Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/pmYjrLiQXFfjKSBazadXlOIxTro.roa
File: pmYjrLiQXFfjKSBazadXlOIxTro.roa (raw, json)
Hash identifier: OzIm7pnl7Dl+COtTiL9vaomYBzGt3PJwbYYUF7KTbFI=
Subject key identifier: A6:66:23:AC:B8:90:5C:57:E3:29:20:5A:CD:A7:57:94:E2:31:4E:BA
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 07ED86E7
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/pmYjrLiQXFfjKSBazadXlOIxTro.roa
Signing time: Fri 25 Mar 2022 21:50:10 +0000
ROA not before: Fri 25 Mar 2022 21:50:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.31.62.0/24 maxlen: 24
193.31.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133007079 (0x7ed86e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Mar 25 21:50:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a66623acb8905c57e329205acda75794e2314eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:ff:77:e5:42:95:26:46:26:5f:e4:68:d1:
e9:57:d0:34:b7:c8:61:e0:22:68:6d:6e:d4:92:e1:
77:c7:5a:77:c0:16:29:51:86:6d:7b:23:53:4b:98:
58:ec:2a:2d:83:dd:f3:33:8a:b4:0a:e4:07:32:0b:
da:14:57:50:7b:96:6b:6d:f1:d6:6e:89:90:ca:a0:
fe:e4:40:76:c5:cd:f9:f4:29:13:47:f7:6e:cf:14:
a5:9c:be:94:a7:0a:e9:8d:1f:1e:53:2d:e0:b1:4c:
35:2d:b5:80:30:f7:a8:d4:6e:e8:9f:06:ca:7e:97:
a7:c5:90:df:1f:ea:88:c9:bb:40:a7:71:5c:e2:69:
b9:b8:51:33:21:0d:3e:01:cc:be:c1:9b:ed:18:7c:
2b:a0:57:9c:5d:5a:e9:9f:3a:ea:fc:7a:84:18:c5:
b0:05:74:67:7e:4d:b7:fa:33:8c:d5:7e:5d:8f:1f:
f9:ef:cb:92:ae:20:1a:ba:17:b6:4c:ac:cb:cb:df:
74:fb:7c:cc:29:e0:80:88:53:e0:f6:1f:b9:25:21:
a5:da:5a:77:4c:fc:69:a2:33:20:c3:4a:34:74:37:
1b:51:df:dd:05:7d:bd:58:4a:b0:2d:12:72:34:f8:
87:5a:18:52:18:17:10:f0:cf:c0:18:0c:cf:d3:b2:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:66:23:AC:B8:90:5C:57:E3:29:20:5A:CD:A7:57:94:E2:31:4E:BA
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/pmYjrLiQXFfjKSBazadXlOIxTro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
193.31.62.0/24
Signature Algorithm: sha256WithRSAEncryption
29:5b:b3:4b:f0:4c:67:9d:80:79:1b:fb:b9:9f:e2:bf:ae:79:
3f:35:27:c6:43:7e:95:24:04:26:2d:31:ef:87:19:14:c9:1b:
8f:73:0f:1a:db:ce:26:af:a2:11:32:35:6e:be:39:aa:39:11:
4c:12:ef:d7:80:29:39:45:23:96:87:06:93:29:f4:d5:22:3b:
ab:40:f1:16:b0:75:dd:a6:7d:ca:5e:f8:d7:c5:17:53:22:4b:
bd:e6:2c:53:8a:50:db:7d:6c:2c:ba:1f:fc:90:6b:27:f6:cd:
be:e2:e0:20:52:b8:40:c8:99:5c:cc:ed:a7:e7:5b:e9:3a:96:
05:73:ad:69:17:2e:1a:d9:d7:ad:f0:66:d5:fa:88:84:6a:a3:
05:c0:de:37:0e:35:1e:d3:19:1d:9c:27:78:8e:76:ec:fa:15:
df:8c:76:7a:d0:c6:63:3a:b8:71:e2:51:8d:97:c9:19:34:77:
bc:11:38:4b:a9:22:33:68:ea:72:93:f5:a1:2d:50:f5:c8:f7:
ca:ff:74:35:9c:30:3a:78:90:5f:d6:e0:ef:53:d4:94:92:30:
c3:6f:90:4a:34:27:c4:9b:98:a0:99:8a:0e:d2:e2:01:42:74:
7e:f6:59:bd:73:4c:ef:72:a2:87:82:fb:3b:b5:59:3b:55:94:
d8:6e:20:1d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB+2G5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZjFkNWZlYWZkMzkxNzQ3MjViZmU0YmVmOTFiZDI3YzdiMmY2ZjkxMB4XDTIyMDMy
NTIxNTAxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTY2NjIzYWNiODkw
NWM1N2UzMjkyMDVhY2RhNzU3OTRlMjMxNGViYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALFS/3flQpUmRiZf5GjR6VfQNLfIYeAiaG1u1JLhd8dad8AW
KVGGbXsjU0uYWOwqLYPd8zOKtArkBzIL2hRXUHuWa23x1m6JkMqg/uRAdsXN+fQp
E0f3bs8UpZy+lKcK6Y0fHlMt4LFMNS21gDD3qNRu6J8Gyn6Xp8WQ3x/qiMm7QKdx
XOJpubhRMyENPgHMvsGb7Rh8K6BXnF1a6Z866vx6hBjFsAV0Z35Nt/ozjNV+XY8f
+e/Lkq4gGroXtkysy8vfdPt8zCnggIhT4PYfuSUhpdpad0z8aaIzIMNKNHQ3G1Hf
3QV9vVhKsC0ScjT4h1oYUhgXEPDPwBgMz9Oyv9sCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSmZiOsuJBcV+MpIFrNp1eU4jFOujAfBgNVHSMEGDAWgBS/HV/q/TkXRyW/
5L75G9J8ey9vkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Z4MWY2djA1RjBjbHYtUy0tUnZTZkhzdmI1RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjMvNjA2NWQyLTEwM2UtNGFiNy1iZmIzLTFhOGM4NDJhZmUyYS8x
L3BtWWpyTGlRWEZmaktTQmF6YWRYbE9JeFRyby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMv
NjA2NWQyLTEwM2UtNGFiNy1iZmIzLTFhOGM4NDJhZmUyYS8xL3Z4MWY2djA1RjBj
bHYtUy0tUnZTZkhzdmI1RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMEfPAMEAMEfPjANBgkqhkiG9w0B
AQsFAAOCAQEAKVuzS/BMZ52AeRv7uZ/iv655PzUnxkN+lSQEJi0x74cZFMkbj3MP
GtvOJq+iETI1br45qjkRTBLv14ApOUUjlocGkyn01SI7q0DxFrB13aZ9yl7418UX
UyJLveYsU4pQ231sLLof/JBrJ/bNvuLgIFK4QMiZXMztp+db6TqWBXOtaRcuGtnX
rfBm1fqIhGqjBcDeNw41HtMZHZwneI527PoV34x2etDGYzq4ceJRjZfJGTR3vBE4
S6kiM2jqcpP1oS1Q9cj3yv90NZwwOniQX9bg71PUlJIww2+QSjQnxJuYoJmKDtLi
AUJ0fvZZvXNM73Kih4L7O7VZO1WU2G4gHQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:35 2025 by rpki-client