Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/X7Yd5Tia3JiiEngt64od25IVpac.roa
File: X7Yd5Tia3JiiEngt64od25IVpac.roa (raw, json)
Hash identifier: fqeJU7GSBW0AYoMQFXyeN53WJofPJVzHW22eXk6hO+s=
Subject key identifier: 5F:B6:1D:E5:38:9A:DC:98:A2:12:78:2D:EB:8A:1D:DB:92:15:A5:A7
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 0544035D
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/X7Yd5Tia3JiiEngt64od25IVpac.roa
Signing time: Sat 01 Jan 2022 06:54:12 +0000
ROA not before: Sat 01 Jan 2022 06:54:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50061
IP address blocks: 212.90.104.0/22 maxlen: 24
91.151.24.0/21 maxlen: 24
195.234.12.0/23 maxlen: 24
2a01:6bc0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88343389 (0x544035d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Jan 1 06:54:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fb61de5389adc98a212782deb8a1ddb9215a5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:1c:0a:a0:7e:45:08:d1:cc:1b:42:ee:08:
14:ad:cd:3b:cb:f8:e4:37:cb:46:eb:4d:9a:9c:03:
a7:93:6b:13:35:c6:db:22:c2:d3:dd:7e:69:2e:5d:
58:35:56:54:1b:b6:15:df:20:b3:78:04:f3:f0:3a:
04:d9:d7:f4:69:b9:20:9c:41:a9:08:7e:fb:c2:92:
b2:f6:0b:80:ae:d3:40:21:ba:b2:b6:0d:a5:93:f0:
74:24:73:2a:19:70:90:63:7d:e0:30:c9:b6:4a:62:
62:33:a9:6b:f5:b0:df:c0:2a:13:6f:15:09:95:bd:
19:5b:d0:cd:b6:5b:ee:05:cc:3f:b2:16:85:8b:9c:
52:39:9a:5b:a5:c8:3b:e3:03:51:30:1d:61:52:15:
63:28:27:b1:84:00:ac:74:69:91:9b:ee:29:49:01:
a9:ef:2d:12:68:e3:a0:31:50:e6:3c:4a:0f:1c:7e:
68:45:7e:0c:e5:48:e0:33:a2:41:9a:32:ff:3f:ba:
df:9a:5c:92:cf:fc:43:ba:63:aa:0d:03:85:93:eb:
27:f1:f7:a7:35:9e:8b:8c:d7:14:dc:62:5d:b9:27:
ee:22:a0:0c:37:b9:4e:f9:fd:6c:26:0a:de:2f:1e:
2f:08:b2:41:1d:f8:4e:a6:5e:99:dd:46:26:18:de:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B6:1D:E5:38:9A:DC:98:A2:12:78:2D:EB:8A:1D:DB:92:15:A5:A7
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/X7Yd5Tia3JiiEngt64od25IVpac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.24.0/21
195.234.12.0/23
212.90.104.0/22
IPv6:
2a01:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:88:b2:16:46:1a:79:b7:95:68:a8:0b:03:6c:d5:04:6b:52:
87:df:a5:7b:53:71:fe:87:f5:ec:b6:3f:c5:a4:af:3a:bd:52:
02:ad:84:c0:43:0a:a4:a5:5a:a4:62:b2:35:f7:d9:6a:81:da:
ed:b1:0f:47:a5:5c:86:c2:ae:76:c9:9f:98:5e:02:50:51:b9:
29:a2:5a:58:48:01:d0:e5:d3:4c:79:1a:bb:1d:69:72:2c:77:
29:a5:e2:3b:b3:33:bb:9a:66:0e:02:a2:f7:9f:67:ef:7c:91:
73:8e:b3:39:fd:8f:f5:cd:eb:e2:57:39:ba:33:ba:3b:f7:90:
22:99:42:03:a5:de:da:cd:a1:2b:2a:18:08:c3:79:f3:de:20:
cb:d1:bd:1f:a9:90:c4:09:b9:14:e8:fb:6d:9a:2c:9f:1b:8c:
37:dc:af:bc:a9:1a:91:27:e9:8f:95:fb:fd:65:a3:f5:71:62:
9c:34:f9:0e:f7:4c:39:ad:cd:74:89:12:25:78:86:7c:c5:33:
74:3a:4d:50:46:10:f8:a5:25:a3:f9:a7:a9:e1:79:e0:fe:29:
ae:80:5b:36:77:4e:15:e1:ff:5b:dd:a0:af:cf:c3:e0:13:68:
ef:ce:6a:9a:d3:c2:3c:5e:5f:b4:b0:aa:e5:5e:c9:5a:d8:69:
33:d7:cb:b0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEBUQDXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZmMyZWRhNTQ3ODg3YTViNDUwM2Q5MDU5MmVhNTA1NjU4ZGE2ZTdhMB4XDTIyMDEw
MTA2NTQxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWZiNjFkZTUzODlh
ZGM5OGEyMTI3ODJkZWI4YTFkZGI5MjE1YTVhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIeXHAqgfkUI0cwbQu4IFK3NO8v45DfLRutNmpwDp5NrEzXG
2yLC091+aS5dWDVWVBu2Fd8gs3gE8/A6BNnX9Gm5IJxBqQh++8KSsvYLgK7TQCG6
srYNpZPwdCRzKhlwkGN94DDJtkpiYjOpa/Ww38AqE28VCZW9GVvQzbZb7gXMP7IW
hYucUjmaW6XIO+MDUTAdYVIVYygnsYQArHRpkZvuKUkBqe8tEmjjoDFQ5jxKDxx+
aEV+DOVI4DOiQZoy/z+635pcks/8Q7pjqg0DhZPrJ/H3pzWei4zXFNxiXbkn7iKg
DDe5Tvn9bCYK3i8eLwiyQR34TqZemd1GJhje33UCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBRfth3lOJrcmKISeC3rih3bkhWlpzAfBgNVHSMEGDAWgBSPwu2lR4h6W0UD
2QWS6lBWWNpuejAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2o4THRwVWVJZWx0RkE5a0ZrdXBRVmxqYWJuby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvOTBmMTgwLTFmNzYtNDZmYy1hNzIxLTE2ODEzNzBkOWMxMC8x
L1g3WWQ1VGlhM0ppaUVuZ3Q2NG9kMjVJVnBhYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
OTBmMTgwLTFmNzYtNDZmYy1hNzIxLTE2ODEzNzBkOWMxMC8xL2o4THRwVWVJZWx0
RkE5a0ZrdXBRVmxqYWJuby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEA1uXGAMEAcPqDAMEAtRaaDANBAIA
AjAHAwUAKgFrwDANBgkqhkiG9w0BAQsFAAOCAQEAK4iyFkYaebeVaKgLA2zVBGtS
h9+le1Nx/of17LY/xaSvOr1SAq2EwEMKpKVapGKyNffZaoHa7bEPR6VchsKudsmf
mF4CUFG5KaJaWEgB0OXTTHkaux1pcix3KaXiO7Mzu5pmDgKi959n73yRc46zOf2P
9c3r4lc5ujO6O/eQIplCA6Xe2s2hKyoYCMN5894gy9G9H6mQxAm5FOj7bZosnxuM
N9yvvKkakSfpj5X7/WWj9XFinDT5DvdMOa3NdIkSJXiGfMUzdDpNUEYQ+KUlo/mn
qeF54P4proBbNndOFeH/W92gr8/D4BNo785qmtPCPF5ftLCq5V7JWthpM9fLsA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:21 2025 by rpki-client