Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/pw_S8MvagZh1HJ-Pr70Jbuu0vnc.roa
File: pw_S8MvagZh1HJ-Pr70Jbuu0vnc.roa (raw, json)
Hash identifier: d7y1DlF02Ow+wQBCjfz6tjWsda+FPw9QaIqG0t7YNdY=
Subject key identifier: A7:0F:D2:F0:CB:DA:81:98:75:1C:9F:8F:AF:BD:09:6E:EB:B4:BE:77
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 018570672F80BB3DCFC16D70144B90792F14
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/pw_S8MvagZh1HJ-Pr70Jbuu0vnc.roa
Signing time: Mon 02 Jan 2023 02:54:48 +0000
ROA not before: Mon 02 Jan 2023 02:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 193.43.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:2f:80:bb:3d:cf:c1:6d:70:14:4b:90:79:2f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Jan 2 02:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a70fd2f0cbda8198751c9f8fafbd096eebb4be77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:0f:b7:48:18:55:2a:85:a1:37:af:6c:db:
94:b4:e1:71:34:b3:77:c3:c2:84:17:a1:98:16:89:
0c:74:c8:af:7c:67:d0:e7:b0:87:46:a6:24:89:18:
5f:0c:0d:dc:90:80:02:10:30:a9:4d:39:5b:97:ca:
a2:5d:d4:f7:ed:42:93:4a:24:b1:56:36:db:70:12:
8d:38:78:f9:8a:c8:d1:fd:c1:79:3c:6e:9f:6c:94:
1d:16:bf:a3:ac:ff:57:b7:f3:d2:91:cf:b6:e9:e4:
c2:00:2f:c0:31:d6:64:b0:e4:8c:71:68:fd:f0:1b:
cd:a5:04:43:95:66:1d:b5:e3:7e:66:8d:c1:ad:52:
70:2c:20:f5:ba:64:fc:b0:3b:82:ac:51:e5:f1:dd:
2b:38:b6:be:97:36:9a:b5:ed:ae:61:6f:ef:bf:0d:
b0:07:39:08:34:ee:2f:98:a0:57:f3:69:e5:62:01:
b2:37:9a:da:02:14:87:16:80:1b:a1:23:94:a5:a6:
19:1c:aa:04:5c:79:3d:ef:a1:33:d5:39:c6:30:eb:
50:45:1a:7e:f3:5c:a2:c3:e8:54:35:2b:e6:e8:f1:
ef:4b:b1:52:23:0c:a5:11:ea:23:0b:24:89:98:03:
c5:a1:48:0d:bf:23:bd:d7:99:b4:12:be:3f:6d:76:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0F:D2:F0:CB:DA:81:98:75:1C:9F:8F:AF:BD:09:6E:EB:B4:BE:77
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/pw_S8MvagZh1HJ-Pr70Jbuu0vnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:68:15:98:51:59:76:ae:a7:21:9f:16:db:61:17:de:38:8f:
ef:c7:3c:29:0e:a8:6a:ca:ae:e1:ac:a9:ca:a0:7c:4d:4d:71:
ec:83:b9:e2:73:48:fd:39:6f:2a:d0:13:15:21:a8:1e:74:67:
50:9e:29:1e:65:39:3c:ff:e5:17:20:46:94:a3:e1:2d:6e:a1:
a4:2c:63:3c:a7:d6:ed:66:89:ef:4c:06:c1:88:14:f1:83:38:
7b:6f:5d:bc:34:6f:c1:01:c6:fb:c2:dd:e7:be:47:00:d3:43:
b2:a7:09:0b:53:1f:5b:ac:7d:17:41:8a:d3:61:72:2b:4d:0a:
2d:4f:34:31:51:ec:13:aa:86:d8:b7:40:47:a5:2a:01:cd:72:
38:73:e3:ce:50:af:5d:cf:66:53:3b:32:e7:ed:1b:df:4a:9f:
ef:cc:0c:e7:2a:7c:60:d0:ec:59:62:b1:dd:1e:92:e7:a1:4d:
fd:e4:31:45:d6:14:d2:c9:f5:8a:1b:70:85:31:78:0f:e2:6e:
c7:ba:0d:63:b1:df:5f:95:c8:01:2b:d4:86:10:ee:4d:5e:97:
4d:6e:13:84:1f:5f:63:ba:00:a6:2e:67:b2:dd:38:e4:a5:e5:
53:c3:2a:7b:51:bf:aa:93:20:99:b1:e0:38:b0:30:9b:f2:d5:
ea:32:3a:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZy+Auz3PwW1wFEuQeS8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzU0NjJlYmIyMDI5YTgzZDNlZWFiNDYyZmYwNTJlY2Zh
MGUxYzMwHhcNMjMwMTAyMDI1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzBmZDJmMGNiZGE4MTk4NzUxYzlmOGZhZmJkMDk2ZWViYjRiZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVkPt0gYVSqFoTevbNuUtOFxNLN3
w8KEF6GYFokMdMivfGfQ57CHRqYkiRhfDA3ckIACEDCpTTlbl8qiXdT37UKTSiSx
VjbbcBKNOHj5isjR/cF5PG6fbJQdFr+jrP9Xt/PSkc+26eTCAC/AMdZksOSMcWj9
8BvNpQRDlWYdteN+Zo3BrVJwLCD1umT8sDuCrFHl8d0rOLa+lzaate2uYW/vvw2w
BzkINO4vmKBX82nlYgGyN5raAhSHFoAboSOUpaYZHKoEXHk976Ez1TnGMOtQRRp+
81yiw+hUNSvm6PHvS7FSIwylEeojCySJmAPFoUgNvyO915m0Er4/bXZEUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKcP0vDL2oGYdRyfj6+9CW7rtL53MB8GA1UdIwQY
MBaAFJU1Ri67ICmoPT7qtGL/BS7PoOHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTct
MzhhYmZhNGZhMzUwLzEvcHdfUzhNdmFnWmgxSEotUHI3MEpidXUwdm5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTctMzhhYmZhNGZhMzUw
LzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwStlMA0G
CSqGSIb3DQEBCwUAA4IBAQCjaBWYUVl2rqchnxbbYRfeOI/vxzwpDqhqyq7hrKnK
oHxNTXHsg7nic0j9OW8q0BMVIagedGdQnikeZTk8/+UXIEaUo+EtbqGkLGM8p9bt
ZonvTAbBiBTxgzh7b128NG/BAcb7wt3nvkcA00OypwkLUx9brH0XQYrTYXIrTQot
TzQxUewTqobYt0BHpSoBzXI4c+POUK9dz2ZTOzLn7RvfSp/vzAznKnxg0OxZYrHd
HpLnoU395DFF1hTSyfWKG3CFMXgP4m7Hug1jsd9flcgBK9SGEO5NXpdNbhOEH19j
ugCmLmey3TjkpeVTwyp7Ub+qkyCZseA4sDCb8tXqMjpT
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:34 2025 by rpki-client