Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200385.roa
File: AS200385.roa (raw, json)
Hash identifier: Ul7pXDihmD7BuMdD/5d4wM74mjnUIaq9JAQtd+aacbA=
Subject key identifier: A9:C4:41:25:CB:FA:23:47:2B:28:B9:6C:7B:8C:12:66:47:CA:56:2E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 11804C569A9C551F045802DB550D014A27FA54FC
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200385.roa
Signing time: Fri 16 Jun 2023 11:20:44 +0000
ROA not before: Fri 16 Jun 2023 11:15:44 +0000
ROA not after: Fri 14 Jun 2024 11:20:44 +0000
asID: 200385
IP address blocks: 179.61.247.0/24 maxlen: 24
191.96.7.0/24 maxlen: 24
191.101.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:80:4c:56:9a:9c:55:1f:04:58:02:db:55:0d:01:4a:27:fa:54:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 16 11:15:44 2023 GMT
Not After : Jun 14 11:20:44 2024 GMT
Subject: CN=A9C44125CBFA23472B28B96C7B8C126647CA562E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:24:d7:a2:d9:fe:83:95:51:39:3e:cd:03:
df:ee:f0:3f:90:dc:d6:9f:cc:ca:92:eb:51:b9:dd:
af:50:6a:38:6a:ba:2b:12:96:ef:a6:f5:e8:f7:e6:
cc:01:b9:92:d0:c9:81:b5:b4:cf:82:ac:32:28:cb:
ca:9a:bd:be:0f:c1:b5:cc:1d:e1:ba:05:2a:90:19:
ac:60:32:92:33:43:15:e0:51:7a:40:59:59:be:ea:
1f:61:07:0b:06:78:56:e8:8b:e1:42:cb:bc:d5:6a:
cc:4b:da:f6:c1:fd:d9:b0:9d:77:f1:4d:5a:1c:d3:
69:a2:30:67:74:e6:6e:bb:c6:e6:98:56:71:e6:0a:
03:df:1f:90:39:4e:ef:e7:67:c3:fd:d3:31:ab:59:
e1:19:f7:40:de:9f:3d:fb:7a:d8:d7:50:d9:0c:0d:
c0:f7:ca:e1:1b:70:55:b7:6e:c3:66:ab:5d:6b:5c:
c3:b8:eb:7e:f6:0a:4b:fd:7e:9b:48:78:c1:74:ba:
f4:f5:b8:02:d8:a4:28:64:1f:72:34:f4:a2:fe:bd:
61:15:a8:e6:5e:a7:9a:19:92:7a:3c:ef:88:4c:26:
8d:4c:a2:ea:e3:ae:a5:6f:93:45:0a:17:e7:4e:94:
d3:f1:d0:fd:c2:ef:e3:ba:54:7e:f2:df:24:fd:95:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C4:41:25:CB:FA:23:47:2B:28:B9:6C:7B:8C:12:66:47:CA:56:2E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.247.0/24
191.96.7.0/24
191.101.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b1:b0:8b:72:5d:d7:1e:02:74:bc:30:f8:37:3d:c0:76:f5:
ff:42:18:9e:fc:40:66:df:f0:39:b7:ab:c9:72:e5:a0:0d:e4:
cc:e6:8e:9f:bc:a9:60:0b:99:15:9e:d4:26:ab:5b:9c:50:57:
d4:dc:01:67:07:f4:b0:a0:3f:95:2d:61:11:23:f8:10:a9:45:
46:ee:75:63:3b:18:9c:45:3b:d6:d9:4c:d9:75:90:b5:df:a2:
c7:9c:d7:7b:59:ad:3d:f3:ce:c1:eb:5b:22:9b:d3:9e:1c:60:
f0:53:5f:ef:f3:70:93:b3:32:3f:e3:77:e6:b1:cb:da:38:e0:
e1:81:90:29:b5:6f:92:6d:51:30:3c:33:c9:99:4d:66:88:37:
ea:e7:d1:39:c9:1e:30:35:99:30:62:9c:51:f9:c0:8a:c6:ee:
71:47:68:3c:f2:06:67:ef:80:16:64:bd:de:e5:24:46:82:50:
39:b6:3e:f6:dc:fe:66:3c:6a:e7:fe:ff:88:09:55:39:2c:7d:
2a:1b:bb:81:a7:88:35:8e:f9:7e:66:65:d1:b1:cc:b6:8c:c8:
43:51:8b:37:0b:38:7e:6d:da:e3:5b:34:6f:e2:5f:37:6a:84:
25:ce:a6:70:d2:a4:45:e3:c3:c0:e9:7d:f5:45:ce:47:68:04:
ce:92:c6:24
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUEYBMVpqcVR8EWALbVQ0BSif6VPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA2MTYxMTE1NDRaFw0yNDA2MTQxMTIwNDRaMDMxMTAvBgNV
BAMTKEE5QzQ0MTI1Q0JGQTIzNDcyQjI4Qjk2QzdCOEMxMjY2NDdDQTU2MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkAyTXotn+g5VROT7NA9/u8D+Q
3NafzMqS61G53a9QajhquisSlu+m9ej35swBuZLQyYG1tM+CrDIoy8qavb4PwbXM
HeG6BSqQGaxgMpIzQxXgUXpAWVm+6h9hBwsGeFboi+FCy7zVasxL2vbB/dmwnXfx
TVoc02miMGd05m67xuaYVnHmCgPfH5A5Tu/nZ8P90zGrWeEZ90Denz37etjXUNkM
DcD3yuEbcFW3bsNmq11rXMO46372Ckv9fptIeMF0uvT1uALYpChkH3I09KL+vWEV
qOZep5oZkno874hMJo1MourjrqVvk0UKF+dOlNPx0P3C7+O6VH7y3yT9lZRlAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUqcRBJcv6I0crKLlse4wSZkfKVi4wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAwMzg1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsz33
AwQAv2AHAwQAv2X7MA0GCSqGSIb3DQEBCwUAA4IBAQCcsbCLcl3XHgJ0vDD4Nz3A
dvX/Qhie/EBm3/A5t6vJcuWgDeTM5o6fvKlgC5kVntQmq1ucUFfU3AFnB/SwoD+V
LWERI/gQqUVG7nVjOxicRTvW2UzZdZC136LHnNd7Wa09887B61sim9OeHGDwU1/v
83CTszI/43fmscvaOODhgZAptW+SbVEwPDPJmU1miDfq59E5yR4wNZkwYpxR+cCK
xu5xR2g88gZn74AWZL3e5SRGglA5tj723P5mPGrn/v+ICVU5LH0qG7uBp4g1jvl+
ZmXRscy2jMhDUYs3Czh+bdrjWzRv4l83aoQlzqZw0qRF48PA6X31Rc5HaATOksYk
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:33 2025 by rpki-client