Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197644.roa
File: AS197644.roa (raw, json)
Hash identifier: 5Yj6nnd2DycdnqayEhdkfQCYfMVbVjbHWrzij7J5ZK4=
Subject key identifier: C4:CE:B5:A3:6E:07:BA:97:C0:E4:BD:2B:FC:49:B4:9E:21:D5:0A:87
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 728ABDC432F259DD6B543EB048A0735BAD761C5F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197644.roa
Signing time: Fri 04 Aug 2023 15:30:13 +0000
ROA not before: Fri 04 Aug 2023 15:25:13 +0000
ROA not after: Fri 02 Aug 2024 15:30:13 +0000
asID: 197644
IP address blocks: 181.214.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8a:bd:c4:32:f2:59:dd:6b:54:3e:b0:48:a0:73:5b:ad:76:1c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 4 15:25:13 2023 GMT
Not After : Aug 2 15:30:13 2024 GMT
Subject: CN=C4CEB5A36E07BA97C0E4BD2BFC49B49E21D50A87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:47:2b:01:a8:b4:95:10:0c:8a:74:4b:e8:
c8:bf:e0:1d:73:c9:91:60:bb:8f:7f:9a:5a:a7:36:
14:50:c9:7e:b2:80:cc:a2:18:34:68:c8:60:c5:7b:
b8:5e:a6:c8:35:54:50:f6:bd:31:1a:fe:9c:52:ec:
54:8e:32:fd:06:9f:ff:9a:68:97:b1:28:a3:36:d8:
27:f9:e8:4e:a1:3a:06:3a:41:5a:92:56:63:fe:cf:
aa:de:4c:8a:a8:75:e7:44:f2:81:db:f7:d6:8c:65:
3c:1c:79:5d:2f:4e:3e:55:e3:45:14:94:2b:e7:60:
c3:92:83:52:ee:90:92:86:d1:ba:e3:1b:9f:65:8e:
16:8d:53:91:26:69:d1:f2:d0:60:c5:7f:e5:82:23:
82:2c:6e:4d:d1:4f:36:54:c6:5c:b6:dc:81:96:26:
3a:9b:fc:5a:73:25:bc:a5:de:14:46:7f:2c:b7:60:
55:6f:1d:70:9e:2b:13:2a:f9:03:29:d4:8d:9d:b6:
84:00:a6:16:aa:6a:52:b1:e3:d7:b5:c2:64:f0:91:
79:0d:bb:5e:3f:ba:37:34:ca:70:5a:cd:26:24:8f:
af:e9:f1:65:f8:4f:4b:28:85:65:bc:af:84:c9:c4:
f2:c0:db:d9:58:6a:ec:ee:a4:c4:ff:05:94:3b:d6:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CE:B5:A3:6E:07:BA:97:C0:E4:BD:2B:FC:49:B4:9E:21:D5:0A:87
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197644.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.50.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1b:71:fd:2c:b8:f2:93:1c:05:3f:97:dd:96:2a:d3:25:25:
cd:76:7a:01:b7:28:34:5b:9b:fb:df:96:b6:74:44:11:b3:f3:
52:79:88:c1:f2:c3:7f:61:f8:c1:3e:97:29:91:c1:7a:1d:c9:
0b:74:26:15:ff:61:85:1b:6a:c8:0e:8f:b6:e0:93:cf:fc:51:
db:cd:6e:9d:bc:5d:64:f6:df:3e:db:ce:6c:1a:d6:27:01:a0:
bf:09:62:a8:68:fb:50:87:c8:c9:45:97:fa:9b:7f:af:c9:17:
c4:c4:8e:04:9b:0a:c8:8a:d4:7f:b8:3b:dd:a2:ec:07:48:a6:
30:72:46:38:97:b7:d6:72:df:bd:be:50:77:ab:af:9e:e4:f2:
4c:60:c5:f6:03:d0:d9:8d:4f:85:60:c3:7a:b2:f7:66:a6:63:
bf:7e:bb:37:8b:79:e5:43:71:76:c8:fd:87:df:37:1e:b9:3e:
e0:cb:2e:c3:c1:a8:f3:f6:50:9e:7a:46:6e:c2:d3:6f:43:5e:
04:a4:1c:06:94:79:61:e3:da:20:34:9a:d2:fb:8e:d1:58:c6:
2f:83:f4:16:21:21:de:99:58:a7:2e:cf:72:08:54:7a:bb:11:
c4:4c:44:e7:6b:c2:1a:90:4a:78:ff:25:89:18:50:1a:02:ec:
42:26:85:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUcoq9xDLyWd1rVD6wSKBzW612HF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA4MDQxNTI1MTNaFw0yNDA4MDIxNTMwMTNaMDMxMTAvBgNV
BAMTKEM0Q0VCNUEzNkUwN0JBOTdDMEU0QkQyQkZDNDlCNDlFMjFENTBBODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSq0crAai0lRAMinRL6Mi/4B1z
yZFgu49/mlqnNhRQyX6ygMyiGDRoyGDFe7hepsg1VFD2vTEa/pxS7FSOMv0Gn/+a
aJexKKM22Cf56E6hOgY6QVqSVmP+z6reTIqodedE8oHb99aMZTwceV0vTj5V40UU
lCvnYMOSg1LukJKG0brjG59ljhaNU5EmadHy0GDFf+WCI4Isbk3RTzZUxly23IGW
Jjqb/FpzJbyl3hRGfyy3YFVvHXCeKxMq+QMp1I2dtoQAphaqalKx49e1wmTwkXkN
u14/ujc0ynBazSYkj6/p8WX4T0sohWW8r4TJxPLA29lYauzupMT/BZQ71jU5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUxM61o24HupfA5L0r/Em0niHVCocwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTk3NjQ0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdYy
MA0GCSqGSIb3DQEBCwUAA4IBAQBoG3H9LLjykxwFP5fdlirTJSXNdnoBtyg0W5v7
35a2dEQRs/NSeYjB8sN/YfjBPpcpkcF6HckLdCYV/2GFG2rIDo+24JPP/FHbzW6d
vF1k9t8+285sGtYnAaC/CWKoaPtQh8jJRZf6m3+vyRfExI4EmwrIitR/uDvdouwH
SKYwckY4l7fWct+9vlB3q6+e5PJMYMX2A9DZjU+FYMN6svdmpmO/frs3i3nlQ3F2
yP2H3zceuT7gyy7Dwajz9lCeekZuwtNvQ14EpBwGlHlh49ogNJrS+47RWMYvg/QW
ISHemVinLs9yCFR6uxHETETna8IakEp4/yWJGFAaAuxCJoUe
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:17 2025 by rpki-client