Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X3B2s1PrwWwzO7JCBvBVMeZipEg.roa
File: X3B2s1PrwWwzO7JCBvBVMeZipEg.roa (raw, json)
Hash identifier: uDJWGGFF0df/mMf1Gcf7U42Ff0r58E06PlGaTlC/a9I=
Subject key identifier: 5F:70:76:B3:53:EB:C1:6C:33:3B:B2:42:06:F0:55:31:E6:62:A4:48
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01875724314FF52217792AA7FDA2E7F4ECC4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X3B2s1PrwWwzO7JCBvBVMeZipEg.roa
Signing time: Thu 06 Apr 2023 15:16:42 +0000
ROA not before: Thu 06 Apr 2023 15:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 194.87.118.0/23 maxlen: 24
193.124.254.0/24 maxlen: 24
195.133.10.0/23 maxlen: 23
194.135.32.0/24 maxlen: 24
195.133.6.0/23 maxlen: 23
194.87.40.0/24 maxlen: 24
195.133.26.0/23 maxlen: 24
192.124.176.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
195.133.56.0/22 maxlen: 22
195.133.52.0/23 maxlen: 23
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:24:31:4f:f5:22:17:79:2a:a7:fd:a2:e7:f4:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 15:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f7076b353ebc16c333bb24206f05531e662a448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:e4:c3:6f:57:56:5c:ad:8b:28:0a:8e:e1:
2b:d2:a1:17:d0:cf:74:d1:73:6e:40:42:43:71:a1:
37:b2:e5:d9:71:cd:21:f1:ca:83:ef:a0:a3:a2:7c:
47:ab:16:e4:88:0c:63:5b:23:4c:02:5c:79:67:6b:
43:91:44:37:ca:c9:59:58:da:67:b2:22:12:b1:ab:
12:35:2c:2a:99:9c:4b:51:ed:e6:ba:87:36:48:1f:
23:00:da:02:da:c3:bb:59:76:65:06:1e:90:57:e8:
7a:c3:e4:98:e1:4b:86:71:d1:c8:0c:64:e2:27:57:
43:b1:69:81:11:24:44:3d:34:e3:6e:9f:9e:20:ee:
e2:e2:53:65:24:a6:e1:fa:98:b4:cd:81:86:af:77:
ba:c6:e7:a6:b9:58:1e:8c:7c:8d:5c:97:f5:d3:26:
e7:d0:46:d8:30:04:f0:96:fe:72:a5:27:b6:ac:51:
fe:b2:9a:d0:9a:6a:8e:d0:df:53:49:55:cf:19:be:
cd:02:fb:1b:09:9d:6f:6c:57:79:1a:1c:b0:6a:56:
87:d8:44:ab:32:e0:c6:db:71:0a:48:98:c1:ff:5a:
e5:2b:70:d1:68:82:01:c1:5d:de:2f:ec:9b:5d:e0:
c1:b6:9a:ff:f2:89:dc:4a:c7:0e:66:dc:d9:c3:f1:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:76:B3:53:EB:C1:6C:33:3B:B2:42:06:F0:55:31:E6:62:A4:48
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X3B2s1PrwWwzO7JCBvBVMeZipEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.176.0/24
193.124.254.0/24
194.58.68.0/24
194.87.40.0/24
194.87.118.0/23
194.135.32.0/24
195.133.6.0/23
195.133.10.0/23
195.133.26.0/23
195.133.52.0/23
195.133.56.0/22
Signature Algorithm: sha256WithRSAEncryption
23:13:3b:c8:fa:40:6b:97:43:f8:65:96:1d:f1:42:ab:a3:b4:
cf:78:17:9b:b0:28:a4:66:ef:dc:c4:f8:b4:77:dd:61:e4:ee:
2c:e2:56:b4:6f:16:0a:fa:7b:4b:59:bf:c2:11:fb:cc:b2:fc:
4f:94:6f:c0:60:7f:e2:bd:ea:38:b6:a0:01:7b:88:3f:ca:fd:
92:c1:cf:bb:1d:49:88:63:3b:c2:66:7b:ce:9c:1b:ea:ec:d1:
a3:10:f9:6c:55:46:d6:eb:65:ec:ba:7a:86:d9:f1:c4:2a:c3:
68:b6:a5:6e:1e:cf:52:86:fe:2e:27:d1:82:2c:49:96:eb:72:
4c:63:c7:b1:1f:1b:99:cc:9a:aa:61:ff:92:00:38:14:70:c1:
a4:01:09:07:47:86:9d:ef:26:dc:14:94:2d:0d:b0:de:ba:4f:
fd:e9:d6:21:5c:e9:66:05:99:c8:64:69:10:75:7d:fb:54:f3:
58:4f:16:85:7c:a0:24:c8:e4:16:c2:ce:c2:85:bf:24:9e:5d:
f2:5a:18:c0:7f:dd:f8:68:f2:cc:a2:a0:53:36:24:ba:cb:78:
4e:37:f0:e2:8d:48:4b:25:ed:a4:ca:12:d5:18:cb:8e:a3:22:
5e:8c:a2:5a:99:a8:db:db:85:f7:70:6b:40:77:09:ef:f3:f8:
c1:bb:ed:1d
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYdXJDFP9SIXeSqn/aLn9OzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDA2MTUxNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjcwNzZiMzUzZWJjMTZjMzMzYmIyNDIwNmYwNTUzMWU2NjJhNDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Pkw29XVlytiygKjuEr0qEX0M90
0XNuQEJDcaE3suXZcc0h8cqD76CjonxHqxbkiAxjWyNMAlx5Z2tDkUQ3yslZWNpn
siISsasSNSwqmZxLUe3muoc2SB8jANoC2sO7WXZlBh6QV+h6w+SY4UuGcdHIDGTi
J1dDsWmBESREPTTjbp+eIO7i4lNlJKbh+pi0zYGGr3e6xuemuVgejHyNXJf10ybn
0EbYMATwlv5ypSe2rFH+sprQmmqO0N9TSVXPGb7NAvsbCZ1vbFd5GhywalaH2ESr
MuDG23EKSJjB/1rlK3DRaIIBwV3eL+ybXeDBtpr/8oncSscOZtzZw/HHkwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFF9wdrNT68FsMzuyQgbwVTHmYqRIMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWDNCMnMxUHJ3V3d6TzdKQ0J2QlZNZVppcEVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAwHywAwQA
wXz+AwQAwjpEAwQAwlcoAwQBwld2AwQAwocgAwQBw4UGAwQBw4UKAwQBw4UaAwQB
w4U0AwQCw4U4MA0GCSqGSIb3DQEBCwUAA4IBAQAjEzvI+kBrl0P4ZZYd8UKro7TP
eBebsCikZu/cxPi0d91h5O4s4la0bxYK+ntLWb/CEfvMsvxPlG/AYH/iveo4tqAB
e4g/yv2Swc+7HUmIYzvCZnvOnBvq7NGjEPlsVUbW62XsunqG2fHEKsNotqVuHs9S
hv4uJ9GCLEmW63JMY8exHxuZzJqqYf+SADgUcMGkAQkHR4ad7ybcFJQtDbDeuk/9
6dYhXOlmBZnIZGkQdX37VPNYTxaFfKAkyOQWws7Chb8knl3yWhjAf934aPLMoqBT
NiS6y3hON/DijUhLJe2kyhLVGMuOoyJejKJamajb24X3cGtAdwnv8/jBu+0d
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:41:33 2025 by rpki-client