Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/llxFxHkg8l3Y_suhMRO9FOhxDJ4.roa
File: llxFxHkg8l3Y_suhMRO9FOhxDJ4.roa (raw, json)
Hash identifier: /j2R1d5nWyQlTVMx1RZVeQwG0+511fwP995A7Mb2jp0=
Subject key identifier: 96:5C:45:C4:79:20:F2:5D:D8:FE:CB:A1:31:13:BD:14:E8:71:0C:9E
Certificate issuer: /CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
Certificate serial: 04F92528
Authority key identifier: 3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/llxFxHkg8l3Y_suhMRO9FOhxDJ4.roa
Signing time: Sat 01 Jan 2022 02:00:59 +0000
ROA not before: Sat 01 Jan 2022 02:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207533
IP address blocks: 212.6.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83436840 (0x4f92528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
Validity
Not Before: Jan 1 02:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=965c45c47920f25dd8fecba13113bd14e8710c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:ec:40:c5:cd:af:02:2d:8b:26:2e:3e:cc:
7a:34:80:26:56:9b:00:17:bc:14:3b:ef:fa:6e:63:
e4:96:39:2e:0e:31:cc:96:dd:1f:cc:1c:5a:bc:d8:
0f:48:bc:92:f4:a3:df:24:92:4d:a9:ea:b8:76:e0:
22:3d:b2:60:4a:11:2b:f4:8b:59:95:c5:b1:a3:7c:
2b:e5:08:9f:1a:0e:83:91:e9:94:fb:a9:52:e5:8a:
46:5a:68:e4:ce:1f:02:f9:74:af:f6:20:58:13:49:
68:34:a0:b8:eb:b0:9f:91:ce:b3:7b:e3:cc:89:57:
d3:93:bd:60:ef:ef:28:03:6e:41:f5:45:73:67:ba:
7a:ee:d5:83:72:1c:96:ac:c3:d7:36:2a:11:e1:3a:
87:7b:36:ca:8e:2f:8c:47:51:c0:0e:0c:fc:d3:0d:
35:2d:9f:1a:65:f2:aa:7a:bf:cc:3b:62:39:3f:1d:
ed:b1:29:38:87:c2:18:6b:f7:47:18:b1:44:0a:3b:
28:94:fb:45:1b:80:55:ac:94:df:e6:d0:10:f2:73:
77:13:b7:58:36:80:2e:56:60:49:8c:4c:39:2d:23:
6e:22:24:8f:34:ad:82:2a:80:d0:27:b4:2f:df:9a:
58:67:78:4b:dd:99:a0:a9:c5:e0:1b:67:ec:48:53:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5C:45:C4:79:20:F2:5D:D8:FE:CB:A1:31:13:BD:14:E8:71:0C:9E
X509v3 Authority Key Identifier:
keyid:3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/llxFxHkg8l3Y_suhMRO9FOhxDJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:76:f5:6d:1d:8f:b9:d9:82:40:8e:f5:85:a5:72:33:b4:92:
e2:f9:ac:67:40:4d:ef:af:13:1a:8a:2b:2f:8e:83:08:f4:ac:
82:73:38:b2:d6:68:29:dc:b1:19:00:4d:35:d5:c5:14:86:59:
99:bf:bd:9a:0f:f5:15:d5:b0:e3:51:e7:7d:03:2e:97:b9:41:
0e:02:51:7a:8c:ba:7b:ee:98:98:db:fc:b7:21:0b:ba:d9:96:
94:c7:18:e4:41:da:e8:3b:e8:2b:2d:46:42:67:ec:f4:a5:e7:
a3:70:d6:6c:f3:4a:d5:d1:19:6a:47:a1:e4:1e:58:0c:ed:09:
53:a5:e7:60:8b:b9:f9:f6:71:9e:c0:0a:aa:46:bb:51:b3:d1:
3c:b9:b5:0b:1b:37:69:81:fc:49:0c:8b:0f:aa:63:ce:d4:28:
57:25:8c:47:b2:cb:5e:a0:22:24:ff:8c:a3:ad:57:1e:41:fe:
b4:f2:cb:15:05:87:f6:09:de:a9:b7:8f:67:fa:e2:80:cc:1b:
74:7a:f1:6a:98:e8:1f:e2:2d:a8:81:de:ab:66:b5:05:20:37:
b4:95:49:db:54:08:4e:de:f6:1f:2c:2f:90:78:24:a2:7e:8a:
d7:1a:78:e6:50:b2:d3:c0:58:8a:04:92:d5:77:20:11:16:b2:
c1:1d:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:43 2025 by rpki-client