Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/rqQCrgRQnyn75_HAyTj1Zp4fbgE.roa
File: rqQCrgRQnyn75_HAyTj1Zp4fbgE.roa (raw, json)
Hash identifier: KdnkFCOk6zLeD8pE4XS/0Zp7HYBCqF5LE/tGS2nbWLQ=
Subject key identifier: AE:A4:02:AE:04:50:9F:29:FB:E7:F1:C0:C9:38:F5:66:9E:1F:6E:01
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0185719E87561885477E9898464BAA906DDA
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/rqQCrgRQnyn75_HAyTj1Zp4fbgE.roa
Signing time: Mon 02 Jan 2023 08:34:52 +0000
ROA not before: Mon 02 Jan 2023 08:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48990
IP address blocks: 158.172.132.0/22 maxlen: 22
158.172.128.0/22 maxlen: 22
158.172.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:87:56:18:85:47:7e:98:98:46:4b:aa:90:6d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 2 08:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aea402ae04509f29fbe7f1c0c938f5669e1f6e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:ed:3d:3e:75:33:60:51:5b:97:8c:ee:4e:
7a:8e:65:e0:b3:92:6a:51:3c:a9:4a:27:e7:4a:73:
a5:a5:9c:d8:9c:89:5a:ff:31:f7:7d:14:b0:ee:c8:
57:6d:5a:9d:c8:f5:03:a7:c9:79:1d:68:a9:2d:32:
2a:40:ab:41:f2:3d:82:90:1e:55:b8:3d:e1:51:c9:
c3:75:1a:80:7f:b9:f9:84:a7:de:39:07:28:72:05:
74:63:90:f8:f6:b7:60:d3:db:90:d5:37:6b:74:7a:
7e:2c:3b:cd:45:a3:e2:c5:f7:8a:ef:9f:c7:28:e2:
e8:08:07:fe:e7:55:65:b2:ba:38:9b:e8:6e:be:57:
c2:8a:f6:60:e2:15:9d:7a:45:6c:e4:9b:8f:73:e6:
f4:53:5c:9c:2b:53:8c:fc:87:cb:d5:8b:2e:ba:97:
b3:92:ad:76:a8:5c:8b:72:b7:1f:23:93:69:35:78:
e6:e0:6c:c1:5f:a2:06:e5:03:4c:a6:95:a0:48:81:
cb:c7:13:77:ca:aa:f6:ae:76:fa:e6:a5:00:e1:da:
4b:3b:ac:57:11:83:bf:6e:d9:84:51:ba:23:c9:ce:
62:bb:2e:4b:4f:08:c3:c3:c4:52:88:6b:9f:19:a8:
40:6b:93:07:b8:39:da:8a:91:37:9b:1e:1c:4c:ae:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:02:AE:04:50:9F:29:FB:E7:F1:C0:C9:38:F5:66:9E:1F:6E:01
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/rqQCrgRQnyn75_HAyTj1Zp4fbgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.128.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:86:0e:82:94:d5:97:c0:d0:16:75:41:b6:a7:1c:e4:8c:4b:
76:cb:c9:a9:41:b2:c4:61:41:05:8f:54:14:36:ca:b9:3c:33:
fa:2b:67:58:95:08:55:08:ca:7e:d2:39:72:f6:c8:73:0b:7b:
6f:1b:f0:da:09:8d:8d:91:ba:96:2d:d2:ba:3a:ed:83:ab:0b:
76:d2:1b:7b:e2:6d:da:9f:8d:1e:f1:48:51:81:b5:75:1e:c6:
af:22:61:b1:20:db:2f:04:45:66:92:e9:58:13:bf:72:0d:6a:
db:b7:18:cb:2a:a2:ef:1d:2c:d9:a4:63:fa:10:48:e9:2b:f8:
70:2d:ea:2e:db:fc:bc:af:56:78:5b:39:29:af:20:cb:47:d3:
87:4b:0d:4f:70:11:8a:61:48:70:33:e5:91:e7:35:bd:83:f2:
2c:39:13:40:f8:d5:d2:1f:99:4b:70:27:89:ca:07:8d:82:10:
9c:41:56:81:e3:bf:71:a4:fa:0f:3d:d3:60:b6:83:fa:7b:a5:
30:47:ce:68:97:1f:e5:2c:85:31:44:b9:16:11:f5:b0:ed:30:
ef:3d:ae:78:f1:eb:33:c3:32:7e:90:31:76:d1:5e:f1:76:32:
89:0f:a1:36:55:8b:9a:cf:3d:74:f7:61:ee:a4:ab:7b:33:08:
27:2a:ad:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxnodWGIVHfpiYRkuqkG3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1
MzhkNDcwHhcNMjMwMTAyMDgzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWE0MDJhZTA0NTA5ZjI5ZmJlN2YxYzBjOTM4ZjU2NjllMWY2ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVXtPT51M2BRW5eM7k56jmXgs5Jq
UTypSifnSnOlpZzYnIla/zH3fRSw7shXbVqdyPUDp8l5HWipLTIqQKtB8j2CkB5V
uD3hUcnDdRqAf7n5hKfeOQcocgV0Y5D49rdg09uQ1TdrdHp+LDvNRaPixfeK75/H
KOLoCAf+51Vlsro4m+huvlfCivZg4hWdekVs5JuPc+b0U1ycK1OM/IfL1Ysuupez
kq12qFyLcrcfI5NpNXjm4GzBX6IG5QNMppWgSIHLxxN3yqr2rnb65qUA4dpLO6xX
EYO/btmEUbojyc5iuy5LTwjDw8RSiGufGahAa5MHuDnaipE3mx4cTK6h0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6kAq4EUJ8p++fxwMk49WaeH24BMB8GA1UdIwQY
MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It
MWVkMTA5NTRiZDk2LzEvcnFRQ3JnUlFueW43NV9IQXlUajFacDRmYmdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2
LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnqyAMA0G
CSqGSIb3DQEBCwUAA4IBAQCyhg6ClNWXwNAWdUG2pxzkjEt2y8mpQbLEYUEFj1QU
Nsq5PDP6K2dYlQhVCMp+0jly9shzC3tvG/DaCY2NkbqWLdK6Ou2Dqwt20ht74m3a
n40e8UhRgbV1HsavImGxINsvBEVmkulYE79yDWrbtxjLKqLvHSzZpGP6EEjpK/hw
Leou2/y8r1Z4WzkpryDLR9OHSw1PcBGKYUhwM+WR5zW9g/IsORNA+NXSH5lLcCeJ
ygeNghCcQVaB479xpPoPPdNgtoP6e6UwR85olx/lLIUxRLkWEfWw7TDvPa548esz
wzJ+kDF20V7xdjKJD6E2VYuazz1092HupKt7MwgnKq1C
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:29 2025 by rpki-client