Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H22xiLf09Nbt1vNPBONtaxvveiY.roa
File: H22xiLf09Nbt1vNPBONtaxvveiY.roa (raw, json)
Hash identifier: 6h8Wljsbu47Eq1R1rv2UIIP//ng+rx5t9X0D7Rj/Sgg=
Subject key identifier: 1F:6D:B1:88:B7:F4:F4:D6:ED:D6:F3:4F:04:E3:6D:6B:1B:EF:7A:26
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018570CBD31E170C1FB702CDF33E8ED979D3
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H22xiLf09Nbt1vNPBONtaxvveiY.roa
Signing time: Mon 02 Jan 2023 04:44:44 +0000
ROA not before: Mon 02 Jan 2023 04:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29217
IP address blocks: 194.18.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d3:1e:17:0c:1f:b7:02:cd:f3:3e:8e:d9:79:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 04:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f6db188b7f4f4d6edd6f34f04e36d6b1bef7a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:8d:83:8b:85:7e:81:ba:c6:6e:4b:c3:2b:
bd:1c:76:6c:00:61:54:66:ab:40:f5:ff:ca:f5:ce:
5e:fc:84:77:d3:ed:32:78:ad:8c:31:75:bc:84:21:
a4:0d:75:04:cf:ae:ad:5c:e8:d8:5d:a6:e1:7c:bf:
d7:80:41:ed:f2:a5:66:f9:4e:23:d3:ea:dc:11:c5:
33:ff:5a:36:0d:66:78:1f:b8:78:39:c5:21:9d:c6:
cf:0c:1b:d2:c3:a0:d7:4c:d5:77:ec:b2:0c:6a:df:
82:f0:7c:3b:82:fb:a3:da:26:63:a8:f6:ff:ab:75:
c3:85:c9:96:e1:02:7e:db:a4:f1:f3:8a:5c:03:70:
1d:59:61:8f:01:f6:3e:55:69:7e:6f:d1:8b:87:75:
c0:6c:f2:8e:79:24:9f:50:b4:27:b9:18:4d:22:46:
00:5b:bc:0d:b5:63:c3:30:b3:80:8d:02:b3:9e:94:
d3:4b:a9:73:83:ed:d3:53:5d:e9:20:fd:f4:eb:30:
45:63:98:44:16:45:f8:cc:75:c4:38:a4:56:c9:5a:
22:b4:80:15:b3:ef:db:c6:be:ba:bd:d1:95:da:ce:
46:de:33:2a:14:0a:11:13:68:83:20:4b:b3:53:c8:
92:f5:7a:02:d4:72:b5:7a:2a:49:61:59:ef:55:05:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6D:B1:88:B7:F4:F4:D6:ED:D6:F3:4F:04:E3:6D:6B:1B:EF:7A:26
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H22xiLf09Nbt1vNPBONtaxvveiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.18.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bd:ee:76:ab:6a:de:d7:1a:c7:b7:53:4a:7a:e6:2b:e3:f8:
c9:2d:45:4d:ff:fe:00:7c:9b:70:42:e3:e1:7b:47:25:ba:15:
92:3b:cf:25:2c:43:42:d4:79:1d:c5:ac:2c:a0:2b:f7:34:e1:
4d:28:d6:f4:6d:0f:69:13:a5:e9:b9:6b:56:b7:50:85:28:96:
06:ee:be:9a:10:7d:32:1c:95:7a:8f:5d:a3:73:bc:ca:46:d7:
55:00:4a:cc:23:54:69:f2:22:73:4a:f4:cf:be:71:5f:11:17:
d1:3d:b1:3a:10:82:ca:d0:8a:37:fb:2d:27:e5:63:53:9a:01:
b1:b5:cb:75:69:36:7f:50:f7:f8:48:74:00:8a:c4:46:0c:eb:
90:ce:9a:2d:c1:8d:84:2a:58:2a:4b:31:2a:20:8c:cf:41:f0:
58:4a:3f:9b:9b:5d:06:4f:cc:08:31:8d:5a:5a:8d:95:f0:69:
82:e6:66:b2:77:7a:1d:44:20:2e:50:8a:37:6b:1f:19:51:8f:
91:7a:47:01:c7:68:33:f3:4e:74:29:43:f3:7d:86:67:2b:67:
fc:e5:af:13:69:f2:47:1f:99:61:38:b4:dd:1c:50:01:d7:f9:
2a:a4:e4:94:03:ab:86:14:fb:2f:73:af:75:4c:b9:e9:28:64:
ed:66:e0:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwy9MeFwwftwLN8z6O2XnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1
YmUxOTAwHhcNMjMwMTAyMDQ0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjZkYjE4OGI3ZjRmNGQ2ZWRkNmYzNGYwNGUzNmQ2YjFiZWY3YTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTeNg4uFfoG6xm5Lwyu9HHZsAGFU
ZqtA9f/K9c5e/IR30+0yeK2MMXW8hCGkDXUEz66tXOjYXabhfL/XgEHt8qVm+U4j
0+rcEcUz/1o2DWZ4H7h4OcUhncbPDBvSw6DXTNV37LIMat+C8Hw7gvuj2iZjqPb/
q3XDhcmW4QJ+26Tx84pcA3AdWWGPAfY+VWl+b9GLh3XAbPKOeSSfULQnuRhNIkYA
W7wNtWPDMLOAjQKznpTTS6lzg+3TU13pIP306zBFY5hEFkX4zHXEOKRWyVoitIAV
s+/bxr66vdGV2s5G3jMqFAoRE2iDIEuzU8iS9XoC1HK1eipJYVnvVQXjGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9tsYi39PTW7dbzTwTjbWsb73omMB8GA1UdIwQY
MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt
NjA4NTY0ODM5ZmQwLzEvSDIyeGlMZjA5TmJ0MXZOUEJPTnRheHZ2ZWlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw
LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhLgMA0G
CSqGSIb3DQEBCwUAA4IBAQBfve52q2re1xrHt1NKeuYr4/jJLUVN//4AfJtwQuPh
e0cluhWSO88lLENC1HkdxawsoCv3NOFNKNb0bQ9pE6XpuWtWt1CFKJYG7r6aEH0y
HJV6j12jc7zKRtdVAErMI1Rp8iJzSvTPvnFfERfRPbE6EILK0Io3+y0n5WNTmgGx
tct1aTZ/UPf4SHQAisRGDOuQzpotwY2EKlgqSzEqIIzPQfBYSj+bm10GT8wIMY1a
Wo2V8GmC5mayd3odRCAuUIo3ax8ZUY+RekcBx2gz8050KUPzfYZnK2f85a8TafJH
H5lhOLTdHFAB1/kqpOSUA6uGFPsvc691TLnpKGTtZuC6
-----END CERTIFICATE-----
Generated at Wed Apr 16 18:50:47 2025 by rpki-client