Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/Mell6YSQLtnJJmDHujRNi9Vb1sI.roa
File: Mell6YSQLtnJJmDHujRNi9Vb1sI.roa (raw, json)
Hash identifier: 8Kw3Z5ON6aAvlYOiGC3qH4uetSbIG2ISoHLzqgWE3EE=
Subject key identifier: 31:E9:65:E9:84:90:2E:D9:C9:26:60:C7:BA:34:4D:8B:D5:5B:D6:C2
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 018AE096968DE975F94A44CC177D31F3A9AB
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/Mell6YSQLtnJJmDHujRNi9Vb1sI.roa
Signing time: Fri 29 Sep 2023 10:57:59 +0000
ROA not before: Fri 29 Sep 2023 10:57:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21227
IP address blocks: 193.22.108.0/24 maxlen: 24
2a0f:7b40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:96:96:8d:e9:75:f9:4a:44:cc:17:7d:31:f3:a9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Sep 29 10:57:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31e965e984902ed9c92660c7ba344d8bd55bd6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:61:5f:39:4a:da:28:3e:38:e0:6c:50:ff:
90:4e:06:f7:63:c9:66:ac:7e:cf:fd:2a:df:8a:1f:
13:7b:25:80:17:27:bc:d6:85:f2:86:c0:c9:b9:17:
82:45:3b:36:ee:3e:cc:f3:86:3c:83:f7:cf:11:1f:
26:02:d2:d4:89:37:7b:c2:27:01:f5:21:c6:0d:aa:
a9:16:9f:a1:39:fb:47:f4:9c:32:eb:fc:22:fc:51:
6c:76:cc:d5:18:c1:8f:94:6a:b0:e0:8f:1d:44:99:
32:c5:7b:ff:36:87:be:29:99:45:92:68:0f:ab:2e:
6b:79:f6:08:bd:28:c0:2e:0c:d0:a1:c6:61:b3:a2:
2b:de:5c:80:98:a0:9d:63:f2:af:98:33:2e:06:a1:
48:93:ff:c5:b5:a6:24:0f:fc:70:cf:45:0a:04:78:
08:de:ee:d5:ac:c4:65:d0:72:2a:2d:7c:19:80:81:
48:53:3a:b0:d5:2d:ad:c9:4d:32:3e:02:fb:9a:d0:
70:81:7e:48:07:6e:8d:c8:ff:81:08:39:c2:98:b4:
56:f6:1b:db:46:cc:52:7d:48:84:ea:58:c9:4a:58:
7f:ed:a4:44:69:aa:da:e1:85:78:09:16:84:8b:a0:
54:75:2e:b6:55:57:ba:c8:6d:8e:c4:32:a3:39:41:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E9:65:E9:84:90:2E:D9:C9:26:60:C7:BA:34:4D:8B:D5:5B:D6:C2
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/Mell6YSQLtnJJmDHujRNi9Vb1sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.108.0/24
IPv6:
2a0f:7b40::/29
Signature Algorithm: sha256WithRSAEncryption
0e:86:1d:90:b5:75:72:9e:96:a6:a1:d4:0c:b1:ed:8a:78:13:
00:38:25:db:01:05:9f:e9:21:c4:b5:ee:32:3f:f8:af:07:f8:
dc:b7:27:7b:d8:f6:ae:2b:00:f2:5a:8c:d8:9b:ad:69:36:ed:
47:dd:14:86:03:90:d0:22:6e:69:6e:73:2d:43:01:87:d8:01:
8a:77:41:f3:40:55:72:85:8a:f2:49:49:dd:09:f0:b8:81:fe:
a2:5f:cd:c4:5c:be:c3:d1:7d:e0:31:f7:b1:ad:e6:9c:a2:c9:
46:a7:9d:ca:55:5d:71:4c:94:76:6d:b0:e6:ed:11:f4:e3:e4:
b5:fa:72:ff:24:e3:35:31:e3:45:fe:ab:3f:9e:c8:2d:82:5e:
e1:54:63:0a:13:1b:4c:c9:12:0d:6b:fe:b5:ee:24:97:0e:90:
b6:3d:04:2f:a3:c8:91:41:1d:7b:0e:c7:06:6a:b2:89:0e:be:
cc:4e:b8:df:f4:e9:98:58:cb:f0:40:03:76:42:33:f7:28:23:
9b:2c:3c:28:6f:c9:5b:08:69:fb:4f:b5:6c:df:db:51:ea:65:
20:f8:7c:e7:8b:b9:a3:78:b6:c1:6c:4f:c0:b5:32:cb:bf:96:
48:85:c6:e4:fc:c7:42:c6:f8:64:1b:23:72:2e:01:8f:b9:48:
1d:61:8e:02
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYrglpaN6XX5SkTMF30x86mrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjU0ZDRhNzY3YWQwOTk2MDZlNDQyZTA5MmY5MTI0MWEz
NjM2NzAwHhcNMjMwOTI5MTA1NzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWU5NjVlOTg0OTAyZWQ5YzkyNjYwYzdiYTM0NGQ4YmQ1NWJkNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+FhXzlK2ig+OOBsUP+QTgb3Y8lm
rH7P/Srfih8TeyWAFye81oXyhsDJuReCRTs27j7M84Y8g/fPER8mAtLUiTd7wicB
9SHGDaqpFp+hOftH9Jwy6/wi/FFsdszVGMGPlGqw4I8dRJkyxXv/Noe+KZlFkmgP
qy5refYIvSjALgzQocZhs6Ir3lyAmKCdY/KvmDMuBqFIk//FtaYkD/xwz0UKBHgI
3u7VrMRl0HIqLXwZgIFIUzqw1S2tyU0yPgL7mtBwgX5IB26NyP+BCDnCmLRW9hvb
RsxSfUiE6ljJSlh/7aREaara4YV4CRaEi6BUdS62VVe6yG2OxDKjOUHUBQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDHpZemEkC7ZySZgx7o0TYvVW9bCMB8GA1UdIwQY
MBaAFEAlTUp2etCZYG5ELgkvkSQaNjZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2Ut
YmJlOTEyZWVjNzNlLzEvTWVsbDZZU1FMdG5KSm1ESHVqUk5pOVZiMXNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2UtYmJlOTEyZWVjNzNl
LzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRZsMA0E
AgACMAcDBQMqD3tAMA0GCSqGSIb3DQEBCwUAA4IBAQAOhh2QtXVynpamodQMse2K
eBMAOCXbAQWf6SHEte4yP/ivB/jctyd72PauKwDyWozYm61pNu1H3RSGA5DQIm5p
bnMtQwGH2AGKd0HzQFVyhYrySUndCfC4gf6iX83EXL7D0X3gMfexreacoslGp53K
VV1xTJR2bbDm7RH04+S1+nL/JOM1MeNF/qs/nsgtgl7hVGMKExtMyRINa/617iSX
DpC2PQQvo8iRQR17DscGarKJDr7MTrjf9OmYWMvwQAN2QjP3KCObLDwob8lbCGn7
T7Vs39tR6mUg+Hzni7mjeLbBbE/AtTLLv5ZIhcbk/MdCxvhkGyNyLgGPuUgdYY4C
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:45 2025 by rpki-client