Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/I4c4Bw9c5gyUBDq3Q-_RwO0a-3M.roa
File: I4c4Bw9c5gyUBDq3Q-_RwO0a-3M.roa (raw, json)
Hash identifier: AvZxohwUZedQNAJEO7+x1zMgjDeudZGDwUAC92IW13g=
Subject key identifier: 23:87:38:07:0F:5C:E6:0C:94:04:3A:B7:43:EF:D1:C0:ED:1A:FB:73
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 01856F8B95753A97A558E2A1C88D8C9A2155
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/I4c4Bw9c5gyUBDq3Q-_RwO0a-3M.roa
Signing time: Sun 01 Jan 2023 22:54:56 +0000
ROA not before: Sun 01 Jan 2023 22:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 194.5.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:95:75:3a:97:a5:58:e2:a1:c8:8d:8c:9a:21:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Jan 1 22:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=238738070f5ce60c94043ab743efd1c0ed1afb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:0f:7a:a1:7d:3c:50:26:11:48:b4:f0:c8:
08:7f:58:fc:bb:6c:37:3f:6c:15:af:29:42:0c:a0:
58:46:c8:8e:a7:95:91:5a:0d:09:34:bc:46:78:58:
61:07:6b:96:e2:54:5e:f4:3e:b9:b9:76:60:a7:7f:
cb:02:06:4e:8a:4c:b8:02:e3:1d:45:18:5d:5c:97:
a8:e9:4d:43:71:b0:23:54:f2:8d:21:87:cb:ab:49:
27:00:6c:da:af:2b:7e:e8:64:74:2b:a6:88:84:51:
90:36:dc:b4:a3:7b:d7:2c:c5:9d:ca:da:5f:dc:27:
db:01:14:74:4b:7e:88:46:b5:11:a3:79:cf:72:43:
91:39:a9:82:6d:a4:19:80:1e:4e:c8:33:88:c1:74:
ec:a9:10:d7:d1:59:86:fd:a7:3e:12:68:e1:75:1f:
4b:2a:c2:e7:7a:a3:6f:63:a0:02:58:a8:b6:0e:8c:
01:3f:f3:c5:43:ce:c9:66:57:ce:5a:84:50:61:61:
45:90:b0:f5:36:90:56:07:9f:7c:ae:d2:2e:09:cf:
9c:10:82:40:90:de:f5:78:63:4f:6b:fb:ac:f1:97:
04:25:ba:27:3c:e4:0c:82:76:60:a1:43:72:e7:65:
72:4b:db:5f:31:c9:06:e7:da:4c:ac:5d:12:7a:6b:
e0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:87:38:07:0F:5C:E6:0C:94:04:3A:B7:43:EF:D1:C0:ED:1A:FB:73
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/I4c4Bw9c5gyUBDq3Q-_RwO0a-3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ac:ce:d5:e3:1d:26:89:70:e9:05:04:65:cc:6a:9b:06:ed:
d0:81:fd:d4:94:d3:90:ca:df:c6:e1:a7:e7:c4:e9:f7:04:c9:
0c:33:b9:27:8b:04:fe:de:54:fc:b8:06:97:dd:94:ef:62:76:
50:b2:20:e5:1f:e5:ff:94:c5:bd:b5:38:e8:ed:73:0d:ea:b6:
ba:67:12:82:51:85:b2:fc:b4:9c:4a:c1:e4:e7:94:6f:aa:c2:
f0:80:11:83:6e:61:ff:26:84:87:5a:7d:1f:bb:6e:2f:a1:7f:
08:86:65:2c:df:5d:37:31:2c:c0:2d:e9:7c:8c:7b:90:50:07:
8c:29:f8:06:c4:2b:7c:29:81:c3:61:e2:10:d4:63:42:b2:99:
ba:c6:4a:e4:5e:b2:11:76:5c:34:fa:e2:23:c8:be:89:9b:45:
ea:77:ab:b8:88:02:20:46:a3:01:6d:c6:94:22:18:6f:64:bc:
c7:dd:e1:9a:4a:11:b8:0a:2b:ef:ac:bd:23:71:48:33:1c:b7:
ad:fd:24:63:da:fc:1e:88:4d:fd:0d:7b:76:c8:e1:b9:93:44:
19:8e:ad:ed:1f:bd:3a:4f:1d:3a:fb:81:d7:aa:f5:06:cd:1d:
a1:da:bf:c7:b2:e5:be:19:12:87:82:a8:83:ed:74:b6:27:a2:
22:9f:35:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvi5V1OpelWOKhyI2MmiFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTA2OWE1ZDc2NGRhMjU1OTU0ZGIyZWU5ZDEyNDNkZTE2
YjkxMDEwHhcNMjMwMTAxMjI1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzg3MzgwNzBmNWNlNjBjOTQwNDNhYjc0M2VmZDFjMGVkMWFmYjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuogPeqF9PFAmEUi08MgIf1j8u2w3
P2wVrylCDKBYRsiOp5WRWg0JNLxGeFhhB2uW4lRe9D65uXZgp3/LAgZOiky4AuMd
RRhdXJeo6U1DcbAjVPKNIYfLq0knAGzaryt+6GR0K6aIhFGQNty0o3vXLMWdytpf
3CfbARR0S36IRrURo3nPckOROamCbaQZgB5OyDOIwXTsqRDX0VmG/ac+EmjhdR9L
KsLneqNvY6ACWKi2DowBP/PFQ87JZlfOWoRQYWFFkLD1NpBWB598rtIuCc+cEIJA
kN71eGNPa/us8ZcEJbonPOQMgnZgoUNy52VyS9tfMckG59pMrF0SemvgGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCOHOAcPXOYMlAQ6t0Pv0cDtGvtzMB8GA1UdIwQY
MBaAFJJQaaXXZNolWVTbLunRJD3ha5EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTkt
YTliOGRlNjExYTk2LzEvSTRjNEJ3OWM1Z3lVQkRxM1EtX1J3TzBhLTNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTktYTliOGRlNjExYTk2
LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgX4MA0G
CSqGSIb3DQEBCwUAA4IBAQCwrM7V4x0miXDpBQRlzGqbBu3Qgf3UlNOQyt/G4afn
xOn3BMkMM7kniwT+3lT8uAaX3ZTvYnZQsiDlH+X/lMW9tTjo7XMN6ra6ZxKCUYWy
/LScSsHk55RvqsLwgBGDbmH/JoSHWn0fu24voX8IhmUs3103MSzALel8jHuQUAeM
KfgGxCt8KYHDYeIQ1GNCspm6xkrkXrIRdlw0+uIjyL6Jm0Xqd6u4iAIgRqMBbcaU
IhhvZLzH3eGaShG4CivvrL0jcUgzHLet/SRj2vweiE39DXt2yOG5k0QZjq3tH706
Tx06+4HXqvUGzR2h2r/HsuW+GRKHgqiD7XS2J6IinzVd
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:48 2025 by rpki-client