Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/f2ij6QI9Hair3-CcT7cR1tMOvx4.roa
File: f2ij6QI9Hair3-CcT7cR1tMOvx4.roa (raw, json)
Hash identifier: S5773uvmRYIF3a6AyagReVNDSVfiLXsEmZg4LUO6byw=
Subject key identifier: 7F:68:A3:E9:02:3D:1D:A8:AB:DF:E0:9C:4F:B7:11:D6:D3:0E:BF:1E
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 01856FF95769BA171C731F5669F6591AD772
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/f2ij6QI9Hair3-CcT7cR1tMOvx4.roa
Signing time: Mon 02 Jan 2023 00:54:49 +0000
ROA not before: Mon 02 Jan 2023 00:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210477
IP address blocks: 146.19.17.0/24 maxlen: 24
2a12:b500::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:57:69:ba:17:1c:73:1f:56:69:f6:59:1a:d7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Jan 2 00:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f68a3e9023d1da8abdfe09c4fb711d6d30ebf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:e8:31:b9:64:48:d1:ee:19:1e:aa:39:be:
be:20:53:81:17:ba:c9:c6:d5:2a:be:c6:44:aa:23:
8e:ab:67:c3:2a:b5:94:7f:ca:d1:29:50:3b:c2:2f:
0e:7e:89:0c:f9:72:13:32:ff:e4:a8:a4:54:6b:ac:
12:11:ea:98:6f:2e:6f:13:7c:a6:06:58:34:d4:9f:
d5:f7:8b:21:81:4a:97:37:1d:85:07:cb:3f:4f:77:
36:de:10:b4:ad:e4:5f:0e:7d:40:5d:ac:4c:e3:9a:
6c:03:3f:10:40:7b:72:e8:68:51:04:ea:d9:e6:c4:
a1:a1:54:f2:de:bd:7b:1e:54:a3:04:0f:0f:85:79:
3b:79:49:de:57:be:48:89:0b:24:96:9b:d7:18:8b:
0d:94:7b:7f:b7:8d:b1:29:3d:24:07:cc:b1:cd:d1:
25:f1:14:f0:bc:8f:81:ae:9b:a3:8b:af:dc:02:61:
b8:ab:ee:9d:bd:73:b4:4c:61:cb:b8:43:44:88:07:
d8:4d:fe:c0:49:ea:4b:f7:d2:2e:da:bf:e8:4d:ca:
7c:7f:7c:9c:fe:cf:4d:99:a4:5b:6d:83:b0:0d:b5:
5d:34:6d:2e:17:f7:38:29:72:ff:43:69:59:0f:ac:
98:74:da:0b:50:3c:e9:68:20:33:cb:6f:21:3d:88:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:A3:E9:02:3D:1D:A8:AB:DF:E0:9C:4F:B7:11:D6:D3:0E:BF:1E
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/f2ij6QI9Hair3-CcT7cR1tMOvx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.17.0/24
IPv6:
2a12:b500::/32
Signature Algorithm: sha256WithRSAEncryption
41:2b:9c:da:0b:a9:6f:e5:4e:b0:c5:75:bc:e0:07:fe:9d:27:
ec:70:1b:b5:55:78:fc:5b:33:8d:fe:a2:f9:88:8a:a5:a3:4a:
71:45:b8:34:08:03:27:fb:50:f0:0e:b1:01:c3:cb:c2:37:49:
fc:54:81:1c:90:86:6c:34:e3:2d:de:3d:6f:58:c2:a3:c3:22:
cd:03:32:03:dd:89:fd:d7:42:b4:f9:0d:c1:76:13:99:16:81:
fd:d2:02:5a:63:77:88:16:f1:3d:23:c4:57:11:50:82:b6:98:
ef:d2:67:c6:94:82:79:7d:2c:11:78:93:82:50:35:16:3d:cb:
08:c4:19:46:1a:9e:4b:0f:8a:33:6a:f1:51:f1:ce:46:f4:ff:
30:8b:c8:03:e4:f5:6f:52:eb:74:ae:5c:ae:86:02:26:ad:4d:
43:0f:17:6d:26:f6:53:8a:06:a6:5e:51:eb:48:a9:aa:68:db:
b5:25:9a:b2:0b:b9:88:ce:95:81:4e:d1:e5:1e:13:6c:8f:79:
c5:95:ce:47:5c:1c:0e:1d:34:96:44:a1:d9:91:6b:b4:e4:2b:
fc:44:94:2a:17:54:10:5c:b5:58:fb:ea:15:3c:69:d2:f8:d8:
3f:c4:5a:09:59:86:c9:61:73:5c:00:9f:89:68:99:2e:e4:4b:
5a:34:19:4a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVv+Vdpuhcccx9WafZZGtdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTE4OTBjMzA1YjBmMmRhNDIwYjAxNjk3ZTNiZjIzZDQ4
NWFiNjQwHhcNMjMwMTAyMDA1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjY4YTNlOTAyM2QxZGE4YWJkZmUwOWM0ZmI3MTFkNmQzMGViZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKroMblkSNHuGR6qOb6+IFOBF7rJ
xtUqvsZEqiOOq2fDKrWUf8rRKVA7wi8OfokM+XITMv/kqKRUa6wSEeqYby5vE3ym
Blg01J/V94shgUqXNx2FB8s/T3c23hC0reRfDn1AXaxM45psAz8QQHty6GhRBOrZ
5sShoVTy3r17HlSjBA8PhXk7eUneV75IiQsklpvXGIsNlHt/t42xKT0kB8yxzdEl
8RTwvI+Brpuji6/cAmG4q+6dvXO0TGHLuENEiAfYTf7ASepL99Iu2r/oTcp8f3yc
/s9NmaRbbYOwDbVdNG0uF/c4KXL/Q2lZD6yYdNoLUDzpaCAzy28hPYh9VwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH9oo+kCPR2oq9/gnE+3EdbTDr8eMB8GA1UdIwQY
MBaAFL6hiQwwWw8tpCCwFpfjvyPUhatkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUt
MzE3NmYwOTk5ZGRhLzEvZjJpajZRSTlIYWlyMy1DY1Q3Y1IxdE1Pdng0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUtMzE3NmYwOTk5ZGRh
LzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAkhMRMA0E
AgACMAcDBQAqErUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBK5zaC6lv5U6wxXW84Af+
nSfscBu1VXj8WzON/qL5iIqlo0pxRbg0CAMn+1DwDrEBw8vCN0n8VIEckIZsNOMt
3j1vWMKjwyLNAzID3Yn910K0+Q3BdhOZFoH90gJaY3eIFvE9I8RXEVCCtpjv0mfG
lIJ5fSwReJOCUDUWPcsIxBlGGp5LD4ozavFR8c5G9P8wi8gD5PVvUut0rlyuhgIm
rU1DDxdtJvZTigamXlHrSKmqaNu1JZqyC7mIzpWBTtHlHhNsj3nFlc5HXBwOHTSW
RKHZkWu05Cv8RJQqF1QQXLVY++oVPGnS+Ng/xFoJWYbJYXNcAJ+JaJku5EtaNBlK
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:58 2025 by rpki-client