Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/jkThrbItWY3le2jZq8-DgDM6iI0.roa
File: jkThrbItWY3le2jZq8-DgDM6iI0.roa (raw, json)
Hash identifier: reWYLSBUNSF8UPkAubnf2BJU/8L5ZYQympzdfSP11O8=
Subject key identifier: 8E:44:E1:AD:B2:2D:59:8D:E5:7B:68:D9:AB:CF:83:80:33:3A:88:8D
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 03C9972C
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/jkThrbItWY3le2jZq8-DgDM6iI0.roa
Signing time: Sat 01 Jan 2022 16:02:31 +0000
ROA not before: Sat 01 Jan 2022 16:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212493
IP address blocks: 193.163.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63543084 (0x3c9972c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Jan 1 16:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e44e1adb22d598de57b68d9abcf8380333a888d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:80:3f:68:f2:55:a6:84:4f:85:19:c6:3d:
7e:40:ae:8b:8a:2d:46:31:fe:41:e8:f6:54:7a:7a:
b5:17:e9:c2:27:53:33:38:74:df:2b:29:b2:2e:b4:
9e:3b:7f:12:67:63:70:23:bd:8e:16:41:2c:80:d0:
11:8a:50:30:7e:49:b4:25:71:95:09:77:60:c7:08:
dd:f5:07:c3:be:40:0e:2e:54:f4:6e:02:62:5a:3a:
5f:82:f3:17:ab:cd:26:89:63:14:cb:ea:b9:cb:22:
eb:2b:b9:37:b2:37:bc:3f:65:bd:ec:bb:47:e9:77:
fb:66:b9:14:b8:63:a0:6c:26:ba:65:5b:af:06:23:
e6:48:67:bb:28:c6:b2:64:d2:65:30:93:a0:24:b0:
55:81:e0:67:90:54:51:16:18:f6:ac:cd:ca:04:a2:
66:eb:28:10:d3:53:80:2f:47:0a:b0:d6:20:7c:6c:
6c:31:b8:57:11:56:71:42:d0:81:eb:7f:f0:a7:44:
65:59:2c:ef:c0:60:69:fd:05:3d:d4:67:6e:52:cc:
18:63:07:d9:1a:8f:bb:a1:88:0c:29:23:f2:d6:f6:
7b:be:4f:6c:7e:99:a6:1c:ad:ba:d2:a9:f8:da:5a:
6b:cc:2f:d5:ac:dc:b0:51:a6:fc:61:72:9d:88:17:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:E1:AD:B2:2D:59:8D:E5:7B:68:D9:AB:CF:83:80:33:3A:88:8D
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/jkThrbItWY3le2jZq8-DgDM6iI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.49.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c7:88:d2:a1:7f:5b:96:f3:46:b1:46:be:98:c1:ee:85:f7:
6e:80:d8:ba:c4:39:10:51:38:87:b0:88:1c:7f:4e:b2:49:ad:
94:37:49:73:be:b0:89:b7:33:2f:fb:f7:02:64:59:bc:51:46:
2e:e1:43:f4:82:ec:49:5f:d7:4d:04:e3:09:c4:8b:6e:65:ad:
93:1e:e3:ba:27:2e:48:32:93:79:d3:92:40:0e:72:f1:7d:72:
89:a7:34:0b:07:aa:13:8a:f0:d9:5d:e8:d7:50:87:50:0d:e4:
05:09:02:9e:f3:0f:c8:ae:60:bb:b6:74:2a:54:a9:97:57:13:
dd:a7:2d:5b:5b:01:a7:5d:93:b3:1c:6b:de:17:d7:06:c7:3e:
86:b3:82:a6:56:62:16:a2:49:77:b1:9f:c0:f3:7c:50:f6:e7:
5f:a2:0d:c1:ee:79:0d:89:3d:42:5f:11:32:1e:f6:62:b8:d4:
93:85:6c:80:51:7e:f5:01:76:51:1b:c8:67:66:cb:2b:22:c2:
07:8d:f3:d1:3f:76:88:c2:79:1b:c7:2f:e9:5b:c4:d1:60:4b:
e9:56:e8:98:d2:c5:a0:ba:41:9a:42:39:3f:93:42:d8:c2:2a:
7e:29:1f:e8:1e:dc:76:1d:8e:db:a1:78:6d:aa:2d:27:d8:c8:
e6:9d:b0:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8mXLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NGE4ZDg0NzI5MDZjMjAzOGFhZWM4NGM3YjNlNTZjMjA5NmJlODYwMB4XDTIyMDEw
MTE2MDIzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGU0NGUxYWRiMjJk
NTk4ZGU1N2I2OGQ5YWJjZjgzODAzMzNhODg4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPDgD9o8lWmhE+FGcY9fkCui4otRjH+Qej2VHp6tRfpwidT
Mzh03yspsi60njt/EmdjcCO9jhZBLIDQEYpQMH5JtCVxlQl3YMcI3fUHw75ADi5U
9G4CYlo6X4LzF6vNJoljFMvqucsi6yu5N7I3vD9lvey7R+l3+2a5FLhjoGwmumVb
rwYj5khnuyjGsmTSZTCToCSwVYHgZ5BUURYY9qzNygSiZusoENNTgC9HCrDWIHxs
bDG4VxFWcULQget/8KdEZVks78Bgaf0FPdRnblLMGGMH2RqPu6GIDCkj8tb2e75P
bH6ZphytutKp+Npaa8wv1azcsFGm/GFynYgXDkcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSOROGtsi1ZjeV7aNmrz4OAMzqIjTAfBgNVHSMEGDAWgBR0qNhHKQbCA4qu
yEx7PlbCCWvoYDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RLallSeWtHd2dPS3JzaE1lejVXd2dscjZHQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjQvZDRkNTE5LWU3NzQtNDE1YS05M2FiLTM5NTZlNTZjMTgzNS8x
L2prVGhyYkl0V1kzbGUyalpxOC1EZ0RNNmlJMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQv
ZDRkNTE5LWU3NzQtNDE1YS05M2FiLTM5NTZlNTZjMTgzNS8xL2RLallSeWtHd2dP
S3JzaE1lejVXd2dscjZHQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGjMTANBgkqhkiG9w0BAQsFAAOC
AQEALceI0qF/W5bzRrFGvpjB7oX3boDYusQ5EFE4h7CIHH9OskmtlDdJc76wibcz
L/v3AmRZvFFGLuFD9ILsSV/XTQTjCcSLbmWtkx7juicuSDKTedOSQA5y8X1yiac0
CweqE4rw2V3o11CHUA3kBQkCnvMPyK5gu7Z0KlSpl1cT3actW1sBp12Tsxxr3hfX
Bsc+hrOCplZiFqJJd7GfwPN8UPbnX6INwe55DYk9Ql8RMh72YrjUk4VsgFF+9QF2
URvIZ2bLKyLCB43z0T92iMJ5G8cv6VvE0WBL6VbomNLFoLpBmkI5P5NC2MIqfikf
6B7cdh2O26F4baotJ9jI5p2wsw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:45:00 2025 by rpki-client