Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/m_n-aWVwzhBAxyI6WRsZd2P8zpk.roa
File: m_n-aWVwzhBAxyI6WRsZd2P8zpk.roa (raw, json)
Hash identifier: VVRgBEOpK7v2kHQZaiHH1h9nRzBUQQl4Atcm97mC1A8=
Subject key identifier: 9B:F9:FE:69:65:70:CE:10:40:C7:22:3A:59:1B:19:77:63:FC:CE:99
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018A422F349D148A667BA15180996A6161FB
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/m_n-aWVwzhBAxyI6WRsZd2P8zpk.roa
Signing time: Tue 29 Aug 2023 16:45:04 +0000
ROA not before: Tue 29 Aug 2023 16:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 5.102.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:2f:34:9d:14:8a:66:7b:a1:51:80:99:6a:61:61:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Aug 29 16:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bf9fe696570ce1040c7223a591b197763fcce99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:34:3c:2b:67:66:64:3f:aa:0c:ae:db:ea:8b:
f4:53:1c:0e:59:13:3d:e9:c7:c4:df:98:8d:a1:44:
bc:3c:fb:f5:29:ea:44:f6:5a:c2:f1:65:35:38:59:
2f:26:c2:71:23:6d:b3:bc:8f:9e:25:5e:4b:75:29:
3e:eb:97:de:ef:df:1b:bb:f2:72:38:72:d1:aa:91:
b7:57:c2:a7:f1:d8:b3:dd:66:e2:25:23:71:84:dc:
10:95:09:33:73:96:0e:9e:84:04:69:3a:82:78:d8:
4f:cc:99:b8:e2:ab:86:12:e7:8f:35:46:c1:87:e0:
67:c5:33:a9:3e:33:75:b0:7b:02:f0:8a:4c:6e:1a:
97:a5:f2:28:78:0e:a6:de:99:ad:44:35:ff:a9:10:
06:09:94:11:39:1a:2b:63:c0:c6:c3:74:f2:0f:77:
b2:66:98:fd:8c:fd:f4:69:2b:ee:56:9f:1c:83:81:
4a:79:c9:a1:ec:9f:aa:10:42:99:39:48:64:02:1a:
d8:79:e1:4f:55:cb:81:c2:2f:90:59:18:a5:62:88:
19:b7:d7:c7:f1:a5:00:e2:60:e8:a1:a5:09:51:bd:
d1:bf:09:e8:48:be:1f:91:77:97:8c:c2:3c:79:62:
07:ff:98:60:0d:2c:b1:f1:b7:b4:7c:ac:b8:46:bc:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:FE:69:65:70:CE:10:40:C7:22:3A:59:1B:19:77:63:FC:CE:99
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/m_n-aWVwzhBAxyI6WRsZd2P8zpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.39.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e7:6c:47:43:1e:99:2b:04:5c:f6:3d:fd:18:3a:8b:66:08:
9d:02:9d:3a:51:b8:89:50:6c:20:02:cb:77:6e:f5:55:b6:7c:
4b:06:2a:17:85:e2:db:d4:36:d1:18:ee:36:18:bc:f0:75:3b:
28:b7:fa:43:b6:41:40:1b:3c:bf:d2:6a:03:ff:64:a2:6e:c1:
f7:cc:12:9b:af:b9:d5:fb:b8:36:55:cb:f7:a0:22:07:b0:c5:
1b:51:90:93:69:64:f3:1b:cf:e5:89:51:ea:c6:65:bf:ec:d9:
40:ce:5c:fd:e8:da:d8:2e:ee:00:a3:e4:61:4a:81:c4:c7:a5:
22:41:54:c8:ae:17:f2:95:de:51:72:87:58:51:f9:20:28:b3:
6b:a8:2c:23:00:c3:ee:69:5e:37:ea:77:a8:42:2e:12:9c:e6:
b9:b7:f7:e3:27:8b:c3:b2:dc:d0:f4:42:16:f1:bc:ce:67:0f:
ff:4c:81:20:b1:73:7a:07:f1:8f:4c:16:66:eb:d9:b6:c6:fa:
3e:48:85:e5:e1:0b:ae:ba:3f:0e:de:75:0c:be:70:6d:41:54:
de:f8:b3:4a:45:55:34:65:33:99:8b:50:d9:b1:fd:17:83:b5:
78:96:d6:64:53:19:80:8f:5f:7e:1a:c5:dc:d5:92:5d:ac:8b:
aa:85:8a:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpCLzSdFIpme6FRgJlqYWH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3
MGVjMDIwHhcNMjMwODI5MTY0NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmY5ZmU2OTY1NzBjZTEwNDBjNzIyM2E1OTFiMTk3NzYzZmNjZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDQ8K2dmZD+qDK7b6ov0UxwOWRM9
6cfE35iNoUS8PPv1KepE9lrC8WU1OFkvJsJxI22zvI+eJV5LdSk+65fe798bu/Jy
OHLRqpG3V8Kn8diz3WbiJSNxhNwQlQkzc5YOnoQEaTqCeNhPzJm44quGEuePNUbB
h+BnxTOpPjN1sHsC8IpMbhqXpfIoeA6m3pmtRDX/qRAGCZQRORorY8DGw3TyD3ey
Zpj9jP30aSvuVp8cg4FKecmh7J+qEEKZOUhkAhrYeeFPVcuBwi+QWRilYogZt9fH
8aUA4mDooaUJUb3RvwnoSL4fkXeXjMI8eWIH/5hgDSyx8be0fKy4RrxxqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJv5/mllcM4QQMciOlkbGXdj/M6ZMB8GA1UdIwQY
MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt
OGQyMTg2NjUwMjdkLzEvbV9uLWFXVnd6aEJBeHlJNldSc1pkMlA4enBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk
LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWYnMA0G
CSqGSIb3DQEBCwUAA4IBAQBI52xHQx6ZKwRc9j39GDqLZgidAp06UbiJUGwgAst3
bvVVtnxLBioXheLb1DbRGO42GLzwdTsot/pDtkFAGzy/0moD/2SibsH3zBKbr7nV
+7g2Vcv3oCIHsMUbUZCTaWTzG8/liVHqxmW/7NlAzlz96NrYLu4Ao+RhSoHEx6Ui
QVTIrhfyld5RcodYUfkgKLNrqCwjAMPuaV436neoQi4SnOa5t/fjJ4vDstzQ9EIW
8bzOZw//TIEgsXN6B/GPTBZm69m2xvo+SIXl4Quuuj8O3nUMvnBtQVTe+LNKRVU0
ZTOZi1DZsf0Xg7V4ltZkUxmAj19+GsXc1ZJdrIuqhYqo
-----END CERTIFICATE-----
Generated at Sat May 10 18:44:48 2025 by rpki-client