Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/1-V_yHxoxk79OoeBOuOFewfz47g0.roa
File: 1-V_yHxoxk79OoeBOuOFewfz47g0.roa (raw, json)
Hash identifier: FXHHc0sxNg8SoPfUPr/WKFJQ3DghD2WsdMNL0N1gww4=
Subject key identifier: F9:5F:F2:1F:1A:31:93:BF:4E:A1:E0:4E:B8:E1:5E:C1:FC:F8:EE:0D
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01856F79A3AC242172DE8785F643F25DB65C
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/1-V_yHxoxk79OoeBOuOFewfz47g0.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39024
IP address blocks: 194.69.200.0/24 maxlen: 24
151.237.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a3:ac:24:21:72:de:87:85:f6:43:f2:5d:b6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f95ff21f1a3193bf4ea1e04eb8e15ec1fcf8ee0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:64:ef:48:14:e0:64:38:f8:7d:e7:6a:c2:
b5:0d:ad:dd:5d:90:79:f3:b7:ff:2a:3b:d7:48:b6:
6c:20:01:7a:02:9e:4a:43:6c:17:86:6f:5a:b4:78:
5a:c9:10:65:4e:95:2b:ee:1c:c3:19:d4:67:c7:08:
a1:7b:12:ba:45:99:cb:41:4d:23:8c:84:69:6d:d9:
5a:b4:cf:fd:39:9f:59:4f:8f:ab:d2:15:7a:0f:ae:
18:58:31:e9:d3:08:03:67:3c:94:c0:c7:33:9d:9c:
93:87:c3:b2:04:bb:4f:b4:87:30:0d:59:14:d3:1e:
74:58:be:8b:2d:4b:3b:ec:55:82:ee:23:dd:4f:b2:
3a:cb:e6:40:fc:e1:0c:55:8b:b9:79:c3:15:29:b2:
15:81:b3:4b:cc:e1:e2:da:ff:a2:ac:3a:78:db:89:
44:66:ba:a5:48:d0:95:8a:5c:3a:55:fe:18:5b:ed:
c3:2e:7e:e7:17:b3:5e:09:08:fa:c7:1b:b0:24:73:
7b:51:a7:b4:c7:cc:f6:d1:ba:2c:ba:b6:d2:ad:64:
b9:95:65:76:c6:12:0d:44:b0:a8:d9:c0:30:46:72:
31:69:27:5c:63:9b:a1:40:a3:8b:2b:ec:e2:01:2d:
cf:56:85:bd:de:12:ed:25:9a:5b:a6:a6:9d:4f:34:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:F2:1F:1A:31:93:BF:4E:A1:E0:4E:B8:E1:5E:C1:FC:F8:EE:0D
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/1-V_yHxoxk79OoeBOuOFewfz47g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.40.0/21
194.69.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b3:b6:27:26:51:d3:17:8d:77:a4:e4:21:ef:6a:cf:80:79:
f2:a7:2e:bd:20:de:6f:90:69:30:60:f6:7e:55:79:22:8c:43:
f9:98:02:f9:89:43:92:c0:8a:10:8a:3e:c8:7a:1e:6e:9f:cf:
8b:e3:82:8e:2c:3d:26:01:6c:8b:0c:61:d7:e0:e2:eb:fb:9e:
34:c9:2c:6a:4b:98:44:57:5c:4a:3c:72:13:bf:2d:89:ce:f3:
f8:4a:7c:be:41:c3:0c:45:f7:4d:49:a8:43:2d:ef:16:07:92:
a8:03:cb:36:b9:3c:3f:e4:01:b2:45:9a:3f:20:d7:c2:99:c7:
22:d9:6b:aa:30:43:11:d6:ef:4b:d5:6b:a0:88:27:97:40:70:
cf:8f:d3:0c:5f:8d:d5:55:fb:12:b0:e2:65:d7:10:14:99:c1:
42:56:4f:4a:2b:31:70:30:8e:b9:1d:ad:4b:af:3f:e6:43:ee:
e0:ef:1a:ee:7e:a9:90:71:9f:df:c2:2c:55:d8:b6:db:d5:57:
94:7e:90:73:f8:a1:73:5b:41:9d:d1:9d:75:f2:02:48:61:df:
dc:4b:15:49:0c:fb:38:5f:84:b8:a6:fc:9a:69:3f:aa:92:28:
3c:1e:23:31:51:f8:ca:14:db:15:4a:2c:59:ce:0e:16:5e:94:
3a:f7:93:c7
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYVveaOsJCFy3oeF9kPyXbZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjIyZmRlYzhmYWRmY2E1OGU3NTc1YzI5ZjEwZTczYWU3
NzU3MTUwHhcNMjMwMTAxMjIzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTVmZjIxZjFhMzE5M2JmNGVhMWUwNGViOGUxNWVjMWZjZjhlZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBZk70gU4GQ4+H3nasK1Da3dXZB5
87f/KjvXSLZsIAF6Ap5KQ2wXhm9atHhayRBlTpUr7hzDGdRnxwihexK6RZnLQU0j
jIRpbdlatM/9OZ9ZT4+r0hV6D64YWDHp0wgDZzyUwMcznZyTh8OyBLtPtIcwDVkU
0x50WL6LLUs77FWC7iPdT7I6y+ZA/OEMVYu5ecMVKbIVgbNLzOHi2v+irDp424lE
ZrqlSNCVilw6Vf4YW+3DLn7nF7NeCQj6xxuwJHN7Uae0x8z20bosurbSrWS5lWV2
xhINRLCo2cAwRnIxaSdcY5uhQKOLK+ziAS3PVoW93hLtJZpbpqadTzRa+wIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPlf8h8aMZO/TqHgTrjhXsH8+O4NMB8GA1UdIwQY
MBaAFNJiL97I+t/KWOdXXCnxDnOud1cVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWIt
ZjA1YWEyMjlkNjM4LzEvMS1WX3lIeG94azc5T29lQk91T0Zld2Z6NDdnMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTkvODVmMDJlLWYxYWMtNDRmYi05MmViLWYwNWFhMjI5ZDYz
OC8xLzBtSXYzc2o2MzhwWTUxZGNLZkVPYzY1M1Z4VS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA5ftKAME
AMJFyDANBgkqhkiG9w0BAQsFAAOCAQEAX7O2JyZR0xeNd6TkIe9qz4B58qcuvSDe
b5BpMGD2flV5IoxD+ZgC+YlDksCKEIo+yHoebp/Pi+OCjiw9JgFsiwxh1+Di6/ue
NMksakuYRFdcSjxyE78tic7z+Ep8vkHDDEX3TUmoQy3vFgeSqAPLNrk8P+QBskWa
PyDXwpnHItlrqjBDEdbvS9VroIgnl0Bwz4/TDF+N1VX7ErDiZdcQFJnBQlZPSisx
cDCOuR2tS68/5kPu4O8a7n6pkHGf38IsVdi229VXlH6Qc/ihc1tBndGddfICSGHf
3EsVSQz7OF+EuKb8mmk/qpIoPB4jMVH4yhTbFUosWc4OFl6UOveTxw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:32:09 2025 by rpki-client