Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Cu3fCg7mZPM92yxEDmGN-DVw2Sg.roa
File: Cu3fCg7mZPM92yxEDmGN-DVw2Sg.roa (raw, json)
Hash identifier: kZdXC7hLztPU+aAK2bZ0AsJIJsLu3J6kEBL9XcQ1oKw=
Subject key identifier: 0A:ED:DF:0A:0E:E6:64:F3:3D:DB:2C:44:0E:61:8D:F8:35:70:D9:28
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018465EAE5CBE324787EB774C2BE0D50D666
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Cu3fCg7mZPM92yxEDmGN-DVw2Sg.roa
Signing time: Fri 11 Nov 2022 09:00:03 +0000
ROA not before: Fri 11 Nov 2022 09:00:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1881
IP address blocks: 192.121.30.0/24 maxlen: 24
192.71.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:ea:e5:cb:e3:24:78:7e:b7:74:c2:be:0d:50:d6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 11 09:00:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aeddf0a0ee664f33ddb2c440e618df83570d928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:fc:5b:e6:74:62:65:41:b4:0a:37:72:44:
af:a5:e8:72:6c:df:ad:89:5e:2b:60:28:e3:09:93:
43:11:06:ca:69:58:03:0c:66:8a:2e:d7:34:de:c5:
4a:2c:f7:3c:4c:10:af:f8:09:fc:f7:15:34:83:60:
dc:4d:cc:4c:66:bd:83:83:73:e8:e5:c7:60:b0:87:
db:27:b7:09:8a:ad:05:d3:57:f2:71:58:39:ae:db:
b5:3f:20:f9:bb:99:78:62:20:45:37:1b:67:8e:d4:
74:f3:f1:74:a9:3a:82:24:e0:07:77:0d:08:ad:2f:
a5:15:65:fe:fe:1f:f2:fe:25:be:b0:ec:0f:18:6a:
f2:b8:17:67:15:e5:43:2b:7e:4a:11:a7:97:c8:64:
0c:37:c0:ec:3b:14:51:6a:ea:bb:c5:02:55:ce:57:
bb:9f:d9:c4:cf:50:68:2f:97:a8:00:c9:90:c8:a7:
ff:40:46:b8:b8:82:99:96:cd:e5:3d:b3:32:5e:ec:
d5:f6:3f:50:e4:7a:af:be:07:08:89:53:2d:8b:31:
d3:b9:09:db:ac:80:31:2b:ef:69:e6:a2:1c:6a:e2:
5c:3b:56:fb:f2:91:85:90:c2:b9:64:2a:8a:ef:fc:
0d:13:0e:17:8c:ed:22:18:d7:38:4a:c9:49:9e:4e:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:ED:DF:0A:0E:E6:64:F3:3D:DB:2C:44:0E:61:8D:F8:35:70:D9:28
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Cu3fCg7mZPM92yxEDmGN-DVw2Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.128.0/24
192.121.30.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:17:3d:ff:ef:27:ff:9b:4e:ce:76:f4:ac:b2:b2:f2:f2:ac:
b0:4c:b2:7c:bf:37:4d:2d:ae:d7:75:ef:3a:e7:29:51:fc:5e:
3a:14:d8:34:99:9f:ae:9c:44:e4:a3:37:9a:84:14:cf:7a:97:
52:54:63:62:9c:98:d2:65:4f:34:f8:51:02:70:a3:7a:d5:bb:
a2:27:9e:4b:36:9c:59:70:19:58:b8:3d:0f:a6:51:a9:c1:cb:
e2:86:30:36:8d:f6:a0:ca:4d:aa:ad:6f:f8:09:0f:7f:1a:92:
60:7d:2a:74:51:aa:c6:6a:66:62:a8:b2:bf:12:7c:a1:5c:04:
1b:99:42:1d:78:cb:bc:7e:3e:8c:4c:fc:67:b1:ce:fc:c1:eb:
e9:b0:5f:72:95:7e:4a:66:98:40:1a:4b:80:70:4e:6b:ca:34:
6d:d4:33:5a:62:68:06:32:31:4f:6f:05:a0:da:9c:1d:d1:df:
72:ba:e3:d0:b1:70:aa:77:b0:fe:65:16:41:1b:cf:67:b8:ec:
c8:8b:57:07:fa:b2:e9:0f:59:07:36:51:24:ad:61:6b:0d:9e:
5e:8a:b8:1b:50:94:35:90:5f:d7:d9:33:ee:0d:a5:a0:d9:18:
4d:b7:a2:de:9c:59:cb:7a:84:95:74:75:bd:7d:36:ef:ca:35:
78:f5:cd:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRl6uXL4yR4frd0wr4NUNZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjIxMTExMDkwMDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWVkZGYwYTBlZTY2NGYzM2RkYjJjNDQwZTYxOGRmODM1NzBkOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr838W+Z0YmVBtAo3ckSvpehybN+t
iV4rYCjjCZNDEQbKaVgDDGaKLtc03sVKLPc8TBCv+An89xU0g2DcTcxMZr2Dg3Po
5cdgsIfbJ7cJiq0F01fycVg5rtu1PyD5u5l4YiBFNxtnjtR08/F0qTqCJOAHdw0I
rS+lFWX+/h/y/iW+sOwPGGryuBdnFeVDK35KEaeXyGQMN8DsOxRRauq7xQJVzle7
n9nEz1BoL5eoAMmQyKf/QEa4uIKZls3lPbMyXuzV9j9Q5HqvvgcIiVMtizHTuQnb
rIAxK+9p5qIcauJcO1b78pGFkMK5ZCqK7/wNEw4XjO0iGNc4SslJnk4eJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFArt3woO5mTzPdssRA5hjfg1cNkoMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvQ3UzZkNnN21aUE05Mnl4RURtR04tRFZ3MlNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwEeAAwQA
wHkeMA0GCSqGSIb3DQEBCwUAA4IBAQCfFz3/7yf/m07OdvSssrLy8qywTLJ8vzdN
La7Xde865ylR/F46FNg0mZ+unETkozeahBTPepdSVGNinJjSZU80+FECcKN61bui
J55LNpxZcBlYuD0PplGpwcvihjA2jfagyk2qrW/4CQ9/GpJgfSp0UarGamZiqLK/
EnyhXAQbmUIdeMu8fj6MTPxnsc78wevpsF9ylX5KZphAGkuAcE5ryjRt1DNaYmgG
MjFPbwWg2pwd0d9yuuPQsXCqd7D+ZRZBG89nuOzIi1cH+rLpD1kHNlEkrWFrDZ5e
irgbUJQ1kF/X2TPuDaWg2RhNt6LenFnLeoSVdHW9fTbvyjV49c3x
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:07 2025 by rpki-client