Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1Lm0lEFSC2CJ1cTgBuk-fGkEtRg.roa
File: 1Lm0lEFSC2CJ1cTgBuk-fGkEtRg.roa (raw, json)
Hash identifier: CCnWLuAZewYVWCOvGQihCzYAyLNdzuYHyR/5m1aA/t0=
Subject key identifier: D4:B9:B4:94:41:52:0B:60:89:D5:C4:E0:06:E9:3E:7C:69:04:B5:18
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B1A0F65E2B305E3FB9B576AA7D7C4
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1Lm0lEFSC2CJ1cTgBuk-fGkEtRg.roa
Signing time: Sun 01 Jan 2023 13:35:10 +0000
ROA not before: Sun 01 Jan 2023 13:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208980
IP address blocks: 212.243.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:1a:0f:65:e2:b3:05:e3:fb:9b:57:6a:a7:d7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4b9b49441520b6089d5c4e006e93e7c6904b518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:10:03:f6:d8:23:4c:29:91:1a:c7:33:03:
03:58:15:18:40:3b:d0:96:5b:5b:65:38:99:d1:8e:
73:ea:34:10:25:6e:db:25:d9:03:fd:b4:0a:d3:a2:
19:15:04:91:fe:f6:e1:c2:84:8d:20:bd:53:43:dc:
9e:4a:6f:60:b5:4a:5e:27:b7:ae:0b:c1:31:cb:c9:
bd:f9:3f:0d:7e:42:65:3c:08:a6:99:87:8f:32:5c:
b0:03:a2:13:6a:ad:40:55:55:88:61:f5:d0:89:d8:
0b:8b:93:ff:19:ab:f2:23:df:98:71:da:15:fe:b9:
33:b7:6c:19:ba:e2:16:78:17:43:02:dc:8b:f3:c4:
39:a5:8c:16:b9:2c:11:3c:55:f3:f1:d1:c9:78:10:
24:31:0a:9a:66:5f:68:76:0d:87:5c:24:fc:3f:2a:
6e:87:0c:8d:5c:8e:d0:04:46:fe:cc:c9:16:74:8b:
c6:ee:f5:b0:2e:26:b0:bc:8e:29:ad:3d:ab:86:6a:
08:6b:b4:97:d8:8f:8d:26:9a:88:95:48:bc:ef:ed:
dc:ba:13:04:14:23:33:be:79:97:07:10:59:7b:b7:
79:ef:5d:f1:29:f2:bf:3d:ef:5e:37:ba:78:de:7d:
c5:bf:d5:5d:52:9f:78:81:f0:0b:31:3e:52:fb:85:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:B4:94:41:52:0B:60:89:D5:C4:E0:06:E9:3E:7C:69:04:B5:18
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1Lm0lEFSC2CJ1cTgBuk-fGkEtRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.126.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:00:6d:e6:86:ad:08:b3:3e:c1:b8:a1:15:92:e5:e7:8a:88:
cf:a6:81:1e:71:ed:9e:2e:1d:49:6f:30:63:c5:8a:48:36:3d:
a7:2c:05:fd:85:a4:e6:85:0e:95:78:c0:03:c2:47:37:df:86:
0d:45:24:20:49:90:81:75:e4:0a:29:f7:69:8c:38:7d:3b:45:
de:69:7d:13:d7:d0:ae:c5:f7:a9:3f:c5:a8:16:69:21:70:94:
71:df:92:19:c3:44:75:00:01:c6:f8:c7:cd:01:f3:d2:40:11:
a6:93:4a:f2:4b:88:65:af:ec:77:e0:78:e4:f7:b6:a6:dc:00:
f5:7c:9d:ef:f5:ba:b8:86:b6:9d:6b:6b:56:dc:45:8f:61:28:
91:f6:10:c0:fb:e8:eb:33:3f:06:8c:aa:42:17:5f:f3:1d:05:
89:06:d6:fd:90:ac:d9:b6:b2:e5:c2:87:f5:ab:5e:d4:b2:8a:
08:32:da:b6:00:2f:00:97:20:d0:ae:9e:77:ee:92:57:9d:31:
65:87:9e:18:14:b0:e2:18:a4:0b:20:3e:f8:49:0b:41:82:9e:
79:f7:37:67:1e:65:dd:0d:2d:e2:cf:c1:b8:c0:8d:56:a4:8a:
81:35:ff:43:e5:8e:33:2a:8b:69:2a:32:97:33:cf:4c:d5:0b:
b7:e3:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:31:34 2025 by rpki-client