Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/pL4_e4RsC_hhK3hWEF5IKvt12IE.roa
File: pL4_e4RsC_hhK3hWEF5IKvt12IE.roa (raw, json)
Hash identifier: gJCiH62RwOyDjqW95RpafRye1VlXYG0rea72ZCvXefQ=
Subject key identifier: A4:BE:3F:7B:84:6C:0B:F8:61:2B:78:56:10:5E:48:2A:FB:75:D8:81
Certificate issuer: /CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Certificate serial: 01857139C4D63EE39E303498B5DB8AE216B9
Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/pL4_e4RsC_hhK3hWEF5IKvt12IE.roa
Signing time: Mon 02 Jan 2023 06:44:49 +0000
ROA not before: Mon 02 Jan 2023 06:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 141.75.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c4:d6:3e:e3:9e:30:34:98:b5:db:8a:e2:16:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Validity
Not Before: Jan 2 06:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4be3f7b846c0bf8612b7856105e482afb75d881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:6d:04:d7:e2:d4:b2:ac:a4:17:e4:c2:10:
de:e1:7a:c5:fa:89:e9:dd:e2:03:9a:de:77:15:2d:
65:79:43:ce:30:8f:27:7b:9f:3a:8f:87:82:47:f6:
1e:77:79:27:fc:48:ed:09:25:a7:08:91:cf:2c:3c:
05:be:46:07:2d:91:7c:27:f1:a0:60:2c:b0:de:ed:
07:df:a0:d1:26:d7:75:a3:2d:7a:71:cd:2b:8f:e0:
7a:a1:ca:81:60:db:ba:c1:38:7e:da:eb:5b:37:e3:
50:2c:78:ba:cb:49:9b:09:1c:5d:b4:c8:d1:42:82:
ae:f2:4b:69:f2:46:c6:70:8b:52:19:4f:f0:93:10:
70:ee:c1:ec:2d:50:aa:4d:43:31:d2:a9:05:95:4f:
de:54:84:a9:be:5d:b4:65:24:25:cb:bc:d9:a8:53:
bc:4d:3c:72:3f:71:54:64:92:85:36:f7:94:3b:d3:
b8:b3:b2:05:42:ae:14:06:23:31:a3:07:ee:d6:8b:
10:1f:3c:14:cc:dc:f5:b5:47:ba:b8:fb:66:10:a6:
ba:9a:e1:14:21:5c:23:d0:be:da:03:6c:03:b0:31:
91:f3:48:6a:2c:73:48:44:92:1b:6c:43:32:ca:11:
d5:82:0b:ee:a2:2e:5c:88:98:49:c6:02:75:64:83:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BE:3F:7B:84:6C:0B:F8:61:2B:78:56:10:5E:48:2A:FB:75:D8:81
X509v3 Authority Key Identifier:
keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/pL4_e4RsC_hhK3hWEF5IKvt12IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:83:47:09:74:7a:5d:6c:c5:c5:d0:fe:17:60:85:39:e2:48:
f4:42:e0:9e:db:cf:f8:75:40:fc:5f:f2:1b:f9:0c:ed:e1:8f:
1a:11:98:e0:d8:b5:21:ee:ad:1f:48:e4:a6:8e:9d:7a:ae:57:
ff:38:0d:6b:85:fb:61:c2:c7:dc:40:b7:3a:22:dc:ba:11:fc:
9f:19:ce:06:e9:a8:14:ad:d1:d9:9d:8f:fe:e6:c1:1b:39:b3:
1b:8b:c2:07:d3:af:99:c0:46:26:be:8b:ce:94:92:ef:43:37:
8c:93:b8:02:fe:79:0e:74:3a:14:21:20:6f:19:68:95:ce:c7:
78:63:81:75:eb:0d:40:f2:59:70:b6:59:fc:0c:ba:d0:c1:35:
1e:9a:d4:6c:6e:4b:3a:41:a0:fd:d1:e2:55:a2:97:d5:9f:2a:
04:99:7b:cb:a1:c7:02:ea:4e:e0:7b:a2:bb:8a:4e:37:68:a8:
f1:77:a9:cb:2b:b1:9e:f7:7d:de:f6:b4:5c:de:9f:d6:44:da:
13:db:6d:ac:c3:81:91:72:b0:cf:c2:5d:04:79:b7:8e:61:3c:
16:92:04:0d:9c:5c:38:66:8f:e9:d4:69:53:e6:29:02:9c:a2:
83:6d:67:a9:39:ec:9c:5c:92:2c:6f:2d:65:0c:d5:68:c0:5d:
5f:39:a0:95
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVxOcTWPuOeMDSYtduK4ha5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTRkYTUxODIzMjMxOWY2N2EzMmZkOGFkNGMwNjUzNmM0
MWQ1YmYwHhcNMjMwMTAyMDY0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGJlM2Y3Yjg0NmMwYmY4NjEyYjc4NTYxMDVlNDgyYWZiNzVkODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHhtBNfi1LKspBfkwhDe4XrF+onp
3eIDmt53FS1leUPOMI8ne586j4eCR/Yed3kn/EjtCSWnCJHPLDwFvkYHLZF8J/Gg
YCyw3u0H36DRJtd1oy16cc0rj+B6ocqBYNu6wTh+2utbN+NQLHi6y0mbCRxdtMjR
QoKu8ktp8kbGcItSGU/wkxBw7sHsLVCqTUMx0qkFlU/eVISpvl20ZSQly7zZqFO8
TTxyP3FUZJKFNveUO9O4s7IFQq4UBiMxowfu1osQHzwUzNz1tUe6uPtmEKa6muEU
IVwj0L7aA2wDsDGR80hqLHNIRJIbbEMyyhHVggvuoi5ciJhJxgJ1ZIP+EQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFKS+P3uEbAv4YSt4VhBeSCr7ddiBMB8GA1UdIwQY
MBaAFJhU2lGCMjGfZ6Mv2K1MBlNsQdW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWIt
Njc2ZTgwZGMxZGU2LzEvcEw0X2U0UnNDX2hoSzNoV0VGNUlLdnQxMklFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWItNjc2ZTgwZGMxZGU2
LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjUswDQYJ
KoZIhvcNAQELBQADggEBAJKDRwl0el1sxcXQ/hdghTniSPRC4J7bz/h1QPxf8hv5
DO3hjxoRmODYtSHurR9I5KaOnXquV/84DWuF+2HCx9xAtzoi3LoR/J8ZzgbpqBSt
0dmdj/7mwRs5sxuLwgfTr5nARia+i86Uku9DN4yTuAL+eQ50OhQhIG8ZaJXOx3hj
gXXrDUDyWXC2WfwMutDBNR6a1GxuSzpBoP3R4lWil9WfKgSZe8uhxwLqTuB7oruK
TjdoqPF3qcsrsZ73fd72tFzen9ZE2hPbbazDgZFysM/CXQR5t45hPBaSBA2cXDhm
j+nUaVPmKQKcooNtZ6k57JxckixvLWUM1WjAXV85oJU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:28:36 2025 by rpki-client