Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/m1DJe9OWsF43qIRFW9wYk3Adubk.roa
File: m1DJe9OWsF43qIRFW9wYk3Adubk.roa (raw, json)
Hash identifier: E3Lui1SkB677Ctm9WYgDriCCKdySyggSssIDrYRmOzw=
Subject key identifier: 9B:50:C9:7B:D3:96:B0:5E:37:A8:84:45:5B:DC:18:93:70:1D:B9:B9
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 0636CC3E
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/m1DJe9OWsF43qIRFW9wYk3Adubk.roa
Signing time: Sat 01 Jan 2022 09:53:21 +0000
ROA not before: Sat 01 Jan 2022 09:53:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8387
IP address blocks: 212.95.17.0/24 maxlen: 24
213.162.64.0/23 maxlen: 23
213.162.78.0/24 maxlen: 24
2001:678:5a8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104254526 (0x636cc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Jan 1 09:53:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b50c97bd396b05e37a884455bdc1893701db9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:5c:fe:34:4c:98:7e:56:eb:57:b5:a9:de:
a1:df:ca:cc:e6:92:59:ff:93:c5:74:8c:c4:99:65:
26:9d:bd:52:6d:ee:bf:b0:89:ef:6d:c7:e7:16:5d:
25:83:25:62:d2:a7:f5:bd:52:0e:c4:88:62:b6:66:
06:f4:7f:96:ca:b7:0c:10:62:45:7f:c9:32:67:44:
02:60:86:17:b7:b8:19:40:34:45:b3:94:a6:eb:46:
f9:05:9c:31:12:a5:84:63:1f:0d:f9:bf:56:70:67:
f5:20:e1:d4:5a:a0:c3:d0:85:ea:8b:29:6d:a3:a7:
67:ab:91:56:8b:1b:66:ed:a0:3e:15:3d:9a:b2:fb:
2e:15:09:96:8f:b1:da:ce:78:e4:c5:38:4a:b1:10:
6c:a3:3f:ce:18:a5:c2:06:c8:1f:a9:7d:21:de:34:
e4:0c:57:13:e6:c2:de:d4:47:91:1b:cd:59:71:a4:
7e:b8:a1:c8:2b:72:17:d3:04:9b:62:53:86:c9:91:
1e:f2:45:29:3f:cb:17:a5:c6:26:45:22:3f:01:35:
23:3c:cc:fd:08:8a:0e:c0:68:a5:95:73:3d:0d:b2:
9a:ea:56:c6:9e:30:34:f7:31:97:fb:9d:9a:25:c7:
13:ee:99:e7:11:90:e7:76:81:a9:f4:8c:9f:8e:7a:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:C9:7B:D3:96:B0:5E:37:A8:84:45:5B:DC:18:93:70:1D:B9:B9
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/m1DJe9OWsF43qIRFW9wYk3Adubk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.95.17.0/24
213.162.64.0/23
213.162.78.0/24
IPv6:
2001:678:5a8::/48
Signature Algorithm: sha256WithRSAEncryption
0e:db:76:b0:20:3a:6c:3b:c9:89:bb:fa:4c:4b:c9:d9:a4:8f:
a6:27:79:d7:f7:80:38:23:d2:99:bd:9f:69:70:96:b9:ca:f5:
41:38:b9:aa:09:3a:e1:3f:96:1b:f2:7c:f2:4e:91:f3:e9:a9:
a1:32:b2:24:37:93:1d:8d:55:ea:ce:48:1b:91:5e:f0:cf:a7:
55:10:83:5e:f0:ea:1e:3e:66:86:8d:ca:3f:52:49:8f:0d:3d:
90:c7:ca:83:e2:f3:14:33:25:bc:34:a2:61:35:54:84:57:b9:
43:f0:9e:88:53:0d:52:07:f4:ea:9b:63:f3:56:a0:44:c5:f1:
7c:19:9b:a1:24:e9:84:53:cc:af:cf:fd:d0:c1:17:98:4b:b9:
3b:c2:6f:06:c3:49:7e:c1:fe:95:08:5d:0f:11:18:86:c9:fe:
33:84:53:d7:5a:8a:59:b1:bf:fb:27:ba:1d:60:bb:23:5c:e9:
8b:b6:ae:30:94:b4:57:5f:03:b1:ae:a6:7b:99:df:b1:aa:13:
40:17:cf:7b:4d:5c:51:4d:d3:48:bb:eb:a6:d5:e8:43:5c:03:
43:d1:37:64:62:14:e3:33:60:83:ee:32:aa:ec:71:fe:88:13:
07:c2:64:88:a3:4c:a8:c5:28:16:4b:c4:6c:b5:e4:45:43:85:
17:50:f8:1f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEBjbMPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NmNiYzc2MTRiNDk4NzhiZjM3ZmRlMGMxOGQ3Yzg1MWMyZDA3ZTZmMB4XDTIyMDEw
MTA5NTMyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWI1MGM5N2JkMzk2
YjA1ZTM3YTg4NDQ1NWJkYzE4OTM3MDFkYjliOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANWBXP40TJh+VutXtaneod/KzOaSWf+TxXSMxJllJp29Um3u
v7CJ723H5xZdJYMlYtKn9b1SDsSIYrZmBvR/lsq3DBBiRX/JMmdEAmCGF7e4GUA0
RbOUputG+QWcMRKlhGMfDfm/VnBn9SDh1Fqgw9CF6ospbaOnZ6uRVosbZu2gPhU9
mrL7LhUJlo+x2s545MU4SrEQbKM/zhilwgbIH6l9Id405AxXE+bC3tRHkRvNWXGk
frihyCtyF9MEm2JThsmRHvJFKT/LF6XGJkUiPwE1IzzM/QiKDsBopZVzPQ2ymupW
xp4wNPcxl/udmiXHE+6Z5xGQ53aBqfSMn456TlECAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBSbUMl705awXjeohEVb3BiTcB25uTAfBgNVHSMEGDAWgBQGy8dhS0mHi/N/
3gwY18hRwtB+bzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JzdkhZVXRKaDR2emY5NE1HTmZJVWNMUWZtOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDMvODc3Zjk5LTdhY2MtNGQzMC04M2M4LTU3NWE2MGRlNjZhNC8x
L20xREplOU9Xc0Y0M3FJUkZXOXdZazNBZHViay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMv
ODc3Zjk5LTdhY2MtNGQzMC04M2M4LTU3NWE2MGRlNjZhNC8xL0JzdkhZVXRKaDR2
emY5NE1HTmZJVWNMUWZtOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEANRfEQMEAdWiQAMEANWiTjAPBAIA
AjAJAwcAIAEGeAWoMA0GCSqGSIb3DQEBCwUAA4IBAQAO23awIDpsO8mJu/pMS8nZ
pI+mJ3nX94A4I9KZvZ9pcJa5yvVBOLmqCTrhP5Yb8nzyTpHz6amhMrIkN5MdjVXq
zkgbkV7wz6dVEINe8OoePmaGjco/UkmPDT2Qx8qD4vMUMyW8NKJhNVSEV7lD8J6I
Uw1SB/Tqm2PzVqBExfF8GZuhJOmEU8yvz/3QwReYS7k7wm8Gw0l+wf6VCF0PERiG
yf4zhFPXWopZsb/7J7odYLsjXOmLtq4wlLRXXwOxrqZ7md+xqhNAF897TVxRTdNI
u+um1ehDXAND0TdkYhTjM2CD7jKq7HH+iBMHwmSIo0yoxSgWS8RsteRFQ4UXUPgf
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:23 2025 by rpki-client