Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/s1nl_gvGDD2fxh0pEiQaKBCG-qA.roa
File: s1nl_gvGDD2fxh0pEiQaKBCG-qA.roa (raw, json)
Hash identifier: vdpMfBQA1ftmHCgvC25EOrdrFT0uuItkKWy/r5RKZUs=
Subject key identifier: B3:59:E5:FE:0B:C6:0C:3D:9F:C6:1D:29:12:24:1A:28:10:86:FA:A0
Certificate issuer: /CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Certificate serial: 0189F44609363041368FC51BA237ED56B53E
Authority key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/s1nl_gvGDD2fxh0pEiQaKBCG-qA.roa
Signing time: Mon 14 Aug 2023 13:39:37 +0000
ROA not before: Mon 14 Aug 2023 13:39:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12843
IP address blocks: 194.153.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:46:09:36:30:41:36:8f:c5:1b:a2:37:ed:56:b5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Validity
Not Before: Aug 14 13:39:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b359e5fe0bc60c3d9fc61d2912241a281086faa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:89:d9:9f:40:16:c9:f0:94:4b:93:6b:97:
70:15:34:f8:99:b4:4b:f9:06:ef:f3:3c:a6:cd:d8:
4b:60:2b:73:62:5d:1b:16:5e:81:f1:8c:c7:1b:60:
c7:60:d1:4e:94:45:d3:1c:6a:47:4d:37:4b:84:be:
c5:1b:86:cd:52:f7:ff:98:ce:b2:b9:bb:a7:76:55:
c4:1a:fa:60:58:a6:b9:ff:e5:f0:1d:93:c5:c3:8b:
e1:e5:6a:48:5f:a7:e0:e8:91:e0:f9:d7:d4:7e:39:
97:f0:37:c1:6c:14:16:ac:ba:84:d4:a0:4f:b3:79:
de:f7:2d:1d:d2:79:22:71:3f:79:19:8f:f5:87:8e:
89:f2:0c:32:6b:07:32:46:1b:bc:f1:d7:ed:0a:45:
75:d8:d7:6b:ca:76:ba:93:54:ee:d1:36:18:0b:e6:
e5:ef:04:a4:25:93:bb:7b:7f:08:fb:ea:ea:29:15:
d7:72:97:56:42:f5:7a:c9:1c:23:fb:38:9f:62:3f:
fd:41:d2:14:c1:57:d2:f2:69:c7:5c:10:c3:c9:d1:
76:64:b6:e5:f5:4d:13:9e:29:70:b4:0d:b3:b6:43:
b1:0a:9a:0c:a9:d6:b8:0f:4a:45:12:5c:82:36:4d:
23:4d:33:81:13:e9:00:d9:44:61:46:4b:9d:29:cf:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:59:E5:FE:0B:C6:0C:3D:9F:C6:1D:29:12:24:1A:28:10:86:FA:A0
X509v3 Authority Key Identifier:
keyid:04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/s1nl_gvGDD2fxh0pEiQaKBCG-qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:e8:3c:30:aa:77:a7:a8:8e:e3:23:27:67:52:c6:27:3e:eb:
5f:33:66:a2:3e:18:5c:ef:08:03:cd:ea:ac:02:06:78:23:74:
1e:39:a5:43:52:d6:a7:4d:32:11:dd:b1:2d:b8:26:6c:6a:32:
7c:1b:31:64:11:ff:de:33:6c:41:d4:6b:42:a5:2d:6c:4f:36:
6d:74:7f:10:49:29:3b:de:91:a0:ec:ad:40:6e:26:e5:a6:9c:
87:f8:a9:5f:ea:ea:15:aa:69:22:d4:28:42:c2:9e:3c:22:56:
ca:89:97:d9:52:c7:b1:e6:83:27:93:2e:0a:55:5a:20:85:41:
31:0b:7f:b7:f9:1a:cc:c0:62:6e:39:b4:b1:d6:d8:e3:60:c2:
8e:49:a3:7f:98:21:39:9d:6a:a0:e0:7c:de:8a:e9:81:5a:02:
c7:b3:0d:e6:c7:92:fe:f9:f1:5f:58:84:39:f2:c5:51:38:32:
53:0f:fc:c7:04:43:03:0a:39:1a:9c:46:ad:d1:43:a0:4b:8a:
77:00:c2:83:b8:20:c0:2a:6c:ba:b9:e2:90:54:e5:df:1a:5a:
89:42:a0:b9:10:32:b4:bb:98:04:59:9d:7f:f9:40:4e:33:cf:
5e:53:7a:57:04:83:a4:41:a0:4c:b2:87:16:64:dd:f3:6a:d7:
c1:cb:e9:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYn0Rgk2MEE2j8UbojftVrU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YWQxMmZiYWU1NDZkMDE4M2M2MDQ3ZDRmNzVlODhlMDBl
MDcwNTMwHhcNMjMwODE0MTMzOTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzU5ZTVmZTBiYzYwYzNkOWZjNjFkMjkxMjI0MWEyODEwODZmYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OGJ2Z9AFsnwlEuTa5dwFTT4mbRL
+Qbv8zymzdhLYCtzYl0bFl6B8YzHG2DHYNFOlEXTHGpHTTdLhL7FG4bNUvf/mM6y
ubundlXEGvpgWKa5/+XwHZPFw4vh5WpIX6fg6JHg+dfUfjmX8DfBbBQWrLqE1KBP
s3ne9y0d0nkicT95GY/1h46J8gwyawcyRhu88dftCkV12Ndryna6k1Tu0TYYC+bl
7wSkJZO7e38I++rqKRXXcpdWQvV6yRwj+zifYj/9QdIUwVfS8mnHXBDDydF2ZLbl
9U0TnilwtA2ztkOxCpoMqda4D0pFElyCNk0jTTOBE+kA2URhRkudKc/GlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLNZ5f4Lxgw9n8YdKRIkGigQhvqgMB8GA1UdIwQY
MBaAFAStEvuuVG0Bg8YEfU916I4A4HBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkswUy02NVViUUdEeGdSOVQzWG9qZ0RnY0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81Y2QzZTMtZDg0My00ZDZiLTgxMzYt
NmFiZmI4YjkwMTMyLzEvczFubF9ndkdERDJmeGgwcEVpUWFLQkNHLXFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81Y2QzZTMtZDg0My00ZDZiLTgxMzYtNmFiZmI4YjkwMTMy
LzEvQkswUy02NVViUUdEeGdSOVQzWG9qZ0RnY0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpmTMA0G
CSqGSIb3DQEBCwUAA4IBAQAe6DwwqnenqI7jIydnUsYnPutfM2aiPhhc7wgDzeqs
AgZ4I3QeOaVDUtanTTIR3bEtuCZsajJ8GzFkEf/eM2xB1GtCpS1sTzZtdH8QSSk7
3pGg7K1AbiblppyH+Klf6uoVqmki1ChCwp48IlbKiZfZUsex5oMnky4KVVoghUEx
C3+3+RrMwGJuObSx1tjjYMKOSaN/mCE5nWqg4HzeiumBWgLHsw3mx5L++fFfWIQ5
8sVRODJTD/zHBEMDCjkanEat0UOgS4p3AMKDuCDAKmy6ueKQVOXfGlqJQqC5EDK0
u5gEWZ1/+UBOM89eU3pXBIOkQaBMsocWZN3zatfBy+ky
-----END CERTIFICATE-----
Generated at Sat May 10 19:05:06 2025 by rpki-client