Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0L2tvfYthAdIeLI1NwAYsNsNemg.roa
File: 0L2tvfYthAdIeLI1NwAYsNsNemg.roa (raw, json)
Hash identifier: Uu+kyLfK/gzX9Q2MFbHpUWTvlbXt0vOHARvDW0uK5dI=
Subject key identifier: D0:BD:AD:BD:F6:2D:84:07:48:78:B2:35:37:00:18:B0:DB:0D:7A:68
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4256F6E9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0L2tvfYthAdIeLI1NwAYsNsNemg.roa
Signing time: Sat 01 Jan 2022 14:02:59 +0000
ROA not before: Sat 01 Jan 2022 14:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8995
IP address blocks: 192.165.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112995561 (0x4256f6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0bdadbdf62d84074878b235370018b0db0d7a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:61:05:06:42:f4:bf:9e:c7:73:ac:0b:9c:
3a:54:2e:ba:dc:0d:24:ee:78:3b:a6:51:69:54:f2:
23:2a:45:22:12:69:f6:72:cb:1f:23:80:19:fa:df:
f5:b7:62:52:b4:3b:23:3d:03:98:e1:e5:2e:fc:19:
10:27:08:59:42:4b:45:97:86:f1:b0:33:67:b9:06:
2b:ed:e6:3a:eb:1c:51:2d:8c:c3:4c:35:6a:ce:9a:
29:09:9f:32:4f:7d:73:af:41:e6:35:76:05:31:07:
4e:cd:b5:21:10:0e:de:8d:d0:7d:91:53:64:c0:35:
01:9e:90:0b:29:08:3a:da:d5:b1:97:1d:46:3d:7d:
d5:56:c9:1a:12:e1:72:ef:5f:75:94:71:63:a9:00:
91:c2:6c:88:2c:89:a5:a8:e6:4e:b3:d9:cc:cf:b9:
4d:11:3f:8d:ad:8c:7d:40:aa:f5:03:db:fc:30:c6:
11:8a:5f:37:5d:d4:86:ec:53:8a:5c:96:2a:d4:6d:
60:d8:4d:c0:1e:5b:20:af:76:a6:b3:aa:6b:2a:24:
73:5f:1b:6d:8e:9f:4e:ef:db:e0:6c:19:26:c0:dd:
71:56:b4:77:3c:c6:03:00:96:8d:4a:41:7a:a1:57:
fc:c6:a0:07:9b:18:96:4a:64:89:71:d0:32:81:40:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BD:AD:BD:F6:2D:84:07:48:78:B2:35:37:00:18:B0:DB:0D:7A:68
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0L2tvfYthAdIeLI1NwAYsNsNemg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.82.0/24
Signature Algorithm: sha256WithRSAEncryption
19:58:c9:df:5f:85:99:ad:a8:b8:90:70:67:36:00:80:3b:48:
f8:3e:e6:36:67:a8:1b:a9:13:60:8f:6f:fd:b7:60:15:9b:75:
15:cd:2b:c6:d9:60:3e:a4:81:83:42:aa:6d:b6:a6:f5:5b:74:
aa:f7:72:d4:41:e1:fe:80:af:eb:7e:59:1e:80:c0:86:98:a2:
fb:bb:8a:ad:12:81:af:35:eb:2c:56:b0:11:a3:26:5c:1d:46:
08:88:63:9a:9a:cc:0d:07:29:bb:5a:c4:ea:65:33:70:6b:8c:
b2:82:16:0e:d2:4a:94:3e:54:cb:05:af:5f:aa:99:8f:26:4f:
50:29:42:8f:18:ad:9f:d9:bd:2a:e1:24:28:15:9b:9a:7f:d5:
8a:55:61:b7:0d:ee:03:3d:d5:eb:6c:73:bf:32:c7:7c:67:6a:
31:5a:54:97:e8:f6:f9:36:ff:75:b5:b7:47:51:00:d5:09:00:
c1:75:15:ff:a6:3f:59:66:72:96:33:1f:b2:6f:87:df:5e:75:
dd:33:37:d8:2f:49:42:16:63:6c:52:aa:cf:16:9c:fc:d4:6d:
bb:00:4b:05:6b:a2:52:e2:e0:4b:ad:72:6e:99:9e:50:5e:5d:
23:fc:46:78:d4:40:9e:38:18:6f:fd:1e:b5:48:20:6c:cc:85:
7f:63:0f:66
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQlb26TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTM1YzdmNTcxZWVmZWI2NzQwNGFiNmM0NWZkNDc1NTUxYWRhZjFiMB4XDTIyMDEw
MTE0MDI1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDBiZGFkYmRmNjJk
ODQwNzQ4NzhiMjM1MzcwMDE4YjBkYjBkN2E2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALO4YQUGQvS/nsdzrAucOlQuutwNJO54O6ZRaVTyIypFIhJp
9nLLHyOAGfrf9bdiUrQ7Iz0DmOHlLvwZECcIWUJLRZeG8bAzZ7kGK+3mOuscUS2M
w0w1as6aKQmfMk99c69B5jV2BTEHTs21IRAO3o3QfZFTZMA1AZ6QCykIOtrVsZcd
Rj191VbJGhLhcu9fdZRxY6kAkcJsiCyJpajmTrPZzM+5TRE/ja2MfUCq9QPb/DDG
EYpfN13UhuxTilyWKtRtYNhNwB5bIK92prOqayokc18bbY6fTu/b4GwZJsDdcVa0
dzzGAwCWjUpBeqFX/MagB5sYlkpkiXHQMoFAUHECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTQva299i2EB0h4sjU3ABiw2w16aDAfBgNVHSMEGDAWgBQhNcf1ce7+tnQE
q2xF/UdVUa2vGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8x
LzBMMnR2Zll0aEFkSWVMSTFOd0FZc05zTmVtZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
NjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8xL0lUWEg5WEh1X3Ja
MEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMClUjANBgkqhkiG9w0BAQsFAAOC
AQEAGVjJ31+Fma2ouJBwZzYAgDtI+D7mNmeoG6kTYI9v/bdgFZt1Fc0rxtlgPqSB
g0Kqbbam9Vt0qvdy1EHh/oCv635ZHoDAhpii+7uKrRKBrzXrLFawEaMmXB1GCIhj
mprMDQcpu1rE6mUzcGuMsoIWDtJKlD5UywWvX6qZjyZPUClCjxitn9m9KuEkKBWb
mn/VilVhtw3uAz3V62xzvzLHfGdqMVpUl+j2+Tb/dbW3R1EA1QkAwXUV/6Y/WWZy
ljMfsm+H31513TM32C9JQhZjbFKqzxac/NRtuwBLBWuiUuLgS61ybpmeUF5dI/xG
eNRAnjgYb/0etUggbMyFf2MPZg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:55 2025 by rpki-client