Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/5lako4IsAUKayWv1Ucce5EFyirk.roa
File: 5lako4IsAUKayWv1Ucce5EFyirk.roa (raw, json)
Hash identifier: /nlRCmjVLIceFPTkkw63vcVg1mgjgLVTYCQQNo7ZFXw=
Subject key identifier: E6:56:A4:A3:82:2C:01:42:9A:C9:6B:F5:51:C7:1E:E4:41:72:8A:B9
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 01856FF059F9A2911E8483512CEEA7135E2E
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/5lako4IsAUKayWv1Ucce5EFyirk.roa
Signing time: Mon 02 Jan 2023 00:45:00 +0000
ROA not before: Mon 02 Jan 2023 00:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12729
IP address blocks: 212.127.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:59:f9:a2:91:1e:84:83:51:2c:ee:a7:13:5e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Jan 2 00:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e656a4a3822c01429ac96bf551c71ee441728ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:28:d8:30:10:34:05:86:80:0e:85:20:d2:
8b:de:ef:94:75:62:d6:00:f6:34:6d:49:c7:4d:e7:
fc:33:c3:1d:f2:77:11:1b:a8:83:fe:37:da:0a:64:
54:50:20:c1:12:d8:49:d4:f5:8c:5d:ea:69:ac:89:
32:ea:0f:e5:29:23:3a:88:32:c1:c6:bd:f7:88:79:
9e:4a:b6:33:8e:e3:1c:38:64:7c:bd:6f:ef:20:94:
a5:0b:25:2d:c9:18:3c:6a:0d:fb:e1:d9:2a:35:05:
f1:8e:3d:94:2d:09:df:c0:d5:23:73:cf:e7:fb:0f:
fd:5a:c0:e9:77:17:24:6f:0d:6c:99:42:3b:05:32:
8d:6d:a5:ea:ad:06:ad:49:6b:4a:56:e8:d1:f8:95:
47:48:75:58:56:a9:57:a9:08:1b:96:db:b5:57:eb:
38:75:a8:98:b9:2f:62:03:7e:26:d4:ac:95:ba:e7:
3f:0a:b0:24:99:c7:e2:4f:08:08:0b:a4:3a:23:b3:
2f:88:ee:8b:11:1b:f0:59:90:07:b4:43:6b:ca:2f:
90:02:c8:14:23:f7:32:56:2d:00:89:6a:24:be:50:
bf:b3:f1:db:d6:8c:02:c6:27:c4:d4:b0:bc:82:88:
24:cd:60:cf:a6:12:8c:e0:fb:92:38:b5:98:90:52:
f9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:56:A4:A3:82:2C:01:42:9A:C9:6B:F5:51:C7:1E:E4:41:72:8A:B9
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/5lako4IsAUKayWv1Ucce5EFyirk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.127.96.0/19
Signature Algorithm: sha256WithRSAEncryption
9b:4e:a1:7d:3f:fb:2c:3d:b3:96:0e:54:8a:17:e9:e0:63:ce:
76:97:34:fb:33:b5:2b:4c:03:d1:11:fb:77:16:6e:ff:eb:f0:
4e:e5:56:a3:70:8d:63:03:82:6c:30:6e:84:14:c6:e9:c1:9c:
37:da:31:6d:12:a6:1e:fe:66:22:a3:e4:74:d5:62:b1:d2:45:
7f:65:17:d7:c2:0e:55:bb:46:b2:7b:e5:56:ed:ba:05:f6:1e:
ed:07:7e:55:7a:a6:cd:43:49:ea:26:e0:8d:fe:e8:e1:bd:12:
59:57:82:c2:b6:ab:79:34:41:2d:f5:d9:26:ca:c2:e0:5e:95:
ba:26:b0:99:58:b8:b1:b6:dc:f7:4c:ef:34:93:88:f4:b4:90:
29:fa:b5:bb:1d:f9:fb:c7:10:75:ed:86:67:a6:cc:28:44:3b:
b2:e3:18:24:58:57:d2:15:32:c9:3d:13:da:a2:da:00:ba:44:
8a:b4:52:db:95:24:25:f5:32:a1:80:d1:d6:f2:42:1a:78:4a:
6a:42:93:d0:0f:48:08:51:49:2f:f5:a7:29:64:88:b2:65:85:
e7:86:37:f5:f3:04:97:42:9d:ed:51:f0:04:38:83:4b:d3:df:
06:82:a9:ea:ab:f4:92:54:95:22:ad:b0:b2:e3:af:6a:a1:02:
d2:0d:22:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8Fn5opEehINRLO6nE14uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5
Y2MyNDIwHhcNMjMwMTAyMDA0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjU2YTRhMzgyMmMwMTQyOWFjOTZiZjU1MWM3MWVlNDQxNzI4YWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynoo2DAQNAWGgA6FINKL3u+UdWLW
APY0bUnHTef8M8Md8ncRG6iD/jfaCmRUUCDBEthJ1PWMXepprIky6g/lKSM6iDLB
xr33iHmeSrYzjuMcOGR8vW/vIJSlCyUtyRg8ag374dkqNQXxjj2ULQnfwNUjc8/n
+w/9WsDpdxckbw1smUI7BTKNbaXqrQatSWtKVujR+JVHSHVYVqlXqQgbltu1V+s4
daiYuS9iA34m1KyVuuc/CrAkmcfiTwgIC6Q6I7MviO6LERvwWZAHtENryi+QAsgU
I/cyVi0AiWokvlC/s/Hb1owCxifE1LC8gogkzWDPphKM4PuSOLWYkFL5/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOZWpKOCLAFCmslr9VHHHuRBcoq5MB8GA1UdIwQY
MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt
YmRmNmU0Mjk0YzJlLzEvNWxha280SXNBVUtheVd2MVVjY2U1RUZ5aXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl
LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1H9gMA0G
CSqGSIb3DQEBCwUAA4IBAQCbTqF9P/ssPbOWDlSKF+ngY852lzT7M7UrTAPREft3
Fm7/6/BO5VajcI1jA4JsMG6EFMbpwZw32jFtEqYe/mYio+R01WKx0kV/ZRfXwg5V
u0aye+VW7boF9h7tB35VeqbNQ0nqJuCN/ujhvRJZV4LCtqt5NEEt9dkmysLgXpW6
JrCZWLixttz3TO80k4j0tJAp+rW7Hfn7xxB17YZnpswoRDuy4xgkWFfSFTLJPRPa
otoAukSKtFLblSQl9TKhgNHW8kIaeEpqQpPQD0gIUUkv9acpZIiyZYXnhjf18wSX
Qp3tUfAEOINL098Ggqnqq/SSVJUirbCy469qoQLSDSIv
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:23 2025 by rpki-client