Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/oN9sUJv8qLQcmofjpQxaMxyiw7o.roa
File: oN9sUJv8qLQcmofjpQxaMxyiw7o.roa (raw, json)
Hash identifier: Mcx4TIDY2xayg2ucfwIxrEAJXOM96Z/L4oZjW6RlK2g=
Subject key identifier: A0:DF:6C:50:9B:FC:A8:B4:1C:9A:87:E3:A5:0C:5A:33:1C:A2:C3:BA
Certificate issuer: /CN=5a8655ebf944500025a5f075ba7bde641584fda6
Certificate serial: 01856B81000898ABEB00017B229CB0AE48F3
Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/oN9sUJv8qLQcmofjpQxaMxyiw7o.roa
Signing time: Sun 01 Jan 2023 04:04:54 +0000
ROA not before: Sun 01 Jan 2023 04:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212274
IP address blocks: 195.144.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:00:08:98:ab:eb:00:01:7b:22:9c:b0:ae:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6
Validity
Not Before: Jan 1 04:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0df6c509bfca8b41c9a87e3a50c5a331ca2c3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:75:41:d4:85:9e:af:8d:a3:85:ac:5c:37:
b4:83:e6:f3:3e:6e:46:8d:12:c8:6d:bc:0b:63:a3:
d7:3a:6a:22:d0:79:a3:18:c7:dd:7a:92:bf:3c:ee:
cf:cc:f0:08:b9:e2:5e:58:ba:75:30:2c:a3:55:16:
b8:e7:ad:38:49:cb:a4:22:64:f4:f4:f1:fc:42:09:
fc:37:76:31:75:ac:eb:1c:75:a9:ee:71:a0:41:90:
d0:00:2b:f5:5f:ae:7f:e5:1f:7f:90:e0:4b:60:d2:
d8:24:9c:29:dc:fe:28:1d:69:ff:8c:22:07:96:7a:
45:f3:46:da:6e:fe:ca:a7:0a:bc:39:08:8a:a5:e4:
69:c4:70:a1:73:10:f0:f1:62:7c:59:f0:34:66:c7:
4c:df:18:c8:a2:ef:2d:f3:5f:a1:9d:34:5f:64:fd:
65:ef:26:58:6a:75:a3:63:b4:85:e3:5e:f7:fa:3f:
57:c6:ce:ee:a9:62:96:d1:5d:36:22:21:07:b8:50:
61:be:c2:4e:27:77:bd:65:14:c2:11:6d:93:c9:de:
c2:88:f6:c9:81:4d:0e:ca:36:84:d9:83:e9:42:f2:
78:30:7c:84:03:07:9e:4b:bc:55:7c:8a:ee:d5:3d:
2c:1c:1e:e5:72:bc:db:ab:6b:b2:82:24:14:c0:4d:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DF:6C:50:9B:FC:A8:B4:1C:9A:87:E3:A5:0C:5A:33:1C:A2:C3:BA
X509v3 Authority Key Identifier:
keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/oN9sUJv8qLQcmofjpQxaMxyiw7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.16.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c3:e2:25:ab:43:e5:df:51:e0:d6:a9:bb:3d:32:e5:42:45:
82:f7:7e:d4:c7:49:50:af:47:c1:94:13:26:c0:61:e3:5d:67:
1f:bf:43:b8:ac:f1:4b:a1:57:cb:11:86:f5:4e:55:8a:7d:0a:
9a:3a:4f:e6:73:ed:bb:30:5e:a6:00:3b:b7:c6:6a:3a:aa:30:
4a:05:ad:56:96:7c:b9:a1:a5:22:55:f4:72:a7:c0:f4:83:8b:
8c:ba:0b:7f:d7:f5:4a:2b:5d:a9:05:6c:5e:7d:02:be:bd:22:
c5:11:98:e4:5b:5a:f9:d8:55:41:6b:8c:cb:39:e9:8f:a1:bf:
83:47:c6:01:81:ea:52:97:46:65:91:0c:8e:30:e7:37:09:0b:
b9:f2:0f:b8:5f:72:d8:cc:6e:ee:cc:38:d3:cc:66:95:85:07:
5d:d9:2a:4f:fe:d3:24:bc:14:9a:59:55:d6:ef:80:44:41:5a:
f5:81:f0:11:cc:3c:10:84:94:61:f2:3e:a5:29:33:14:61:f2:
7d:62:48:1a:ea:f2:74:4d:d0:2e:4b:1f:f3:98:53:82:d5:16:
ce:88:66:45:21:64:5c:7f:e2:4b:88:fd:63:e1:b3:ec:d6:f1:
c4:63:c4:2f:2c:e1:bc:6f:4b:6e:24:de:bd:f5:c0:f5:77:7e:
4d:24:2e:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrgQAImKvrAAF7IpywrkjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhODY1NWViZjk0NDUwMDAyNWE1ZjA3NWJhN2JkZTY0MTU4
NGZkYTYwHhcNMjMwMTAxMDQwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGRmNmM1MDliZmNhOGI0MWM5YTg3ZTNhNTBjNWEzMzFjYTJjM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz91QdSFnq+No4WsXDe0g+bzPm5G
jRLIbbwLY6PXOmoi0HmjGMfdepK/PO7PzPAIueJeWLp1MCyjVRa45604ScukImT0
9PH8Qgn8N3YxdazrHHWp7nGgQZDQACv1X65/5R9/kOBLYNLYJJwp3P4oHWn/jCIH
lnpF80babv7Kpwq8OQiKpeRpxHChcxDw8WJ8WfA0ZsdM3xjIou8t81+hnTRfZP1l
7yZYanWjY7SF4173+j9Xxs7uqWKW0V02IiEHuFBhvsJOJ3e9ZRTCEW2Tyd7CiPbJ
gU0OyjaE2YPpQvJ4MHyEAweeS7xVfIru1T0sHB7lcrzbq2uygiQUwE32HwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKDfbFCb/Ki0HJqH46UMWjMcosO6MB8GA1UdIwQY
MBaAFFqGVev5RFAAJaXwdbp73mQVhP2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV29aVjZfbEVVQUFscGZCMXVudmVaQldFX2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81NGZkODQtNmU5Ni00N2IyLTk3YTUt
ZjJiNTU2ZWQ2OTkwLzEvb045c1VKdjhxTFFjbW9manBReGFNeHlpdzdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC81NGZkODQtNmU5Ni00N2IyLTk3YTUtZjJiNTU2ZWQ2OTkw
LzEvV29aVjZfbEVVQUFscGZCMXVudmVaQldFX2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5AQMA0G
CSqGSIb3DQEBCwUAA4IBAQATw+Ilq0Pl31Hg1qm7PTLlQkWC937Ux0lQr0fBlBMm
wGHjXWcfv0O4rPFLoVfLEYb1TlWKfQqaOk/mc+27MF6mADu3xmo6qjBKBa1Wlny5
oaUiVfRyp8D0g4uMugt/1/VKK12pBWxefQK+vSLFEZjkW1r52FVBa4zLOemPob+D
R8YBgepSl0ZlkQyOMOc3CQu58g+4X3LYzG7uzDjTzGaVhQdd2SpP/tMkvBSaWVXW
74BEQVr1gfARzDwQhJRh8j6lKTMUYfJ9Ykga6vJ0TdAuSx/zmFOC1RbOiGZFIWRc
f+JLiP1j4bPs1vHEY8QvLOG8b0tuJN699cD1d35NJC4R
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:13:42 2025 by rpki-client