Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/tpw4VYAocRhRoGw9JX-jhvIXfI4.roa
File: tpw4VYAocRhRoGw9JX-jhvIXfI4.roa (raw, json)
Hash identifier: EuK59B4Y9hWbdmhMBFYlhKl+bcC6Y1Hpt1pBAgnJbxQ=
Subject key identifier: B6:9C:38:55:80:28:71:18:51:A0:6C:3D:25:7F:A3:86:F2:17:7C:8E
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 207DF1
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/tpw4VYAocRhRoGw9JX-jhvIXfI4.roa
Signing time: Sat 01 Jan 2022 02:58:11 +0000
ROA not before: Sat 01 Jan 2022 02:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28967
IP address blocks: 195.39.225.0/24 maxlen: 24
195.39.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129393 (0x207df1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Jan 1 02:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b69c38558028711851a06c3d257fa386f2177c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:c7:aa:03:65:87:f4:3d:82:78:26:b8:1e:
9f:08:6c:30:34:1b:f8:55:06:95:5f:1c:42:a4:c9:
55:b5:c2:1f:43:9c:31:27:72:9c:bd:37:d2:42:5f:
22:4f:01:27:ef:d1:49:68:19:30:31:a5:cf:f5:59:
50:af:38:c8:fb:f7:17:1a:71:50:89:69:9e:4d:60:
61:a8:bf:a1:8a:b1:01:eb:4f:e6:eb:46:71:b4:d3:
89:87:83:68:d0:23:69:f2:ce:08:03:3f:d6:69:14:
e9:8d:37:87:95:15:da:2b:e3:28:a5:2c:dc:7c:46:
47:1c:18:e4:19:3d:25:97:8a:b0:75:14:f7:5e:42:
1d:f7:a3:25:d9:3d:7f:03:d7:8e:20:b4:5d:f2:9f:
cf:57:a4:3f:e2:5a:b8:75:c6:44:60:3b:af:ec:68:
25:4d:30:bf:e8:eb:e8:15:a0:8f:48:f8:7e:49:be:
6b:c9:0b:35:ff:e9:ae:fa:3e:b4:36:8d:00:96:64:
0c:15:49:51:e3:f1:ab:36:cb:c4:12:6e:de:ad:e8:
b3:75:27:5c:a9:14:62:ff:88:06:07:38:41:8c:49:
6f:3b:d7:3c:96:f4:5b:92:f4:52:08:2c:53:e3:6f:
16:6f:0c:a4:ad:1b:e5:ae:0e:ee:34:72:8a:74:29:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9C:38:55:80:28:71:18:51:A0:6C:3D:25:7F:A3:86:F2:17:7C:8E
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/tpw4VYAocRhRoGw9JX-jhvIXfI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.224.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:41:fe:cf:86:36:cb:dd:bc:f9:68:d9:8a:cd:f5:2e:c3:e4:
b1:16:bc:80:ce:b0:e6:b1:06:20:2a:86:8f:71:31:f1:5d:92:
b2:e3:c6:b5:38:b6:7b:57:7f:8a:c6:de:97:35:ac:a9:b1:51:
d1:e4:d4:2d:8d:24:e3:f2:e0:e8:a9:7f:5c:8b:53:0d:5d:70:
ea:de:5d:c5:58:56:95:77:83:21:7e:25:b8:de:fe:ca:1e:57:
8d:ea:da:db:63:cd:e9:e3:07:90:77:81:dd:f2:21:9e:e9:b2:
b7:82:6f:4d:c3:7c:b5:2a:0d:69:a3:c1:32:e0:15:80:31:6a:
96:da:51:30:d8:63:0d:32:88:86:79:57:88:4d:1e:e6:03:0f:
cf:11:c8:61:a5:db:c9:29:57:3b:43:0b:1e:90:f7:ac:6d:c4:
ee:dd:88:4a:b3:eb:75:7d:fe:6d:e6:76:1e:18:34:87:21:83:
99:96:31:89:6e:61:68:8b:b6:39:ad:0a:61:e2:88:8c:0d:54:
1f:e9:c9:78:56:b5:f5:61:ef:c9:db:33:9e:f1:45:20:08:f5:
e3:a8:ab:be:34:17:d7:fb:9d:b6:3b:d1:a1:58:8b:21:03:9b:
62:45:8d:27:00:89:ef:82:b5:51:b2:b2:c1:fa:c8:c5:58:bc:
a2:37:14:30
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDIH3xMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
NmRhODM0YjMyY2IxMmM0YmRhZTMzZjY3MmYzNDhkOTgzZjMxNzYwHhcNMjIwMTAx
MDI1ODExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiNjljMzg1NTgwMjg3
MTE4NTFhMDZjM2QyNTdmYTM4NmYyMTc3YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyOTHqgNlh/Q9gngmuB6fCGwwNBv4VQaVXxxCpMlVtcIfQ5wx
J3KcvTfSQl8iTwEn79FJaBkwMaXP9VlQrzjI+/cXGnFQiWmeTWBhqL+hirEB60/m
60ZxtNOJh4No0CNp8s4IAz/WaRTpjTeHlRXaK+MopSzcfEZHHBjkGT0ll4qwdRT3
XkId96Ml2T1/A9eOILRd8p/PV6Q/4lq4dcZEYDuv7GglTTC/6OvoFaCPSPh+Sb5r
yQs1/+mu+j60No0AlmQMFUlR4/GrNsvEEm7ereizdSdcqRRi/4gGBzhBjElvO9c8
lvRbkvRSCCxT428WbwykrRvlrg7uNHKKdCkMawIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFLacOFWAKHEYUaBsPSV/o4byF3yOMB8GA1UdIwQYMBaAFKttqDSzLLEsS9rj
P2cvNI2YPzF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iMy8wZWM3YTctMGFiYy00ZmY5LTk5NTgtNTg2N2NhNzc4OTdlLzEv
dHB3NFZZQW9jUmhSb0d3OUpYLWpodklYZkk0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8w
ZWM3YTctMGFiYy00ZmY5LTk5NTgtNTg2N2NhNzc4OTdlLzEvcTIyb05MTXNzU3hM
MnVNX1p5ODBqWmdfTVhZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwyfgMA0GCSqGSIb3DQEBCwUAA4IB
AQA+Qf7PhjbL3bz5aNmKzfUuw+SxFryAzrDmsQYgKoaPcTHxXZKy48a1OLZ7V3+K
xt6XNaypsVHR5NQtjSTj8uDoqX9ci1MNXXDq3l3FWFaVd4MhfiW43v7KHleN6trb
Y83p4weQd4Hd8iGe6bK3gm9Nw3y1Kg1po8Ey4BWAMWqW2lEw2GMNMoiGeVeITR7m
Aw/PEchhpdvJKVc7QwsekPesbcTu3YhKs+t1ff5t5nYeGDSHIYOZljGJbmFoi7Y5
rQph4oiMDVQf6cl4VrX1Ye/J2zOe8UUgCPXjqKu+NBfX+522O9GhWIshA5tiRY0n
AInvgrVRsrLB+sjFWLyiNxQw
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:01 2025 by rpki-client