Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/CuJNUV7daepXMGtW6954N7XUObM.roa
File: CuJNUV7daepXMGtW6954N7XUObM.roa (raw, json)
Hash identifier: wA7YqpV0fVuqMvFDfYBl9rgODP3sjTbmFH26j1Xq6Gs=
Subject key identifier: 0A:E2:4D:51:5E:DD:69:EA:57:30:6B:56:EB:DE:78:37:B5:D4:39:B3
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 07116F81
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/CuJNUV7daepXMGtW6954N7XUObM.roa
Signing time: Sat 01 Jan 2022 09:04:18 +0000
ROA not before: Sat 01 Jan 2022 09:04:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209571
IP address blocks: 141.98.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118583169 (0x7116f81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Jan 1 09:04:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ae24d515edd69ea57306b56ebde7837b5d439b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:9a:10:79:f4:e7:f4:c2:68:fc:96:ae:4f:
e3:4d:b0:fa:c3:1e:4c:1f:e7:9c:c7:54:1a:b2:b6:
d6:1c:b1:24:16:3d:5e:1e:c8:c0:14:6a:e9:32:a6:
5a:0b:31:16:59:99:8b:dc:e7:3e:30:57:ce:4d:d5:
58:2e:61:51:c9:7a:d7:eb:69:d9:14:fc:06:88:a9:
e9:58:9c:6c:4e:e2:38:84:85:22:7d:17:d3:8b:07:
13:1c:e6:d5:95:a4:44:c7:6f:81:fb:4f:ab:7a:8c:
a9:ec:91:20:40:24:9c:58:0e:f1:ed:6b:70:27:3f:
f2:12:45:df:50:5a:02:b2:69:56:50:60:fb:4d:f8:
60:b1:51:1c:52:a5:80:e9:94:b3:78:5b:bd:2c:f6:
39:fb:d3:5c:23:cb:ed:58:23:1f:6f:ec:3d:32:d8:
53:75:c5:eb:da:ac:2d:3f:d5:b1:55:68:cd:3a:a2:
49:f6:27:80:78:ba:2f:7d:8b:dd:7a:61:9b:d2:8d:
b3:cf:a6:9c:8b:43:64:4b:d1:39:5d:43:1e:a0:e7:
8f:cb:19:92:4f:2a:b8:f6:2c:1e:49:27:63:cb:87:
4b:0a:96:2d:f9:0e:e8:41:1b:43:66:78:06:5a:77:
9e:69:03:bc:bf:b7:27:cf:4d:2e:a5:37:80:41:7e:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E2:4D:51:5E:DD:69:EA:57:30:6B:56:EB:DE:78:37:B5:D4:39:B3
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/CuJNUV7daepXMGtW6954N7XUObM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.224.0/22
Signature Algorithm: sha256WithRSAEncryption
42:f9:be:dc:a0:d4:f4:4f:df:10:30:76:4c:82:cb:ed:c4:eb:
ff:f0:ce:23:b7:02:10:28:34:e4:3e:1d:a7:49:56:9e:3a:01:
73:81:c8:dc:22:01:ad:90:5f:e9:fb:f7:47:de:e4:62:28:c1:
2b:23:f7:05:c2:66:4b:59:5f:e7:51:c7:90:4a:c6:0e:63:f8:
53:cf:41:29:82:d0:5b:2c:a1:aa:49:b8:85:d9:90:1c:35:d3:
a0:26:85:3d:8f:66:15:73:e4:d1:2c:0f:d0:3d:b0:51:2a:3e:
df:55:da:7f:f0:06:e0:ab:ba:a9:c2:a2:6f:18:bc:43:f1:1b:
26:c5:4a:2e:f0:09:85:35:06:8b:f7:12:ef:36:a8:ee:b1:51:
93:93:b1:91:45:f7:c0:90:a9:d0:87:c1:94:5a:8b:a2:d2:dd:
7e:4d:0a:7e:72:53:00:89:6c:de:81:09:99:68:55:cd:b5:f6:
97:29:20:23:98:60:a6:6f:16:56:8b:3c:92:1f:9e:40:b3:1d:
1d:cc:a6:c1:07:2f:a0:d8:77:b4:df:cc:0a:64:9d:65:15:93:
0f:67:9d:a7:73:3a:4a:86:4a:23:58:c9:70:dd:8b:91:a6:dd:
98:57:50:1c:60:83:c8:5e:c9:65:df:a3:56:7f:24:da:9d:b5:
1c:15:bc:ba
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBxFvgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YzgyNjlmNDJlNDY0NDFhYjFlZDk5NGM4OWY3NDdiYWE1NTRlMzIwMB4XDTIyMDEw
MTA5MDQxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGFlMjRkNTE1ZWRk
NjllYTU3MzA2YjU2ZWJkZTc4MzdiNWQ0MzliMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANQemhB59Of0wmj8lq5P402w+sMeTB/nnMdUGrK21hyxJBY9
Xh7IwBRq6TKmWgsxFlmZi9znPjBXzk3VWC5hUcl61+tp2RT8Boip6VicbE7iOISF
In0X04sHExzm1ZWkRMdvgftPq3qMqeyRIEAknFgO8e1rcCc/8hJF31BaArJpVlBg
+034YLFRHFKlgOmUs3hbvSz2OfvTXCPL7VgjH2/sPTLYU3XF69qsLT/VsVVozTqi
SfYngHi6L32L3Xphm9KNs8+mnItDZEvROV1DHqDnj8sZkk8quPYsHkknY8uHSwqW
LfkO6EEbQ2Z4Blp3nmkDvL+3J89NLqU3gEF+qwMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQK4k1RXt1p6lcwa1br3ng3tdQ5szAfBgNVHSMEGDAWgBT8gmn0LkZEGrHt
mUyJ90e6pVTjIDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19JSnA5QzVHUkJxeDdabE1pZmRIdXFWVTR5QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDVjNGZkLTQyOTQtNDUxNi1hNzRkLWQ2Y2Q1NzI4N2Y5Yy8x
L0N1Sk5VVjdkYWVwWE1HdFc2OTU0TjdYVU9iTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDVjNGZkLTQyOTQtNDUxNi1hNzRkLWQ2Y2Q1NzI4N2Y5Yy8xL19JSnA5QzVHUkJx
eDdabE1pZmRIdXFWVTR5QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo1i4DANBgkqhkiG9w0BAQsFAAOC
AQEAQvm+3KDU9E/fEDB2TILL7cTr//DOI7cCECg05D4dp0lWnjoBc4HI3CIBrZBf
6fv3R97kYijBKyP3BcJmS1lf51HHkErGDmP4U89BKYLQWyyhqkm4hdmQHDXToCaF
PY9mFXPk0SwP0D2wUSo+31Xaf/AG4Ku6qcKibxi8Q/EbJsVKLvAJhTUGi/cS7zao
7rFRk5OxkUX3wJCp0IfBlFqLotLdfk0KfnJTAIls3oEJmWhVzbX2lykgI5hgpm8W
Vos8kh+eQLMdHcymwQcvoNh3tN/MCmSdZRWTD2edp3M6SoZKI1jJcN2LkabdmFdQ
HGCDyF7JZd+jVn8k2p21HBW8ug==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:22 2025 by rpki-client