Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/6PmgkulVlMG95F4dqSqkanSgXM4.roa
File: 6PmgkulVlMG95F4dqSqkanSgXM4.roa (raw, json)
Hash identifier: 5CojYze4+82hnTlTNGxYl+Q4ZGmDEZYX6bOOgY705ck=
Subject key identifier: E8:F9:A0:92:E9:55:94:C1:BD:E4:5E:1D:A9:2A:A4:6A:74:A0:5C:CE
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 055BE0A2
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/6PmgkulVlMG95F4dqSqkanSgXM4.roa
Signing time: Sat 01 Jan 2022 03:02:23 +0000
ROA not before: Sat 01 Jan 2022 03:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32323
IP address blocks: 176.121.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89907362 (0x55be0a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 1 03:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8f9a092e95594c1bde45e1da92aa46a74a05cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:79:01:96:1b:94:cb:7e:9d:70:42:55:0b:
f9:16:3d:ef:0a:5d:79:72:ea:12:a4:5d:b1:3e:a5:
e3:01:0b:c3:08:84:03:2f:ef:22:ea:95:8e:f8:0c:
65:0f:50:90:be:4e:fd:d1:be:51:26:5c:c6:a4:f4:
a5:f5:d8:2d:5e:31:14:c5:f8:41:2a:bc:2f:d2:0e:
e1:82:f5:91:bb:95:2e:a2:6b:f6:f6:8a:78:9e:d5:
18:ba:bc:49:cc:4b:f0:38:fd:51:4e:67:88:bf:d9:
95:0e:92:c0:00:10:5b:c6:69:32:7a:dc:cd:8b:4f:
57:b0:48:d5:88:c8:9f:58:f5:2f:cc:c0:9c:37:70:
e4:58:60:79:21:72:a2:19:76:a4:7c:ac:f9:eb:7f:
52:1e:3d:0d:6b:5b:87:bc:c2:56:f4:76:8e:ff:6c:
83:49:9e:ce:b2:da:27:e6:da:59:94:0f:74:03:d7:
b2:3c:3f:6b:e4:96:cb:6e:9a:8e:f2:3e:0e:43:2c:
18:33:ee:59:c5:f6:bb:77:69:fd:8f:2d:72:55:2e:
f4:02:30:8b:77:a7:0f:58:d5:40:32:30:1a:ad:e8:
7a:c3:2b:82:b2:50:31:5c:16:41:c9:c9:35:9a:c1:
57:72:f0:5e:f2:ef:d9:38:3e:ee:4c:04:26:8a:7c:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F9:A0:92:E9:55:94:C1:BD:E4:5E:1D:A9:2A:A4:6A:74:A0:5C:CE
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/6PmgkulVlMG95F4dqSqkanSgXM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.92.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e4:98:78:43:4d:da:16:57:c4:db:88:ff:24:25:d0:16:05:
b5:a5:24:c3:c1:97:d8:65:3a:78:a8:11:8b:9f:06:c0:39:aa:
ec:3a:bb:43:51:98:b2:5f:ac:68:3e:69:2e:3e:80:53:39:de:
f9:5d:39:e0:f7:6a:6e:23:a4:2b:a3:72:94:d4:bb:70:fb:66:
bf:fc:ed:72:14:f5:24:5c:d1:e4:bf:a0:4d:d7:9d:6c:ca:8d:
26:cb:d9:1d:90:3b:b9:b6:cc:1a:2e:5d:2c:c8:07:2b:b6:11:
2e:70:ca:0f:17:fe:8a:3a:9f:33:01:fa:ee:64:e4:46:70:a7:
0d:68:6b:55:f2:81:78:b1:e3:80:0e:d8:ba:31:9c:80:4c:74:
42:cb:63:da:2d:8d:0c:65:0e:c8:f4:10:3f:e0:8f:0d:76:65:
e2:bb:a3:1f:72:05:f9:a1:02:f9:e1:38:57:81:96:41:fe:42:
14:89:8c:24:89:92:74:3f:ba:94:2f:0a:21:39:b9:27:1d:68:
55:b7:7f:f2:20:7f:bb:b3:85:8c:8f:8a:d4:08:fc:11:e5:ea:
0a:00:ce:b4:5e:40:af:68:2f:7d:b0:3e:20:bc:e4:8b:c6:bf:
9e:a2:55:de:fd:42:9d:eb:94:b4:fc:e7:e5:39:36:34:f2:bd:
e7:07:80:e8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBVvgojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Mzg5ZTcwMzViMDhlMTgxYTM0MWYzN2VkYTczNDNkMjNmMWNhZmE0MB4XDTIyMDEw
MTAzMDIyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZThmOWEwOTJlOTU1
OTRjMWJkZTQ1ZTFkYTkyYWE0NmE3NGEwNWNjZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAjeQGWG5TLfp1wQlUL+RY97wpdeXLqEqRdsT6l4wELwwiE
Ay/vIuqVjvgMZQ9QkL5O/dG+USZcxqT0pfXYLV4xFMX4QSq8L9IO4YL1kbuVLqJr
9vaKeJ7VGLq8ScxL8Dj9UU5niL/ZlQ6SwAAQW8ZpMnrczYtPV7BI1YjIn1j1L8zA
nDdw5FhgeSFyohl2pHys+et/Uh49DWtbh7zCVvR2jv9sg0mezrLaJ+baWZQPdAPX
sjw/a+SWy26ajvI+DkMsGDPuWcX2u3dp/Y8tclUu9AIwi3enD1jVQDIwGq3oesMr
grJQMVwWQcnJNZrBV3LwXvLv2Tg+7kwEJop81mkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTo+aCS6VWUwb3kXh2pKqRqdKBczjAfBgNVHSMEGDAWgBSjiecDWwjhgaNB
837ac0PSPxyvpDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L280bm5BMXNJNFlHalFmTi0ybk5EMGo4Y3I2US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmQvZjA1M2NkLTFkNzktNDNhMS05YWFiLTBlNzI0MTZiNGRjNy8x
LzZQbWdrdWxWbE1HOTVGNGRxU3FrYW5TZ1hNNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
ZjA1M2NkLTFkNzktNDNhMS05YWFiLTBlNzI0MTZiNGRjNy8xL280bm5BMXNJNFlH
alFmTi0ybk5EMGo4Y3I2US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB5XDANBgkqhkiG9w0BAQsFAAOC
AQEAEOSYeENN2hZXxNuI/yQl0BYFtaUkw8GX2GU6eKgRi58GwDmq7Dq7Q1GYsl+s
aD5pLj6AUzne+V054PdqbiOkK6NylNS7cPtmv/ztchT1JFzR5L+gTdedbMqNJsvZ
HZA7ubbMGi5dLMgHK7YRLnDKDxf+ijqfMwH67mTkRnCnDWhrVfKBeLHjgA7YujGc
gEx0Qstj2i2NDGUOyPQQP+CPDXZl4rujH3IF+aEC+eE4V4GWQf5CFImMJImSdD+6
lC8KITm5Jx1oVbd/8iB/u7OFjI+K1Aj8EeXqCgDOtF5Ar2gvfbA+ILzki8a/nqJV
3v1CneuUtPzn5Tk2NPK95weA6A==
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:27:49 2025 by rpki-client