Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/Z7oCf-K-G2q5kbMp5AmVm8vWI_k.roa
File: Z7oCf-K-G2q5kbMp5AmVm8vWI_k.roa (raw, json)
Hash identifier: LeFDADKJrD21Y1i6HkVnkqz2GDloDrLSh56W++rID8I=
Subject key identifier: 67:BA:02:7F:E2:BE:1B:6A:B9:91:B3:29:E4:09:95:9B:CB:D6:23:F9
Certificate issuer: /CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Certificate serial: 01857082ABC02E8C4DEA7E7CFA61A9F0874E
Authority key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/Z7oCf-K-G2q5kbMp5AmVm8vWI_k.roa
Signing time: Mon 02 Jan 2023 03:24:49 +0000
ROA not before: Mon 02 Jan 2023 03:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47469
IP address blocks: 194.50.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:ab:c0:2e:8c:4d:ea:7e:7c:fa:61:a9:f0:87:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Validity
Not Before: Jan 2 03:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67ba027fe2be1b6ab991b329e409959bcbd623f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:08:1d:45:84:04:83:33:8b:61:ff:42:d8:
d2:fc:59:76:97:dc:b9:9b:e6:3b:74:4a:45:93:92:
50:dd:2c:93:85:d4:45:25:b5:8e:66:3c:e4:7f:de:
46:b7:73:07:9f:51:78:67:d5:9b:04:16:4e:cb:28:
12:f6:84:7b:92:f9:0c:40:e5:36:7c:b8:9d:43:3e:
af:f6:1a:a9:93:36:4c:92:cf:8e:cf:90:70:8e:ed:
3e:97:c2:02:43:55:f6:54:18:27:c4:d1:35:ed:59:
64:3f:e9:4e:f8:7e:22:21:79:7b:05:15:b0:21:6e:
3b:60:6f:82:ca:6f:64:2a:22:9e:4a:43:a2:34:11:
a3:fd:92:2c:54:0c:9f:d4:fb:8d:bc:49:06:c6:b9:
fa:bc:33:c9:69:26:ff:5b:42:f1:1e:ef:7b:63:7e:
f2:cd:d2:d6:ef:cb:24:d9:00:99:c2:2e:93:67:9a:
cc:38:c7:be:51:28:8b:31:a7:cf:95:0c:a9:50:81:
ad:92:4f:8b:0d:f6:fa:aa:b9:cb:e6:49:15:c2:4d:
00:c3:3e:b2:b5:66:ac:7d:b2:5b:52:a5:f8:04:67:
a1:2b:63:a4:d8:a1:58:43:7b:ee:12:1a:75:f4:32:
e8:0d:c7:83:da:04:64:37:d5:78:e1:61:ac:eb:7f:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BA:02:7F:E2:BE:1B:6A:B9:91:B3:29:E4:09:95:9B:CB:D6:23:F9
X509v3 Authority Key Identifier:
keyid:94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/Z7oCf-K-G2q5kbMp5AmVm8vWI_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.45.0/24
Signature Algorithm: sha256WithRSAEncryption
95:03:4b:ea:31:90:08:6d:1a:93:a5:0f:b0:58:3b:2b:40:b8:
cd:45:56:01:e8:d7:fc:5d:a7:19:2e:df:a6:fc:a9:c6:1f:e7:
26:63:3e:9f:47:a5:f3:4a:23:d1:a8:ba:60:7d:1b:ba:26:e8:
fa:87:fb:c4:4f:dd:9e:20:12:78:c8:8d:f5:a0:57:31:4b:d2:
36:9e:6c:6e:22:b1:b1:79:48:81:70:68:06:47:0c:7a:f9:44:
eb:6c:41:c5:f0:86:d2:de:bd:94:63:d1:48:f9:be:46:53:9e:
24:ac:d1:37:f3:2d:4b:19:10:74:9b:5d:46:35:ec:ab:dd:a4:
a3:b4:f4:45:27:8b:c7:8b:b1:0a:c9:3a:eb:9c:52:b9:3c:e4:
37:d5:1c:88:9a:a9:29:2b:b3:af:a7:82:ba:19:9e:81:af:32:
86:48:98:93:91:57:51:92:f4:6f:ed:73:93:17:4e:47:5d:08:
15:2a:a3:ef:63:30:28:17:0c:6c:7f:64:a8:67:bc:f9:3c:05:
ab:97:66:1a:b7:6a:39:11:98:a2:42:09:e7:52:57:fa:10:45:
8a:7f:d4:c3:33:96:e2:73:74:b1:0c:90:ca:48:3c:c0:9e:5d:
38:92:cd:05:08:2d:7b:f8:2b:7b:6c:72:c5:89:72:4b:c9:85:
9b:ec:87:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwgqvALoxN6n58+mGp8IdOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTQyZTliMzVkOTE5MDZkMTEyNDVkNzNiZDU4Y2RkOGVj
YTQ5ZDEwHhcNMjMwMTAyMDMyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2JhMDI3ZmUyYmUxYjZhYjk5MWIzMjllNDA5OTU5YmNiZDYyM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEAIHUWEBIMzi2H/QtjS/Fl2l9y5
m+Y7dEpFk5JQ3SyThdRFJbWOZjzkf95Gt3MHn1F4Z9WbBBZOyygS9oR7kvkMQOU2
fLidQz6v9hqpkzZMks+Oz5Bwju0+l8ICQ1X2VBgnxNE17VlkP+lO+H4iIXl7BRWw
IW47YG+Cym9kKiKeSkOiNBGj/ZIsVAyf1PuNvEkGxrn6vDPJaSb/W0LxHu97Y37y
zdLW78sk2QCZwi6TZ5rMOMe+USiLMafPlQypUIGtkk+LDfb6qrnL5kkVwk0Awz6y
tWasfbJbUqX4BGehK2Ok2KFYQ3vuEhp19DLoDceD2gRkN9V44WGs639w5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGe6An/ivhtquZGzKeQJlZvL1iP5MB8GA1UdIwQY
MBaAFJSULps12RkG0RJF1zvVjN2OyknRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpRdW16WFpHUWJSRWtYWE85V00zWTdLU2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jNjA5ODAtYTFkZS00MzkwLWEwYTMt
MzJjMjBjYWYwOGVkLzEvWjdvQ2YtSy1HMnE1a2JNcDVBbVZtOHZXSV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jNjA5ODAtYTFkZS00MzkwLWEwYTMtMzJjMjBjYWYwOGVk
LzEvbEpRdW16WFpHUWJSRWtYWE85V00zWTdLU2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjItMA0G
CSqGSIb3DQEBCwUAA4IBAQCVA0vqMZAIbRqTpQ+wWDsrQLjNRVYB6Nf8XacZLt+m
/KnGH+cmYz6fR6XzSiPRqLpgfRu6Juj6h/vET92eIBJ4yI31oFcxS9I2nmxuIrGx
eUiBcGgGRwx6+UTrbEHF8IbS3r2UY9FI+b5GU54krNE38y1LGRB0m11GNeyr3aSj
tPRFJ4vHi7EKyTrrnFK5POQ31RyImqkpK7Ovp4K6GZ6BrzKGSJiTkVdRkvRv7XOT
F05HXQgVKqPvYzAoFwxsf2SoZ7z5PAWrl2Yat2o5EZiiQgnnUlf6EEWKf9TDM5bi
c3SxDJDKSDzAnl04ks0FCC17+Ct7bHLFiXJLyYWb7Ic9
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:50 2025 by rpki-client