Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/vj78m1Y5LOQFEeXTVZpXpufJfew.roa
File: vj78m1Y5LOQFEeXTVZpXpufJfew.roa (raw, json)
Hash identifier: itWIkO14B6p2VAhLQsriJmD7mloQHfGqkiTXhIh7xng=
Subject key identifier: BE:3E:FC:9B:56:39:2C:E4:05:11:E5:D3:55:9A:57:A6:E7:C9:7D:EC
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01856F5DCAC8AF35A9FB91E4C4611FF44A87
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/vj78m1Y5LOQFEeXTVZpXpufJfew.roa
Signing time: Sun 01 Jan 2023 22:04:55 +0000
ROA not before: Sun 01 Jan 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 185.157.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ca:c8:af:35:a9:fb:91:e4:c4:61:1f:f4:4a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jan 1 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be3efc9b56392ce40511e5d3559a57a6e7c97dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:f1:30:5f:83:c0:04:e8:09:a7:91:cb:c3:
c1:1b:1a:40:32:2a:97:ca:30:4a:26:94:54:46:d9:
3c:3e:88:80:96:ea:0c:9f:bb:67:34:86:39:75:b2:
ac:c2:50:42:60:96:44:f1:36:2a:88:28:5f:ae:3c:
da:d2:7f:6b:c0:67:cf:6c:7d:52:69:a3:26:02:41:
62:e7:c3:13:77:4d:5a:37:4c:f3:6b:2c:56:a9:b7:
99:1d:c4:20:fc:89:fa:c5:19:cc:b2:3c:dd:5f:f0:
d5:7d:f0:46:b1:20:67:ef:12:4e:4d:c6:01:03:6c:
50:42:3b:a5:5e:aa:9f:a1:81:66:78:90:f9:11:f4:
d3:3d:26:94:99:3d:17:2f:f3:1b:43:44:ab:39:9b:
cb:0f:a6:47:ed:66:18:66:fc:a5:35:7d:74:6f:01:
0d:23:19:4e:af:da:01:da:e0:f4:44:1b:d7:a7:97:
63:27:a9:6e:7d:bf:83:e8:0d:45:2b:79:2c:06:1e:
4c:b4:79:9f:c6:c9:40:6f:48:d3:97:d3:ad:61:1a:
3e:60:01:16:79:12:52:f4:7e:fb:34:13:c3:4c:b3:
6e:ca:c2:fc:d6:2d:8a:7f:03:d8:fe:a6:15:25:4c:
80:d1:ca:ab:11:a5:46:18:dc:ce:d6:56:48:43:01:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3E:FC:9B:56:39:2C:E4:05:11:E5:D3:55:9A:57:A6:E7:C9:7D:EC
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/vj78m1Y5LOQFEeXTVZpXpufJfew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.51.0/24
Signature Algorithm: sha256WithRSAEncryption
46:86:68:38:63:71:6e:75:9d:9c:ce:38:12:af:67:dd:dc:b6:
99:00:46:e1:ed:42:31:d9:88:de:ce:69:3c:7a:10:f2:9b:5e:
a0:69:77:c4:d6:3d:6d:7b:1b:3c:c9:0c:1b:bb:4c:84:49:29:
8a:c2:88:fd:45:63:59:34:b1:1b:04:f3:f6:06:1f:bd:0b:b7:
b7:cd:9f:87:52:d9:33:df:ed:df:4b:ea:85:8f:48:e4:74:f3:
29:ad:c5:40:cb:27:47:ea:45:ad:d0:0d:95:2f:a5:3d:f1:97:
9a:c9:09:2b:30:a7:da:35:cb:0a:d1:aa:07:af:b9:79:42:57:
0f:09:07:cb:7c:b3:88:c9:ce:cc:87:4a:17:72:82:47:f8:fe:
e7:8e:ea:d0:e8:a9:c4:9a:c5:7e:75:68:f7:35:a4:41:75:74:
3c:1c:5c:cc:08:22:98:85:81:01:16:97:1b:20:dc:fc:35:32:
74:9f:59:e4:7c:29:04:ea:7f:02:fb:c4:5c:fe:05:3a:bf:bd:
94:a4:44:df:c4:2d:9b:96:92:3c:58:9f:0d:a6:cc:34:a5:4f:
e4:d2:e5:ca:66:18:56:6e:56:a4:b3:82:f4:d0:e7:fd:5a:9f:
15:e8:e5:08:7b:12:25:44:ec:a7:3b:4d:15:ae:37:3f:ba:d8:
83:04:14:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXcrIrzWp+5HkxGEf9EqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2
NjNjNjIwHhcNMjMwMTAxMjIwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTNlZmM5YjU2MzkyY2U0MDUxMWU1ZDM1NTlhNTdhNmU3Yzk3ZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EbxMF+DwAToCaeRy8PBGxpAMiqX
yjBKJpRURtk8PoiAluoMn7tnNIY5dbKswlBCYJZE8TYqiChfrjza0n9rwGfPbH1S
aaMmAkFi58MTd01aN0zzayxWqbeZHcQg/In6xRnMsjzdX/DVffBGsSBn7xJOTcYB
A2xQQjulXqqfoYFmeJD5EfTTPSaUmT0XL/MbQ0SrOZvLD6ZH7WYYZvylNX10bwEN
IxlOr9oB2uD0RBvXp5djJ6lufb+D6A1FK3ksBh5MtHmfxslAb0jTl9OtYRo+YAEW
eRJS9H77NBPDTLNuysL81i2KfwPY/qYVJUyA0cqrEaVGGNzO1lZIQwFsOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL4+/JtWOSzkBRHl01WaV6bnyX3sMB8GA1UdIwQY
MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut
ZjFmMGI5NTk4ZjMyLzEvdmo3OG0xWTVMT1FGRWVYVFZacFhwdWZKZmV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy
LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ0zMA0G
CSqGSIb3DQEBCwUAA4IBAQBGhmg4Y3FudZ2czjgSr2fd3LaZAEbh7UIx2Yjezmk8
ehDym16gaXfE1j1texs8yQwbu0yESSmKwoj9RWNZNLEbBPP2Bh+9C7e3zZ+HUtkz
3+3fS+qFj0jkdPMprcVAyydH6kWt0A2VL6U98ZeayQkrMKfaNcsK0aoHr7l5QlcP
CQfLfLOIyc7Mh0oXcoJH+P7njurQ6KnEmsV+dWj3NaRBdXQ8HFzMCCKYhYEBFpcb
INz8NTJ0n1nkfCkE6n8C+8Rc/gU6v72UpETfxC2blpI8WJ8Npsw0pU/k0uXKZhhW
blaks4L00Of9Wp8V6OUIexIlROynO00Vrjc/utiDBBTM
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:02 2025 by rpki-client