Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/igolRI43LAtpEQUl239ixHmaQww.roa
File: igolRI43LAtpEQUl239ixHmaQww.roa (raw, json)
Hash identifier: P+eUfWMUC102VY53+BsU6MzXlIoYle15PgadxR2IeLI=
Subject key identifier: 8A:0A:25:44:8E:37:2C:0B:69:11:05:25:DB:7F:62:C4:79:9A:43:0C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4DE2D774DD7C643E3ADAD0146C420
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/igolRI43LAtpEQUl239ixHmaQww.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8441
IP address blocks: 80.253.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:de:2d:77:4d:d7:c6:43:e3:ad:ad:01:46:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a0a25448e372c0b69110525db7f62c4799a430c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:5a:44:fe:94:75:f8:97:99:31:35:9f:6e:
be:86:0b:aa:d0:d5:c2:22:f6:b4:84:24:54:44:3c:
39:e8:ec:d5:b4:1b:69:b4:58:6b:6a:f6:f4:c5:0b:
14:3b:fe:cc:1f:77:e6:c2:71:13:ca:2e:0a:33:e3:
9c:af:16:43:a3:fb:e5:52:68:34:d5:68:e3:ab:75:
81:a0:82:ea:53:aa:bc:72:22:9f:16:85:76:31:a4:
98:8a:13:41:e9:d7:5c:ca:90:19:2a:51:ac:b2:07:
96:0c:10:e4:e9:74:2b:d5:93:88:80:a0:61:6f:13:
0f:b4:c1:d6:e1:9d:74:fb:d5:b9:e0:84:98:6f:55:
d5:fd:3c:b3:d7:f9:9e:be:3b:c4:08:e9:b5:a3:4f:
0e:d7:90:42:d8:4f:09:df:d6:59:e9:e6:79:6d:38:
50:55:4d:f4:0a:c2:fe:21:7d:e4:55:7b:cb:59:05:
70:21:5c:60:01:ae:34:cc:43:b0:4d:ac:53:0b:43:
03:e1:6a:44:1d:3a:36:3f:46:89:12:80:be:5f:b7:
24:a8:54:b7:62:6a:2a:9a:ee:7f:50:5b:57:ea:2d:
52:73:fe:31:aa:30:fb:0e:8e:f7:a8:4f:34:39:f3:
db:86:d9:c9:84:22:16:88:04:b0:5d:cf:bb:32:70:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0A:25:44:8E:37:2C:0B:69:11:05:25:DB:7F:62:C4:79:9A:43:0C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/igolRI43LAtpEQUl239ixHmaQww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.4.0/22
Signature Algorithm: sha256WithRSAEncryption
91:67:21:ae:1c:96:92:f5:b5:48:a6:9f:a2:73:89:b8:67:27:
87:4a:c7:bf:1e:d7:0f:31:f2:e6:6f:89:cc:39:f3:7d:aa:64:
6e:0a:02:c8:cb:e6:9d:13:da:d5:fb:ff:c3:da:34:7e:4f:2f:
a7:24:9a:83:67:df:9f:f0:db:df:9c:a2:3d:46:fb:1d:21:0e:
1f:89:ed:1c:b9:bf:00:7e:c5:8a:68:2c:0b:03:af:a9:68:e8:
47:3c:e1:80:ce:2c:9a:19:b4:70:0c:e9:10:a4:fd:98:68:78:
0e:a9:50:76:19:93:fa:50:ed:b9:dd:70:6e:b0:45:62:58:30:
17:e3:80:17:e2:26:31:89:ec:57:5e:e5:42:61:ed:ff:40:2e:
de:3e:2f:47:69:88:16:9c:5f:e8:62:de:7a:32:a5:bc:22:14:
01:09:cd:32:12:3c:71:71:10:b9:96:d4:44:2b:29:6c:35:c9:
b3:80:c0:63:7b:91:82:f2:f7:4e:79:f2:d7:d7:7b:06:9e:0c:
f8:f6:7c:70:27:ba:60:7b:42:81:3c:47:c0:c3:a5:79:88:d5:
f0:a8:f2:cc:dd:34:3a:65:d5:48:7b:ef:2f:56:ea:39:2f:94:
6e:75:36:84:12:c1:a9:44:69:15:5d:31:16:64:b2:98:bd:df:
68:93:0a:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1N4td03XxkPjra0BRsQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjMwMTAxMTkzNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTBhMjU0NDhlMzcyYzBiNjkxMTA1MjVkYjdmNjJjNDc5OWE0MzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZZaRP6UdfiXmTE1n26+hguq0NXC
Iva0hCRURDw56OzVtBtptFhravb0xQsUO/7MH3fmwnETyi4KM+OcrxZDo/vlUmg0
1Wjjq3WBoILqU6q8ciKfFoV2MaSYihNB6ddcypAZKlGssgeWDBDk6XQr1ZOIgKBh
bxMPtMHW4Z10+9W54ISYb1XV/Tyz1/mevjvECOm1o08O15BC2E8J39ZZ6eZ5bThQ
VU30CsL+IX3kVXvLWQVwIVxgAa40zEOwTaxTC0MD4WpEHTo2P0aJEoC+X7ckqFS3
Ymoqmu5/UFtX6i1Sc/4xqjD7Do73qE80OfPbhtnJhCIWiASwXc+7MnCF2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIoKJUSONywLaREFJdt/YsR5mkMMMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvaWdvbFJJNDNMQXRwRVFVbDIzOWl4SG1hUXd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUP0EMA0G
CSqGSIb3DQEBCwUAA4IBAQCRZyGuHJaS9bVIpp+ic4m4ZyeHSse/HtcPMfLmb4nM
OfN9qmRuCgLIy+adE9rV+//D2jR+Ty+nJJqDZ9+f8NvfnKI9RvsdIQ4fie0cub8A
fsWKaCwLA6+paOhHPOGAziyaGbRwDOkQpP2YaHgOqVB2GZP6UO253XBusEViWDAX
44AX4iYxiexXXuVCYe3/QC7ePi9HaYgWnF/oYt56MqW8IhQBCc0yEjxxcRC5ltRE
KylsNcmzgMBje5GC8vdOefLX13sGngz49nxwJ7pge0KBPEfAw6V5iNXwqPLM3TQ6
ZdVIe+8vVuo5L5RudTaEEsGpRGkVXTEWZLKYvd9okwp/
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:44 2025 by rpki-client