Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/BEz5FG5B11RjyMa_6sfQpozvsYQ.roa
File: BEz5FG5B11RjyMa_6sfQpozvsYQ.roa (raw, json)
Hash identifier: mi44IEjMqo2sAPC2nDHMuRsg1wOzIrsNOHFkBbQtMEU=
Subject key identifier: 04:4C:F9:14:6E:41:D7:54:63:C8:C6:BF:EA:C7:D0:A6:8C:EF:B1:84
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01856E8B1D749EA0F7AAABFE7BBE3A2785C2
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/BEz5FG5B11RjyMa_6sfQpozvsYQ.roa
Signing time: Sun 01 Jan 2023 18:14:48 +0000
ROA not before: Sun 01 Jan 2023 18:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 194.110.172.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:1d:74:9e:a0:f7:aa:ab:fe:7b:be:3a:27:85:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 18:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=044cf9146e41d75463c8c6bfeac7d0a68cefb184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:2d:3f:60:90:c4:82:cf:98:54:a8:cd:cc:
11:cc:ea:fd:e0:a7:64:b4:f2:73:fa:c3:72:cb:94:
ab:8a:3c:1a:fb:be:8e:be:a2:87:2b:49:f5:8d:61:
77:4d:f4:f6:f0:47:05:dc:2d:84:55:b4:5b:de:d5:
7a:be:f1:8a:a8:9e:9f:01:85:a1:91:80:76:54:03:
ce:6c:46:fe:32:cb:5f:8a:ad:d2:c8:e8:60:2b:3b:
7c:e9:42:fc:44:f4:ee:f4:65:20:be:44:78:f0:45:
49:92:e3:d8:25:c8:86:0e:b2:0b:46:f9:3b:c8:e2:
8f:65:cb:44:ce:e7:94:53:51:2d:aa:e4:1e:7b:f0:
50:f8:5a:76:f3:2a:25:ff:4e:a0:14:3e:86:97:87:
1d:1e:c6:b0:58:d8:00:1a:51:66:f0:ff:1f:d2:a3:
bd:9d:66:eb:d7:cb:cf:50:03:cf:91:3f:2a:de:d2:
67:3f:11:99:2e:cd:64:22:78:ff:28:a3:a6:09:ba:
82:a1:41:06:59:4c:24:f9:cb:6d:d0:78:b8:2a:3e:
cf:27:b7:a5:a4:f3:97:ec:54:b5:5e:66:25:32:97:
7d:28:be:b1:3c:81:d7:db:6c:d2:6d:7f:83:be:b5:
04:1c:8c:3a:02:20:d7:c2:2f:f5:01:f5:04:a7:0d:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4C:F9:14:6E:41:D7:54:63:C8:C6:BF:EA:C7:D0:A6:8C:EF:B1:84
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/BEz5FG5B11RjyMa_6sfQpozvsYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.172.0/23
Signature Algorithm: sha256WithRSAEncryption
68:63:9a:53:0f:7d:1e:53:46:8e:da:39:ce:e3:56:74:a5:6c:
df:31:29:f3:30:50:42:c5:aa:02:11:ea:48:42:07:e7:ba:88:
38:1c:d9:0f:b2:0e:88:9f:8d:57:10:85:85:e2:db:8a:da:1d:
19:0c:73:87:ec:46:42:fd:51:5f:9a:33:1c:87:f6:cb:e7:3f:
63:3e:ff:19:60:29:3f:ac:16:13:71:f2:55:23:2c:f5:17:d6:
c4:60:e5:c0:14:7c:17:15:26:46:c4:e2:1b:f7:c5:87:e0:bc:
8e:ae:f3:f0:c7:35:5d:0a:6b:f3:ce:0e:50:c1:0f:21:d0:98:
ef:f8:be:5f:0a:4d:09:db:4f:8b:fd:cb:2a:ec:76:f1:8a:1c:
89:da:f3:b0:ee:0e:2c:86:a2:3f:16:de:91:d0:24:35:89:8e:
78:7e:51:53:11:92:c2:d2:e6:2c:47:c3:94:e9:c7:8a:78:45:
a8:64:c6:ba:92:8a:0f:1d:34:98:c5:e8:e1:92:30:c3:d0:58:
4d:93:01:1c:d0:01:1e:f9:f4:f9:3e:63:54:cf:67:fe:67:9b:
7c:5b:25:4f:25:04:30:86:fb:a8:cc:00:fb:cc:b3:60:5d:21:
a3:a8:68:18:21:57:41:f0:82:5e:48:d1:94:7b:f8:26:ef:41:
a5:2d:c0:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuix10nqD3qqv+e746J4XCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjMwMTAxMTgxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDRjZjkxNDZlNDFkNzU0NjNjOGM2YmZlYWM3ZDBhNjhjZWZiMTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7wtP2CQxILPmFSozcwRzOr94Kdk
tPJz+sNyy5Srijwa+76OvqKHK0n1jWF3TfT28EcF3C2EVbRb3tV6vvGKqJ6fAYWh
kYB2VAPObEb+Mstfiq3SyOhgKzt86UL8RPTu9GUgvkR48EVJkuPYJciGDrILRvk7
yOKPZctEzueUU1EtquQee/BQ+Fp28yol/06gFD6Gl4cdHsawWNgAGlFm8P8f0qO9
nWbr18vPUAPPkT8q3tJnPxGZLs1kInj/KKOmCbqCoUEGWUwk+ctt0Hi4Kj7PJ7el
pPOX7FS1XmYlMpd9KL6xPIHX22zSbX+DvrUEHIw6AiDXwi/1AfUEpw316wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFARM+RRuQddUY8jGv+rH0KaM77GEMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvQkV6NUZHNUIxMVJqeU1hXzZzZlFwb3p2c1lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwm6sMA0G
CSqGSIb3DQEBCwUAA4IBAQBoY5pTD30eU0aO2jnO41Z0pWzfMSnzMFBCxaoCEepI
Qgfnuog4HNkPsg6In41XEIWF4tuK2h0ZDHOH7EZC/VFfmjMch/bL5z9jPv8ZYCk/
rBYTcfJVIyz1F9bEYOXAFHwXFSZGxOIb98WH4LyOrvPwxzVdCmvzzg5QwQ8h0Jjv
+L5fCk0J20+L/csq7HbxihyJ2vOw7g4shqI/Ft6R0CQ1iY54flFTEZLC0uYsR8OU
6ceKeEWoZMa6kooPHTSYxejhkjDD0FhNkwEc0AEe+fT5PmNUz2f+Z5t8WyVPJQQw
hvuozAD7zLNgXSGjqGgYIVdB8IJeSNGUe/gm70GlLcA5
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:35 2025 by rpki-client