Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/Ym7_VIau65voOCxO_3fC3N_vj_k.roa
File: Ym7_VIau65voOCxO_3fC3N_vj_k.roa (raw, json)
Hash identifier: 5dEL8hJNLAITRY2EmSDUmMhAwjxY0s03rlJSrcRqRiM=
Subject key identifier: 62:6E:FF:54:86:AE:EB:9B:E8:38:2C:4E:FF:77:C2:DC:DF:EF:8F:F9
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 018BB571D2239A83C99C536B090A81668842
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/Ym7_VIau65voOCxO_3fC3N_vj_k.roa
Signing time: Thu 09 Nov 2023 18:56:57 +0000
ROA not before: Thu 09 Nov 2023 18:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 553
IP address blocks: 147.142.0.0/16 maxlen: 16
129.206.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:71:d2:23:9a:83:c9:9c:53:6b:09:0a:81:66:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Nov 9 18:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=626eff5486aeeb9be8382c4eff77c2dcdfef8ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:21:67:4f:2a:38:45:8d:2a:79:93:cc:20:
b2:be:1e:fa:bf:7a:c3:de:ed:60:2e:37:4a:f5:ad:
21:55:eb:35:8e:03:7b:3d:c6:80:9b:d0:79:2e:e3:
96:c5:79:f2:ae:4e:8d:c0:17:c5:b9:27:65:86:54:
c4:72:64:2c:8a:e7:90:21:d7:8c:40:fd:c9:7c:c2:
1a:1e:f8:84:f3:dc:ab:bf:86:cf:63:89:bc:c8:d8:
b8:29:f2:1b:7b:f4:2a:d6:cb:82:e6:32:10:d9:00:
de:b7:2a:b6:f7:db:ea:dd:f2:91:25:d3:5e:d7:a3:
73:ae:57:50:88:d7:6e:b0:91:90:c9:d7:17:5c:ea:
54:a2:db:f3:03:48:ff:db:38:7a:b5:39:d0:d0:d9:
20:12:5e:04:40:80:b3:5a:76:b0:5a:88:ee:aa:2a:
2f:21:fa:cf:bf:4c:6e:57:ce:b4:5e:f5:79:b2:b8:
e6:aa:f7:8c:53:33:21:d8:f4:1b:f3:5b:10:83:3b:
1e:2c:32:b7:39:9d:0f:d4:5e:a8:81:47:5d:d7:ec:
08:3c:3f:20:25:fc:a8:fe:cb:ec:f0:56:e3:91:3e:
a6:98:7d:44:fb:08:34:37:85:4a:47:5f:98:ae:bb:
f4:07:fe:10:a0:73:f0:2d:a3:e9:b7:a8:fe:cc:e3:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:FF:54:86:AE:EB:9B:E8:38:2C:4E:FF:77:C2:DC:DF:EF:8F:F9
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/Ym7_VIau65voOCxO_3fC3N_vj_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.206.0.0/16
147.142.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:e7:e3:39:eb:dd:16:29:db:0e:da:bc:34:ee:e8:d6:08:fc:
58:d7:a1:06:16:40:a3:5a:9f:91:1c:9e:f7:41:c6:f2:1e:3b:
f6:aa:05:24:e7:0f:c3:89:ca:4e:7f:a2:ff:88:1a:83:be:a9:
74:92:2e:2f:b5:0e:9d:d3:04:75:a1:2d:6b:37:07:a4:8c:4a:
7c:bf:85:5e:9b:a5:6d:2f:98:d0:89:f6:3e:86:68:08:0e:91:
8f:d0:d0:c5:c5:6f:01:1a:8e:6a:55:44:3a:30:0f:df:0e:32:
ba:14:6b:bc:7d:d8:5d:29:e7:9e:28:b9:5c:bf:17:22:e6:db:
06:e6:e3:37:3b:3f:c5:4c:55:c1:d5:4d:e2:c6:8d:31:58:04:
f5:cc:5d:8a:71:96:ed:1d:60:05:29:ca:91:2d:f0:c4:18:41:
f6:f6:5f:53:c9:81:78:8e:c4:ca:d2:bf:f7:15:d7:93:d3:b4:
ea:4b:d2:cd:57:8e:65:93:da:65:5f:fc:d8:1f:fc:73:64:5b:
d3:c2:c1:98:46:a7:8b:9a:5c:08:60:72:da:a6:84:9a:b2:d3:
9e:8b:df:ad:ce:e9:92:ef:a5:fb:61:2b:0d:aa:bf:6d:89:f9:
2b:7a:a0:0a:f7:9c:b8:f9:12:1a:75:4a:dc:1a:52:89:6a:ae:
9a:71:83:46
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYu1cdIjmoPJnFNrCQqBZohCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNGNjZGIxMmZjMjJlYjg1N2Y4NmM1NjVhOGJjNTE1MWQw
NTMyYjAwHhcNMjMxMTA5MTg1NjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjZlZmY1NDg2YWVlYjliZTgzODJjNGVmZjc3YzJkY2RmZWY4ZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCAhZ08qOEWNKnmTzCCyvh76v3rD
3u1gLjdK9a0hVes1jgN7PcaAm9B5LuOWxXnyrk6NwBfFuSdlhlTEcmQsiueQIdeM
QP3JfMIaHviE89yrv4bPY4m8yNi4KfIbe/Qq1suC5jIQ2QDetyq299vq3fKRJdNe
16NzrldQiNdusJGQydcXXOpUotvzA0j/2zh6tTnQ0NkgEl4EQICzWnawWojuqiov
IfrPv0xuV860XvV5srjmqveMUzMh2PQb81sQgzseLDK3OZ0P1F6ogUdd1+wIPD8g
Jfyo/svs8FbjkT6mmH1E+wg0N4VKR1+Yrrv0B/4QoHPwLaPpt6j+zOPXbwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFGJu/1SGruub6DgsTv93wtzf74/5MB8GA1UdIwQY
MBaAFP9MzbEvwi64V/hsVlqLxRUdBTKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEt
ZGJhN2NjYWM5NGUyLzEvWW03X1ZJYXU2NXZvT0N4T18zZkMzTl92al9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEtZGJhN2NjYWM5NGUy
LzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgc4DAwCT
jjANBgkqhkiG9w0BAQsFAAOCAQEAjOfjOevdFinbDtq8NO7o1gj8WNehBhZAo1qf
kRye90HG8h479qoFJOcPw4nKTn+i/4gag76pdJIuL7UOndMEdaEtazcHpIxKfL+F
XpulbS+Y0In2PoZoCA6Rj9DQxcVvARqOalVEOjAP3w4yuhRrvH3YXSnnnii5XL8X
IubbBubjNzs/xUxVwdVN4saNMVgE9cxdinGW7R1gBSnKkS3wxBhB9vZfU8mBeI7E
ytK/9xXXk9O06kvSzVeOZZPaZV/82B/8c2Rb08LBmEani5pcCGBy2qaEmrLTnovf
rc7pku+l+2ErDaq/bYn5K3qgCvecuPkSGnVK3BpSiWqumnGDRg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:07 2025 by rpki-client