Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/85xAZwKn4KY7zzyz0LO-0xT4WXY.roa
File: 85xAZwKn4KY7zzyz0LO-0xT4WXY.roa (raw, json)
Hash identifier: dt71/cpgmTrT6bCtmki11VU6gU082gEnQ2QHKrmawJs=
Subject key identifier: F3:9C:40:67:02:A7:E0:A6:3B:CF:3C:B3:D0:B3:BE:D3:14:F8:59:76
Certificate issuer: /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial: 01856CAF3E84300ACA564E645650B5868EA4
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/85xAZwKn4KY7zzyz0LO-0xT4WXY.roa
Signing time: Sun 01 Jan 2023 09:35:01 +0000
ROA not before: Sun 01 Jan 2023 09:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35724
IP address blocks: 194.50.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:3e:84:30:0a:ca:56:4e:64:56:50:b5:86:8e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Validity
Not Before: Jan 1 09:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f39c406702a7e0a63bcf3cb3d0b3bed314f85976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fe:d9:99:45:42:9e:27:87:80:75:f0:89:16:
7c:cb:6a:0c:76:79:33:b5:28:05:04:5a:50:c0:ba:
2d:d3:44:0e:5a:8f:a5:11:2f:f2:ee:7a:35:55:48:
f3:9d:37:2e:32:8e:34:40:c6:9f:81:60:fd:d7:6d:
98:52:ad:1f:f4:11:b7:7e:d2:9f:9a:a2:b4:4a:ad:
51:49:8e:3c:c4:6e:6c:d5:d3:21:d0:14:ce:9a:5a:
a1:fa:05:8e:47:7c:f0:6a:08:4a:e9:5e:9b:f1:f5:
02:21:94:f1:70:ee:0b:28:ee:cd:5c:99:1b:cc:5e:
15:26:40:bd:be:ce:51:3c:7f:33:d5:85:bf:a0:8e:
5c:72:a4:cd:f6:85:36:86:55:b0:1a:1b:44:7d:f3:
35:22:1e:46:ca:7d:da:31:d4:da:8c:74:c2:c0:ef:
34:67:35:70:e1:57:f9:68:7d:c1:4f:b4:8a:30:e4:
ee:b7:26:05:b9:72:20:58:39:e5:8b:c5:9c:57:f3:
2b:ce:a8:d4:ed:b7:47:61:0c:4f:9a:51:d5:b2:8d:
32:5d:b3:98:88:94:c6:0d:76:d6:f4:3b:5e:20:5a:
fa:ad:3a:69:2e:1c:af:58:ed:3d:61:68:36:55:92:
7c:bf:fe:0c:bc:d9:ea:d8:bf:d7:81:3e:c1:93:34:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9C:40:67:02:A7:E0:A6:3B:CF:3C:B3:D0:B3:BE:D3:14:F8:59:76
X509v3 Authority Key Identifier:
keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/85xAZwKn4KY7zzyz0LO-0xT4WXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.162.0/24
Signature Algorithm: sha256WithRSAEncryption
64:83:a7:63:30:b1:27:29:e1:01:e3:bf:34:63:d6:88:10:63:
0d:24:a0:66:b4:57:08:07:10:66:8c:2c:89:e8:cc:13:91:c3:
3a:d0:52:f4:9f:3f:d8:0c:8a:21:2c:da:5c:95:5b:83:59:40:
3b:cc:03:20:c1:6f:a4:4a:91:cd:42:19:60:54:2f:a1:79:ae:
c3:a3:23:7d:2a:3e:31:49:e9:62:33:8a:4e:08:27:17:79:dd:
f7:d2:99:0f:82:1b:fd:8d:df:b8:bf:a2:30:c2:6e:2f:f3:9e:
c9:2b:6f:24:65:93:9c:4a:8f:74:5d:11:d0:99:e5:52:c8:3a:
5b:c3:4d:88:db:0c:76:3e:6b:c3:11:43:3f:ad:ef:4f:73:b6:
dc:9a:40:4d:de:8a:a9:e3:c6:bf:d8:b8:8e:08:f1:db:c6:fa:
0a:82:2a:85:4d:f3:33:94:12:e0:69:4b:eb:76:11:16:60:9b:
b2:31:aa:fe:f6:9a:37:b7:5d:16:4a:44:9c:7a:e2:b2:0f:9f:
46:9f:a2:10:50:aa:90:9f:48:ab:78:73:d6:6d:35:75:81:52:
97:5c:f8:56:86:73:8b:dc:a2:2d:03:4a:6b:d7:92:46:91:b7:
26:30:c2:e8:5b:a2:b2:2a:2b:78:f6:98:50:e0:07:34:be:d6:
ec:f6:c3:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsrz6EMArKVk5kVlC1ho6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDMzMDliZGE0NmU4ZWQyNWVjMGMxZThhOTMwMDZmMjI2
OTFlM2MwHhcNMjMwMTAxMDkzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzljNDA2NzAyYTdlMGE2M2JjZjNjYjNkMGIzYmVkMzE0Zjg1OTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv7ZmUVCnieHgHXwiRZ8y2oMdnkz
tSgFBFpQwLot00QOWo+lES/y7no1VUjznTcuMo40QMafgWD9122YUq0f9BG3ftKf
mqK0Sq1RSY48xG5s1dMh0BTOmlqh+gWOR3zwaghK6V6b8fUCIZTxcO4LKO7NXJkb
zF4VJkC9vs5RPH8z1YW/oI5ccqTN9oU2hlWwGhtEffM1Ih5Gyn3aMdTajHTCwO80
ZzVw4Vf5aH3BT7SKMOTutyYFuXIgWDnli8WcV/MrzqjU7bdHYQxPmlHVso0yXbOY
iJTGDXbW9DteIFr6rTppLhyvWO09YWg2VZJ8v/4MvNnq2L/XgT7BkzT+jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOcQGcCp+CmO888s9CzvtMU+Fl2MB8GA1UdIwQY
MBaAFPxDMJvaRujtJewMHoqTAG8iaR48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VNd205cEc2TzBsN0F3ZWlwTUFieUpwSGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wMDgyMTctNjAzNC00ZjhmLThlMjgt
NjAyNDczZGU2ZTNkLzEvODV4QVp3S240S1k3enp5ejBMTy0weFQ0V1hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wMDgyMTctNjAzNC00ZjhmLThlMjgtNjAyNDczZGU2ZTNk
LzEvX0VNd205cEc2TzBsN0F3ZWlwTUFieUpwSGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjKiMA0G
CSqGSIb3DQEBCwUAA4IBAQBkg6djMLEnKeEB4780Y9aIEGMNJKBmtFcIBxBmjCyJ
6MwTkcM60FL0nz/YDIohLNpclVuDWUA7zAMgwW+kSpHNQhlgVC+hea7DoyN9Kj4x
SeliM4pOCCcXed330pkPghv9jd+4v6Iwwm4v857JK28kZZOcSo90XRHQmeVSyDpb
w02I2wx2PmvDEUM/re9Pc7bcmkBN3oqp48a/2LiOCPHbxvoKgiqFTfMzlBLgaUvr
dhEWYJuyMar+9po3t10WSkSceuKyD59Gn6IQUKqQn0ireHPWbTV1gVKXXPhWhnOL
3KItA0pr15JGkbcmMMLoW6KyKit49phQ4Ac0vtbs9sNP
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:15:18 2025 by rpki-client