Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/O24QA2WAXfm7TGjhdYnJUby8B9A.roa
File: O24QA2WAXfm7TGjhdYnJUby8B9A.roa (raw, json)
Hash identifier: aQuz/yF3YuPs437T8AShaZhIsBT4X4XG50Z9N0sV2/o=
Subject key identifier: 3B:6E:10:03:65:80:5D:F9:BB:4C:68:E1:75:89:C9:51:BC:BC:07:D0
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 01856C1C74E8FF0F499D912E31BDF98E282A
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/O24QA2WAXfm7TGjhdYnJUby8B9A.roa
Signing time: Sun 01 Jan 2023 06:54:42 +0000
ROA not before: Sun 01 Jan 2023 06:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41327
IP address blocks: 5.183.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:74:e8:ff:0f:49:9d:91:2e:31:bd:f9:8e:28:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 1 06:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b6e100365805df9bb4c68e17589c951bcbc07d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4c:9e:db:2e:47:3a:2c:26:37:da:c2:ea:72:
ae:04:d5:02:76:6f:90:30:d7:9e:8f:22:a7:ba:87:
9d:64:1c:ee:c8:49:31:5e:fe:63:b9:c3:3b:de:8d:
df:70:60:14:7b:2f:98:d7:22:86:5d:e2:1c:e3:ec:
b6:34:5e:92:2f:a3:d0:1a:8d:50:71:ab:44:9e:7f:
fa:4a:8b:4f:f5:ed:c6:70:68:bc:49:27:59:71:aa:
0e:42:fb:ce:22:58:08:06:66:9b:9e:99:69:d4:fa:
e2:b4:21:d1:92:c4:31:91:12:68:da:67:92:9c:15:
2d:a6:5d:9f:36:a1:35:06:c6:cc:eb:a9:fa:01:9d:
0b:ad:90:31:02:51:3d:6f:80:cc:a3:71:2f:de:e1:
0b:9e:9c:98:e4:30:24:4d:09:d5:fc:09:e5:2a:9e:
be:f5:c7:f4:10:10:3d:20:29:c4:2d:a7:33:2f:fd:
16:5e:ac:78:14:a2:1a:bd:ad:dd:3a:6a:f1:41:fb:
7f:4a:2a:bb:ae:94:41:53:3a:f7:ce:e2:d7:0b:f5:
10:2b:90:cc:b3:43:ed:f9:5f:f1:5c:aa:77:7d:28:
c6:fd:6a:85:b5:51:3e:f0:14:a9:4e:d9:d8:dc:29:
2f:4c:29:23:7e:37:70:ab:9e:ac:52:e2:19:12:b0:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6E:10:03:65:80:5D:F9:BB:4C:68:E1:75:89:C9:51:BC:BC:07:D0
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/O24QA2WAXfm7TGjhdYnJUby8B9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.110.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2c:93:d3:cb:51:ad:9c:8c:fc:4b:9a:10:83:dc:db:77:da:
26:f7:0d:52:de:fd:75:aa:84:11:47:cb:f5:fe:21:b8:f3:2e:
64:1e:b6:81:0a:68:2e:0e:a2:9a:60:e1:df:b9:20:17:9f:5c:
83:a4:81:da:65:aa:c3:b4:73:f1:9c:64:36:9b:8f:82:31:68:
d9:23:4a:e1:b2:c3:a2:d6:1b:b1:4c:9a:7e:d2:65:db:10:80:
ee:e5:6f:86:4d:dd:e9:43:59:d4:0a:18:dd:ec:b5:d1:6f:f0:
70:58:86:a7:82:a1:77:89:ec:6c:ac:87:92:71:da:e5:25:65:
ea:40:02:f9:63:9f:5f:f9:07:e2:9b:76:6a:fd:d1:0d:b0:b1:
d9:ca:20:82:72:09:17:72:8a:87:c5:e7:75:6f:1e:f1:1c:68:
c5:ca:50:33:a7:3a:59:25:11:60:73:a3:0e:a5:e4:67:9c:2c:
5b:8f:3d:c2:06:9e:68:47:eb:39:d6:e4:e2:d5:93:da:cd:16:
c9:12:9b:c5:58:47:60:b3:58:5a:fa:f1:1d:5b:84:96:d5:b9:
67:5a:0a:21:aa:7c:c8:fd:91:5c:12:9c:16:6a:2e:3e:5e:45:
a1:4f:df:90:e6:59:58:50:e7:49:59:81:74:c1:33:d2:17:aa:
fa:4e:ed:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsHHTo/w9JnZEuMb35jigqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzODRmNmZhNmRlY2NlZDU1NzhhODVhNTFlMGJkNjU3MDFl
YTM0ZWMwHhcNMjMwMTAxMDY1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjZlMTAwMzY1ODA1ZGY5YmI0YzY4ZTE3NTg5Yzk1MWJjYmMwN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ye2y5HOiwmN9rC6nKuBNUCdm+Q
MNeejyKnuoedZBzuyEkxXv5jucM73o3fcGAUey+Y1yKGXeIc4+y2NF6SL6PQGo1Q
catEnn/6SotP9e3GcGi8SSdZcaoOQvvOIlgIBmabnplp1PritCHRksQxkRJo2meS
nBUtpl2fNqE1BsbM66n6AZ0LrZAxAlE9b4DMo3Ev3uELnpyY5DAkTQnV/AnlKp6+
9cf0EBA9ICnELaczL/0WXqx4FKIava3dOmrxQft/Siq7rpRBUzr3zuLXC/UQK5DM
s0Pt+V/xXKp3fSjG/WqFtVE+8BSpTtnY3CkvTCkjfjdwq56sUuIZErAgEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDtuEANlgF35u0xo4XWJyVG8vAfQMB8GA1UdIwQY
MBaAFEOE9vpt7M7VV4qFpR4L1lcB6jTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt
MWIxM2JkNDU2NmE1LzEvTzI0UUEyV0FYZm03VEdqaGRZbkpVYnk4QjlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1
LzEvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbduMA0G
CSqGSIb3DQEBCwUAA4IBAQB9LJPTy1GtnIz8S5oQg9zbd9om9w1S3v11qoQRR8v1
/iG48y5kHraBCmguDqKaYOHfuSAXn1yDpIHaZarDtHPxnGQ2m4+CMWjZI0rhssOi
1huxTJp+0mXbEIDu5W+GTd3pQ1nUChjd7LXRb/BwWIangqF3iexsrIeScdrlJWXq
QAL5Y59f+Qfim3Zq/dENsLHZyiCCcgkXcoqHxed1bx7xHGjFylAzpzpZJRFgc6MO
peRnnCxbjz3CBp5oR+s51uTi1ZPazRbJEpvFWEdgs1ha+vEdW4SW1blnWgohqnzI
/ZFcEpwWai4+XkWhT9+Q5llYUOdJWYF0wTPSF6r6Tu2Y
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:46 2025 by rpki-client