Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Px84OLPulYaL3FZcNDmCSpmgPtU.roa
File: Px84OLPulYaL3FZcNDmCSpmgPtU.roa (raw, json)
Hash identifier: c41PoovUa/XRo0xJrQfk6Z+6HOZJXytwNQxTS8IWyac=
Subject key identifier: 3F:1F:38:38:B3:EE:95:86:8B:DC:56:5C:34:39:82:4A:99:A0:3E:D5
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0E3BC763
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Px84OLPulYaL3FZcNDmCSpmgPtU.roa
Signing time: Wed 20 Apr 2022 06:37:54 +0000
ROA not before: Wed 20 Apr 2022 06:37:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50753
IP address blocks: 109.236.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238798691 (0xe3bc763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Apr 20 06:37:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f1f3838b3ee95868bdc565c3439824a99a03ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:6f:5d:bf:69:eb:88:ee:c2:3e:16:b0:90:
91:e9:84:d0:4a:46:c2:d0:aa:b3:61:3f:ff:26:46:
cd:1e:3f:69:81:44:06:4f:1d:46:38:83:50:19:32:
6f:56:4a:82:ba:f4:b4:14:e5:cc:7c:57:a5:15:72:
7f:10:4c:62:b2:d0:8d:4a:05:55:9f:32:ef:af:76:
cc:c3:4c:c3:39:97:a4:31:69:8d:c4:f9:ea:c0:ba:
e0:27:99:04:de:0b:73:1a:8f:36:07:52:91:ec:e4:
bf:e9:a1:1d:e4:52:db:54:91:0d:57:0a:b5:2c:6b:
70:eb:64:43:2a:02:2b:ff:87:32:2c:df:7b:f8:9e:
2e:d3:a3:44:1c:70:8d:42:51:c0:94:1e:1f:e6:3b:
d6:cb:4b:32:9b:79:93:c4:c4:5f:29:c4:c9:43:48:
71:cc:96:18:79:bc:b7:61:60:c1:74:fa:a0:c9:9f:
79:6d:4b:cf:0a:f6:f1:53:33:da:87:14:27:f1:73:
d8:a6:21:77:a0:58:8f:54:b6:5a:f3:23:a6:bb:eb:
09:48:db:7f:87:6e:3c:bb:0a:6b:54:a5:f5:1e:9e:
93:bf:5d:72:d0:16:8e:0b:99:c1:68:b0:c5:1a:d2:
27:6d:97:c8:32:be:78:a0:ab:0c:62:b8:ed:67:3c:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1F:38:38:B3:EE:95:86:8B:DC:56:5C:34:39:82:4A:99:A0:3E:D5
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Px84OLPulYaL3FZcNDmCSpmgPtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.252.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d4:46:f2:b5:80:69:73:dd:ae:e4:25:28:fa:6d:1e:7d:4a:
23:a1:f5:bb:20:e7:d7:f0:c6:d7:4f:34:79:e6:65:34:a1:52:
a3:e6:be:e4:6e:34:77:ef:e1:5e:a9:4c:50:ba:fa:c8:d7:cc:
d9:cd:ed:e1:f9:e4:cc:c3:3e:96:3c:10:57:35:d7:41:74:da:
05:28:d8:cc:be:e7:3d:b6:e8:da:26:5d:70:c1:fa:dd:5c:68:
f9:7a:3c:c3:de:d6:1a:41:c3:3c:db:6e:b7:b4:30:8e:98:7b:
e1:05:a5:58:3f:df:88:74:3b:49:e3:5c:2b:27:e5:36:8b:d4:
ca:e3:bf:03:4f:44:4d:8d:13:23:72:b2:8e:a7:d2:19:da:0e:
ac:51:96:f5:7f:a6:53:43:f2:51:9b:d9:dc:2a:01:f9:88:fd:
c6:d7:42:dd:51:be:6b:0c:5f:92:be:31:06:02:f4:92:39:35:
c0:df:55:53:06:53:70:aa:17:38:1a:2b:ac:52:fe:92:e4:c1:
41:ea:35:8e:01:cb:1a:90:ea:c5:d5:e8:1b:fb:9c:de:a5:b9:
91:af:20:6f:87:26:03:6a:90:f4:a1:80:11:e6:c0:70:f3:31:
78:cb:38:85:2f:d1:cd:61:3d:d1:be:54:7e:fb:d8:69:17:d8:
57:7d:e9:0f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDjvHYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
M2MzNDJjMDZhYWNjMzU5ZDM5NDM5ZmY1OGRlZmE4ZWExODc1NzQ4MB4XDTIyMDQy
MDA2Mzc1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2YxZjM4MzhiM2Vl
OTU4NjhiZGM1NjVjMzQzOTgyNGE5OWEwM2VkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMM0b12/aeuI7sI+FrCQkemE0EpGwtCqs2E//yZGzR4/aYFE
Bk8dRjiDUBkyb1ZKgrr0tBTlzHxXpRVyfxBMYrLQjUoFVZ8y7692zMNMwzmXpDFp
jcT56sC64CeZBN4LcxqPNgdSkezkv+mhHeRS21SRDVcKtSxrcOtkQyoCK/+HMizf
e/ieLtOjRBxwjUJRwJQeH+Y71stLMpt5k8TEXynEyUNIccyWGHm8t2FgwXT6oMmf
eW1Lzwr28VMz2ocUJ/Fz2KYhd6BYj1S2WvMjprvrCUjbf4duPLsKa1Sl9R6ek79d
ctAWjguZwWiwxRrSJ22XyDK+eKCrDGK47Wc8kKkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ/Hzg4s+6VhovcVlw0OYJKmaA+1TAfBgNVHSMEGDAWgBQzw0LAaqzDWdOU
Of9Y3vqOoYdXSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L004TkN3R3FzdzFuVGxEbl9XTjc2anFHSFYwZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvYzU1ZmRmLWE2OGEtNGFhMC1iOGM1LTdmMjMzMzYwNDk5Ny8x
L1B4ODRPTFB1bFlhTDNGWmNORG1DU3BtZ1B0VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
YzU1ZmRmLWE2OGEtNGFhMC1iOGM1LTdmMjMzMzYwNDk5Ny8xL004TkN3R3FzdzFu
VGxEbl9XTjc2anFHSFYwZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG3s/DANBgkqhkiG9w0BAQsFAAOC
AQEAktRG8rWAaXPdruQlKPptHn1KI6H1uyDn1/DG1080eeZlNKFSo+a+5G40d+/h
XqlMULr6yNfM2c3t4fnkzMM+ljwQVzXXQXTaBSjYzL7nPbbo2iZdcMH63Vxo+Xo8
w97WGkHDPNtut7Qwjph74QWlWD/fiHQ7SeNcKyflNovUyuO/A09ETY0TI3KyjqfS
GdoOrFGW9X+mU0PyUZvZ3CoB+Yj9xtdC3VG+awxfkr4xBgL0kjk1wN9VUwZTcKoX
OBorrFL+kuTBQeo1jgHLGpDqxdXoG/uc3qW5ka8gb4cmA2qQ9KGAEebAcPMxeMs4
hS/RzWE90b5UfvvYaRfYV33pDw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:38:18 2025 by rpki-client