Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/R5rWhZee-xqK1mookh3aeE_LBCE.roa
File: R5rWhZee-xqK1mookh3aeE_LBCE.roa (raw, json)
Hash identifier: OYAL9pr3UyH1jDfFaEq8EZcmPqlo1CpFS1cO4SYN0Vc=
Subject key identifier: 47:9A:D6:85:97:9E:FB:1A:8A:D6:6A:28:92:1D:DA:78:4F:CB:04:21
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 09014AC9
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/R5rWhZee-xqK1mookh3aeE_LBCE.roa
Signing time: Sat 01 Jan 2022 02:52:32 +0000
ROA not before: Sat 01 Jan 2022 02:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15851
IP address blocks: 212.127.64.0/19 maxlen: 19
213.231.192.0/18 maxlen: 18
2001:a48:8000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151079625 (0x9014ac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jan 1 02:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=479ad685979efb1a8ad66a28921dda784fcb0421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:2d:c9:80:1d:a9:8b:9c:cc:2b:97:84:b7:
69:ab:f1:5a:95:5c:76:c3:4d:b0:0b:fb:55:17:41:
24:57:67:0b:87:2c:bb:17:4f:17:d7:00:81:20:20:
e0:21:14:d4:05:03:04:09:95:46:67:9c:7a:35:78:
9a:ca:38:02:3e:bc:c2:b5:93:e9:17:92:68:df:9f:
78:83:b4:07:55:84:84:1c:3d:3a:4c:04:5b:79:6f:
85:c5:73:62:7f:04:d7:cc:9d:f6:e5:36:c6:e5:31:
aa:5b:57:07:d1:0e:b7:c6:95:6f:2f:1c:91:bb:21:
6d:12:53:18:8f:3b:a7:74:da:a7:89:11:6b:9b:f4:
59:5d:b1:e4:fc:c1:8d:68:d3:c1:94:da:8b:37:f8:
77:33:4e:a4:eb:2c:bb:7d:49:75:9a:57:3c:45:1b:
dc:4f:1e:80:7b:18:d3:92:c2:d1:07:21:87:03:78:
47:ed:3a:1d:c2:b4:cb:c2:71:a7:94:dc:66:11:dd:
61:31:21:82:1f:d8:5a:53:09:fe:aa:36:c6:e8:05:
a3:b2:be:ab:eb:80:44:51:8d:cb:d7:34:a1:57:cc:
bb:0c:3a:3b:ba:ec:5e:4c:25:f2:ff:18:9e:3f:f9:
76:88:4e:4f:b3:3b:59:94:b1:27:7f:eb:d6:b7:fa:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9A:D6:85:97:9E:FB:1A:8A:D6:6A:28:92:1D:DA:78:4F:CB:04:21
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/R5rWhZee-xqK1mookh3aeE_LBCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.127.64.0/19
213.231.192.0/18
IPv6:
2001:a48:8000::/36
Signature Algorithm: sha256WithRSAEncryption
06:60:7b:18:e1:6c:e9:cd:72:45:ad:44:df:cf:84:bc:7b:36:
4f:a3:ba:99:7a:7b:8b:f6:a9:33:91:c9:51:65:4c:5c:31:cd:
9b:ec:19:e1:7a:99:72:99:a9:d7:5c:56:a2:dd:86:18:34:43:
25:24:5c:d9:54:ea:ee:13:f1:a1:4f:a3:8e:14:67:68:fd:1e:
44:3d:0e:4c:64:f4:22:fc:6e:28:4d:f6:21:7f:24:40:9a:30:
6a:8b:4d:58:13:a5:ef:6e:b5:21:6d:6a:21:61:57:95:13:a6:
5b:4e:d7:f8:6b:bb:54:a6:29:88:4f:96:10:be:3b:04:26:ac:
58:8d:ef:01:04:e9:78:d5:53:b7:c4:a0:30:a7:88:a4:91:02:
35:28:b8:00:79:fa:d6:3d:29:35:a9:14:ce:c7:c3:ba:3e:12:
a1:90:87:77:b5:c2:85:71:19:fe:36:20:7e:50:24:53:b8:4f:
20:a9:cf:19:c2:5e:4a:f7:a3:95:a0:41:40:ed:d0:56:a6:9d:
aa:3d:0f:b7:c3:1c:c2:ce:4c:d3:08:01:8d:bc:d7:16:1c:7c:
e9:15:ca:6f:fa:88:28:94:1d:17:74:18:f7:e2:7a:03:a5:2a:
93:db:48:24:9e:22:de:b0:8f:a0:23:7d:04:b3:58:f3:12:58:
a4:6c:53:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:33 2025 by rpki-client