Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/Q01FBHZ_5pg6je9Ro_x5Cud978Y.roa
File: Q01FBHZ_5pg6je9Ro_x5Cud978Y.roa (raw, json)
Hash identifier: dtMT+6wTH84/MwFn9UuUMXSwVkOH8pYjBCyyIiTv8aY=
Subject key identifier: 43:4D:45:04:76:7F:E6:98:3A:8D:EF:51:A3:FC:79:0A:E7:7D:EF:C6
Certificate issuer: /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial: 01856EA694A3FC2C50F36FEED4188245107A
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/Q01FBHZ_5pg6je9Ro_x5Cud978Y.roa
Signing time: Sun 01 Jan 2023 18:44:48 +0000
ROA not before: Sun 01 Jan 2023 18:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212688
IP address blocks: 212.24.125.0/24 maxlen: 24
2a11:28c0:1::/48 maxlen: 48
2a11:28c0:2::/48 maxlen: 48
2a11:28c0::/32 maxlen: 48
2a11:28c0::/48 maxlen: 48
2001:67c:840::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:94:a3:fc:2c:50:f3:6f:ee:d4:18:82:45:10:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
Validity
Not Before: Jan 1 18:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=434d4504767fe6983a8def51a3fc790ae77defc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:00:c4:43:08:eb:27:44:cf:23:87:61:fe:
c7:57:7c:13:67:6e:63:de:86:5d:2b:f8:31:d8:c8:
14:c3:4f:db:f9:4f:c0:28:a5:1f:b3:24:03:5b:8c:
3c:02:54:58:1c:78:85:98:89:ad:cc:c1:ea:97:28:
8f:70:01:3b:ad:b2:20:54:d5:cb:42:7a:4d:6c:31:
c6:37:16:59:89:d7:4c:50:a3:79:d9:54:1d:38:ad:
c4:c9:e8:3e:37:54:13:1c:86:dd:24:21:43:7c:d3:
f8:c7:c8:22:84:83:5b:58:62:cf:37:0c:7c:ab:de:
d4:5e:ff:60:04:7f:fd:8d:6e:46:61:ac:ed:0e:a9:
20:8e:df:b3:59:95:6a:55:67:ae:51:dc:bb:a2:86:
2a:ab:f2:05:5f:1d:71:2e:b8:b6:fe:9b:6d:24:2e:
9d:19:ad:92:5d:dc:f7:e7:e2:66:cb:3c:b7:d9:56:
34:80:9b:b6:94:8b:58:62:2d:03:8a:6f:85:bb:bc:
8a:da:6f:ee:e6:19:c4:16:85:48:bf:bd:61:32:47:
d9:6a:fc:86:06:9c:45:59:49:3e:ce:09:eb:45:55:
59:cc:64:f2:9b:e8:7a:4b:d0:6f:86:96:3f:71:fe:
43:67:6b:2d:28:86:00:52:fb:2c:42:79:04:90:b7:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:45:04:76:7F:E6:98:3A:8D:EF:51:A3:FC:79:0A:E7:7D:EF:C6
X509v3 Authority Key Identifier:
keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/Q01FBHZ_5pg6je9Ro_x5Cud978Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.125.0/24
IPv6:
2001:67c:840::/48
2a11:28c0::/32
Signature Algorithm: sha256WithRSAEncryption
58:81:bf:64:07:86:98:3a:0c:c2:9b:2a:ac:7e:d6:e3:30:9b:
ce:f1:4c:cb:aa:37:16:71:36:30:95:35:ff:3b:ad:54:e7:57:
d5:d6:9d:e1:07:9e:89:f7:16:db:92:8b:f2:8f:2d:04:69:47:
bb:d7:0e:6f:66:15:e3:18:81:22:07:b1:a4:a6:d7:f9:ba:9b:
6c:b0:60:f8:fc:41:b8:ac:50:5d:20:7e:17:4e:0e:c4:ef:8c:
0b:43:3b:b3:ac:a6:18:a7:59:99:38:a5:6f:47:0a:a7:44:f2:
46:0e:b8:c7:3b:48:36:ed:5b:71:85:d2:cb:0c:24:cc:b6:f5:
ea:d3:42:2b:7c:3b:98:24:fc:ea:77:83:5c:9d:35:aa:4a:e0:
eb:3b:89:5a:3e:47:60:32:a1:2d:13:2c:af:65:c4:88:9b:16:
28:8d:d3:fd:c1:6b:55:30:45:62:8e:c8:84:b5:5f:24:d2:a1:
de:26:66:99:01:fa:c4:82:eb:7d:42:74:3d:4f:d2:24:bd:b8:
6f:92:b6:3e:a0:23:ce:a1:77:30:fd:9c:20:f2:d3:ba:d3:f4:
20:c0:0c:7a:62:bd:37:f5:d9:e7:c5:87:8a:20:3a:21:93:1f:
f7:0b:ff:ae:86:ab:30:f0:5c:15:d1:d5:60:da:e7:86:3a:8c:
68:6a:ef:8b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVuppSj/CxQ82/u1BiCRRB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNjU0MzZhYzUwMzgzMzJlNzAzYWRiYmVmZjU4MTRkYjgy
YWI0M2YwHhcNMjMwMTAxMTg0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzRkNDUwNDc2N2ZlNjk4M2E4ZGVmNTFhM2ZjNzkwYWU3N2RlZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE8AxEMI6ydEzyOHYf7HV3wTZ25j
3oZdK/gx2MgUw0/b+U/AKKUfsyQDW4w8AlRYHHiFmImtzMHqlyiPcAE7rbIgVNXL
QnpNbDHGNxZZiddMUKN52VQdOK3Eyeg+N1QTHIbdJCFDfNP4x8gihINbWGLPNwx8
q97UXv9gBH/9jW5GYaztDqkgjt+zWZVqVWeuUdy7ooYqq/IFXx1xLri2/pttJC6d
Ga2SXdz35+Jmyzy32VY0gJu2lItYYi0Dim+Fu7yK2m/u5hnEFoVIv71hMkfZavyG
BpxFWUk+zgnrRVVZzGTym+h6S9BvhpY/cf5DZ2stKIYAUvssQnkEkLcCMwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFENNRQR2f+aYOo3vUaP8eQrnfe/GMB8GA1UdIwQY
MBaAFC9lQ2rFA4My5wOtu+/1gU24KrQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEt
OTVkNjBiM2U0NmNjLzEvUTAxRkJIWl81cGc2amU5Um9feDVDdWQ5NzhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEtOTVkNjBiM2U0NmNj
LzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQA1Bh9MBYE
AgACMBADBwAgAQZ8CEADBQAqESjAMA0GCSqGSIb3DQEBCwUAA4IBAQBYgb9kB4aY
OgzCmyqsftbjMJvO8UzLqjcWcTYwlTX/O61U51fV1p3hB56J9xbbkovyjy0EaUe7
1w5vZhXjGIEiB7Gkptf5uptssGD4/EG4rFBdIH4XTg7E74wLQzuzrKYYp1mZOKVv
RwqnRPJGDrjHO0g27VtxhdLLDCTMtvXq00IrfDuYJPzqd4NcnTWqSuDrO4laPkdg
MqEtEyyvZcSImxYojdP9wWtVMEVijsiEtV8k0qHeJmaZAfrEgut9QnQ9T9Ikvbhv
krY+oCPOoXcw/Zwg8tO60/QgwAx6Yr039dnnxYeKIDohkx/3C/+uhqsw8FwV0dVg
2ueGOoxoau+L
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:43 2025 by rpki-client