Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/1-t8dFbinWqQyYHU6UkMcqdEx7Bk.roa
File: 1-t8dFbinWqQyYHU6UkMcqdEx7Bk.roa (raw, json)
Hash identifier: sgE7snMNGV1VuJeFMeS5hhJ6HIAD7W25uzvgqUOs668=
Subject key identifier: FA:DF:1D:15:B8:A7:5A:A4:32:60:75:3A:52:43:1C:A9:D1:31:EC:19
Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial: 01856DDD507C13A98D274E7A5AB630A45FA9
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/1-t8dFbinWqQyYHU6UkMcqdEx7Bk.roa
Signing time: Sun 01 Jan 2023 15:04:58 +0000
ROA not before: Sun 01 Jan 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44447
IP address blocks: 93.92.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:50:7c:13:a9:8d:27:4e:7a:5a:b6:30:a4:5f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Validity
Not Before: Jan 1 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fadf1d15b8a75aa43260753a52431ca9d131ec19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:34:d3:d4:ea:c7:f5:61:55:85:a5:78:75:
fe:f4:54:1c:ad:ad:c5:d9:e2:27:27:22:c3:39:fe:
30:82:82:6b:49:dc:0d:02:c4:5c:c7:71:1e:f3:92:
2b:80:8f:cf:5b:97:4c:be:9a:d9:3a:d0:9e:24:13:
9b:c1:2d:7b:3a:50:44:e2:78:86:b8:72:a5:d8:7b:
26:08:84:40:77:23:2c:7b:f2:a7:0f:d1:f4:94:9b:
98:28:d6:ac:e1:e8:8c:83:47:bb:62:7e:f8:e9:1e:
46:0d:a4:b7:31:ec:1f:62:f5:39:e2:63:fa:8b:f9:
18:79:91:8c:05:cd:61:28:ce:73:35:17:58:b3:9d:
76:01:b9:27:6f:b2:39:9d:88:41:5f:f3:3a:05:ab:
2f:7f:6e:c1:25:81:3b:3f:54:e0:7c:48:9b:cc:e0:
cc:44:ef:1e:1c:b2:36:4a:5b:52:ee:b1:79:f5:3f:
ce:c8:07:4e:b9:bb:c7:e5:8b:3e:4d:87:72:6e:8b:
47:45:47:a0:b8:4c:85:d1:ce:42:14:f6:36:f3:85:
e5:c1:44:b8:0e:81:12:14:e1:84:dc:89:af:88:75:
52:7d:a0:bc:d4:f5:90:2b:4c:b9:f9:bb:8b:12:1f:
aa:e8:86:11:f9:0b:ac:eb:43:64:41:3f:cb:65:fc:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DF:1D:15:B8:A7:5A:A4:32:60:75:3A:52:43:1C:A9:D1:31:EC:19
X509v3 Authority Key Identifier:
keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/1-t8dFbinWqQyYHU6UkMcqdEx7Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.0.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:c2:5e:9a:ca:49:d1:5e:03:f3:7d:40:fd:d1:1a:d0:91:4f:
e8:e3:aa:56:10:cf:14:db:80:b6:56:f1:f6:78:1b:38:45:ac:
7e:2d:e4:95:54:7a:6b:4f:72:e0:4a:1b:c5:83:d2:8e:b8:e5:
03:1c:04:af:fb:cc:7e:31:37:1e:77:db:4f:e9:d8:e8:84:a0:
a8:9a:08:53:25:d7:85:4b:57:01:c7:26:f5:e9:38:d3:f5:5a:
e5:52:e2:01:4f:ee:0b:1a:84:1e:b5:83:de:6f:b6:a5:39:02:
92:15:3d:d7:92:2d:de:0e:63:98:ba:21:46:a1:dd:e6:9b:e0:
76:60:40:b9:2d:a7:c8:9d:a4:71:81:56:67:44:a7:3e:19:09:
28:6c:0f:d3:1f:5b:50:91:43:f6:43:b4:7c:0d:f6:5c:73:b3:
f1:71:f1:87:61:79:a6:32:52:68:09:4e:1c:32:0b:1f:7f:e0:
aa:0c:47:1c:39:d2:70:ab:72:ae:bb:5a:36:7f:31:57:34:b0:
12:c4:9f:ee:dc:8d:74:20:87:ad:f2:5a:dc:70:20:8b:c0:c0:
61:1c:1c:26:7a:f3:63:92:a0:30:a5:c3:53:be:36:ff:5a:78:
9f:a6:43:4a:ea:8e:a4:8f:cd:5d:43:15:48:c5:d3:91:9d:fe:
e2:b8:b8:50
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVt3VB8E6mNJ056WrYwpF+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWM3N2RmNTllZDcyYTU0NTdkZWNlNmE1M2QwNWVkMGFl
NjAwYWEwHhcNMjMwMTAxMTUwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWRmMWQxNWI4YTc1YWE0MzI2MDc1M2E1MjQzMWNhOWQxMzFlYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHo009Tqx/VhVYWleHX+9FQcra3F
2eInJyLDOf4wgoJrSdwNAsRcx3Ee85IrgI/PW5dMvprZOtCeJBObwS17OlBE4niG
uHKl2HsmCIRAdyMse/KnD9H0lJuYKNas4eiMg0e7Yn746R5GDaS3MewfYvU54mP6
i/kYeZGMBc1hKM5zNRdYs512Abknb7I5nYhBX/M6Basvf27BJYE7P1TgfEibzODM
RO8eHLI2SltS7rF59T/OyAdOubvH5Ys+TYdybotHRUeguEyF0c5CFPY284XlwUS4
DoESFOGE3ImviHVSfaC81PWQK0y5+buLEh+q6IYR+Qus60NkQT/LZfygLwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPrfHRW4p1qkMmB1OlJDHKnRMewZMB8GA1UdIwQY
MBaAFMnsd99Z7XKlRX3s5qU9Be0K5gCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYt
M2ViMDllZGUzZWQ1LzEvMS10OGRGYmluV3FReVlIVTZVa01jcWRFeDdCay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDQvZjhlYTg0LWMwZGItNGM1YS1hM2M2LTNlYjA5ZWRlM2Vk
NS8xL3lleDMzMW50Y3FWRmZlem1wVDBGN1FybUFLby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA11cADAN
BgkqhkiG9w0BAQsFAAOCAQEAu8JemspJ0V4D831A/dEa0JFP6OOqVhDPFNuAtlbx
9ngbOEWsfi3klVR6a09y4EobxYPSjrjlAxwEr/vMfjE3HnfbT+nY6ISgqJoIUyXX
hUtXAccm9ek40/Va5VLiAU/uCxqEHrWD3m+2pTkCkhU915It3g5jmLohRqHd5pvg
dmBAuS2nyJ2kcYFWZ0SnPhkJKGwP0x9bUJFD9kO0fA32XHOz8XHxh2F5pjJSaAlO
HDILH3/gqgxHHDnScKtyrrtaNn8xVzSwEsSf7tyNdCCHrfJa3HAgi8DAYRwcJnrz
Y5KgMKXDU742/1p4n6ZDSuqOpI/NXUMVSMXTkZ3+4ri4UA==
-----END CERTIFICATE-----
Generated at Thu May 8 20:02:39 2025 by rpki-client