Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/mi1pWlueEZOpJ6TDpWSIJ34U_oE.roa
File: mi1pWlueEZOpJ6TDpWSIJ34U_oE.roa (raw, json)
Hash identifier: 6hgyl/6jLTgm4ulBLGIvZ55QGMGWE/fH98+DiZnmEEM=
Subject key identifier: 9A:2D:69:5A:5B:9E:11:93:A9:27:A4:C3:A5:64:88:27:7E:14:FE:81
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0181CDACE04ED35B9517BCB3CC2501427680
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/mi1pWlueEZOpJ6TDpWSIJ34U_oE.roa
Signing time: Tue 05 Jul 2022 09:24:27 +0000
ROA not before: Tue 05 Jul 2022 09:24:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12850
IP address blocks: 212.29.128.0/19 maxlen: 24
87.248.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cd:ac:e0:4e:d3:5b:95:17:bc:b3:cc:25:01:42:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jul 5 09:24:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a2d695a5b9e1193a927a4c3a56488277e14fe81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:a6:e2:ca:c0:83:2a:e6:b5:20:9c:86:39:
f0:2d:8c:85:4b:63:1a:e2:ae:69:e3:fe:7e:df:9f:
ac:62:92:f2:2a:66:c2:62:4e:6b:0d:24:f3:08:de:
ce:88:02:b1:2b:fb:46:f7:2d:39:05:64:5e:b2:4b:
b3:5c:90:2d:0e:fb:8f:fc:a0:cc:82:41:82:51:d8:
26:94:52:9f:3f:d7:79:53:2e:cf:c1:9f:30:3b:7c:
c1:1e:18:44:3a:83:b1:46:04:59:19:cb:81:20:95:
6f:2e:96:91:7b:7c:83:47:2c:9d:2e:86:69:60:67:
47:2b:63:0c:85:09:34:03:02:f4:1a:9a:03:8c:7a:
38:64:ef:ac:a5:e7:39:9d:d0:7c:db:98:fb:df:b8:
32:03:db:2c:e2:c8:fd:02:e5:9a:66:75:3b:77:c3:
5c:7d:70:b8:df:b3:4c:8c:79:79:1c:00:c5:b1:58:
34:c3:97:9a:95:f7:b1:d4:06:01:31:e9:e3:06:b0:
50:fd:eb:52:4f:b3:d0:ac:4e:fd:84:13:15:4a:d7:
17:03:f0:58:90:c6:31:8c:89:b0:84:5f:b6:34:cc:
8b:bd:30:00:46:da:6f:92:95:3c:fe:b9:0e:42:54:
31:f7:b8:7c:81:a3:ca:d0:15:a6:94:9a:75:2b:c8:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2D:69:5A:5B:9E:11:93:A9:27:A4:C3:A5:64:88:27:7E:14:FE:81
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/mi1pWlueEZOpJ6TDpWSIJ34U_oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.32.0/19
212.29.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:8d:c1:06:f5:51:f1:d2:02:67:29:99:f3:ce:b5:bc:0d:d9:
70:9d:13:2e:e1:d4:c8:b1:8d:a7:51:ae:54:ea:7d:d2:fd:5a:
3a:a4:85:a3:a7:d8:60:c5:a0:12:66:6a:54:8d:a7:dc:cb:1c:
0c:88:66:6f:06:93:8d:ca:de:7b:ac:1f:99:21:6f:b2:f3:b5:
fd:d4:e9:28:a0:6d:88:df:9a:5e:50:6e:bf:76:06:17:e3:bb:
3a:0a:a1:c0:7c:a3:07:3b:5e:87:83:ff:1e:25:79:c5:1b:40:
89:39:9f:7e:ba:f7:e5:0a:df:f7:80:23:f8:f8:40:17:2b:b7:
0c:54:12:a7:e9:51:5b:aa:bf:30:76:2c:4f:07:1f:cc:21:83:
00:0e:35:d5:6f:07:14:dd:25:4f:1d:fd:80:48:84:d0:01:c8:
ff:bb:b6:34:e1:7e:1d:6b:73:31:ec:c8:f4:ca:0b:8c:eb:d9:
76:a1:08:45:d0:d8:45:30:50:1c:f3:01:57:95:73:73:e6:ec:
4b:9e:5c:1f:6f:cc:19:e2:6b:26:9f:52:f6:07:11:47:52:13:
df:0a:8b:da:b5:85:56:72:98:2c:a5:d0:cf:c4:c8:5b:68:44:
e1:81:a7:ab:f3:bb:ed:35:93:6f:f5:78:41:85:ae:ba:d0:dd:
be:06:e7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:03 2025 by rpki-client