Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/E5oywyuYsKecJM9RUrmmtzx94o0.roa
File: E5oywyuYsKecJM9RUrmmtzx94o0.roa (raw, json)
Hash identifier: wnPCT8WRCHU+qgFzm5qnZqT2qUWdRj5WB1z2tuhp7J4=
Subject key identifier: 13:9A:32:C3:2B:98:B0:A7:9C:24:CF:51:52:B9:A6:B7:3C:7D:E2:8D
Certificate issuer: /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial: 0185719E79BE2E7496BAA371D547341BC44E
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/E5oywyuYsKecJM9RUrmmtzx94o0.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29682
IP address blocks: 193.22.0.0/24 maxlen: 24
2001:67c:21b8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:79:be:2e:74:96:ba:a3:71:d5:47:34:1b:c4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=139a32c32b98b0a79c24cf5152b9a6b73c7de28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:dd:ff:0e:62:03:d7:61:21:11:f6:55:bf:
4e:d6:0a:1b:01:91:5f:1f:52:a7:b0:7f:df:f3:8a:
a3:40:e5:a1:89:cb:ff:f1:39:fe:b9:7c:b6:46:d1:
50:6f:8d:21:36:9b:ea:8d:d2:a4:a7:f8:ad:1e:ea:
f3:7e:cf:e5:5b:45:b1:4d:e8:36:cc:05:b8:24:d2:
18:65:2e:14:27:d9:df:c9:ee:23:57:59:8d:b3:ba:
72:7b:8a:40:99:64:99:e6:b5:a9:72:34:70:4b:54:
b8:e2:5c:75:40:33:25:7e:1d:60:96:ad:d5:f5:4c:
f5:6e:c8:19:47:ec:cd:96:96:9c:05:35:27:37:e9:
2f:07:d3:b9:2a:fc:0d:d5:ea:d9:f5:d6:fa:f2:21:
f3:cc:53:fa:37:e6:cb:c2:b1:cf:4f:45:3e:32:4b:
a4:7f:fb:10:bd:eb:7c:ff:52:0e:4a:4d:c9:15:d7:
1d:0a:86:60:26:48:04:95:4a:d7:de:9b:95:b8:7c:
c8:e0:be:52:57:4a:a8:c2:28:dc:1f:c4:19:ae:73:
de:31:e7:92:2e:dc:5b:d0:8f:4b:b2:77:0b:01:4f:
2d:13:e4:bf:f6:a8:29:fe:ea:67:11:11:74:1e:2c:
7d:26:08:b9:54:86:6a:ca:22:d5:f3:84:d6:88:ec:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9A:32:C3:2B:98:B0:A7:9C:24:CF:51:52:B9:A6:B7:3C:7D:E2:8D
X509v3 Authority Key Identifier:
keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/E5oywyuYsKecJM9RUrmmtzx94o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.0.0/24
IPv6:
2001:67c:21b8::/48
Signature Algorithm: sha256WithRSAEncryption
62:77:a3:f4:12:39:1b:5a:d6:37:96:c5:7e:35:5d:04:28:26:
a9:49:41:7a:4c:9c:7f:2d:4a:ad:5f:8b:75:b5:11:c4:78:28:
59:49:72:9c:55:d5:70:49:28:b2:20:8b:d6:0e:2b:d9:a5:c7:
cf:c1:5d:dc:b7:c3:79:9d:f2:07:a0:6f:0c:57:f8:f0:0e:bb:
40:4c:d6:82:c6:f3:1e:e4:01:b9:bb:0f:3b:81:5d:67:9c:74:
2b:39:7a:8c:06:9b:da:47:49:cf:5f:0e:04:58:06:71:f3:fc:
ad:ab:1c:c8:49:eb:5c:f9:26:4a:d6:6a:38:34:0a:b6:09:0c:
ba:99:c2:68:95:75:4d:55:bf:38:0f:d4:e0:d0:81:8e:a2:c6:
9b:09:fa:1c:6b:3e:8c:17:d9:5c:4d:ec:13:90:75:d6:12:2a:
fd:ad:3b:89:bf:96:0c:04:7e:8b:23:f7:48:81:b9:59:1b:25:
6b:2f:21:5a:2c:d6:fd:9a:00:93:89:08:69:92:c0:c8:3f:83:
e1:65:d3:f5:5f:12:08:eb:0f:88:ec:b0:25:e8:2a:2c:9f:14:
3e:ee:d7:de:6f:00:6e:58:ac:07:c4:c1:f6:eb:c9:23:46:a9:
aa:d9:a1:a5:43:02:20:05:32:b1:3a:69:05:dc:3d:37:45:8b:
4e:fe:c6:c8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxnnm+LnSWuqNx1Uc0G8ROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMDM1ODRiY2U1NDJlNTU0ZTMyMjc5MDk0NDNmNjgyMmMz
ZTRmMDMwHhcNMjMwMTAyMDgzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzlhMzJjMzJiOThiMGE3OWMyNGNmNTE1MmI5YTZiNzNjN2RlMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTvd/w5iA9dhIRH2Vb9O1gobAZFf
H1KnsH/f84qjQOWhicv/8Tn+uXy2RtFQb40hNpvqjdKkp/itHurzfs/lW0WxTeg2
zAW4JNIYZS4UJ9nfye4jV1mNs7pye4pAmWSZ5rWpcjRwS1S44lx1QDMlfh1glq3V
9Uz1bsgZR+zNlpacBTUnN+kvB9O5KvwN1erZ9db68iHzzFP6N+bLwrHPT0U+Mkuk
f/sQvet8/1IOSk3JFdcdCoZgJkgElUrX3puVuHzI4L5SV0qowijcH8QZrnPeMeeS
Ltxb0I9LsncLAU8tE+S/9qgp/upnERF0Hix9Jgi5VIZqyiLV84TWiOwQqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBOaMsMrmLCnnCTPUVK5prc8feKNMB8GA1UdIwQY
MBaAFGsDWEvOVC5VTjInkJRD9oIsPk8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEt
MzViMTljZjkyZGY5LzEvRTVveXd5dVlzS2VjSk05UlVybW10eng5NG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEtMzViMTljZjkyZGY5
LzEvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRYAMA8E
AgACMAkDBwAgAQZ8IbgwDQYJKoZIhvcNAQELBQADggEBAGJ3o/QSORta1jeWxX41
XQQoJqlJQXpMnH8tSq1fi3W1EcR4KFlJcpxV1XBJKLIgi9YOK9mlx8/BXdy3w3md
8gegbwxX+PAOu0BM1oLG8x7kAbm7DzuBXWecdCs5eowGm9pHSc9fDgRYBnHz/K2r
HMhJ61z5JkrWajg0CrYJDLqZwmiVdU1VvzgP1ODQgY6ixpsJ+hxrPowX2VxN7BOQ
ddYSKv2tO4m/lgwEfosj90iBuVkbJWsvIVos1v2aAJOJCGmSwMg/g+Fl0/VfEgjr
D4jssCXoKiyfFD7u195vAG5YrAfEwfbrySNGqarZoaVDAiAFMrE6aQXcPTdFi07+
xsg=
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:20 2025 by rpki-client