Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/rXQKhy1tK_B3ynQcZ8USrFAe4UE.roa
File: rXQKhy1tK_B3ynQcZ8USrFAe4UE.roa (raw, json)
Hash identifier: O0iAjcONPcBxNOUz7WFak21ECFgy5E40pP/R7r2wIBI=
Subject key identifier: AD:74:0A:87:2D:6D:2B:F0:77:CA:74:1C:67:C5:12:AC:50:1E:E1:41
Certificate issuer: /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial: 01856F0B63B3AFB71C29BB5CCC37A9AD2D49
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/rXQKhy1tK_B3ynQcZ8USrFAe4UE.roa
Signing time: Sun 01 Jan 2023 20:34:55 +0000
ROA not before: Sun 01 Jan 2023 20:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21385
IP address blocks: 193.108.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:63:b3:af:b7:1c:29:bb:5c:cc:37:a9:ad:2d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Validity
Not Before: Jan 1 20:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad740a872d6d2bf077ca741c67c512ac501ee141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:47:77:99:9b:4e:06:0e:f9:32:0b:62:b1:
ea:00:35:f6:c0:d9:25:6d:30:46:54:2b:06:26:a0:
1d:6b:6a:ee:59:12:88:be:57:d9:5f:28:7c:e4:0b:
1b:fc:e7:cb:ba:72:f6:cf:8b:32:bd:a3:02:31:b9:
4b:50:00:9a:5b:95:10:ba:88:49:27:df:7f:95:24:
85:d3:52:dc:b8:ed:15:dc:7b:53:e9:de:c4:b3:76:
b0:3b:ac:be:b7:d6:82:1f:6d:7f:96:5a:3e:0c:e9:
16:72:15:68:bc:92:3a:80:dc:5f:92:0f:87:ed:bc:
83:5e:2b:d5:23:27:eb:6e:fe:72:99:c3:65:7d:13:
58:9f:2c:2a:87:d1:97:5f:17:7b:55:54:ef:61:58:
e0:f5:5b:17:3a:3f:3c:0f:86:21:ae:48:c2:39:bd:
87:4d:00:05:5a:6b:2a:6c:5d:19:a0:cb:82:72:0e:
c5:4b:25:70:71:88:8a:30:a3:cf:22:e1:80:d6:1b:
ec:8f:2c:e7:80:7b:cc:e5:e5:0c:c7:3e:3b:3c:45:
90:ee:27:16:b9:8d:81:89:6c:23:3d:30:71:da:83:
e3:6a:69:ad:4e:73:14:33:4c:27:93:c1:f0:df:d2:
e6:31:db:7c:54:02:d6:0f:df:21:04:65:41:9b:90:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:0A:87:2D:6D:2B:F0:77:CA:74:1C:67:C5:12:AC:50:1E:E1:41
X509v3 Authority Key Identifier:
keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/rXQKhy1tK_B3ynQcZ8USrFAe4UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7c:1d:5a:ac:c5:ea:39:09:3d:a6:37:1e:1b:73:53:e8:07:
84:56:ad:3e:88:58:bf:96:c0:05:76:df:72:b4:75:47:a0:25:
7f:31:83:10:95:28:f6:87:6f:1a:31:3b:50:f7:09:58:12:21:
bb:d1:1a:cc:c1:9f:2a:31:2d:fa:5f:65:85:fb:50:8d:32:b6:
96:dc:f8:93:c9:36:ad:e8:fc:ef:62:2d:77:59:bb:b1:8d:36:
31:85:98:01:9d:c5:aa:8b:06:91:9e:46:24:a6:7a:7f:a2:dd:
0c:9f:52:42:9f:bf:86:51:76:92:14:0a:e7:8d:73:1c:ce:79:
0d:9c:74:4a:c2:d1:ba:1e:18:4c:69:88:93:6e:72:a3:34:69:
9c:e0:22:92:7a:cc:b2:49:f8:a1:51:cd:88:7f:f3:80:03:1a:
5a:66:47:fb:4f:db:b0:98:e7:29:2a:91:da:fd:d8:36:2c:1f:
69:fb:0a:ba:59:7f:39:d5:96:f7:bf:60:62:c9:85:82:a4:8c:
22:35:99:4f:32:4a:1e:2a:c5:c8:fe:72:2f:2b:8c:d4:db:fb:
12:dd:4a:db:5f:62:be:12:78:7e:68:e4:2a:c3:b7:3c:87:40:
a6:0e:b6:51:ac:ba:93:e4:ae:5b:42:ed:ac:dd:8f:5f:b4:a4:
9b:bd:69:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvC2Ozr7ccKbtczDeprS1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxN2Q1OTQzOGNjMjAxZGNhMmZjMWNlN2E2ODc3M2JkNzFi
ZTBlYmUwHhcNMjMwMTAxMjAzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDc0MGE4NzJkNmQyYmYwNzdjYTc0MWM2N2M1MTJhYzUwMWVlMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+lHd5mbTgYO+TILYrHqADX2wNkl
bTBGVCsGJqAda2ruWRKIvlfZXyh85Asb/OfLunL2z4syvaMCMblLUACaW5UQuohJ
J99/lSSF01LcuO0V3HtT6d7Es3awO6y+t9aCH21/llo+DOkWchVovJI6gNxfkg+H
7byDXivVIyfrbv5ymcNlfRNYnywqh9GXXxd7VVTvYVjg9VsXOj88D4YhrkjCOb2H
TQAFWmsqbF0ZoMuCcg7FSyVwcYiKMKPPIuGA1hvsjyzngHvM5eUMxz47PEWQ7icW
uY2BiWwjPTBx2oPjammtTnMUM0wnk8Hw39LmMdt8VALWD98hBGVBm5AwPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK10CoctbSvwd8p0HGfFEqxQHuFBMB8GA1UdIwQY
MBaAFFF9WUOMwgHcovwc56aHc71xvg6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi81MGY1YmEtYmRmNC00YTcxLWE4MzYt
OGIzMWUyMzM4MmRhLzEvclhRS2h5MXRLX0IzeW5RY1o4VVNyRkFlNFVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi81MGY1YmEtYmRmNC00YTcxLWE4MzYtOGIzMWUyMzM4MmRh
LzEvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWwTMA0G
CSqGSIb3DQEBCwUAA4IBAQAOfB1arMXqOQk9pjceG3NT6AeEVq0+iFi/lsAFdt9y
tHVHoCV/MYMQlSj2h28aMTtQ9wlYEiG70RrMwZ8qMS36X2WF+1CNMraW3PiTyTat
6PzvYi13WbuxjTYxhZgBncWqiwaRnkYkpnp/ot0Mn1JCn7+GUXaSFArnjXMcznkN
nHRKwtG6HhhMaYiTbnKjNGmc4CKSesyySfihUc2If/OAAxpaZkf7T9uwmOcpKpHa
/dg2LB9p+wq6WX851Zb3v2BiyYWCpIwiNZlPMkoeKsXI/nIvK4zU2/sS3UrbX2K+
Enh+aOQqw7c8h0CmDrZRrLqT5K5bQu2s3Y9ftKSbvWnc
-----END CERTIFICATE-----
Generated at Tue May 13 08:14:16 2025 by rpki-client