Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/f_NZ5dfLYDi7NpQzL3pQFzjWR9I.roa
File: f_NZ5dfLYDi7NpQzL3pQFzjWR9I.roa (raw, json)
Hash identifier: nk0IyI/Z0AC0/0HVlXRDiglVM90RwhU5sIfrST7o/zQ=
Subject key identifier: 7F:F3:59:E5:D7:CB:60:38:BB:36:94:33:2F:7A:50:17:38:D6:47:D2
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 018ADBB723F809A6FDA42B7D292D50E83411
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/f_NZ5dfLYDi7NpQzL3pQFzjWR9I.roa
Signing time: Thu 28 Sep 2023 12:15:27 +0000
ROA not before: Thu 28 Sep 2023 12:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 147.136.64.0/19 maxlen: 24
92.50.0.0/18 maxlen: 24
168.199.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:b7:23:f8:09:a6:fd:a4:2b:7d:29:2d:50:e8:34:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Sep 28 12:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff359e5d7cb6038bb3694332f7a501738d647d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:72:ab:e4:74:d6:3f:7a:be:2c:27:04:55:
b8:13:5c:bd:a4:ed:1a:d1:80:67:d4:9c:b4:4f:56:
69:b4:70:95:7a:15:f6:26:46:98:ad:a6:4b:6f:a3:
8f:39:66:d6:13:17:ad:9f:44:3b:f6:08:ab:20:8c:
09:4f:15:2c:1d:27:c6:49:6e:15:6e:f8:88:64:55:
9c:48:9d:ed:07:d2:9f:1c:bc:6a:c7:de:ee:17:84:
ea:b5:14:be:fa:a1:d3:f8:4b:47:a4:d8:09:13:53:
84:28:ec:d1:e2:89:0b:31:37:56:d5:6a:8b:92:92:
8b:e4:a0:d1:80:24:95:8f:2d:ff:b1:f8:e1:59:d6:
0e:75:ef:3d:6e:8f:cc:7a:ab:c2:89:3b:80:55:0d:
91:7d:44:f7:b2:51:5d:48:42:4d:cb:da:00:83:c6:
f7:06:d2:c9:80:7d:22:0d:46:0a:d0:7d:88:a4:5e:
9c:0a:ac:ec:33:b0:31:3d:1e:fa:7d:ad:b0:cf:80:
48:b0:6e:a7:e3:b0:2f:31:8a:2a:1a:5e:25:5f:97:
a0:08:70:25:c7:bf:8e:99:2b:35:0d:ee:c9:f6:0d:
bd:38:30:72:a5:6a:6e:f0:c3:2e:82:d2:ab:3e:a3:
1b:64:6d:1e:09:02:18:18:a6:d2:f9:8a:1f:ff:8e:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F3:59:E5:D7:CB:60:38:BB:36:94:33:2F:7A:50:17:38:D6:47:D2
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/f_NZ5dfLYDi7NpQzL3pQFzjWR9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/18
147.136.64.0/19
168.199.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ad:3b:df:5e:a7:2a:69:04:68:71:ad:c9:e4:66:56:a4:c1:d5:
b9:96:47:24:47:e0:9f:09:73:af:fb:5f:ab:89:56:bd:f1:e3:
1b:53:09:69:eb:f8:25:53:7f:a5:98:bd:82:a3:e6:ec:b5:49:
ff:18:c6:9e:13:7b:fd:8a:ce:57:9d:ec:63:80:36:5a:6e:94:
0c:40:76:66:44:65:e4:c6:e4:55:1c:c2:63:5a:07:ce:d8:54:
94:5a:ab:93:a3:fa:6f:e9:93:07:6b:34:34:4a:4c:35:18:04:
61:9a:3f:e2:d1:0f:46:19:17:00:d0:ec:ef:89:61:81:ba:00:
ef:7f:c1:2f:57:1a:77:86:0f:81:6a:54:4f:da:8b:66:68:62:
bd:1e:99:ff:d0:64:39:81:72:69:1d:4c:1d:58:36:fd:15:97:
09:4d:4b:fe:87:0d:75:41:b8:02:b1:45:65:fe:20:25:04:a6:
1a:27:c5:2c:fd:58:a3:d3:7a:e7:93:f9:18:14:b5:7a:b1:07:
26:54:26:31:cd:03:a7:d8:a3:8a:23:ac:e4:78:4a:65:6d:3e:
ff:07:25:de:37:9d:ba:b6:80:b8:fd:05:93:d5:46:7a:8b:fc:
2d:ed:6f:46:ee:de:a8:c1:c7:c2:8f:25:9b:db:7f:fa:41:c5:
6b:68:0e:ef
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYrbtyP4Cab9pCt9KS1Q6DQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjMwOTI4MTIxNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmYzNTllNWQ3Y2I2MDM4YmIzNjk0MzMyZjdhNTAxNzM4ZDY0N2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZhyq+R01j96viwnBFW4E1y9pO0a
0YBn1Jy0T1ZptHCVehX2JkaYraZLb6OPOWbWExetn0Q79girIIwJTxUsHSfGSW4V
bviIZFWcSJ3tB9KfHLxqx97uF4TqtRS++qHT+EtHpNgJE1OEKOzR4okLMTdW1WqL
kpKL5KDRgCSVjy3/sfjhWdYOde89bo/MeqvCiTuAVQ2RfUT3slFdSEJNy9oAg8b3
BtLJgH0iDUYK0H2IpF6cCqzsM7AxPR76fa2wz4BIsG6n47AvMYoqGl4lX5egCHAl
x7+OmSs1De7J9g29ODBypWpu8MMugtKrPqMbZG0eCQIYGKbS+Yof/46IdQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH/zWeXXy2A4uzaUMy96UBc41kfSMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvZl9OWjVkZkxZRGk3TnBRekwzcFFGempXUjlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGXDIAAwQF
k4hAAwQHqMeAMA0GCSqGSIb3DQEBCwUAA4IBAQCtO99epyppBGhxrcnkZlakwdW5
lkckR+CfCXOv+1+riVa98eMbUwlp6/glU3+lmL2Co+bstUn/GMaeE3v9is5Xnexj
gDZabpQMQHZmRGXkxuRVHMJjWgfO2FSUWquTo/pv6ZMHazQ0Skw1GARhmj/i0Q9G
GRcA0OzviWGBugDvf8EvVxp3hg+BalRP2otmaGK9Hpn/0GQ5gXJpHUwdWDb9FZcJ
TUv+hw11QbgCsUVl/iAlBKYaJ8Us/Vij03rnk/kYFLV6sQcmVCYxzQOn2KOKI6zk
eEplbT7/ByXeN526toC4/QWT1UZ6i/wt7W9G7t6owcfCjyWb23/6QcVraA7v
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:57:17 2025 by rpki-client