Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/dGKmU4jtfnyieoc2DHwVZnth3Hw.roa
File: dGKmU4jtfnyieoc2DHwVZnth3Hw.roa (raw, json)
Hash identifier: d0l8XEOQBCa4sjD8uxzC0AzfBMdC6NpQaoCSgOe0uHw=
Subject key identifier: 74:62:A6:53:88:ED:7E:7C:A2:7A:87:36:0C:7C:15:66:7B:61:DC:7C
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 0184A469EDB4B10004637CE1690E206384F8
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/dGKmU4jtfnyieoc2DHwVZnth3Hw.roa
Signing time: Wed 23 Nov 2022 12:15:16 +0000
ROA not before: Wed 23 Nov 2022 12:15:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203865
IP address blocks: 93.94.2.0/24 maxlen: 24
2a03:1e02::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:69:ed:b4:b1:00:04:63:7c:e1:69:0e:20:63:84:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Nov 23 12:15:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7462a65388ed7e7ca27a87360c7c15667b61dc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:91:22:8b:97:73:e4:79:3b:a4:7c:18:18:
7c:b3:34:f5:81:86:3b:29:eb:03:7d:bb:7a:95:ab:
56:04:a1:b4:73:9e:7d:2c:53:de:27:63:8c:e5:64:
6a:e7:c8:ea:88:93:1c:e6:8f:d0:47:ba:97:5f:a7:
c1:c1:dd:ea:f4:93:87:9e:6a:ad:1a:14:6f:72:b2:
5c:65:04:a1:ce:1f:84:18:7a:06:bb:57:e5:48:44:
15:14:50:c4:f5:37:11:4b:4f:33:3d:2b:a7:44:d8:
de:7b:9d:38:d8:f7:03:30:d2:15:7c:61:39:85:8c:
bb:2b:9e:7e:26:2a:c1:7a:1c:5c:0f:d7:8a:ee:9a:
e4:ca:36:b1:89:dc:2b:31:f4:78:b1:99:7f:1c:0b:
4a:08:6f:de:31:e0:33:cc:91:71:a4:7c:62:68:2f:
00:12:24:5f:db:88:38:f0:f2:57:aa:ce:e1:26:b3:
d2:dc:5f:8c:f1:b1:e7:70:84:6e:d5:f6:36:a0:1c:
52:e4:d8:fa:c0:7b:57:f6:46:e8:1b:65:3b:e4:3c:
b2:46:f5:25:ad:98:7a:a5:88:b0:42:43:3c:d3:48:
25:f4:d2:04:50:60:9a:2a:4d:30:3c:bf:b6:50:58:
d2:9c:19:3f:ca:81:11:76:f8:ae:53:0e:d9:9b:7e:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:A6:53:88:ED:7E:7C:A2:7A:87:36:0C:7C:15:66:7B:61:DC:7C
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/dGKmU4jtfnyieoc2DHwVZnth3Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.2.0/24
IPv6:
2a03:1e02::/32
Signature Algorithm: sha256WithRSAEncryption
a4:e8:34:db:dd:81:52:42:d8:02:d3:eb:e8:86:f3:b2:f9:e3:
74:7a:1d:fd:fb:b8:6d:5f:32:c8:f8:ce:94:9c:57:10:21:2e:
e1:c6:81:22:cf:09:60:5b:14:ba:bc:89:f2:ab:12:9f:20:90:
77:f6:be:7c:0e:61:97:63:94:ef:35:01:67:7a:cc:c0:a9:74:
6b:a1:84:50:31:75:b8:d3:9d:7e:56:9a:2c:d0:94:71:d2:aa:
7a:2d:87:3a:f9:8e:06:55:91:66:a2:d2:9e:49:62:1a:a6:71:
94:62:6e:79:9d:7e:58:04:18:7e:29:18:48:48:1f:03:a5:72:
4e:d5:91:51:46:ae:ab:eb:c1:14:b9:1c:ac:1f:cb:6c:92:18:
51:52:18:28:a0:3f:99:4e:01:c9:4e:e4:51:76:18:1e:ba:42:
67:36:18:67:f3:18:94:28:b7:5f:be:76:40:f0:4b:10:8a:69:
83:da:6e:21:d2:5e:04:5b:d2:b9:e4:53:b0:47:c5:2b:71:c0:
a9:17:41:9a:64:b7:66:5c:ab:7a:b0:d8:2e:09:3d:86:f7:3d:
35:4d:83:16:1e:83:68:5e:c1:52:48:a9:38:08:ee:d4:c4:d7:
d6:f8:88:d5:0b:2e:bf:48:81:1a:07:fc:16:86:65:39:c7:5d:
e7:7b:f8:7e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYSkae20sQAEY3zhaQ4gY4T4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjQ5MzQ1N2IyZjAyZTY5Yjg1ZjcxOGRjYzE2YTlhOWVm
MGZjZDEwHhcNMjIxMTIzMTIxNTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDYyYTY1Mzg4ZWQ3ZTdjYTI3YTg3MzYwYzdjMTU2NjdiNjFkYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiSRIouXc+R5O6R8GBh8szT1gYY7
KesDfbt6latWBKG0c559LFPeJ2OM5WRq58jqiJMc5o/QR7qXX6fBwd3q9JOHnmqt
GhRvcrJcZQShzh+EGHoGu1flSEQVFFDE9TcRS08zPSunRNjee5042PcDMNIVfGE5
hYy7K55+JirBehxcD9eK7prkyjaxidwrMfR4sZl/HAtKCG/eMeAzzJFxpHxiaC8A
EiRf24g48PJXqs7hJrPS3F+M8bHncIRu1fY2oBxS5Nj6wHtX9kboG2U75DyyRvUl
rZh6pYiwQkM800gl9NIEUGCaKk0wPL+2UFjSnBk/yoERdviuUw7Zm34AZwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHRiplOI7X58onqHNgx8FWZ7Ydx8MB8GA1UdIwQY
MBaAFL+0k0V7LwLmm4X3GNzBapqe8PzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMt
MWY2NDA5ODQ4MTUwLzEvZEdLbVU0anRmbnlpZW9jMkRId1ZabnRoM0h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMtMWY2NDA5ODQ4MTUw
LzEvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXV4CMA0E
AgACMAcDBQAqAx4CMA0GCSqGSIb3DQEBCwUAA4IBAQCk6DTb3YFSQtgC0+vohvOy
+eN0eh39+7htXzLI+M6UnFcQIS7hxoEizwlgWxS6vInyqxKfIJB39r58DmGXY5Tv
NQFneszAqXRroYRQMXW4051+Vpos0JRx0qp6LYc6+Y4GVZFmotKeSWIapnGUYm55
nX5YBBh+KRhISB8DpXJO1ZFRRq6r68EUuRysH8tskhhRUhgooD+ZTgHJTuRRdhge
ukJnNhhn8xiUKLdfvnZA8EsQimmD2m4h0l4EW9K55FOwR8UrccCpF0GaZLdmXKt6
sNguCT2G9z01TYMWHoNoXsFSSKk4CO7UxNfW+IjVCy6/SIEaB/wWhmU5x13ne/h+
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:36 2025 by rpki-client