Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/JvdJvuGYnhlND3gODhGBMtyNTrM.roa
File: JvdJvuGYnhlND3gODhGBMtyNTrM.roa (raw, json)
Hash identifier: OcgL08BSuzVOkCla5JlRtGczdaY+UlFxQV/0eKBgVQI=
Subject key identifier: 26:F7:49:BE:E1:98:9E:19:4D:0F:78:0E:0E:11:81:32:DC:8D:4E:B3
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DDD360E79A556E05058236DDF1574
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/JvdJvuGYnhlND3gODhGBMtyNTrM.roa
Signing time: Sun 01 Jan 2023 22:05:00 +0000
ROA not before: Sun 01 Jan 2023 22:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44234
IP address blocks: 213.215.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:dd:36:0e:79:a5:56:e0:50:58:23:6d:df:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f749bee1989e194d0f780e0e118132dc8d4eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:8a:5f:d0:e9:43:30:60:28:18:d3:5d:08:
e4:46:85:89:09:f2:97:85:fc:03:8a:5c:87:50:bc:
fa:29:85:06:d2:7b:cf:81:6b:0f:ce:fc:d7:0d:6c:
b7:46:f3:d8:b5:a2:32:32:7b:4e:73:3d:ff:7b:53:
cf:96:75:36:d6:6a:9f:bf:b7:5d:4e:45:8a:aa:ea:
d9:8f:92:35:55:8d:e3:54:29:35:59:ff:83:2d:85:
0f:52:87:39:7f:5c:15:f7:72:38:19:d8:7d:31:78:
e4:f8:94:d6:c2:90:69:a1:79:ad:3e:f9:aa:fe:40:
0e:24:f7:b4:35:5c:ea:32:ab:59:06:53:fa:75:66:
e0:c8:7e:ce:e7:9d:59:21:61:61:c2:e4:45:09:08:
70:b4:9c:d7:8d:a9:9d:00:32:b5:a3:95:53:e2:62:
b9:4a:0f:3a:20:a4:b0:cb:93:8c:c4:70:0d:f7:d7:
21:06:71:d4:0b:87:d9:d0:25:6a:b0:83:8a:d9:7e:
9b:5d:46:50:7e:d5:0c:fd:f5:ef:68:86:9c:11:7a:
c8:90:17:84:ea:27:88:2e:36:56:21:fb:de:6f:f7:
e7:42:e7:6e:bb:5b:82:e4:8f:2d:11:83:eb:af:47:
a2:01:b9:6b:94:3f:6e:3e:4a:3e:78:46:4b:b1:55:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F7:49:BE:E1:98:9E:19:4D:0F:78:0E:0E:11:81:32:DC:8D:4E:B3
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/JvdJvuGYnhlND3gODhGBMtyNTrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:83:83:70:0f:d8:13:54:ee:c5:e8:d7:cc:f0:33:f1:52:c8:
ac:20:29:a6:06:fd:57:b7:04:b0:cc:b2:c3:47:d8:97:f7:24:
e0:bf:7d:2e:09:e2:55:ae:da:cd:5e:ff:9a:26:ab:24:6d:4a:
55:03:c7:d4:07:d3:56:a6:5c:bb:4c:a6:25:00:29:64:3d:4b:
91:ec:fd:eb:f0:75:2c:60:18:65:6b:d1:dc:c8:9d:a2:ee:1c:
b4:2f:2c:50:0f:05:22:e2:13:db:e2:b4:88:3c:55:37:e3:ec:
62:dc:b3:1c:c9:3b:45:f1:89:54:11:13:0f:31:f0:64:a3:dc:
bf:6b:55:7e:17:e3:43:ca:68:6d:cc:89:ee:55:17:aa:d1:9b:
39:af:76:47:1c:3b:cc:5f:08:16:b6:8c:ac:79:45:36:75:f0:
f0:ec:da:84:76:45:11:70:4b:73:3d:5c:2a:24:29:02:30:d5:
cd:4c:4f:99:01:fb:14:9e:be:2c:b0:43:0a:c2:31:46:d4:67:
c4:30:0b:6a:ca:0f:4d:f7:7b:78:5d:d9:36:5e:1b:77:cd:21:
35:ef:88:7f:aa:47:34:b1:a1:71:07:2e:70:d1:39:b3:4e:51:
e5:80:76:68:42:cf:3e:57:71:9c:04:93:2a:c4:91:52:8f:b0:
3f:aa:cc:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXd02DnmlVuBQWCNt3xV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm
MDVkYmEwHhcNMjMwMTAxMjIwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmY3NDliZWUxOTg5ZTE5NGQwZjc4MGUwZTExODEzMmRjOGQ0ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzGKX9DpQzBgKBjTXQjkRoWJCfKX
hfwDilyHULz6KYUG0nvPgWsPzvzXDWy3RvPYtaIyMntOcz3/e1PPlnU21mqfv7dd
TkWKqurZj5I1VY3jVCk1Wf+DLYUPUoc5f1wV93I4Gdh9MXjk+JTWwpBpoXmtPvmq
/kAOJPe0NVzqMqtZBlP6dWbgyH7O551ZIWFhwuRFCQhwtJzXjamdADK1o5VT4mK5
Sg86IKSwy5OMxHAN99chBnHUC4fZ0CVqsIOK2X6bXUZQftUM/fXvaIacEXrIkBeE
6ieILjZWIfveb/fnQuduu1uC5I8tEYPrr0eiAblrlD9uPko+eEZLsVXNNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCb3Sb7hmJ4ZTQ94Dg4RgTLcjU6zMB8GA1UdIwQY
MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt
ZTJmYmMzYTY4ODAwLzEvSnZkSnZ1R1luaGxORDNnT0RoR0JNdHlOVHJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw
LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ddpMA0G
CSqGSIb3DQEBCwUAA4IBAQCKg4NwD9gTVO7F6NfM8DPxUsisICmmBv1XtwSwzLLD
R9iX9yTgv30uCeJVrtrNXv+aJqskbUpVA8fUB9NWply7TKYlAClkPUuR7P3r8HUs
YBhla9HcyJ2i7hy0LyxQDwUi4hPb4rSIPFU34+xi3LMcyTtF8YlUERMPMfBko9y/
a1V+F+NDymhtzInuVReq0Zs5r3ZHHDvMXwgWtoyseUU2dfDw7NqEdkURcEtzPVwq
JCkCMNXNTE+ZAfsUnr4ssEMKwjFG1GfEMAtqyg9N93t4Xdk2Xht3zSE174h/qkc0
saFxBy5w0TmzTlHlgHZoQs8+V3GcBJMqxJFSj7A/qswM
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:49 2025 by rpki-client