Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/RsFcG4ebUX7HTXzlTvGrUu8avZQ.roa
File: RsFcG4ebUX7HTXzlTvGrUu8avZQ.roa (raw, json)
Hash identifier: snsdO17KkQw2sjDv6YoI5VONCn5Z0PHTj8aAqr8xZbY=
Subject key identifier: 46:C1:5C:1B:87:9B:51:7E:C7:4D:7C:E5:4E:F1:AB:52:EF:1A:BD:94
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018BD75DBA9D7C3E36EE4F0B7E2AA97AA6FF
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/RsFcG4ebUX7HTXzlTvGrUu8avZQ.roa
Signing time: Thu 16 Nov 2023 09:02:05 +0000
ROA not before: Thu 16 Nov 2023 09:02:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216062
IP address blocks: 195.211.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:5d:ba:9d:7c:3e:36:ee:4f:0b:7e:2a:a9:7a:a6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Nov 16 09:02:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46c15c1b879b517ec74d7ce54ef1ab52ef1abd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:fc:01:69:74:df:ea:66:b9:4d:04:7e:77:
5d:ea:7d:eb:cd:59:1b:c8:72:e4:26:4b:56:63:30:
c6:d6:15:87:60:6a:fa:13:77:3a:7c:a9:46:b6:39:
44:56:6c:ee:e4:99:9c:c2:e1:07:35:af:68:d9:41:
4e:57:23:cd:84:05:4a:02:c4:74:3f:1c:bb:af:6d:
40:df:ae:ee:42:0f:92:07:27:4f:84:80:b3:33:e1:
27:38:b1:8a:ce:4b:56:13:b1:c2:b6:69:b8:72:0c:
c7:84:b9:4c:88:fb:6c:80:da:07:19:81:9d:b4:04:
ec:a6:34:9c:9b:77:ed:fa:76:69:54:d9:f3:37:10:
f4:51:d5:8a:d1:05:a5:33:3f:b0:5f:d7:71:b6:3e:
7b:87:ce:3f:50:3f:89:a2:b5:2f:36:30:3c:eb:29:
ee:e5:01:06:a7:8c:78:a4:1c:da:84:10:16:9a:3a:
64:e4:a4:d6:a9:dc:56:8a:61:e2:6a:ee:09:ea:cd:
ea:5c:53:13:69:91:cb:12:23:1b:bc:c7:61:1f:13:
b5:76:81:d9:3e:ce:79:f4:8f:76:67:72:0a:a6:ca:
1f:2e:5b:71:45:95:eb:2b:98:e8:69:56:8d:4a:d3:
3b:ae:e6:97:15:cb:fd:56:d4:6d:ed:4a:e5:b5:32:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C1:5C:1B:87:9B:51:7E:C7:4D:7C:E5:4E:F1:AB:52:EF:1A:BD:94
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/RsFcG4ebUX7HTXzlTvGrUu8avZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:15:43:05:60:57:b8:27:11:77:2a:c1:84:7a:d1:8e:6d:37:
31:da:6a:31:b4:9a:ad:39:7f:72:40:75:75:17:38:73:55:8e:
aa:2c:26:39:22:4d:7a:09:5b:aa:86:f3:c7:3c:09:f4:f3:cb:
f9:5f:2e:7d:9b:06:37:d5:07:b8:5f:91:ef:64:26:23:bb:fc:
8d:c8:17:a0:54:5d:dd:f8:d5:ae:0c:c1:91:f1:26:5d:4e:f6:
60:71:48:8a:ed:bb:99:f4:1b:7a:12:46:0d:83:a1:9d:57:90:
25:8c:68:16:ab:33:f7:cb:e4:80:86:db:c8:cc:12:78:18:41:
71:eb:6e:3a:9d:9e:34:4c:1a:e5:f8:e8:28:26:b9:46:9d:e7:
98:5a:37:04:f9:0c:a2:bf:47:f7:1e:9b:ff:90:73:7a:22:c2:
7e:5d:b3:19:27:89:4f:a8:bc:b6:55:af:6e:ab:ed:48:07:67:
29:6d:32:e5:e2:09:83:a1:68:5d:93:9e:18:3c:ca:43:1d:be:
82:30:cd:89:a0:a6:52:9e:bc:f0:d1:b0:ce:d3:bc:ab:a4:65:
25:bc:73:1d:1e:ac:91:8e:e2:dc:35:93:95:5f:41:64:37:f9:
f7:52:a1:37:d5:e1:2f:75:c9:5c:d6:52:49:38:90:41:40:55:
84:bc:d5:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvXXbqdfD427k8Lfiqpeqb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh
ZGZhMDAwHhcNMjMxMTE2MDkwMjA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmMxNWMxYjg3OWI1MTdlYzc0ZDdjZTU0ZWYxYWI1MmVmMWFiZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0L8AWl03+pmuU0Efndd6n3rzVkb
yHLkJktWYzDG1hWHYGr6E3c6fKlGtjlEVmzu5JmcwuEHNa9o2UFOVyPNhAVKAsR0
Pxy7r21A367uQg+SBydPhICzM+EnOLGKzktWE7HCtmm4cgzHhLlMiPtsgNoHGYGd
tATspjScm3ft+nZpVNnzNxD0UdWK0QWlMz+wX9dxtj57h84/UD+JorUvNjA86ynu
5QEGp4x4pBzahBAWmjpk5KTWqdxWimHiau4J6s3qXFMTaZHLEiMbvMdhHxO1doHZ
Ps559I92Z3IKpsofLltxRZXrK5joaVaNStM7ruaXFcv9VtRt7UrltTJHcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEbBXBuHm1F+x0185U7xq1LvGr2UMB8GA1UdIwQY
MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt
OGRmMzYzMzdlNmJjLzEvUnNGY0c0ZWJVWDdIVFh6bFR2R3JVdThhdlpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj
LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9OjMA0G
CSqGSIb3DQEBCwUAA4IBAQA+FUMFYFe4JxF3KsGEetGObTcx2moxtJqtOX9yQHV1
FzhzVY6qLCY5Ik16CVuqhvPHPAn088v5Xy59mwY31Qe4X5HvZCYju/yNyBegVF3d
+NWuDMGR8SZdTvZgcUiK7buZ9Bt6EkYNg6GdV5AljGgWqzP3y+SAhtvIzBJ4GEFx
6246nZ40TBrl+OgoJrlGneeYWjcE+Qyiv0f3Hpv/kHN6IsJ+XbMZJ4lPqLy2Va9u
q+1IB2cpbTLl4gmDoWhdk54YPMpDHb6CMM2JoKZSnrzw0bDO07yrpGUlvHMdHqyR
juLcNZOVX0FkN/n3UqE31eEvdclc1lJJOJBBQFWEvNX2
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:16 2025 by rpki-client