Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/1-GxepyxSMKEJw1G2LDddQ6ijaPs.roa
File: 1-GxepyxSMKEJw1G2LDddQ6ijaPs.roa (raw, json)
Hash identifier: RqGrWF/ENIHE8pyeMmT6UxTwsZyDWxqelIu2cuIcSY4=
Subject key identifier: F8:6C:5E:A7:2C:52:30:A1:09:C3:51:B6:2C:37:5D:43:A8:A3:68:FB
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 011240AA
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/1-GxepyxSMKEJw1G2LDddQ6ijaPs.roa
Signing time: Sat 01 Jan 2022 03:51:07 +0000
ROA not before: Sat 01 Jan 2022 03:51:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199484
IP address blocks: 130.255.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17973418 (0x11240aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Jan 1 03:51:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f86c5ea72c5230a109c351b62c375d43a8a368fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:7c:08:e1:70:e2:c0:22:cd:81:c8:e6:01:
68:ad:21:13:97:0d:07:c5:ed:8a:bd:38:41:d7:3c:
75:51:c2:45:2d:15:1e:31:d3:d2:da:8a:c3:14:40:
2e:0a:3a:e6:ae:d8:f8:e3:e9:86:61:dd:67:32:96:
6b:d1:3b:3d:61:48:e6:14:78:cf:da:2a:fa:f0:72:
fd:2b:f4:0d:59:22:b5:82:70:b5:8e:08:36:9c:84:
11:dc:aa:b2:c0:33:4c:09:a6:65:45:b9:50:51:99:
e2:6d:a1:d6:a5:2f:4f:9d:9c:db:ba:86:7b:2c:06:
81:1f:3d:b1:51:45:4d:f4:91:10:00:6d:66:0f:9c:
9e:b0:fe:5d:f3:9d:74:7f:da:c6:3b:d7:52:6a:7a:
3b:73:0a:0e:b9:c6:83:d7:da:e7:e0:48:2c:f1:ee:
43:1f:ff:d8:93:ce:75:ac:7e:a6:4c:33:2f:23:7f:
00:fe:57:a5:02:f7:0f:2b:1c:1d:95:83:df:4e:59:
dd:8a:f6:6f:3b:85:d3:a8:4d:4d:f2:59:8c:3f:f2:
75:3c:ea:af:fc:08:d1:6b:c5:01:32:bf:63:78:e0:
cd:f9:6f:8d:d0:d7:7e:1b:a8:3b:76:a7:98:e4:2a:
99:7e:64:8a:6f:9c:6a:da:9d:80:d8:09:6e:c4:16:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6C:5E:A7:2C:52:30:A1:09:C3:51:B6:2C:37:5D:43:A8:A3:68:FB
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/1-GxepyxSMKEJw1G2LDddQ6ijaPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.173.0/24
Signature Algorithm: sha256WithRSAEncryption
56:20:a4:11:14:b0:42:b9:cf:91:54:79:7f:5e:aa:e6:77:39:
44:a7:bd:0f:1d:d6:1e:b9:24:37:0b:aa:1d:68:8f:74:b7:1b:
75:c0:7d:f2:78:2c:e8:2a:f1:05:37:d3:08:fa:93:30:58:b6:
30:7e:84:bc:02:1d:3b:90:77:1e:81:62:96:28:fb:95:ca:a1:
ce:90:2b:e6:1b:c9:74:55:3a:c8:00:0c:5e:79:ab:1a:2d:b5:
1b:37:85:ba:e4:63:9b:1b:e6:7f:ea:af:5b:5b:21:4a:cb:4b:
d4:d5:93:f7:67:7e:92:6e:6b:24:b7:7f:fa:70:89:59:42:ee:
24:43:95:4d:72:5a:94:91:7d:dd:1c:c0:57:f9:33:27:e5:99:
8b:a0:93:08:c5:51:01:bf:2f:01:5c:4e:bc:21:a6:ab:fd:09:
48:89:26:63:56:c1:1e:6b:88:f0:6b:94:dd:92:f4:14:c6:dc:
85:c6:36:e0:33:61:b2:48:5b:6a:dc:5a:9f:f2:58:73:c1:13:
1b:30:48:52:63:1e:3e:79:3a:d8:7b:44:2b:d7:59:ae:d4:15:
bd:17:b6:c7:fd:27:81:31:1c:63:74:d2:c8:ab:db:13:63:e9:
b4:68:24:e6:42:43:5a:9f:f6:f0:31:aa:eb:f0:6a:08:87:84:
42:4e:b6:c5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEARJAqjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDgxY2I1MDQzMjY3NDNiMTdkMzY0YTIwNDg3NWMzOWM2ZWRiYzA5MB4XDTIyMDEw
MTAzNTEwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjg2YzVlYTcyYzUy
MzBhMTA5YzM1MWI2MmMzNzVkNDNhOGEzNjhmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN8CfAjhcOLAIs2ByOYBaK0hE5cNB8Xtir04Qdc8dVHCRS0V
HjHT0tqKwxRALgo65q7Y+OPphmHdZzKWa9E7PWFI5hR4z9oq+vBy/Sv0DVkitYJw
tY4INpyEEdyqssAzTAmmZUW5UFGZ4m2h1qUvT52c27qGeywGgR89sVFFTfSREABt
Zg+cnrD+XfOddH/axjvXUmp6O3MKDrnGg9fa5+BILPHuQx//2JPOdax+pkwzLyN/
AP5XpQL3DyscHZWD305Z3Yr2bzuF06hNTfJZjD/ydTzqr/wI0WvFATK/Y3jgzflv
jdDXfhuoO3anmOQqmX5kim+catqdgNgJbsQW7pUCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT4bF6nLFIwoQnDUbYsN11DqKNo+zAfBgNVHSMEGDAWgBSdgctQQyZ0OxfT
ZKIEh1w5xu28CTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25ZSExVRU1tZERzWDAyU2lCSWRjT2NidHZBay5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGMvMzM5ZDI5LTcxMmEtNGM4Ni05NTEwLWU0ZDZiY2YzMzZiNy8x
LzEtR3hlcHl4U01LRUp3MUcyTERkZFE2aWphUHMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Rj
LzMzOWQyOS03MTJhLTRjODYtOTUxMC1lNGQ2YmNmMzM2YjcvMS9uWUhMVUVNbWRE
c1gwMlNpQklkY09jYnR2QWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACC/60wDQYJKoZIhvcNAQELBQAD
ggEBAFYgpBEUsEK5z5FUeX9equZ3OUSnvQ8d1h65JDcLqh1oj3S3G3XAffJ4LOgq
8QU30wj6kzBYtjB+hLwCHTuQdx6BYpYo+5XKoc6QK+YbyXRVOsgADF55qxottRs3
hbrkY5sb5n/qr1tbIUrLS9TVk/dnfpJuayS3f/pwiVlC7iRDlU1yWpSRfd0cwFf5
MyflmYugkwjFUQG/LwFcTrwhpqv9CUiJJmNWwR5riPBrlN2S9BTG3IXGNuAzYbJI
W2rcWp/yWHPBExswSFJjHj55Oth7RCvXWa7UFb0Xtsf9J4ExHGN00sir2xNj6bRo
JOZCQ1qf9vAxquvwagiHhEJOtsU=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:03 2025 by rpki-client