Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/1-uvfI8-Yu__2MoodVhfGSFxc-L0.roa
File: 1-uvfI8-Yu__2MoodVhfGSFxc-L0.roa (raw, json)
Hash identifier: Ctw8HClj11AXcSTi71dIPOrDAJeig+xyWRaxOLLX7Y8=
Subject key identifier: FA:EB:DF:23:CF:98:BB:FF:F6:32:8A:1D:56:17:C6:48:5C:5C:F8:BD
Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial: 018570D5363D8662832866F8D638905124D3
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/1-uvfI8-Yu__2MoodVhfGSFxc-L0.roa
Signing time: Mon 02 Jan 2023 04:54:59 +0000
ROA not before: Mon 02 Jan 2023 04:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212766
IP address blocks: 193.163.116.0/24 maxlen: 24
2a11:e340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:36:3d:86:62:83:28:66:f8:d6:38:90:51:24:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Validity
Not Before: Jan 2 04:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faebdf23cf98bbfff6328a1d5617c6485c5cf8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:eb:3e:9c:35:d0:e2:39:40:f5:1a:48:5e:7b:
da:a2:cb:16:37:6e:b6:92:08:cb:12:9b:40:7a:41:
f1:13:2d:06:29:8e:0b:ab:40:50:34:97:b3:37:48:
c7:f8:5d:43:51:2c:53:5b:c2:2d:bc:67:6b:c0:54:
21:a0:71:62:91:ce:36:8c:86:a6:c5:9b:29:ea:6c:
0d:10:26:fd:18:85:8c:d3:11:c2:89:12:41:49:9d:
bb:9b:fc:0d:d0:64:a2:7e:b2:67:7a:24:3b:9a:73:
63:16:10:41:53:dc:a7:f7:57:7e:54:f1:00:e3:9a:
34:59:ab:2a:3c:fc:53:ef:dd:a8:5a:f9:cf:b8:7a:
c0:ea:0b:57:a8:a0:99:ed:26:c4:8e:d0:d5:33:51:
98:1c:36:d0:5b:84:c3:1a:08:7e:ef:a3:a0:65:7a:
8d:65:74:9c:12:8f:69:e1:15:cd:66:f2:95:04:38:
b3:d5:85:b3:fc:f1:7e:d7:bc:14:16:64:e5:ca:89:
51:31:a3:e8:c5:b0:c2:27:e5:fb:b9:6d:55:de:cf:
3b:ff:d4:24:c2:88:63:57:16:a2:70:b6:f3:c7:56:
12:b6:ed:a4:f8:b7:49:67:0f:dc:ec:60:23:09:54:
d4:9f:b7:71:a9:ed:1c:38:ff:70:ab:4b:41:79:53:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:DF:23:CF:98:BB:FF:F6:32:8A:1D:56:17:C6:48:5C:5C:F8:BD
X509v3 Authority Key Identifier:
keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/1-uvfI8-Yu__2MoodVhfGSFxc-L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.116.0/24
IPv6:
2a11:e340::/29
Signature Algorithm: sha256WithRSAEncryption
85:c8:17:4e:6c:57:51:f6:1a:d6:de:91:eb:b7:fa:f4:68:03:
11:5e:46:cf:ee:14:0b:34:d4:ed:33:cc:df:64:b9:dc:66:c3:
4b:a6:5b:89:c7:26:95:14:bd:00:9f:91:d5:b3:47:37:81:6d:
52:02:81:4b:de:a2:19:a0:af:35:50:2d:57:a1:9f:c2:e5:ec:
99:fb:21:6b:c1:80:cd:db:e6:44:62:18:80:4c:fb:cb:a5:21:
01:3c:d2:34:4a:5d:98:8c:9a:25:7d:c6:94:12:ec:e6:ee:d2:
38:24:63:01:44:ab:05:53:29:a9:12:18:6b:40:8b:6b:b4:cf:
8b:fe:c5:28:22:71:dd:b2:ba:64:df:96:02:4d:93:91:71:9e:
8e:06:39:46:89:fb:63:ae:6d:09:1b:a0:cf:55:d0:8c:23:31:
18:a8:86:47:79:82:a3:4a:26:60:3d:a2:03:fc:00:38:a6:7f:
98:0b:2a:ff:6a:1f:2c:06:ee:53:73:db:0c:ce:77:29:87:6d:
5a:fe:84:85:6c:0f:29:0a:a7:9a:ab:1e:d6:6d:ac:ba:d9:79:
ad:4b:29:1a:50:30:94:c0:51:5d:98:6e:d6:89:7d:6e:2e:cd:
62:24:43:05:e5:df:49:f3:70:a9:08:ea:f8:1e:7c:cf:58:e7:
46:47:9f:2b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVw1TY9hmKDKGb41jiQUSTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2Y5MWIwMjE1Mjg4MmJmOTYwNWQ3NmJlYTQyMWFhMGJk
NGU2MjgwHhcNMjMwMTAyMDQ1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWViZGYyM2NmOThiYmZmZjYzMjhhMWQ1NjE3YzY0ODVjNWNmOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOs+nDXQ4jlA9RpIXnvaossWN262
kgjLEptAekHxEy0GKY4Lq0BQNJezN0jH+F1DUSxTW8ItvGdrwFQhoHFikc42jIam
xZsp6mwNECb9GIWM0xHCiRJBSZ27m/wN0GSifrJneiQ7mnNjFhBBU9yn91d+VPEA
45o0WasqPPxT792oWvnPuHrA6gtXqKCZ7SbEjtDVM1GYHDbQW4TDGgh+76OgZXqN
ZXScEo9p4RXNZvKVBDiz1YWz/PF+17wUFmTlyolRMaPoxbDCJ+X7uW1V3s87/9Qk
wohjVxaicLbzx1YStu2k+LdJZw/c7GAjCVTUn7dxqe0cOP9wq0tBeVO8OwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPrr3yPPmLv/9jKKHVYXxkhcXPi9MB8GA1UdIwQY
MBaAFOQ/kbAhUogr+WBddr6kIaoL1OYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQtUnNDRlNpQ3Y1WUYxMnZxUWhxZ3ZVNWlnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zMzRjNTYtMmU2OS00ZGEyLWIwMWQt
MDMwODAyNjQxYzY3LzEvMS11dmZJOC1ZdV9fMk1vb2RWaGZHU0Z4Yy1MMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjcvMzM0YzU2LTJlNjktNGRhMi1iMDFkLTAzMDgwMjY0MWM2
Ny8xLzVELVJzQ0ZTaUN2NVlGMTJ2cVFocWd2VTVpZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMGjdDAN
BAIAAjAHAwUDKhHjQDANBgkqhkiG9w0BAQsFAAOCAQEAhcgXTmxXUfYa1t6R67f6
9GgDEV5Gz+4UCzTU7TPM32S53GbDS6ZbiccmlRS9AJ+R1bNHN4FtUgKBS96iGaCv
NVAtV6GfwuXsmfsha8GAzdvmRGIYgEz7y6UhATzSNEpdmIyaJX3GlBLs5u7SOCRj
AUSrBVMpqRIYa0CLa7TPi/7FKCJx3bK6ZN+WAk2TkXGejgY5Ron7Y65tCRugz1XQ
jCMxGKiGR3mCo0omYD2iA/wAOKZ/mAsq/2ofLAbuU3PbDM53KYdtWv6EhWwPKQqn
mqse1m2sutl5rUspGlAwlMBRXZhu1ol9bi7NYiRDBeXfSfNwqQjq+B58z1jnRkef
Kw==
-----END CERTIFICATE-----
Generated at Sat May 10 10:37:36 2025 by rpki-client