Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/Vs2B4K5y--8xGetJguSkhodSMXs.roa
File: Vs2B4K5y--8xGetJguSkhodSMXs.roa (raw, json)
Hash identifier: FPxDc1xYu+/nu52SoFf9gT+Ck339ub4VECBXo7vHj2k=
Subject key identifier: 56:CD:81:E0:AE:72:FB:EF:31:19:EB:49:82:E4:A4:86:87:52:31:7B
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 018571F11E15ECCBF63CE1B22F49D4F187CC
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/Vs2B4K5y--8xGetJguSkhodSMXs.roa
Signing time: Mon 02 Jan 2023 10:05:05 +0000
ROA not before: Mon 02 Jan 2023 10:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29079
IP address blocks: 217.25.50.0/24 maxlen: 24
217.25.49.0/24 maxlen: 24
217.25.51.0/24 maxlen: 24
217.25.48.0/24 maxlen: 24
217.25.48.0/20 maxlen: 20
217.25.57.0/24 maxlen: 24
217.25.56.0/24 maxlen: 24
217.25.52.0/24 maxlen: 24
217.25.58.0/24 maxlen: 24
217.25.53.0/24 maxlen: 24
217.25.55.0/24 maxlen: 24
217.25.54.0/24 maxlen: 24
217.25.63.0/24 maxlen: 24
217.25.59.0/24 maxlen: 24
217.25.60.0/24 maxlen: 24
217.25.62.0/24 maxlen: 24
217.25.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:1e:15:ec:cb:f6:3c:e1:b2:2f:49:d4:f1:87:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Jan 2 10:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56cd81e0ae72fbef3119eb4982e4a4868752317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:fe:18:aa:50:a4:a9:90:5b:f5:f3:b6:e4:
80:64:37:93:d4:0b:ef:26:70:45:96:35:60:dd:1e:
71:03:8a:bf:53:8e:aa:46:de:94:15:a9:48:a5:fb:
93:64:fc:31:cf:c7:ab:ee:49:b5:50:48:66:a5:fa:
2f:43:1f:23:65:f6:8b:8a:cf:01:50:e6:b7:bf:22:
72:19:5f:85:a8:51:6f:c8:c2:f0:95:45:8a:e3:45:
06:f7:03:41:57:13:dd:a7:39:72:e4:9c:b3:1a:44:
8b:82:91:cc:3b:50:50:3f:14:b2:47:39:5b:30:11:
88:b0:c2:71:50:0d:b9:81:7b:93:90:40:3a:16:dc:
d4:03:46:2e:9f:38:03:a8:7c:c1:aa:1c:22:39:80:
7c:14:e6:53:80:56:03:8f:1b:3b:c1:f1:ce:e9:34:
ec:be:b4:af:67:2a:7d:68:14:0c:f4:8f:fe:f7:9a:
bc:00:e1:84:5f:ed:2a:bb:a0:3e:a4:1f:15:28:77:
a6:a7:85:fe:00:57:6f:e9:6d:7f:8a:c8:3d:3d:4f:
fb:8c:25:47:aa:8b:b5:d0:28:7a:f0:a9:2b:6c:50:
8d:6c:9e:f1:02:ef:e7:97:c6:18:6d:52:57:9d:7e:
07:65:3e:50:cc:1a:55:44:71:b4:e9:15:57:31:1f:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CD:81:E0:AE:72:FB:EF:31:19:EB:49:82:E4:A4:86:87:52:31:7B
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/Vs2B4K5y--8xGetJguSkhodSMXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.48.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:d1:ea:3d:12:3c:59:68:55:48:d8:e3:1e:35:ad:2e:84:b4:
1b:75:21:27:01:d5:85:e8:7b:87:47:f6:7d:e3:cc:96:ff:dd:
29:c9:06:34:90:c3:48:91:7f:b7:62:eb:96:5c:54:2c:20:ee:
54:d5:32:bd:15:33:99:02:59:00:93:b5:6b:7b:46:f0:93:18:
bd:50:e1:09:a1:45:80:6b:4e:5b:92:f7:f1:89:13:84:a7:16:
9e:22:89:9a:66:11:92:10:d1:c8:80:ba:8e:88:76:05:e2:23:
43:d4:f0:f6:ba:7c:5b:0f:1a:48:99:43:40:fd:40:33:7d:2d:
20:18:3a:00:28:1a:ad:73:e2:66:5c:75:9f:76:09:85:93:77:
6d:0a:f0:01:b3:81:0a:9e:a2:00:e5:67:c3:40:87:9c:1b:8e:
9a:6f:0b:c6:78:3d:55:7b:c7:e3:33:b6:b2:29:9c:55:37:54:
e6:56:10:41:b7:4f:9d:db:6f:01:5d:16:66:b0:0d:b2:3a:54:
db:8c:e9:f0:b4:87:ee:5b:56:e5:30:6b:d5:e2:37:25:ae:46:
3a:31:f6:7d:5c:9c:7a:19:f4:5d:c1:c0:97:31:d3:1a:43:84:
81:87:2a:cd:db:ec:a6:e2:fb:4a:8d:d5:1c:1f:ef:8c:91:22:
94:c4:2c:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx8R4V7Mv2POGyL0nU8YfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjVhYTlmZWViMDBhNTEyNzQ4N2YzNDM4NDA3N2FlNzk3
MGY4MWEwHhcNMjMwMTAyMTAwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmNkODFlMGFlNzJmYmVmMzExOWViNDk4MmU0YTQ4Njg3NTIzMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpT+GKpQpKmQW/XztuSAZDeT1Avv
JnBFljVg3R5xA4q/U46qRt6UFalIpfuTZPwxz8er7km1UEhmpfovQx8jZfaLis8B
UOa3vyJyGV+FqFFvyMLwlUWK40UG9wNBVxPdpzly5JyzGkSLgpHMO1BQPxSyRzlb
MBGIsMJxUA25gXuTkEA6FtzUA0YunzgDqHzBqhwiOYB8FOZTgFYDjxs7wfHO6TTs
vrSvZyp9aBQM9I/+95q8AOGEX+0qu6A+pB8VKHemp4X+AFdv6W1/isg9PU/7jCVH
qou10Ch68KkrbFCNbJ7xAu/nl8YYbVJXnX4HZT5QzBpVRHG06RVXMR806wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFbNgeCucvvvMRnrSYLkpIaHUjF7MB8GA1UdIwQY
MBaAFLm1qp/usApRJ0h/NDhAd655cPgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJXcW4tNndDbEVuU0g4ME9FQjNybmx3LUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMyY2UtZjVkMi00MzkzLWFiMjMt
ODhhMGQ1ZmRjZjliLzEvVnMyQjRLNXktLTh4R2V0Smd1U2tob2RTTVhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xNDMyY2UtZjVkMi00MzkzLWFiMjMtODhhMGQ1ZmRjZjli
LzEvdWJXcW4tNndDbEVuU0g4ME9FQjNybmx3LUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2RkwMA0G
CSqGSIb3DQEBCwUAA4IBAQB90eo9EjxZaFVI2OMeNa0uhLQbdSEnAdWF6HuHR/Z9
48yW/90pyQY0kMNIkX+3YuuWXFQsIO5U1TK9FTOZAlkAk7Vre0bwkxi9UOEJoUWA
a05bkvfxiROEpxaeIomaZhGSENHIgLqOiHYF4iND1PD2unxbDxpImUNA/UAzfS0g
GDoAKBqtc+JmXHWfdgmFk3dtCvABs4EKnqIA5WfDQIecG46abwvGeD1Ve8fjM7ay
KZxVN1TmVhBBt0+d228BXRZmsA2yOlTbjOnwtIfuW1blMGvV4jclrkY6MfZ9XJx6
GfRdwcCXMdMaQ4SBhyrN2+ym4vtKjdUcH++MkSKUxCxo
-----END CERTIFICATE-----
Generated at Tue May 6 17:58:21 2025 by rpki-client