Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/2rcjwcR7YJElbhU3m4acPP8kdRE.roa
File: 2rcjwcR7YJElbhU3m4acPP8kdRE.roa (raw, json)
Hash identifier: MAYPMpXKsajZ1rsGRQmLv6Gk6jwzXFMvI/nPLWE3L8Q=
Subject key identifier: DA:B7:23:C1:C4:7B:60:91:25:6E:15:37:9B:86:9C:3C:FF:24:75:11
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 018552FEB3A84E4E50CAD34D567B38F2CD40
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/2rcjwcR7YJElbhU3m4acPP8kdRE.roa
Signing time: Tue 27 Dec 2022 09:51:41 +0000
ROA not before: Tue 27 Dec 2022 09:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31172
IP address blocks: 87.239.96.0/21 maxlen: 24
87.239.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:fe:b3:a8:4e:4e:50:ca:d3:4d:56:7b:38:f2:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Dec 27 09:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dab723c1c47b6091256e15379b869c3cff247511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:dd:6b:a2:18:4d:78:89:19:84:0f:df:35:
f1:a7:cb:57:26:1b:73:1d:bf:15:7f:84:24:96:fe:
ed:ba:84:07:1c:8e:8b:ca:72:a1:a8:08:cf:48:0e:
bd:10:e9:d1:1e:2f:41:f8:e9:3d:15:93:f6:11:d1:
92:e8:9c:68:3c:5c:a7:6c:a8:aa:a4:c6:fb:b2:22:
4c:6c:69:13:de:a1:26:ad:84:2d:df:4e:64:51:22:
7a:26:e3:f2:a0:a8:f7:86:e0:e2:18:7d:7d:3d:9c:
04:04:cf:50:cf:1f:3f:c7:1f:61:d0:70:3e:88:b8:
f3:30:11:90:d4:d8:18:d3:ac:01:df:00:a7:5b:a8:
71:fd:d7:17:81:78:4b:67:e6:90:5a:6b:10:8e:32:
83:f7:a8:6d:ef:02:4c:f0:ae:28:cd:df:d0:f3:6e:
a8:78:62:03:bc:db:91:ff:9f:0e:85:2e:94:1e:ac:
23:21:3a:20:6a:26:c6:ed:cc:37:a6:c4:9d:d9:3e:
36:39:48:da:54:19:89:f8:18:ef:4b:1f:17:57:12:
fb:74:15:e5:94:c7:b2:22:50:31:05:43:c5:e4:f3:
77:2c:9f:93:e9:4b:de:35:c0:9e:56:ea:b6:3c:3d:
4e:f3:5e:99:94:75:41:23:1b:b0:07:0f:2e:88:f5:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:23:C1:C4:7B:60:91:25:6E:15:37:9B:86:9C:3C:FF:24:75:11
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/2rcjwcR7YJElbhU3m4acPP8kdRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.96.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:fc:de:6f:4f:46:7b:85:3d:e2:04:cb:7f:7c:f5:8b:1f:24:
ce:28:98:10:66:9a:57:8b:85:c7:a5:5e:68:57:8c:68:fe:e6:
0b:12:8d:81:db:03:12:e8:8e:cc:7b:b1:b0:9b:01:5b:a6:87:
4a:47:62:dd:42:e1:f3:84:35:c6:35:9e:8e:7d:b3:9b:75:68:
e5:83:bf:a8:d4:a2:c1:11:06:f6:83:e0:9b:84:6b:09:ca:ef:
f1:70:c0:77:61:be:ed:b1:4c:1e:96:19:64:85:49:28:ed:96:
f6:64:01:9b:8e:3e:3f:3c:5e:83:52:5d:7a:87:b6:9c:de:f4:
8f:7c:cd:22:d4:94:27:0e:c8:87:31:1f:58:54:45:08:e7:be:
9a:1a:a4:b5:8c:a4:90:eb:71:d5:36:81:b2:f9:85:f9:4c:62:
72:e9:c0:b3:30:c3:d7:ab:06:43:61:c3:11:e3:f4:51:3f:73:
9f:a9:be:41:29:81:be:1b:3d:7b:fa:7f:9f:63:e0:86:1e:10:
f9:02:5a:86:fa:eb:e1:b3:e6:4f:d9:0a:fc:3c:7a:18:3c:2e:
52:17:0a:f7:64:9b:aa:fc:81:71:4d:87:7a:c6:db:48:72:9e:
b0:55:f4:00:bb:ec:90:e8:45:46:bd:79:95:1d:e9:e1:c8:d9:
a8:93:6a:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVS/rOoTk5QytNNVns48s1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmVkYTY5NTJiMDNlOGJhNDU5OTdiZTYxNWQ3YWJlZTE3
ODRmODMwHhcNMjIxMjI3MDk1MTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWI3MjNjMWM0N2I2MDkxMjU2ZTE1Mzc5Yjg2OWMzY2ZmMjQ3NTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUXda6IYTXiJGYQP3zXxp8tXJhtz
Hb8Vf4Qklv7tuoQHHI6LynKhqAjPSA69EOnRHi9B+Ok9FZP2EdGS6JxoPFynbKiq
pMb7siJMbGkT3qEmrYQt305kUSJ6JuPyoKj3huDiGH19PZwEBM9Qzx8/xx9h0HA+
iLjzMBGQ1NgY06wB3wCnW6hx/dcXgXhLZ+aQWmsQjjKD96ht7wJM8K4ozd/Q826o
eGIDvNuR/58OhS6UHqwjITogaibG7cw3psSd2T42OUjaVBmJ+BjvSx8XVxL7dBXl
lMeyIlAxBUPF5PN3LJ+T6UveNcCeVuq2PD1O816ZlHVBIxuwBw8uiPXKXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNq3I8HEe2CRJW4VN5uGnDz/JHURMB8GA1UdIwQY
MBaAFH4u2mlSsD6LpFmXvmFder7heE+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEt
MmYyMzAwYjZlM2Q5LzEvMnJjandjUjdZSkVsYmhVM200YWNQUDhrZFJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEtMmYyMzAwYjZlM2Q5
LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDV+9gMA0G
CSqGSIb3DQEBCwUAA4IBAQAs/N5vT0Z7hT3iBMt/fPWLHyTOKJgQZppXi4XHpV5o
V4xo/uYLEo2B2wMS6I7Me7GwmwFbpodKR2LdQuHzhDXGNZ6OfbObdWjlg7+o1KLB
EQb2g+CbhGsJyu/xcMB3Yb7tsUwelhlkhUko7Zb2ZAGbjj4/PF6DUl16h7ac3vSP
fM0i1JQnDsiHMR9YVEUI576aGqS1jKSQ63HVNoGy+YX5TGJy6cCzMMPXqwZDYcMR
4/RRP3Ofqb5BKYG+Gz17+n+fY+CGHhD5AlqG+uvhs+ZP2Qr8PHoYPC5SFwr3ZJuq
/IFxTYd6xttIcp6wVfQAu+yQ6EVGvXmVHenhyNmok2qh
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:28 2025 by rpki-client