Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/bVznl1FZAihuOt7rBMyoAvpsD_g.roa
File: bVznl1FZAihuOt7rBMyoAvpsD_g.roa (raw, json)
Hash identifier: umiZ0tfeTsap7IayLFWM9ObESmhbD6XgTAqm2qN5SwI=
Subject key identifier: 6D:5C:E7:97:51:59:02:28:6E:3A:DE:EB:04:CC:A8:02:FA:6C:0F:F8
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 0186DDBB6FFEC0D23EE5ACEACE1ED50CEAD3
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/bVznl1FZAihuOt7rBMyoAvpsD_g.roa
Signing time: Tue 14 Mar 2023 01:28:13 +0000
ROA not before: Tue 14 Mar 2023 01:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47377
IP address blocks: 85.94.226.0/23 maxlen: 23
85.94.224.0/19 maxlen: 24
85.94.228.0/23 maxlen: 23
85.94.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dd:bb:6f:fe:c0:d2:3e:e5:ac:ea:ce:1e:d5:0c:ea:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Mar 14 01:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d5ce797515902286e3adeeb04cca802fa6c0ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c2:d8:28:19:a3:d3:0d:eb:2c:cf:41:6d:7b:
1d:70:d0:4b:99:9f:e6:03:69:c5:e1:a2:dd:e6:e5:
b5:94:da:ba:8c:4a:dd:9a:68:b5:ca:20:cd:73:ac:
d3:6f:09:35:29:33:f0:68:2e:0b:34:bd:1e:09:f6:
42:f4:7a:5c:53:9e:08:59:39:55:9f:df:62:6e:57:
8e:a3:6a:c0:2f:e0:82:13:92:13:37:5e:96:80:14:
fe:2d:83:76:7c:94:b7:6a:ba:5d:cc:00:c9:5f:55:
4b:98:16:df:c0:ac:05:a1:6e:61:e7:46:bf:11:cb:
ec:47:23:42:34:b1:8c:96:45:9c:b0:8b:d7:d1:56:
33:cd:56:df:bf:48:fa:0e:a2:41:2d:93:49:49:24:
e6:10:39:2e:8c:8f:7c:cb:7a:52:39:b0:cc:cd:ba:
71:3f:25:c3:29:b3:51:e4:03:55:8c:76:6f:d3:c5:
6a:ec:96:a2:a5:1e:be:d2:12:6e:f4:8b:83:3a:16:
30:fe:17:29:c4:34:ce:35:09:7b:64:9c:66:9d:a7:
c9:00:e7:eb:42:c3:42:ba:13:5b:ef:6c:48:ad:dc:
a9:7e:e9:25:1b:3d:33:a0:74:f2:aa:32:0b:53:01:
7a:e3:49:dd:3b:5e:7f:3c:b0:49:d5:cc:34:18:04:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:E7:97:51:59:02:28:6E:3A:DE:EB:04:CC:A8:02:FA:6C:0F:F8
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/bVznl1FZAihuOt7rBMyoAvpsD_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.94.224.0/19
Signature Algorithm: sha256WithRSAEncryption
77:85:1e:7a:53:b7:f0:d7:ab:8d:85:64:d6:a7:4c:d6:46:d6:
4e:83:0e:5f:29:ee:1f:62:f5:a0:37:8a:f6:59:a9:62:6b:fd:
2f:ee:57:b1:8e:b9:2a:22:da:ee:ef:d2:e8:f8:1e:4e:99:bc:
1e:f2:c3:6e:20:86:9b:10:44:06:d9:da:99:97:90:fe:e9:0e:
5b:4c:09:18:bb:7d:8f:5f:45:ee:8b:98:5a:b0:38:5f:0c:77:
51:78:b2:26:9d:c6:88:44:8d:b5:18:e2:07:72:42:8c:da:00:
13:8e:c9:5d:fb:30:5d:3b:31:13:90:a7:24:a1:f5:8d:14:b2:
01:ca:67:6c:ac:51:0f:99:ad:ae:23:b1:6f:56:6c:28:6f:e4:
4d:91:be:65:1a:18:4c:98:bd:d0:41:9a:1d:40:d4:d9:91:82:
7c:11:d9:2c:77:92:97:4c:1f:4c:59:0f:7b:0f:77:00:71:1c:
be:40:9f:b1:19:bf:1c:3a:90:5c:07:23:84:08:88:01:f8:30:
b2:95:56:fd:9a:ad:e5:b7:e0:cd:64:f4:39:db:64:85:47:ae:
6b:04:98:3c:0d:a9:1c:ab:b4:7d:b5:84:df:d7:71:6a:a7:79:
33:45:c4:08:4d:3a:af:23:73:2f:f5:57:53:a4:2d:cc:ea:a9:
b8:2b:78:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbdu2/+wNI+5azqzh7VDOrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2E1MWRhMjA1MzA0NGY5NjI2MmY2MzdkMGM5Y2MwNWQ3
MzAwNDEwHhcNMjMwMzE0MDEyODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDVjZTc5NzUxNTkwMjI4NmUzYWRlZWIwNGNjYTgwMmZhNmMwZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8LYKBmj0w3rLM9BbXsdcNBLmZ/m
A2nF4aLd5uW1lNq6jErdmmi1yiDNc6zTbwk1KTPwaC4LNL0eCfZC9HpcU54IWTlV
n99ibleOo2rAL+CCE5ITN16WgBT+LYN2fJS3arpdzADJX1VLmBbfwKwFoW5h50a/
EcvsRyNCNLGMlkWcsIvX0VYzzVbfv0j6DqJBLZNJSSTmEDkujI98y3pSObDMzbpx
PyXDKbNR5ANVjHZv08Vq7JaipR6+0hJu9IuDOhYw/hcpxDTONQl7ZJxmnafJAOfr
QsNCuhNb72xIrdypfuklGz0zoHTyqjILUwF640ndO15/PLBJ1cw0GAQQCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG1c55dRWQIobjre6wTMqAL6bA/4MB8GA1UdIwQY
MBaAFLk6UdogUwRPliYvY30MnMBdcwBBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGIt
YTEyYjNjM2FlODhmLzEvYlZ6bmwxRlpBaWh1T3Q3ckJNeW9BdnBzRF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGItYTEyYjNjM2FlODhm
LzEvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFVV7gMA0G
CSqGSIb3DQEBCwUAA4IBAQB3hR56U7fw16uNhWTWp0zWRtZOgw5fKe4fYvWgN4r2
Walia/0v7lexjrkqItru79Lo+B5Ombwe8sNuIIabEEQG2dqZl5D+6Q5bTAkYu32P
X0Xui5hasDhfDHdReLImncaIRI21GOIHckKM2gATjsld+zBdOzETkKckofWNFLIB
ymdsrFEPma2uI7FvVmwob+RNkb5lGhhMmL3QQZodQNTZkYJ8Edksd5KXTB9MWQ97
D3cAcRy+QJ+xGb8cOpBcByOECIgB+DCylVb9mq3lt+DNZPQ522SFR65rBJg8Dakc
q7R9tYTf13Fqp3kzRcQITTqvI3Mv9VdTpC3M6qm4K3jt
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:56:47 2025 by rpki-client