Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/Vf3RwEy8AcXM4q4DYUd_rPJNIoc.roa
File: Vf3RwEy8AcXM4q4DYUd_rPJNIoc.roa (raw, json)
Hash identifier: rLowoQAqmoeytfIK9oo1pZjkoOFusuPK0w2ZlhnIxrw=
Subject key identifier: 55:FD:D1:C0:4C:BC:01:C5:CC:E2:AE:03:61:47:7F:AC:F2:4D:22:87
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 01856EAFD46A0C77C75B8DB70286685FB29B
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/Vf3RwEy8AcXM4q4DYUd_rPJNIoc.roa
Signing time: Sun 01 Jan 2023 18:54:55 +0000
ROA not before: Sun 01 Jan 2023 18:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16296
IP address blocks: 80.241.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d4:6a:0c:77:c7:5b:8d:b7:02:86:68:5f:b2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Jan 1 18:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55fdd1c04cbc01c5cce2ae0361477facf24d2287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a8:d8:a8:ed:d5:7b:38:17:70:43:49:ec:b3:
c2:9d:b3:f0:79:ad:5f:11:85:f5:52:8a:b1:3e:74:
28:7f:93:1c:e2:fa:bd:e2:be:64:3a:60:ee:d3:57:
d7:55:3f:44:b9:68:27:4a:35:f7:b6:bc:6b:9c:28:
3b:d2:a8:1c:f2:d1:27:1b:e2:59:14:4e:bf:67:66:
6b:6d:06:15:38:24:84:03:c3:7c:fb:f8:12:36:ba:
e3:c2:30:02:a8:ab:8a:23:1f:50:16:e1:c1:4f:8d:
d3:b3:d6:c0:cc:11:d2:e8:ca:94:2e:53:f7:03:bf:
ba:b1:c0:8c:e1:f8:52:65:3f:0a:b1:0a:6e:b3:84:
2c:02:8d:f7:1e:89:9a:e3:40:d2:56:56:d8:ce:44:
29:b4:38:74:6f:60:0f:d3:66:6a:c9:5f:25:27:f1:
f9:50:87:f0:cf:21:ec:b9:85:63:81:35:ee:36:c0:
61:a0:81:94:56:68:0e:9e:e7:fc:4b:ff:43:a9:c8:
84:36:67:5b:5f:bd:73:e0:93:e8:3f:7d:c3:0b:cb:
4a:d2:c7:83:09:fe:9d:7e:d3:4f:dc:88:47:47:62:
dd:4c:ae:2d:3f:f6:72:29:34:e9:4e:3c:e0:9f:4e:
1f:5c:f1:61:12:ef:d2:1d:c9:ef:78:b7:4d:29:b6:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FD:D1:C0:4C:BC:01:C5:CC:E2:AE:03:61:47:7F:AC:F2:4D:22:87
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/Vf3RwEy8AcXM4q4DYUd_rPJNIoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.128.0/21
Signature Algorithm: sha256WithRSAEncryption
08:a8:ed:c7:9c:2e:4a:50:c1:dc:99:0e:98:01:cc:2d:0f:07:
94:f2:7c:ae:a2:fb:f4:15:7c:3c:df:cb:9e:cd:30:3d:59:50:
0b:f9:7f:d3:4d:dd:e0:2f:67:4b:b2:fd:79:5d:da:24:02:1c:
89:0f:e3:2e:82:1a:28:65:4b:45:69:f0:66:5a:2f:95:fb:76:
19:b9:60:41:a4:d7:a1:5e:a1:23:36:c7:d3:a3:19:cd:e2:2c:
f2:c5:32:bd:80:ec:b5:57:da:6d:06:02:a6:f6:9d:57:ef:f9:
70:4f:6d:7b:20:6b:8c:97:6b:4b:fd:c4:e3:58:37:39:c0:03:
2e:d7:ec:46:d1:30:67:80:f9:90:6c:c3:6d:7c:c7:6f:4a:48:
a5:66:7a:9a:96:09:6b:28:38:c5:fd:94:1e:58:4c:f1:af:56:
c8:eb:a1:e7:1c:46:f5:29:96:64:80:e0:f2:1e:0b:30:5f:55:
e0:45:82:a6:82:57:0b:70:75:f2:a8:ec:be:e0:fc:dc:95:99:
e1:35:a0:60:4c:52:56:68:f7:e7:df:1c:fd:42:0d:cf:02:7d:
db:1b:96:76:49:2e:8f:20:7c:4d:19:62:01:24:d1:2f:79:a1:
de:32:5d:04:d4:31:5b:9d:49:b9:5e:9b:84:1e:5f:c4:76:78:
1d:f9:32:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVur9RqDHfHW423AoZoX7KbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzYwMzY2NjcxOWU5NzliZWYwOTIxNDUxYTJlYzI2NGVk
MDEyMDkwHhcNMjMwMTAxMTg1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWZkZDFjMDRjYmMwMWM1Y2NlMmFlMDM2MTQ3N2ZhY2YyNGQyMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6jYqO3VezgXcENJ7LPCnbPwea1f
EYX1UoqxPnQof5Mc4vq94r5kOmDu01fXVT9EuWgnSjX3trxrnCg70qgc8tEnG+JZ
FE6/Z2ZrbQYVOCSEA8N8+/gSNrrjwjACqKuKIx9QFuHBT43Ts9bAzBHS6MqULlP3
A7+6scCM4fhSZT8KsQpus4QsAo33Homa40DSVlbYzkQptDh0b2AP02ZqyV8lJ/H5
UIfwzyHsuYVjgTXuNsBhoIGUVmgOnuf8S/9DqciENmdbX71z4JPoP33DC8tK0seD
Cf6dftNP3IhHR2LdTK4tP/ZyKTTpTjzgn04fXPFhEu/SHcnveLdNKbZd3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFX90cBMvAHFzOKuA2FHf6zyTSKHMB8GA1UdIwQY
MBaAFBLGA2ZnGel5vvCSFFGi7CZO0BIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEt
NThlZmEwYmVlMDg0LzEvVmYzUndFeThBY1hNNHE0RFlVZF9yUEpOSW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEtNThlZmEwYmVlMDg0
LzEvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUPGAMA0G
CSqGSIb3DQEBCwUAA4IBAQAIqO3HnC5KUMHcmQ6YAcwtDweU8nyuovv0FXw838ue
zTA9WVAL+X/TTd3gL2dLsv15XdokAhyJD+MughooZUtFafBmWi+V+3YZuWBBpNeh
XqEjNsfToxnN4izyxTK9gOy1V9ptBgKm9p1X7/lwT217IGuMl2tL/cTjWDc5wAMu
1+xG0TBngPmQbMNtfMdvSkilZnqalglrKDjF/ZQeWEzxr1bI66HnHEb1KZZkgODy
HgswX1XgRYKmglcLcHXyqOy+4PzclZnhNaBgTFJWaPfn3xz9Qg3PAn3bG5Z2SS6P
IHxNGWIBJNEveaHeMl0E1DFbnUm5XpuEHl/Edngd+TK4
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:23:59 2025 by rpki-client