Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/qleWoQaYekIGTv1VgZyYjcMHGFI.roa
File: qleWoQaYekIGTv1VgZyYjcMHGFI.roa (raw, json)
Hash identifier: 3QO3vWkePFJp+x+kQZIj0ls5zVDdIwwceGuKLc1KV1A=
Subject key identifier: AA:57:96:A1:06:98:7A:42:06:4E:FD:55:81:9C:98:8D:C3:07:18:52
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018A7444FB2BFA9A0D8FDE0ADFEFB51876E6
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/qleWoQaYekIGTv1VgZyYjcMHGFI.roa
Signing time: Fri 08 Sep 2023 10:09:52 +0000
ROA not before: Fri 08 Sep 2023 10:09:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6220
IP address blocks: 83.111.3.0/24 maxlen: 24
83.111.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:44:fb:2b:fa:9a:0d:8f:de:0a:df:ef:b5:18:76:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Sep 8 10:09:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa5796a106987a42064efd55819c988dc3071852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:ca:af:7e:d4:6e:2b:fc:2d:49:62:8d:3d:
4a:28:3b:db:94:94:6c:b3:75:09:9a:bf:9a:7c:a5:
53:6f:73:a3:3a:81:6d:fc:4d:f6:7a:ad:27:d3:c3:
d4:7a:01:98:ab:c1:bb:9c:00:fd:2a:bd:34:b2:84:
0b:93:c7:4b:fe:64:de:a3:c4:97:69:a9:4c:ed:9d:
9e:9e:2e:a9:23:3a:62:d6:97:cc:cb:e2:29:f7:b0:
d3:5b:87:f4:ef:dc:be:bb:f7:97:63:55:eb:95:64:
89:d3:6e:e1:29:da:c3:77:13:d3:b6:24:e6:10:e4:
a8:8a:6a:cd:fa:99:ad:cc:79:04:72:f5:ef:64:de:
1c:77:cf:cd:fb:64:16:1c:11:90:64:83:b9:55:9d:
c8:d1:26:ff:ab:df:71:79:e1:37:be:65:db:a3:8c:
ad:b4:46:bb:7e:17:92:73:4d:30:60:e3:f2:06:ac:
2e:3d:71:53:3e:71:ac:ad:df:3e:5a:64:69:60:fe:
70:49:60:45:32:2d:a0:c3:ea:ef:e4:11:61:c5:04:
9c:81:f3:9b:d1:df:90:55:1e:24:ca:2e:ae:50:3d:
20:38:49:72:60:4f:cb:22:0a:61:8b:47:f4:6b:40:
fc:c1:ef:f6:8b:cc:0e:42:08:ba:74:8e:3c:aa:23:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:57:96:A1:06:98:7A:42:06:4E:FD:55:81:9C:98:8D:C3:07:18:52
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/qleWoQaYekIGTv1VgZyYjcMHGFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.111.3.0-83.111.4.255
Signature Algorithm: sha256WithRSAEncryption
1c:5e:92:3c:b1:44:97:4c:37:ae:65:5f:75:ce:66:a9:79:bb:
cc:54:45:74:d9:c7:a1:12:0a:2d:df:6d:f8:12:b0:9a:07:2e:
02:08:c5:a1:83:ac:01:c7:20:e4:c4:81:36:28:8a:be:96:fa:
85:f1:20:e9:ee:7d:73:0b:4e:e4:a1:52:41:3f:29:d2:41:e6:
0f:99:e6:9e:1a:dd:02:48:d4:0a:74:f7:c8:15:1f:27:a9:e4:
8e:20:46:85:fb:64:13:7a:5e:ea:1d:42:41:17:88:53:d4:52:
17:f0:93:8d:6a:df:ee:ce:9b:ea:e1:13:27:11:99:cb:d6:86:
8e:ea:e4:e9:f7:e6:79:75:fc:73:5b:00:c9:22:32:d8:9b:02:
32:e2:08:12:1f:ae:e4:91:73:de:da:21:65:b5:ff:34:e3:5f:
3f:cf:11:33:1f:3a:74:f4:80:e2:7b:4c:ea:13:0b:27:67:79:
89:fb:34:a0:f1:3d:81:05:9e:4e:e4:c4:3c:cd:aa:34:39:21:
2a:fd:85:01:59:d9:fa:f2:ec:24:5c:05:bb:c4:db:65:7c:38:
81:12:8e:71:a9:44:14:dc:fd:20:d4:35:80:9d:b9:fb:e0:62:
6f:05:fc:34:29:e4:80:f0:7f:11:ba:7a:41:f1:7d:e9:41:02:
46:f3:ad:74
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYp0RPsr+poNj94K3++1GHbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx
YmRjYzkwHhcNMjMwOTA4MTAwOTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTU3OTZhMTA2OTg3YTQyMDY0ZWZkNTU4MTljOTg4ZGMzMDcxODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtULKr37Ubiv8LUlijT1KKDvblJRs
s3UJmr+afKVTb3OjOoFt/E32eq0n08PUegGYq8G7nAD9Kr00soQLk8dL/mTeo8SX
aalM7Z2eni6pIzpi1pfMy+Ip97DTW4f079y+u/eXY1XrlWSJ027hKdrDdxPTtiTm
EOSoimrN+pmtzHkEcvXvZN4cd8/N+2QWHBGQZIO5VZ3I0Sb/q99xeeE3vmXbo4yt
tEa7fheSc00wYOPyBqwuPXFTPnGsrd8+WmRpYP5wSWBFMi2gw+rv5BFhxQScgfOb
0d+QVR4kyi6uUD0gOElyYE/LIgphi0f0a0D8we/2i8wOQgi6dI48qiN/QQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKpXlqEGmHpCBk79VYGcmI3DBxhSMB8GA1UdIwQY
MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt
NjFhZmI2NmQxZThjLzEvcWxlV29RYVlla0lHVHYxVmdaeVlqY01IR0ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj
LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABTbwMD
BABTbwQwDQYJKoZIhvcNAQELBQADggEBABxekjyxRJdMN65lX3XOZql5u8xURXTZ
x6ESCi3fbfgSsJoHLgIIxaGDrAHHIOTEgTYoir6W+oXxIOnufXMLTuShUkE/KdJB
5g+Z5p4a3QJI1Ap098gVHyep5I4gRoX7ZBN6XuodQkEXiFPUUhfwk41q3+7Om+rh
EycRmcvWho7q5On35nl1/HNbAMkiMtibAjLiCBIfruSRc97aIWW1/zTjXz/PETMf
OnT0gOJ7TOoTCydneYn7NKDxPYEFnk7kxDzNqjQ5ISr9hQFZ2fry7CRcBbvE22V8
OIESjnGpRBTc/SDUNYCdufvgYm8F/DQp5IDwfxG6ekHxfelBAkbzrXQ=
-----END CERTIFICATE-----
Generated at Tue Mar 11 19:37:07 2025 by rpki-client