Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/Lm641ZnXXubbYCtl3FKWfJfPzz4.roa
File: Lm641ZnXXubbYCtl3FKWfJfPzz4.roa (raw, json)
Hash identifier: Pcnm3kCmOu5NFTckNEr/udIWeUl52yOUCUBVy/sJ2nc=
Subject key identifier: 2E:6E:B8:D5:99:D7:5E:E6:DB:60:2B:65:DC:52:96:7C:97:CF:CF:3E
Certificate issuer: /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial: 05C7D5
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/Lm641ZnXXubbYCtl3FKWfJfPzz4.roa
Signing time: Fri 15 Apr 2022 06:27:25 +0000
ROA not before: Fri 15 Apr 2022 06:27:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 217.28.143.0/24 maxlen: 24
2a12:26c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378837 (0x5c7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Validity
Not Before: Apr 15 06:27:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e6eb8d599d75ee6db602b65dc52967c97cfcf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:05:c0:be:7e:d9:1b:f5:b5:a6:43:36:dc:
84:af:42:4a:77:f7:57:b8:4c:66:1e:3c:5f:fe:8c:
3c:90:61:c3:32:54:1c:93:8d:60:7a:17:cc:55:d2:
62:2e:36:4a:8d:89:ae:2d:43:f9:f9:a8:b4:e1:bd:
8b:7a:0c:28:0c:8e:3a:9d:49:95:99:cb:8e:32:64:
2d:02:b1:f3:28:82:71:ae:27:5c:95:d0:d3:1f:99:
c9:d4:26:01:31:24:dd:1c:51:31:5f:53:a6:03:7d:
ad:52:93:30:e2:e7:a2:4e:91:e6:48:d7:f8:73:42:
33:d7:46:16:f9:3a:62:26:45:01:91:25:fd:90:48:
8b:23:2c:49:b4:37:b7:a4:ff:88:bb:8f:03:e4:3c:
97:70:22:0b:68:7f:1f:d5:0c:d6:78:81:53:15:9f:
20:86:59:f0:d4:6f:84:e3:87:53:ce:41:db:7a:35:
1f:ad:25:07:1a:19:51:58:33:85:31:78:73:8c:61:
cc:56:99:c7:61:c5:49:29:23:ba:19:09:f5:90:7e:
fd:a6:d7:2f:d0:60:6d:0f:97:f8:29:89:e0:cf:85:
48:86:71:d4:06:9c:d6:c8:dc:71:1e:63:40:82:95:
24:01:ec:f0:b3:46:ec:be:24:77:6a:0a:aa:a6:93:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:B8:D5:99:D7:5E:E6:DB:60:2B:65:DC:52:96:7C:97:CF:CF:3E
X509v3 Authority Key Identifier:
keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/Lm641ZnXXubbYCtl3FKWfJfPzz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.143.0/24
IPv6:
2a12:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
25:6a:14:5e:02:25:74:63:7b:2d:89:57:fe:96:65:79:9b:33:
ec:f8:6f:9f:7e:5c:f4:b4:be:46:7d:58:3f:21:73:ca:a4:b9:
ed:63:b4:6a:1c:de:4e:13:8e:c7:dd:e7:b0:28:32:3e:91:ce:
07:ed:5c:18:ab:ed:15:7d:ce:9f:d7:f5:37:b6:4a:6e:57:76:
70:1e:20:f2:ac:b8:aa:9a:60:f2:27:5f:36:35:5c:6b:b9:6d:
9e:a1:e8:39:0c:40:2d:46:f0:2e:4c:9a:5a:7e:44:60:f7:f5:
a0:ef:61:e0:6c:98:e6:85:c6:25:f5:74:b2:a0:a1:2f:f4:6b:
72:1f:9b:49:d7:fd:f8:03:28:10:f4:03:3e:01:73:8d:05:8f:
84:73:b6:da:66:a5:07:8d:cc:75:d5:9e:bf:2b:2a:82:3b:33:
fb:ba:7e:60:3c:49:a9:8b:39:3e:7a:68:f7:7a:9e:eb:8d:20:
20:bc:7c:d7:a2:27:f2:52:c8:a8:3b:c1:a3:8b:b3:7a:58:07:
2b:1f:e6:00:93:35:d5:b1:e3:e5:82:be:92:46:9a:fc:30:47:
28:cc:e9:85:a2:da:8a:79:de:d2:2e:c7:60:6d:74:33:26:da:
dc:7d:d3:b9:09:53:97:39:e3:b4:2b:99:02:90:bc:79:b7:63:
bc:f2:17:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDBcfVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlh
MmFlOGQ0YjAxNjg3MDIxYjc3Yjg3NGYxMTBjMWI2ZGJmZWM2NTEwHhcNMjIwNDE1
MDYyNzI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyZTZlYjhkNTk5ZDc1
ZWU2ZGI2MDJiNjVkYzUyOTY3Yzk3Y2ZjZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0eMFwL5+2Rv1taZDNtyEr0JKd/dXuExmHjxf/ow8kGHDMlQc
k41gehfMVdJiLjZKjYmuLUP5+ai04b2LegwoDI46nUmVmcuOMmQtArHzKIJxridc
ldDTH5nJ1CYBMSTdHFExX1OmA32tUpMw4ueiTpHmSNf4c0Iz10YW+TpiJkUBkSX9
kEiLIyxJtDe3pP+Iu48D5DyXcCILaH8f1QzWeIFTFZ8ghlnw1G+E44dTzkHbejUf
rSUHGhlRWDOFMXhzjGHMVpnHYcVJKSO6GQn1kH79ptcv0GBtD5f4KYngz4VIhnHU
BpzWyNxxHmNAgpUkAezws0bsviR3agqqppP+HQIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFC5uuNWZ117m22ArZdxSlnyXz88+MB8GA1UdIwQYMBaAFJoq6NSwFocCG3e4
dPEQwbbb/sZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bWlybzFMQVdod0liZDdoMDhSREJ0dHYteGxFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81MC9jNDhhMmQtMDk3ZC00OThiLWJjNjItYjUxM2EwYzJmMzUzLzEv
TG02NDFablhYdWJiWUN0bDNGS1dmSmZQeno0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9j
NDhhMmQtMDk3ZC00OThiLWJjNjItYjUxM2EwYzJmMzUzLzEvbWlybzFMQVdod0li
ZDdoMDhSREJ0dHYteGxFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA2RyPMA0EAgACMAcDBQMqEibAMA0G
CSqGSIb3DQEBCwUAA4IBAQAlahReAiV0Y3stiVf+lmV5mzPs+G+fflz0tL5GfVg/
IXPKpLntY7RqHN5OE47H3eewKDI+kc4H7VwYq+0Vfc6f1/U3tkpuV3ZwHiDyrLiq
mmDyJ182NVxruW2eoeg5DEAtRvAuTJpafkRg9/Wg72HgbJjmhcYl9XSyoKEv9Gty
H5tJ1/34AygQ9AM+AXONBY+Ec7baZqUHjcx11Z6/KyqCOzP7un5gPEmpizk+emj3
ep7rjSAgvHzXoifyUsioO8Gji7N6WAcrH+YAkzXVsePlgr6SRpr8MEcozOmFotqK
ed7SLsdgbXQzJtrcfdO5CVOXOeO0K5kCkLx5t2O88heT
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:08 2025 by rpki-client