Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/XEW2fviqRBXzlSJ84PAx7s4TvqA.roa
File: XEW2fviqRBXzlSJ84PAx7s4TvqA.roa (raw, json)
Hash identifier: c1XByt+ep1cSdxqRbA7HvkpDXvHuLDMt19ZTcoGIocw=
Subject key identifier: 5C:45:B6:7E:F8:AA:44:15:F3:95:22:7C:E0:F0:31:EE:CE:13:BE:A0
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 01840E0E6CB485BE47F27981ECB512D623B7
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/XEW2fviqRBXzlSJ84PAx7s4TvqA.roa
Signing time: Tue 25 Oct 2022 07:32:17 +0000
ROA not before: Tue 25 Oct 2022 07:32:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48362
IP address blocks: 92.249.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:0e:6c:b4:85:be:47:f2:79:81:ec:b5:12:d6:23:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Oct 25 07:32:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c45b67ef8aa4415f395227ce0f031eece13bea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:28:f0:2c:fa:df:95:a4:00:58:f0:f2:10:
94:94:11:98:17:89:9f:7c:7c:f2:e5:d5:b1:d6:b6:
67:3a:3a:21:3c:49:25:f8:2a:ad:f0:db:4d:33:27:
22:bc:73:37:b2:77:0a:3a:7f:d4:94:e5:a2:c9:f9:
05:24:df:78:31:73:fa:87:30:ad:95:3c:bb:a3:2e:
34:ee:9c:c2:bd:1c:07:34:c4:0d:5a:57:7a:fe:c0:
ec:85:90:b6:71:77:5d:bb:22:b7:74:30:1c:a7:af:
44:4c:6e:6e:9a:d6:f6:a2:c7:24:68:c4:16:1c:bb:
9b:a8:38:99:29:88:4c:48:ac:64:90:4b:c8:09:65:
b3:c8:2b:ba:14:c4:d1:40:0a:64:33:c8:f8:ea:05:
1a:9b:a9:a9:bf:21:58:aa:69:e4:ff:58:6e:7f:70:
02:16:11:a0:7f:7a:22:e9:69:c1:68:94:21:f5:71:
2c:f3:10:ba:7b:15:b3:c2:09:e0:44:ce:0c:21:bb:
e8:08:b0:b7:e9:75:1a:cb:ce:70:c1:99:75:64:aa:
11:54:7f:97:bf:49:b5:20:67:a5:f8:de:0b:cd:0a:
f0:7f:2f:06:ee:8a:5c:e2:45:c8:4e:b3:04:c6:de:
13:76:cb:6c:fb:c1:1e:d4:63:e1:d3:88:3e:18:be:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:B6:7E:F8:AA:44:15:F3:95:22:7C:E0:F0:31:EE:CE:13:BE:A0
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/XEW2fviqRBXzlSJ84PAx7s4TvqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:d3:7f:65:15:b5:4b:d3:c6:c3:87:e4:b8:7f:6f:68:3d:2f:
b4:a6:e1:b3:8b:51:7c:3f:3c:e9:52:94:c2:8e:01:5d:65:51:
4e:ab:f1:a8:0c:72:42:f0:63:52:b8:bd:a6:c8:de:6c:df:ff:
6d:4f:45:e3:a8:10:38:9f:ea:cb:bf:53:31:40:56:da:88:f3:
88:a8:b0:3b:b1:3e:4b:9a:89:4d:e9:55:06:e8:0e:a0:e8:cf:
20:d9:7e:34:86:10:4e:9f:1d:11:32:fc:85:c3:b1:12:72:80:
c1:f2:cb:8d:0e:d9:99:70:93:f5:98:70:28:68:66:d0:18:19:
92:36:f2:c8:62:56:24:3c:fb:22:7d:4b:cd:8d:10:4a:91:f8:
de:0b:0f:11:14:97:4a:26:92:10:b5:71:0d:d2:1a:ed:a1:84:
4c:af:2b:fa:50:ab:1c:22:19:61:bd:2e:70:f6:66:20:0a:56:
14:50:e5:42:0d:af:a4:35:26:89:23:c7:7d:6a:63:ca:59:7a:
26:25:c1:87:aa:de:d1:71:b9:c8:9b:b9:59:6a:5c:c4:dc:a9:
b2:8e:87:b7:28:86:12:78:35:a2:47:bd:72:2f:1a:02:87:74:
52:a3:af:dd:d4:76:c3:ff:a2:53:6a:de:b4:0b:32:2f:e0:2c:
8e:6c:67:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQODmy0hb5H8nmB7LUS1iO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj
ZGI0YTkwHhcNMjIxMDI1MDczMjE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzQ1YjY3ZWY4YWE0NDE1ZjM5NTIyN2NlMGYwMzFlZWNlMTNiZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1co8Cz635WkAFjw8hCUlBGYF4mf
fHzy5dWx1rZnOjohPEkl+Cqt8NtNMycivHM3sncKOn/UlOWiyfkFJN94MXP6hzCt
lTy7oy407pzCvRwHNMQNWld6/sDshZC2cXdduyK3dDAcp69ETG5umtb2osckaMQW
HLubqDiZKYhMSKxkkEvICWWzyCu6FMTRQApkM8j46gUam6mpvyFYqmnk/1huf3AC
FhGgf3oi6WnBaJQh9XEs8xC6exWzwgngRM4MIbvoCLC36XUay85wwZl1ZKoRVH+X
v0m1IGel+N4LzQrwfy8G7opc4kXITrMExt4Tdsts+8Ee1GPh04g+GL5PHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFxFtn74qkQV85UifODwMe7OE76gMB8GA1UdIwQY
MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt
MDRmOWU2MTZhZjYwLzEvWEVXMmZ2aXFSQlh6bFNKODRQQXg3czRUdnFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw
LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXPkUMA0G
CSqGSIb3DQEBCwUAA4IBAQC3039lFbVL08bDh+S4f29oPS+0puGzi1F8PzzpUpTC
jgFdZVFOq/GoDHJC8GNSuL2myN5s3/9tT0XjqBA4n+rLv1MxQFbaiPOIqLA7sT5L
molN6VUG6A6g6M8g2X40hhBOnx0RMvyFw7EScoDB8suNDtmZcJP1mHAoaGbQGBmS
NvLIYlYkPPsifUvNjRBKkfjeCw8RFJdKJpIQtXEN0hrtoYRMryv6UKscIhlhvS5w
9mYgClYUUOVCDa+kNSaJI8d9amPKWXomJcGHqt7RcbnIm7lZalzE3Kmyjoe3KIYS
eDWiR71yLxoCh3RSo6/d1HbD/6JTat60CzIv4CyObGcT
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:44:10 2025 by rpki-client