Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/k27p8URNPVfZM-oWca1D07WLARE.roa
File: k27p8URNPVfZM-oWca1D07WLARE.roa (raw, json)
Hash identifier: vdmzo4jkyRFRauJeH9bI3o/ttNndNnuBhVhcLOEgQR0=
Subject key identifier: 93:6E:E9:F1:44:4D:3D:57:D9:33:EA:16:71:AD:43:D3:B5:8B:01:11
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183B1C6C536937E8F4A7DA8994900FBBB1F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/k27p8URNPVfZM-oWca1D07WLARE.roa
Signing time: Fri 07 Oct 2022 09:28:57 +0000
ROA not before: Fri 07 Oct 2022 09:28:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.156.0/22 maxlen: 22
64.226.54.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:c6:c5:36:93:7e:8f:4a:7d:a8:99:49:00:fb:bb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 7 09:28:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=936ee9f1444d3d57d933ea1671ad43d3b58b0111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:d6:b4:1c:8e:b6:83:69:b7:34:c3:bb:c0:
c9:80:d2:78:99:a2:d0:c5:68:6b:6a:3e:fc:d1:74:
e7:e3:e7:76:ae:15:d5:2c:04:d9:f5:36:66:44:ba:
f1:b2:68:1b:1c:4b:b6:44:48:9f:37:59:cd:77:0e:
ce:f4:6c:fc:53:1f:9c:cb:a8:3a:52:56:ee:a8:39:
3a:74:de:14:08:ef:7c:cc:02:32:f5:51:0d:be:7c:
7d:db:85:9b:60:fa:ca:66:cf:9d:b5:d0:42:59:a2:
53:2f:ba:0f:8d:46:6e:d6:97:e4:d4:6b:bc:cd:15:
ec:18:f9:6e:3b:94:50:21:44:3f:c1:f1:4a:99:c3:
6e:f8:03:f5:e5:9e:74:92:03:35:7f:bd:97:85:30:
8b:e5:44:92:db:85:0c:ab:b3:a9:cc:e9:8c:3b:56:
d5:45:9c:c9:f7:05:6f:e6:56:ba:65:7f:26:84:fb:
1a:09:e8:f5:68:f5:c9:6e:88:08:c3:ce:03:e5:e3:
34:b3:05:5c:46:cd:7d:d0:21:ee:2b:1c:e9:03:ff:
61:b1:e2:b6:6b:75:5f:5e:21:ec:5f:b1:9b:d3:2c:
85:15:58:00:4e:f1:b2:b2:32:fe:73:31:e2:59:7c:
20:73:83:ec:2b:3e:bf:4a:07:e3:f6:93:24:42:1c:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6E:E9:F1:44:4D:3D:57:D9:33:EA:16:71:AD:43:D3:B5:8B:01:11
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/k27p8URNPVfZM-oWca1D07WLARE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:2d:7e:ba:12:7e:ed:58:ae:69:ef:ae:0e:1f:12:aa:93:21:
af:20:da:7a:ce:3d:de:a2:94:86:41:d3:45:b6:0b:d7:24:ba:
c8:0e:b9:88:72:7b:4c:99:63:71:a9:a7:c1:28:ae:9c:77:1b:
48:ce:54:fb:a1:5b:1c:ff:10:23:ec:e6:64:0d:ea:fd:83:c0:
ab:c8:0e:b5:79:15:a5:71:54:3d:6e:fc:d1:c2:d9:7e:6e:c4:
ef:2b:6e:66:bf:c8:92:6d:c9:c8:c1:9b:2e:bf:2b:11:a6:5b:
a7:b8:b8:61:f4:83:5f:7d:52:cb:00:92:55:34:ba:6b:b7:f1:
07:18:33:a4:f9:7f:51:4e:46:50:6a:1a:94:49:23:40:6d:e5:
b0:94:26:87:b8:48:7c:9e:db:66:b8:a5:a4:5a:f8:37:b5:54:
cc:96:52:0b:d2:c9:55:82:31:be:37:08:a5:f7:55:24:80:c4:
e9:c0:b8:e8:4d:85:e2:45:bd:2b:4b:21:80:3a:81:1e:fb:35:
18:1e:ce:bd:23:f2:a4:41:65:e5:40:10:d8:39:26:0b:68:f5:
de:53:20:28:bc:a4:ab:f5:07:b9:e3:e1:df:5b:04:29:d1:6e:
be:93:83:ff:9a:c5:08:a4:eb:bc:6c:80:bb:f0:ca:4b:8d:57:
e4:92:4c:85
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOxxsU2k36PSn2omUkA+7sfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIxMDA3MDkyODU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzZlZTlmMTQ0NGQzZDU3ZDkzM2VhMTY3MWFkNDNkM2I1OGIwMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8DWtByOtoNptzTDu8DJgNJ4maLQ
xWhraj780XTn4+d2rhXVLATZ9TZmRLrxsmgbHEu2REifN1nNdw7O9Gz8Ux+cy6g6
UlbuqDk6dN4UCO98zAIy9VENvnx924WbYPrKZs+dtdBCWaJTL7oPjUZu1pfk1Gu8
zRXsGPluO5RQIUQ/wfFKmcNu+AP15Z50kgM1f72XhTCL5USS24UMq7OpzOmMO1bV
RZzJ9wVv5la6ZX8mhPsaCej1aPXJbogIw84D5eM0swVcRs190CHuKxzpA/9hseK2
a3VfXiHsX7Gb0yyFFVgATvGysjL+czHiWXwgc4PsKz6/Sgfj9pMkQhyJ0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJNu6fFETT1X2TPqFnGtQ9O1iwERMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvazI3cDhVUk5QVmZaTS1vV2NhMUQwN1dMQVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQOI2AwQC
QOKcMA0GCSqGSIb3DQEBCwUAA4IBAQBdLX66En7tWK5p764OHxKqkyGvINp6zj3e
opSGQdNFtgvXJLrIDrmIcntMmWNxqafBKK6cdxtIzlT7oVsc/xAj7OZkDer9g8Cr
yA61eRWlcVQ9bvzRwtl+bsTvK25mv8iSbcnIwZsuvysRplunuLhh9INffVLLAJJV
NLprt/EHGDOk+X9RTkZQahqUSSNAbeWwlCaHuEh8nttmuKWkWvg3tVTMllIL0slV
gjG+Nwil91UkgMTpwLjoTYXiRb0rSyGAOoEe+zUYHs69I/KkQWXlQBDYOSYLaPXe
UyAovKSr9Qe54+HfWwQp0W6+k4P/msUIpOu8bIC78MpLjVfkkkyF
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:43 2025 by rpki-client