Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/cdJGYAbAeg_Z3A_03xJ7akZaM44.roa
File: cdJGYAbAeg_Z3A_03xJ7akZaM44.roa (raw, json)
Hash identifier: KOEAI84gdIz3IUpgDe3zRqNgPzwWWlWsnnYGu6Bi62o=
Subject key identifier: 71:D2:46:60:06:C0:7A:0F:D9:DC:0F:F4:DF:12:7B:6A:46:5A:33:8E
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018703F2F757C1F10A82250BBFEF2C9D6336
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/cdJGYAbAeg_Z3A_03xJ7akZaM44.roa
Signing time: Tue 21 Mar 2023 11:34:27 +0000
ROA not before: Tue 21 Mar 2023 11:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56479
IP address blocks: 195.229.178.0/24 maxlen: 24
195.229.177.0/24 maxlen: 24
195.229.179.0/24 maxlen: 24
195.229.181.0/24 maxlen: 24
195.229.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:f2:f7:57:c1:f1:0a:82:25:0b:bf:ef:2c:9d:63:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Mar 21 11:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71d2466006c07a0fd9dc0ff4df127b6a465a338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:ab:c8:5b:80:8c:f6:9c:33:cf:21:d7:bd:
de:d7:9b:e3:0b:f2:e9:de:38:6a:0d:a3:dd:95:f1:
d4:3d:a0:03:81:49:bb:f8:3e:be:41:b2:d5:29:c0:
55:f9:36:08:17:67:6d:50:1c:ed:6f:c0:f0:d3:91:
15:3c:fc:dd:29:bc:a0:ca:c5:4d:dc:b0:27:7b:b3:
c5:f2:87:2d:d9:48:3b:3f:86:49:fe:b6:f7:e5:7d:
27:b7:76:cb:0f:0c:95:c7:06:07:e9:a3:72:07:df:
c8:31:18:83:f7:14:f3:76:66:5d:8e:7d:e2:aa:7d:
b6:05:77:ab:4c:1e:20:49:cc:60:72:ff:2f:97:1a:
c1:90:d8:e7:cd:28:f0:27:3b:8e:e8:0f:f6:3a:5b:
16:f7:6f:16:1d:b9:61:67:95:89:45:47:2a:da:34:
da:4f:39:28:38:b3:85:ba:a6:64:89:b3:49:66:40:
82:1a:32:2e:61:64:f4:38:b2:b6:83:f2:37:4b:dd:
cf:01:97:b6:82:a7:ba:a1:0d:9a:ce:78:9c:be:32:
9f:87:e6:22:ac:8b:69:cc:b3:29:54:cc:38:41:43:
ec:ab:b6:6b:c6:e7:ed:30:f8:79:31:f2:03:88:8a:
6d:40:9c:d4:74:46:3c:95:ff:bc:32:e1:1b:a1:5f:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D2:46:60:06:C0:7A:0F:D9:DC:0F:F4:DF:12:7B:6A:46:5A:33:8E
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/cdJGYAbAeg_Z3A_03xJ7akZaM44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.229.177.0-195.229.181.255
Signature Algorithm: sha256WithRSAEncryption
22:aa:f3:f9:60:e8:ae:ec:7b:f8:46:83:da:9f:fd:95:a3:92:
31:e0:d8:ba:cb:53:4e:3d:0c:4e:14:b3:d1:f7:14:92:83:54:
1e:83:7b:07:0c:21:b3:d2:15:13:52:f5:45:07:35:0e:fb:0e:
0a:00:e5:e3:ec:41:21:d3:36:c7:10:ee:98:2b:e7:ca:f3:2e:
34:59:b5:71:a0:02:bc:50:aa:95:13:bd:56:d9:fd:f1:f2:00:
ef:27:13:e3:00:e2:40:c0:40:b5:a5:dd:95:c7:6e:89:b0:5f:
3f:70:a0:ca:53:d9:4c:e9:65:1c:fa:1a:c5:f8:c3:56:a9:a2:
ef:6b:a5:3f:af:5b:1f:e1:c5:de:ff:3d:6b:46:a8:32:2b:fd:
81:6f:1a:3f:e1:a1:72:dd:61:da:be:4f:05:17:85:0c:cb:18:
c9:c7:5e:67:dc:62:d1:8c:b1:83:55:52:29:15:27:16:eb:fe:
bb:97:5f:8a:aa:2a:32:90:2c:00:10:9d:22:5d:3c:2d:d1:49:
43:eb:0b:75:d7:d0:3e:15:14:9a:ca:9c:6f:b8:32:77:b1:61:
a2:2b:58:7b:97:39:4a:22:ad:f2:0d:2c:97:37:f5:2d:a1:49:
41:e6:84:39:e0:3f:27:81:58:a7:60:36:7d:fe:ef:7b:f6:0a:
59:b1:85:2d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYcD8vdXwfEKgiULv+8snWM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx
YmRjYzkwHhcNMjMwMzIxMTEzNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWQyNDY2MDA2YzA3YTBmZDlkYzBmZjRkZjEyN2I2YTQ2NWEzMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfqryFuAjPacM88h173e15vjC/Lp
3jhqDaPdlfHUPaADgUm7+D6+QbLVKcBV+TYIF2dtUBztb8Dw05EVPPzdKbygysVN
3LAne7PF8oct2Ug7P4ZJ/rb35X0nt3bLDwyVxwYH6aNyB9/IMRiD9xTzdmZdjn3i
qn22BXerTB4gScxgcv8vlxrBkNjnzSjwJzuO6A/2OlsW928WHblhZ5WJRUcq2jTa
TzkoOLOFuqZkibNJZkCCGjIuYWT0OLK2g/I3S93PAZe2gqe6oQ2aznicvjKfh+Yi
rItpzLMpVMw4QUPsq7ZrxuftMPh5MfIDiIptQJzUdEY8lf+8MuEboV9TAwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHHSRmAGwHoP2dwP9N8Se2pGWjOOMB8GA1UdIwQY
MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt
NjFhZmI2NmQxZThjLzEvY2RKR1lBYkFlZ19aM0FfMDN4Sjdha1phTTQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj
LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADD5bED
BAHD5bQwDQYJKoZIhvcNAQELBQADggEBACKq8/lg6K7se/hGg9qf/ZWjkjHg2LrL
U049DE4Us9H3FJKDVB6DewcMIbPSFRNS9UUHNQ77DgoA5ePsQSHTNscQ7pgr58rz
LjRZtXGgArxQqpUTvVbZ/fHyAO8nE+MA4kDAQLWl3ZXHbomwXz9woMpT2UzpZRz6
GsX4w1apou9rpT+vWx/hxd7/PWtGqDIr/YFvGj/hoXLdYdq+TwUXhQzLGMnHXmfc
YtGMsYNVUikVJxbr/ruXX4qqKjKQLAAQnSJdPC3RSUPrC3XX0D4VFJrKnG+4Mnex
YaIrWHuXOUoirfINLJc39S2hSUHmhDngPyeBWKdgNn3+73v2ClmxhS0=
-----END CERTIFICATE-----
Generated at Tue Mar 11 19:18:56 2025 by rpki-client