Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/ApvNLiWnT8OjaUSDB7vCTnT1ivw.roa
File: ApvNLiWnT8OjaUSDB7vCTnT1ivw.roa (raw, json)
Hash identifier: ZDwTHV5jlcWvuH7C6J6hprtvDbs6blyn/wtzeoqzkHs=
Subject key identifier: 02:9B:CD:2E:25:A7:4F:C3:A3:69:44:83:07:BB:C2:4E:74:F5:8A:FC
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 0914D913
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/ApvNLiWnT8OjaUSDB7vCTnT1ivw.roa
Signing time: Sat 01 Jan 2022 04:02:24 +0000
ROA not before: Sat 01 Jan 2022 04:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137
IP address blocks: 131.114.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152361235 (0x914d913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Jan 1 04:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=029bcd2e25a74fc3a369448307bbc24e74f58afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:4c:15:c8:ef:e9:7e:c4:de:72:8c:15:75:
86:dc:ad:ca:2d:60:8b:08:03:18:c3:bf:51:ee:01:
50:23:28:d0:32:00:6c:5d:fb:03:de:2a:b0:ba:ed:
55:58:24:ef:99:0e:6b:1e:80:65:e1:8b:56:03:1a:
fa:b9:fa:14:e5:31:a7:fe:9d:5e:73:79:a7:a4:05:
90:b7:cc:c1:78:a9:24:ae:17:b7:e3:5d:e5:0f:ee:
33:f7:89:69:83:59:bd:ba:04:05:90:e6:36:41:6a:
d8:c0:1e:19:c4:7e:d6:3a:16:77:33:7b:4f:ca:84:
3b:b4:96:73:a5:b2:98:b2:b1:ed:85:e4:48:66:1f:
b6:71:12:a0:b6:c4:7f:a2:d4:56:a6:3b:8a:69:75:
d7:69:fe:c3:6f:e3:8b:7c:b4:5e:a1:38:16:7e:c4:
b4:3a:d8:94:f6:92:49:02:e3:05:b2:b9:04:fb:88:
2d:36:71:42:b0:09:1a:ad:84:7a:dc:91:4a:ef:5b:
8d:0a:bd:17:ef:38:19:ca:e4:e6:68:20:59:23:03:
21:f4:e4:2c:6c:95:e7:4b:ab:a9:92:32:55:12:ff:
98:5c:01:6c:26:8f:59:65:98:ac:f9:e3:28:77:bc:
14:77:7d:e3:e6:c5:cf:83:70:b1:ba:ea:34:c1:94:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9B:CD:2E:25:A7:4F:C3:A3:69:44:83:07:BB:C2:4E:74:F5:8A:FC
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/ApvNLiWnT8OjaUSDB7vCTnT1ivw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:37:a8:68:0c:c2:ff:99:8f:04:3f:70:9e:63:46:1d:3c:2c:
83:36:9d:92:ac:45:1d:28:c8:a2:fe:b7:3c:0e:82:dd:cf:1c:
37:b8:c8:80:61:6c:3d:a6:90:eb:c8:ab:39:85:81:bf:36:2a:
74:6c:5d:e2:e1:15:24:94:5b:23:b4:cc:4f:1c:4d:61:7e:47:
6c:72:0f:92:ab:5c:fd:ef:b1:d6:94:08:fc:5b:5c:0b:54:04:
4f:81:ab:00:8a:7e:43:c7:4a:86:75:15:37:c7:6f:9a:de:2f:
ba:b3:aa:44:47:b5:ba:c3:d6:a5:40:5a:a2:c7:45:97:09:af:
5a:f7:d2:fc:10:a3:7f:c9:76:4d:a6:7f:b9:1c:f1:fd:e3:50:
95:ee:ad:e9:0a:b8:96:36:cd:a2:41:51:4f:2f:a1:04:0d:d8:
ab:b7:90:59:4e:b6:2a:c3:1d:b4:eb:3b:2b:0c:77:95:15:95:
70:df:bd:2b:52:3c:b5:a7:0b:25:14:5f:54:2f:e3:60:52:75:
22:c1:e6:2d:ac:a1:e3:0c:6c:d8:f7:45:4f:74:26:09:3c:74:
2e:46:1a:77:d7:84:e3:4f:4b:7a:97:03:02:d4:b8:ce:d3:bc:
a3:2d:fc:16:60:64:18:82:39:25:c4:ad:9e:4c:a4:59:b5:5c:
90:f1:3c:bf
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIECRTZEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MGRjY2U5MTAwMDQ1MTQ5NGM0M2MxNWQxNzJkYTJlYjlkNWI3OTU2MB4XDTIyMDEw
MTA0MDIyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDI5YmNkMmUyNWE3
NGZjM2EzNjk0NDgzMDdiYmMyNGU3NGY1OGFmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALXSTBXI7+l+xN5yjBV1htytyi1giwgDGMO/Ue4BUCMo0DIA
bF37A94qsLrtVVgk75kOax6AZeGLVgMa+rn6FOUxp/6dXnN5p6QFkLfMwXipJK4X
t+Nd5Q/uM/eJaYNZvboEBZDmNkFq2MAeGcR+1joWdzN7T8qEO7SWc6WymLKx7YXk
SGYftnESoLbEf6LUVqY7iml112n+w2/ji3y0XqE4Fn7EtDrYlPaSSQLjBbK5BPuI
LTZxQrAJGq2EetyRSu9bjQq9F+84Gcrk5mggWSMDIfTkLGyV50urqZIyVRL/mFwB
bCaPWWWYrPnjKHe8FHd94+bFz4NwsbrqNMGU6QsCAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBQCm80uJadPw6NpRIMHu8JOdPWK/DAfBgNVHSMEGDAWgBSQ3M6RAARRSUxD
wV0XLaLrnVt5VjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tOek9rUUFFVVVsTVE4RmRGeTJpNjUxYmVWWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGYvNTFmZGJiLThiYTItNGI3ZS05ODBmLWVlNjBiMGRkYmRhYS8x
L0Fwdk5MaVduVDhPamFVU0RCN3ZDVG5UMWl2dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYv
NTFmZGJiLThiYTItNGI3ZS05ODBmLWVlNjBiMGRkYmRhYS8xL2tOek9rUUFFVVVs
TVE4RmRGeTJpNjUxYmVWWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAINyMA0GCSqGSIb3DQEBCwUAA4IB
AQAhN6hoDML/mY8EP3CeY0YdPCyDNp2SrEUdKMii/rc8DoLdzxw3uMiAYWw9ppDr
yKs5hYG/Nip0bF3i4RUklFsjtMxPHE1hfkdscg+Sq1z977HWlAj8W1wLVARPgasA
in5Dx0qGdRU3x2+a3i+6s6pER7W6w9alQFqix0WXCa9a99L8EKN/yXZNpn+5HPH9
41CV7q3pCriWNs2iQVFPL6EEDdirt5BZTrYqwx206zsrDHeVFZVw370rUjy1pwsl
FF9UL+NgUnUiweYtrKHjDGzY90VPdCYJPHQuRhp314TjT0t6lwMC1LjO07yjLfwW
YGQYgjklxK2eTKRZtVyQ8Ty/
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:06 2025 by rpki-client