Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/OBq59MItHY5pIG3H_somqAdB1tA.roa
File: OBq59MItHY5pIG3H_somqAdB1tA.roa (raw, json)
Hash identifier: IWam4bknYyR2jrGk0bXOICp/8PHYGGkR8fgDbo9N0Zw=
Subject key identifier: 38:1A:B9:F4:C2:2D:1D:8E:69:20:6D:C7:FE:CA:26:A8:07:41:D6:D0
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 078154A9
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/OBq59MItHY5pIG3H_somqAdB1tA.roa
Signing time: Sat 01 Jan 2022 05:00:10 +0000
ROA not before: Sat 01 Jan 2022 05:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31645
IP address blocks: 194.32.84.0/24 maxlen: 24
194.32.84.0/23 maxlen: 23
194.32.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125916329 (0x78154a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Jan 1 05:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=381ab9f4c22d1d8e69206dc7feca26a80741d6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5d:0a:04:94:e7:eb:00:a6:5c:bc:89:b7:16:
b9:28:db:74:2f:4b:be:92:49:d8:09:a4:f1:12:ee:
e8:4e:98:5b:b0:ad:a6:c0:cb:3a:6b:22:6a:f5:cf:
7d:4a:45:fd:fa:50:ec:eb:30:d0:2e:1a:b3:eb:6d:
55:89:8f:55:ce:d4:1f:16:48:b5:a6:09:53:f4:d6:
f2:b1:88:7a:b8:82:0d:e8:84:f1:f1:0c:05:67:ef:
1c:8b:21:4d:69:cb:67:e4:a4:16:1b:83:56:64:8b:
2f:4c:65:a1:0d:a8:bc:3c:1b:b2:da:9a:48:e4:68:
ea:3a:8b:f2:98:5c:73:60:dd:79:0c:26:97:c7:3f:
59:da:d6:b1:14:39:0e:c0:dc:5a:82:a0:41:05:fc:
6b:da:ad:51:ba:b5:83:b0:2f:d4:88:dd:23:e4:5f:
e2:15:85:c2:25:df:98:fc:9a:39:a1:95:16:16:3a:
3c:0d:71:9a:31:f9:bf:ef:e1:f8:4e:c0:28:48:e2:
d8:f3:d8:1f:00:4b:92:a1:96:14:3c:e4:ed:1d:59:
19:52:ae:10:0e:ce:ee:c5:0d:ff:41:e9:14:45:6a:
c1:80:5f:03:a6:e0:e8:fd:80:1e:7c:75:0b:d4:dd:
f4:e7:55:ba:55:6e:96:3d:74:e9:c1:e2:df:ff:ef:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1A:B9:F4:C2:2D:1D:8E:69:20:6D:C7:FE:CA:26:A8:07:41:D6:D0
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/OBq59MItHY5pIG3H_somqAdB1tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.84.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:9a:1c:a7:29:6e:79:7f:59:12:82:3a:81:6a:fc:51:bd:66:
77:5e:97:2b:49:a6:8f:03:a4:d9:b6:e5:9b:b3:9f:ef:db:b0:
6e:9b:f3:0d:92:11:ad:23:64:99:d0:a6:7c:61:ad:ea:b2:4a:
f7:77:8e:5e:db:62:95:b0:eb:09:1e:24:41:c9:7c:f5:57:67:
22:20:a8:f3:7d:18:25:ec:e3:b2:79:bd:c2:ee:e5:c9:a3:a3:
10:15:ca:20:61:a9:1c:0c:d5:c3:86:9b:fd:15:eb:7f:ee:7b:
d1:62:e7:91:67:85:20:d7:8c:21:15:a6:c4:1c:76:39:e7:29:
7c:57:9e:af:d1:26:58:38:4e:c6:88:f4:f5:7f:28:03:86:b4:
fe:37:9c:0c:36:d4:6c:03:a7:10:c1:18:83:61:92:5b:01:a6:
78:9b:ca:4d:68:5a:72:0c:86:15:bc:04:9d:66:89:d4:1a:fe:
a6:80:68:cf:1a:09:31:5f:1c:3f:83:2e:46:fb:60:54:28:fc:
f7:d4:60:aa:9a:f7:75:c3:39:0d:3e:89:60:80:38:a4:d3:85:
de:48:08:a7:56:fe:c9:18:c3:8b:21:cc:72:4f:fc:b9:4f:bf:
1b:0d:f2:a9:c3:45:41:f3:bd:3e:21:60:80:b7:16:af:c9:1f:
e1:38:f6:11
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB4FUqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
M2FmNWRjNjI5Y2Q0OTM3NTk3ZjNmY2Q4NThjYTVjODBlZDk3YzUwMB4XDTIyMDEw
MTA1MDAxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzgxYWI5ZjRjMjJk
MWQ4ZTY5MjA2ZGM3ZmVjYTI2YTgwNzQxZDZkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOpdCgSU5+sAply8ibcWuSjbdC9LvpJJ2Amk8RLu6E6YW7Ct
psDLOmsiavXPfUpF/fpQ7Osw0C4as+ttVYmPVc7UHxZItaYJU/TW8rGIeriCDeiE
8fEMBWfvHIshTWnLZ+SkFhuDVmSLL0xloQ2ovDwbstqaSORo6jqL8phcc2DdeQwm
l8c/WdrWsRQ5DsDcWoKgQQX8a9qtUbq1g7Av1IjdI+Rf4hWFwiXfmPyaOaGVFhY6
PA1xmjH5v+/h+E7AKEji2PPYHwBLkqGWFDzk7R1ZGVKuEA7O7sUN/0HpFEVqwYBf
A6bg6P2AHnx1C9Td9OdVulVulj106cHi3//vo6MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ4Grn0wi0djmkgbcf+yiaoB0HW0DAfBgNVHSMEGDAWgBQzr13GKc1JN1l/
P82FjKXIDtl8UDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L002OWR4aW5OU1RkWmZ6X05oWXlseUE3WmZGQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvMzU1MmFlLWM1NWUtNGEwYi1iOGZlLWUyNmU5ZjUxZGRiMi8x
L09CcTU5TUl0SFk1cElHM0hfc29tcUFkQjF0QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
MzU1MmFlLWM1NWUtNGEwYi1iOGZlLWUyNmU5ZjUxZGRiMi8xL002OWR4aW5OU1Rk
WmZ6X05oWXlseUE3WmZGQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcIgVDANBgkqhkiG9w0BAQsFAAOC
AQEAbJocpylueX9ZEoI6gWr8Ub1md16XK0mmjwOk2bblm7Of79uwbpvzDZIRrSNk
mdCmfGGt6rJK93eOXttilbDrCR4kQcl89VdnIiCo830YJezjsnm9wu7lyaOjEBXK
IGGpHAzVw4ab/RXrf+570WLnkWeFINeMIRWmxBx2OecpfFeer9EmWDhOxoj09X8o
A4a0/jecDDbUbAOnEMEYg2GSWwGmeJvKTWhacgyGFbwEnWaJ1Br+poBozxoJMV8c
P4MuRvtgVCj899Rgqpr3dcM5DT6JYIA4pNOF3kgIp1b+yRjDiyHMck/8uU+/Gw3y
qcNFQfO9PiFggLcWr8kf4Tj2EQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 04:57:21 2025 by rpki-client