Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bF4QN4HInwmAE5L0jCi2Lyxy8Xo.roa
File: bF4QN4HInwmAE5L0jCi2Lyxy8Xo.roa (raw, json)
Hash identifier: e78OIHDYLl51VRZqOHDJFMWWRVR+gHA524k63NcmWhA=
Subject key identifier: 6C:5E:10:37:81:C8:9F:09:80:13:92:F4:8C:28:B6:2F:2C:72:F1:7A
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0187C782FB94F48A1018B79F74BC88CEEF55
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bF4QN4HInwmAE5L0jCi2Lyxy8Xo.roa
Signing time: Fri 28 Apr 2023 10:57:42 +0000
ROA not before: Fri 28 Apr 2023 10:57:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203363
IP address blocks: 109.205.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:82:fb:94:f4:8a:10:18:b7:9f:74:bc:88:ce:ef:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 28 10:57:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c5e103781c89f09801392f48c28b62f2c72f17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:b1:ff:08:c0:0d:eb:ed:2d:cf:1f:87:b4:
b1:df:14:56:25:23:b1:a9:fc:b2:4e:46:89:22:01:
5d:05:52:3a:9e:34:32:a1:21:51:57:dd:2a:57:2c:
16:00:ca:90:3e:49:8f:e6:46:09:13:be:94:fa:35:
76:98:99:e4:e0:6c:7e:b7:b9:20:a5:a2:63:ea:b5:
12:17:93:7f:d3:d9:80:18:71:db:6d:c0:65:a5:6d:
bc:27:db:c3:2b:6e:70:f4:5a:4b:c2:ce:ab:30:d7:
d8:50:a9:a4:02:a2:bf:75:a9:80:5e:29:60:03:5f:
52:bc:c5:ce:75:ba:2d:b9:69:c1:dc:09:b9:34:9c:
51:64:13:46:08:91:6b:ec:f3:69:2d:4e:ca:3b:37:
78:63:58:29:11:9f:c5:0a:53:8b:c9:47:9e:22:1b:
b4:73:d9:d0:df:0c:a7:48:d8:e3:62:00:fb:f4:dd:
ea:43:d2:ae:7d:ee:a4:2b:93:29:60:fb:e2:bc:cc:
dc:14:a9:22:28:71:87:2b:3d:37:de:05:ea:23:8d:
e8:d9:f9:fe:82:bc:19:28:c0:a5:ac:50:26:8c:f8:
28:5b:0e:b7:83:7a:36:14:6d:13:72:d4:6b:50:44:
d2:37:15:23:38:95:6c:a2:e8:7a:f4:12:a9:dd:19:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:10:37:81:C8:9F:09:80:13:92:F4:8C:28:B6:2F:2C:72:F1:7A
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bF4QN4HInwmAE5L0jCi2Lyxy8Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ce:ff:24:2c:bf:26:8f:b2:c4:f7:20:0d:48:ed:24:47:df:
8b:86:be:de:3d:a2:f2:b8:1a:73:ad:8c:75:4d:ff:e6:86:52:
17:15:06:52:d4:6e:30:d9:fb:0d:94:58:38:84:d1:3a:e2:b8:
c7:db:21:91:47:18:56:69:f7:25:bf:b2:48:14:47:e0:c6:cc:
a9:fa:17:d6:1f:71:e5:f7:85:c1:6b:d8:39:65:9e:9a:b1:c0:
ff:4e:c2:39:62:b6:a3:c9:0d:9a:24:45:43:98:1e:aa:3c:51:
4e:3b:19:d0:73:2c:c2:88:6c:7b:84:4e:76:e1:e5:1b:96:f1:
fd:e9:96:a1:4e:94:11:a3:0a:85:f8:cc:d8:a7:8d:7f:9f:72:
20:be:fe:6e:91:1f:62:ed:ee:4a:d1:54:cb:4e:18:c5:30:b7:
2f:ce:2a:67:d7:d9:92:af:62:52:ce:c8:47:69:56:07:dd:7d:
3a:bf:22:12:d9:d3:86:fc:17:6c:3c:2f:69:40:24:0f:08:d3:
03:06:68:e6:a1:af:ea:fa:94:76:c5:6b:7e:8f:20:5a:90:cb:
54:07:05:e0:64:9d:8d:ae:9f:cc:9c:c2:0e:dd:4a:9b:c4:2e:
1f:7e:91:65:83:cc:1e:b0:5d:8c:71:cb:01:6e:27:d2:a3:de:
bc:76:56:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfHgvuU9IoQGLefdLyIzu9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwNDI4MTA1NzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzVlMTAzNzgxYzg5ZjA5ODAxMzkyZjQ4YzI4YjYyZjJjNzJmMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf2x/wjADevtLc8fh7Sx3xRWJSOx
qfyyTkaJIgFdBVI6njQyoSFRV90qVywWAMqQPkmP5kYJE76U+jV2mJnk4Gx+t7kg
paJj6rUSF5N/09mAGHHbbcBlpW28J9vDK25w9FpLws6rMNfYUKmkAqK/damAXilg
A19SvMXOdbotuWnB3Am5NJxRZBNGCJFr7PNpLU7KOzd4Y1gpEZ/FClOLyUeeIhu0
c9nQ3wynSNjjYgD79N3qQ9Kufe6kK5MpYPvivMzcFKkiKHGHKz033gXqI43o2fn+
grwZKMClrFAmjPgoWw63g3o2FG0TctRrUETSNxUjOJVsouh69BKp3Rn5WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGxeEDeByJ8JgBOS9Iwoti8scvF6MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvYkY0UU40SElud21BRTVMMGpDaTJMeXh5OFhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc3WMA0G
CSqGSIb3DQEBCwUAA4IBAQAqzv8kLL8mj7LE9yANSO0kR9+Lhr7ePaLyuBpzrYx1
Tf/mhlIXFQZS1G4w2fsNlFg4hNE64rjH2yGRRxhWafclv7JIFEfgxsyp+hfWH3Hl
94XBa9g5ZZ6ascD/TsI5YrajyQ2aJEVDmB6qPFFOOxnQcyzCiGx7hE524eUblvH9
6ZahTpQRowqF+MzYp41/n3Igvv5ukR9i7e5K0VTLThjFMLcvzipn19mSr2JSzshH
aVYH3X06vyIS2dOG/BdsPC9pQCQPCNMDBmjmoa/q+pR2xWt+jyBakMtUBwXgZJ2N
rp/MnMIO3UqbxC4ffpFlg8wesF2MccsBbifSo968dlbV
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:10 2025 by rpki-client