Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/TbzgwPzCrwJvYkZpe0XGAxrHlnE.roa
File: TbzgwPzCrwJvYkZpe0XGAxrHlnE.roa (raw, json)
Hash identifier: ShylD39I65mNxyuRtJQ4N9m43d63KNKM/KDl7nsgsVU=
Subject key identifier: 4D:BC:E0:C0:FC:C2:AF:02:6F:62:46:69:7B:45:C6:03:1A:C7:96:71
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 804C
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/TbzgwPzCrwJvYkZpe0XGAxrHlnE.roa
Signing time: Sun 24 Apr 2022 02:00:57 +0000
ROA not before: Sun 24 Apr 2022 02:00:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50413
IP address blocks: 195.78.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32844 (0x804c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: Apr 24 02:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dbce0c0fcc2af026f6246697b45c6031ac79671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:42:75:46:93:5c:80:cd:04:59:5f:5f:f8:
1c:f9:4d:62:84:33:ba:36:86:e1:5b:fc:2f:a4:5f:
22:72:e3:de:e8:76:f8:5c:f4:2a:68:72:ff:8f:59:
1f:f3:6e:56:52:57:41:f0:c0:37:0f:f7:44:6c:2a:
aa:e4:c8:08:27:ab:44:f7:4c:5d:35:7b:52:4c:be:
d7:a7:79:73:14:7d:68:84:ec:3d:ed:1e:4d:9b:1d:
1e:3f:38:05:0b:d2:fe:92:b2:05:29:da:10:cd:19:
45:f1:2e:6c:1e:3f:5f:cc:a0:55:ea:20:b0:8e:f9:
2c:73:a3:ca:c1:8a:4a:38:6c:ce:39:f3:bc:bf:8b:
7d:a3:89:e9:2b:bd:d4:68:12:7c:e1:87:36:2a:b4:
7d:37:69:54:5a:53:9f:f0:87:14:65:1f:70:50:3c:
6f:a1:a3:3c:ee:54:bb:5d:0f:54:32:55:03:bd:06:
02:63:9b:ef:c2:38:aa:f5:7e:f5:df:a4:1d:6b:0a:
03:c2:e7:c9:6b:dd:ea:fa:ec:87:31:30:6e:8f:bd:
0e:78:3f:1a:e5:58:9c:83:9f:2e:7b:a8:3a:6e:4b:
35:72:a5:5e:73:9a:d3:d1:ba:4f:9d:e4:25:15:ba:
a7:d1:18:8a:7b:70:af:30:e6:ec:47:23:18:fb:45:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BC:E0:C0:FC:C2:AF:02:6F:62:46:69:7B:45:C6:03:1A:C7:96:71
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/TbzgwPzCrwJvYkZpe0XGAxrHlnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:99:80:2a:59:d6:9d:84:02:69:bb:53:90:7c:3c:a4:30:6d:
cc:f6:87:35:f4:f9:da:fb:40:b7:11:27:65:e7:5b:93:a3:7d:
0f:37:ca:61:14:79:86:d0:6b:29:b0:1d:a8:fb:a3:3e:2b:99:
b4:9d:b9:41:e5:5b:25:c4:a5:d0:88:35:b3:97:f6:5c:15:30:
d2:c1:cd:de:14:9e:d6:cb:07:7c:f5:73:01:09:82:15:e0:69:
03:8a:84:1c:41:e4:8d:16:1e:b1:b3:e1:f7:9c:3c:06:ee:fd:
13:f2:f0:ba:38:47:d5:a5:02:9a:d6:81:f5:e3:3f:1e:40:6f:
2a:0b:ba:3b:39:85:00:64:b3:dd:37:57:90:f5:26:48:7a:80:
d8:1b:5c:0b:20:9a:ac:82:2c:4d:7c:e2:8d:24:c8:de:5c:06:
3e:2e:58:7f:a9:d4:46:02:09:6f:45:d5:cc:31:3b:0e:cf:29:
19:4a:30:d3:4f:9b:f5:ea:cb:36:8f:43:e2:4e:0b:bf:5e:4c:
40:14:7e:c0:2a:b1:9b:63:f0:17:3a:ba:e0:f0:3a:2d:54:4c:
7f:5d:c1:b5:ea:ff:f9:d9:30:f0:bb:1d:b3:e0:c2:ba:72:ba:
38:33:f0:1b:bc:0a:c7:ec:0a:79:e3:54:d7:bd:a1:e6:e0:13:
57:e1:1e:9d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAIBMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
YzExM2M3YWVhNmI3MTRhMDYwZTlmN2MzZTcxNTY5ZTYwM2QzOTUwHhcNMjIwNDI0
MDIwMDU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0ZGJjZTBjMGZjYzJh
ZjAyNmY2MjQ2Njk3YjQ1YzYwMzFhYzc5NjcxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAseNCdUaTXIDNBFlfX/gc+U1ihDO6NobhW/wvpF8icuPe6Hb4
XPQqaHL/j1kf825WUldB8MA3D/dEbCqq5MgIJ6tE90xdNXtSTL7Xp3lzFH1ohOw9
7R5Nmx0ePzgFC9L+krIFKdoQzRlF8S5sHj9fzKBV6iCwjvksc6PKwYpKOGzOOfO8
v4t9o4npK73UaBJ84Yc2KrR9N2lUWlOf8IcUZR9wUDxvoaM87lS7XQ9UMlUDvQYC
Y5vvwjiq9X7136QdawoDwufJa93q+uyHMTBuj70OeD8a5Vicg58ue6g6bks1cqVe
c5rT0bpPneQlFbqn0RiKe3CvMObsRyMY+0VaJwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFE284MD8wq8Cb2JGaXtFxgMax5ZxMB8GA1UdIwQYMBaAFKvBE8euprcUoGDp
98PnFWnmA9OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iMC9jMGFkNGQtMjBmZS00YTkzLWFmMDYtMWQwYTRlYzgyN2FiLzEv
VGJ6Z3dQekNyd0p2WWtacGUwWEdBeHJIbG5FLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9j
MGFkNGQtMjBmZS00YTkzLWFmMDYtMWQwYTRlYzgyN2FiLzEvcThFVHg2Nm10eFNn
WU9uM3ctY1ZhZVlEMDVVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw05rMA0GCSqGSIb3DQEBCwUAA4IB
AQAMmYAqWdadhAJpu1OQfDykMG3M9oc19Pna+0C3ESdl51uTo30PN8phFHmG0Gsp
sB2o+6M+K5m0nblB5VslxKXQiDWzl/ZcFTDSwc3eFJ7Wywd89XMBCYIV4GkDioQc
QeSNFh6xs+H3nDwG7v0T8vC6OEfVpQKa1oH14z8eQG8qC7o7OYUAZLPdN1eQ9SZI
eoDYG1wLIJqsgixNfOKNJMjeXAY+Llh/qdRGAglvRdXMMTsOzykZSjDTT5v16ss2
j0PiTgu/XkxAFH7AKrGbY/AXOrrg8DotVEx/XcG16v/52TDwux2z4MK6cro4M/Ab
vArH7Ap541TXvaHm4BNX4R6d
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:39 2025 by rpki-client