Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/F3QG3xd-wJA8oh7BQgeeW0LHta4.roa
File: F3QG3xd-wJA8oh7BQgeeW0LHta4.roa (raw, json)
Hash identifier: hXaXYXvLnAbmVzVmzkDTqohO1hQ8NCaG/epGGUJUu44=
Subject key identifier: 17:74:06:DF:17:7E:C0:90:3C:A2:1E:C1:42:07:9E:5B:42:C7:B5:AE
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0189DA18B1B4D76D2123AE9C39EEFE105464
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/F3QG3xd-wJA8oh7BQgeeW0LHta4.roa
Signing time: Wed 09 Aug 2023 11:39:58 +0000
ROA not before: Wed 09 Aug 2023 11:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51714
IP address blocks: 194.110.172.0/23 maxlen: 24
85.117.242.0/24 maxlen: 24
192.144.32.0/24 maxlen: 24
2a09:ff00:103::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:18:b1:b4:d7:6d:21:23:ae:9c:39:ee:fe:10:54:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Aug 9 11:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=177406df177ec0903ca21ec142079e5b42c7b5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:ce:3d:9a:08:dc:d4:f5:28:17:76:64:a7:
eb:64:91:1f:07:85:b4:98:07:9b:b4:84:2c:b2:c5:
49:67:29:e5:83:23:cc:56:80:a3:57:2c:8b:38:05:
cc:86:2c:03:98:e5:f6:33:f0:ad:63:da:20:7a:df:
9d:ce:63:ad:58:ef:d6:f1:88:14:6f:1e:fc:44:bb:
8c:e3:25:06:10:39:e6:10:63:96:a5:26:ea:d1:68:
ed:02:70:1f:c6:ae:ef:5c:67:98:84:59:9b:a2:7e:
2c:93:5f:21:e1:64:43:a2:d8:18:50:10:59:9c:d4:
aa:b4:22:cd:29:40:75:3b:58:43:c1:0a:a9:d6:95:
66:1b:69:d1:34:ab:48:ea:84:6a:4b:9f:77:3c:5b:
11:51:6c:38:e9:15:ea:0e:69:30:df:74:38:7f:3c:
ed:1e:10:12:81:d9:6b:7f:57:85:ca:28:87:da:c0:
27:0e:c0:5e:0b:a9:29:94:35:cc:32:c9:36:97:cf:
66:1a:02:ad:94:26:3d:93:69:13:90:51:d5:92:1f:
41:37:e5:f6:d3:12:91:b2:49:d5:d3:01:b0:56:ab:
6e:8d:9b:3b:b6:40:3f:d3:6e:90:27:24:a1:88:40:
82:33:8f:e9:ab:57:9e:d9:5d:d3:f3:ad:68:8e:ac:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:74:06:DF:17:7E:C0:90:3C:A2:1E:C1:42:07:9E:5B:42:C7:B5:AE
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/F3QG3xd-wJA8oh7BQgeeW0LHta4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.242.0/24
192.144.32.0/24
194.110.172.0/23
IPv6:
2a09:ff00:103::/48
Signature Algorithm: sha256WithRSAEncryption
2a:91:7f:6d:60:0f:dc:f4:f6:f6:3c:b1:fe:57:b0:19:2c:e2:
e5:44:15:33:09:d4:a2:01:7e:83:ae:a8:a8:9e:c8:58:29:7a:
31:c1:8b:70:99:96:51:1c:0d:05:da:03:0c:a1:ab:a7:bf:16:
87:a0:ba:72:aa:a2:a1:6e:ea:d1:49:8a:eb:5b:e9:c8:81:d9:
4a:fa:1b:a5:54:43:a6:3b:90:b5:4b:74:82:46:6a:0c:58:15:
38:5b:c7:82:80:ea:90:a8:61:06:68:40:a1:9d:13:2c:4f:66:
ad:a9:ed:4d:29:8b:c9:97:f9:fa:9d:ca:04:b5:b3:b2:84:62:
99:81:13:34:d4:5c:cd:79:1a:33:66:99:52:67:1d:69:fd:ae:
62:24:97:d5:9f:92:d9:ef:b7:5d:2b:29:66:eb:ab:3c:89:d6:
88:7a:57:e7:c5:91:01:90:13:29:9d:cf:e9:e1:8e:87:bc:15:
c1:01:c1:ac:86:b3:dd:65:29:16:45:63:92:62:21:fa:52:48:
04:be:44:dd:3a:c7:16:2e:87:a0:bc:c4:fc:ef:2b:bc:80:1c:
ce:86:bb:ee:19:0d:2a:0f:2d:c2:b5:1b:80:7c:7c:a4:2a:3a:
ea:27:2d:4c:7f:52:a2:c7:2e:7b:b5:6b:99:e6:cc:93:a8:c7:
ef:bb:d0:f2
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYnaGLG0120hI66cOe7+EFRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjMwODA5MTEzOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzc0MDZkZjE3N2VjMDkwM2NhMjFlYzE0MjA3OWU1YjQyYzdiNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcrOPZoI3NT1KBd2ZKfrZJEfB4W0
mAebtIQsssVJZynlgyPMVoCjVyyLOAXMhiwDmOX2M/CtY9oget+dzmOtWO/W8YgU
bx78RLuM4yUGEDnmEGOWpSbq0WjtAnAfxq7vXGeYhFmbon4sk18h4WRDotgYUBBZ
nNSqtCLNKUB1O1hDwQqp1pVmG2nRNKtI6oRqS593PFsRUWw46RXqDmkw33Q4fzzt
HhASgdlrf1eFyiiH2sAnDsBeC6kplDXMMsk2l89mGgKtlCY9k2kTkFHVkh9BN+X2
0xKRsknV0wGwVqtujZs7tkA/026QJyShiECCM4/pq1ee2V3T861ojqy0mQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFBd0Bt8XfsCQPKIewUIHnltCx7WuMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvRjNRRzN4ZC13SkE4b2g3QlFnZWVXMExIdGE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAVXXyAwQA
wJAgAwQBwm6sMA8EAgACMAkDBwAqCf8AAQMwDQYJKoZIhvcNAQELBQADggEBACqR
f21gD9z09vY8sf5XsBks4uVEFTMJ1KIBfoOuqKieyFgpejHBi3CZllEcDQXaAwyh
q6e/FoegunKqoqFu6tFJiutb6ciB2Ur6G6VUQ6Y7kLVLdIJGagxYFThbx4KA6pCo
YQZoQKGdEyxPZq2p7U0pi8mX+fqdygS1s7KEYpmBEzTUXM15GjNmmVJnHWn9rmIk
l9Wfktnvt10rKWbrqzyJ1oh6V+fFkQGQEymdz+nhjoe8FcEBwayGs91lKRZFY5Ji
IfpSSAS+RN06xxYuh6C8xPzvK7yAHM6Gu+4ZDSoPLcK1G4B8fKQqOuonLUx/UqLH
Lnu1a5nmzJOox++70PI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:30 2025 by rpki-client