Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RpFcHec-5SJgCEgs3I9go4gYZh0.roa
File: RpFcHec-5SJgCEgs3I9go4gYZh0.roa (raw, json)
Hash identifier: WbJK28zlOIvlHwiR4XYmxOzYW4LzYhBAqgmsuqWPuc8=
Subject key identifier: 46:91:5C:1D:E7:3E:E5:22:60:08:48:2C:DC:8F:60:A3:88:18:66:1D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAEEDF8F583161C658DDEA85F36556
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RpFcHec-5SJgCEgs3I9go4gYZh0.roa
Signing time: Sun 01 Jan 2023 10:05:16 +0000
ROA not before: Sun 01 Jan 2023 10:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48894
IP address blocks: 192.71.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ee:df:8f:58:31:61:c6:58:dd:ea:85:f3:65:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46915c1de73ee5226008482cdc8f60a38818661d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:bb:16:ba:06:2b:a7:31:0c:8a:d6:df:ec:
aa:64:41:21:fc:bf:02:e2:ac:c4:cd:d3:f4:e2:03:
22:81:d1:ba:14:d6:41:6a:fb:36:3a:12:ae:b7:5f:
15:c1:b9:77:ae:d0:78:b8:0f:f8:45:13:d9:13:76:
79:40:a8:09:62:bd:ec:2f:76:a0:68:dd:d9:c3:83:
e6:83:73:3d:3c:30:d5:53:51:76:69:65:46:43:4a:
78:63:17:2f:5b:32:a9:c2:97:f8:c5:7e:59:f4:12:
65:b1:1a:4d:65:74:0e:ce:6c:30:a1:36:dd:69:03:
ab:fb:ed:b7:26:de:b2:79:a9:5d:cc:91:32:a6:4c:
94:a4:87:d4:92:8b:fb:74:91:ab:11:de:b2:87:65:
f3:db:68:18:e6:63:e1:e4:ea:24:92:3a:00:5c:36:
30:85:74:ac:9b:bf:dc:d6:4b:c2:2d:37:f9:15:39:
46:03:79:bf:c8:8e:27:3c:0f:34:22:78:3e:e7:12:
58:56:1a:25:38:ab:9a:a0:0f:a2:7b:60:c4:8b:68:
25:06:71:c3:18:b5:2c:ff:b5:e6:cc:33:7f:1a:e0:
23:cc:d2:98:cb:92:73:1e:47:03:b9:f6:bd:9f:5f:
f9:af:a8:7f:e0:cb:3e:da:85:44:81:ce:43:75:4d:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:91:5C:1D:E7:3E:E5:22:60:08:48:2C:DC:8F:60:A3:88:18:66:1D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RpFcHec-5SJgCEgs3I9go4gYZh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.244.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6f:6c:64:61:63:61:b9:78:a5:3e:ac:5b:c7:f6:b8:bd:de:
15:b0:79:5e:eb:34:b6:de:6e:b9:d3:57:47:ce:14:42:cc:fe:
a8:dc:df:4a:ce:bd:5a:7a:3b:bb:a6:8a:00:5b:6c:54:d7:17:
95:8a:0b:11:fe:d6:05:d8:62:12:0d:25:b0:d7:e5:f7:8c:d0:
fd:b6:52:54:a2:c9:79:56:e5:57:65:44:4c:00:d1:68:98:cd:
ff:1b:86:1d:dc:53:51:b2:ae:e5:fb:c9:87:f3:c9:d7:65:44:
6e:4e:2d:33:af:cc:30:0e:2f:ab:85:b3:a1:ec:a4:a8:b3:cd:
f4:66:d0:aa:27:80:a9:72:2e:0b:62:8e:6a:df:ee:1c:1e:43:
d9:6b:11:db:2b:67:e7:8e:f7:ab:34:1f:d0:3a:65:46:0b:6c:
2f:bc:f8:1c:22:f9:84:72:18:92:e7:70:9e:d6:6b:4c:03:24:
20:d2:16:e4:68:c5:16:ff:72:73:ab:34:8d:0d:5f:01:2a:a3:
e7:48:47:e1:25:53:b2:5c:25:d8:d8:90:35:86:2a:88:c0:9b:
73:ef:38:d5:90:f5:5e:57:5f:7e:f1:4a:26:59:dd:ef:a4:78:
2e:d6:e4:94:45:24:92:7e:03:15:d4:12:68:5d:a6:18:e6:7c:
40:8a:cc:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsyu7fj1gxYcZY3eqF82VWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjkxNWMxZGU3M2VlNTIyNjAwODQ4MmNkYzhmNjBhMzg4MTg2NjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ27FroGK6cxDIrW3+yqZEEh/L8C
4qzEzdP04gMigdG6FNZBavs2OhKut18Vwbl3rtB4uA/4RRPZE3Z5QKgJYr3sL3ag
aN3Zw4Pmg3M9PDDVU1F2aWVGQ0p4YxcvWzKpwpf4xX5Z9BJlsRpNZXQOzmwwoTbd
aQOr++23Jt6yealdzJEypkyUpIfUkov7dJGrEd6yh2Xz22gY5mPh5OokkjoAXDYw
hXSsm7/c1kvCLTf5FTlGA3m/yI4nPA80Ing+5xJYVholOKuaoA+ie2DEi2glBnHD
GLUs/7XmzDN/GuAjzNKYy5JzHkcDufa9n1/5r6h/4Ms+2oVEgc5DdU0SpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEaRXB3nPuUiYAhILNyPYKOIGGYdMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvUnBGY0hlYy01U0pnQ0VnczNJOWdvNGdZWmgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEf0MA0G
CSqGSIb3DQEBCwUAA4IBAQBzb2xkYWNhuXilPqxbx/a4vd4VsHle6zS23m6501dH
zhRCzP6o3N9Kzr1aeju7pooAW2xU1xeVigsR/tYF2GISDSWw1+X3jND9tlJUosl5
VuVXZURMANFomM3/G4Yd3FNRsq7l+8mH88nXZURuTi0zr8wwDi+rhbOh7KSos830
ZtCqJ4Cpci4LYo5q3+4cHkPZaxHbK2fnjverNB/QOmVGC2wvvPgcIvmEchiS53Ce
1mtMAyQg0hbkaMUW/3JzqzSNDV8BKqPnSEfhJVOyXCXY2JA1hiqIwJtz7zjVkPVe
V19+8UomWd3vpHgu1uSURSSSfgMV1BJoXaYY5nxAisxY
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:38 2025 by rpki-client