aa:74:a2:c2:ce:cd:9c:d4:5f:
e9:39:35:c8:a0:5c:cf:ad:01:69:b4:f7:f1:9b:30:28:d0:f6:
a7:5a:44:79:0f:a5:1f:48:be:7d:38:98:19:5e:c6:3b:19:91:
d0:0f:22:e6:de:96:ff:14:e0:f8:c1:fd:36:6f:4d:94:93:30:
81:08:2a:4a:aa:e3:e9:91:be:26:46:12:96:b8:3b:a8:b8:75:
92:e0:4f:dd:42:c7:cc:81:a8:3b:53:fc:17:30:7e:66:e4:a3:
63:ca:fb:71:ff:83:d9:32:77:a7:4c:69:17:af:2f:ba:f9:c5:
e8:8c:63:ef:b6:94:f7:74:2e:4a:cc:c1:ee:03:1f:cf:ed:df:
c4:b4:df:54:32:75:4f:cb:ec:59:4e:04:85:cd:61:ab:f9:40:
11:9d:33:04:03:b2:38:bb:ed:9b:f5:60:57:94:cd:b3:7c:12:
1a:c8:c8:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDYZzYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZjMwMzBhNGI2N2Y5NWMyZmVkOTAyZDU2NjU3ZmFhMjQ5NGI1MTI5MB4XDTIyMDEw
MTE1MDEwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTI2MTc5YmM5ZTdm
YmVmNGVlOTc5ZmIyMWExNDgxMjcxNmJhZTdkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALLP7EbUNsMcw6zLEt0JQn+5dS3jIvqSBWWlyytK773i3/j+
LUHw7x4eeYxHqCDAPcw5mKd/toksmdBhZhvAkIdRce1Z00TzD6ygDxn/lAUaFKUL
adigZ0pJbpV932jn7gJfGADKAc0c/k4OAfddF/BxOTHN5sdIPpIyzeRIwBEJ8b/R
6iaEHdj66x7qQMAuTBN7QWlwBH0DBl88F8BBS7EYncAhJ3gXIzwr5dbJCwxjDUAS
7DmWO8Hnme9Lwtbza51fa+lhyCnI//Qsq2tjdbKwFp96UJMxdY3sfzT2rQAff/fx
lM9W8UiCQRklFiwSy2RVpqQXuAdvMy67IcbTInsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTiYXm8nn++9O6Xn7IaFIEnFrrn2jAfBgNVHSMEGDAWgBRvMDCktn+Vwv7Z
AtVmV/qiSUtRKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2J6QXdwTFpfbGNMLTJRTFZabGY2b2tsTFVTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvMmI5OWEzLWRkNWYtNGZmZS04MmVmLWJmM2IyMWEyNzBmMi8x
LzRtRjV2SjVfdnZUdWw1LXlHaFNCSnhhNjU5by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
MmI5OWEzLWRkNWYtNGZmZS04MmVmLWJmM2IyMWEyNzBmMi8xL2J6QXdwTFpfbGNM
LTJRTFZabGY2b2tsTFVTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV1YSDANBgkqhkiG9w0BAQsFAAOC
AQEAjTrJLLOJruFrbNOmOb5NKEzwTM2z/8XDkeytfigCwjbnmPZSG2l+BKJWrk53
8Ys739HAIJf91eylebhmu4pxPGICl0aBt1NeXUh1pkdycgb8qnSiws7NnNRf6Tk1
yKBcz60BabT38ZswKND2p1pEeQ+lH0i+fTiYGV7GOxmR0A8i5t6W/xTg+MH9Nm9N
lJMwgQgqSqrj6ZG+JkYSlrg7qLh1kuBP3ULHzIGoO1P8FzB+ZuSjY8r7cf+D2TJ3
p0xpF68vuvnF6Ixj77aU93QuSszB7gMfz+3fxLTfVDJ1T8vsWU4Ehc1hq/lAEZ0z
BAOyOLvtm/VgV5TNs3wSGsjIqQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:45 2025 by rpki-client