Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/t7HsiN0lX45EMb2SKvTg55Y3gx0.roa
File: t7HsiN0lX45EMb2SKvTg55Y3gx0.roa (raw, json)
Hash identifier: Q2d/ctUTitdBuiNYp4bdJZLvQTjWo4mLO2tKACUJgfc=
Subject key identifier: B7:B1:EC:88:DD:25:5F:8E:44:31:BD:92:2A:F4:E0:E7:96:37:83:1D
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 01857082B2C190937815AC043D7361971FB4
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/t7HsiN0lX45EMb2SKvTg55Y3gx0.roa
Signing time: Mon 02 Jan 2023 03:24:51 +0000
ROA not before: Mon 02 Jan 2023 03:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31027
IP address blocks: 91.212.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b2:c1:90:93:78:15:ac:04:3d:73:61:97:1f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Jan 2 03:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7b1ec88dd255f8e4431bd922af4e0e79637831d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:79:09:ef:91:7d:1d:b6:32:ca:e8:3d:81:
a8:78:23:dc:79:10:50:3c:dd:a1:11:21:32:c6:c8:
95:f0:23:5f:d5:07:3f:bb:f2:8b:06:19:17:56:67:
8d:ca:93:16:b2:32:f0:38:be:f9:13:0a:86:89:40:
b8:9b:d5:db:28:79:00:f3:ad:4a:81:b3:54:8b:90:
8c:6f:86:16:7e:2e:72:c8:6d:bc:4c:56:10:c0:85:
1d:ca:e2:88:d4:5c:2c:e0:26:3e:f4:e1:0b:2d:33:
04:2d:d6:5e:b9:72:16:16:5b:1f:1a:60:71:88:13:
2d:07:d2:57:7d:c1:de:bb:71:41:2b:e3:b2:a0:c3:
70:25:1d:03:0f:2f:ee:3e:a6:0a:3c:ac:2e:db:69:
12:fd:02:f8:23:16:82:26:06:f1:6b:82:5a:61:cd:
c0:42:c7:bf:45:0b:85:22:3c:05:1b:e7:06:05:2e:
71:81:24:9e:93:22:34:54:56:a0:c7:fe:af:8c:5a:
64:72:24:7d:35:0b:cf:74:85:21:89:32:f3:a1:40:
b4:28:b9:81:d4:54:a0:c9:3e:a7:54:62:da:07:6e:
58:49:e0:ab:38:8f:f4:03:c4:68:66:2a:1b:0d:01:
54:42:f6:51:8d:6a:75:d9:1b:5f:b7:10:75:94:a2:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:EC:88:DD:25:5F:8E:44:31:BD:92:2A:F4:E0:E7:96:37:83:1D
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/t7HsiN0lX45EMb2SKvTg55Y3gx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:26:0f:88:2e:75:0b:71:44:35:f6:8d:49:e3:a8:2a:16:67:
16:7c:a6:61:88:e4:40:80:b5:e8:1c:ce:ce:24:a5:b6:2e:c9:
cd:1b:8e:50:7d:28:44:ae:8e:cf:93:be:68:82:50:4c:e0:df:
e5:3b:1e:97:bb:7d:ca:97:fb:06:8e:01:c9:e2:b1:2e:42:d9:
ce:d1:b4:8f:5c:5e:45:dc:a8:43:e4:26:b8:1d:88:24:bf:68:
19:e9:0f:8f:fd:74:f1:f9:da:3e:79:12:c6:ff:c4:03:0a:f3:
9e:a4:9e:8e:41:26:f0:01:81:26:94:05:5f:eb:a6:d1:4a:95:
21:26:b8:1e:ec:10:6a:a9:40:fa:01:31:fe:4b:7c:3b:66:5e:
b2:ae:ab:dc:af:8e:ef:b6:4b:bc:f6:06:12:b4:22:9a:af:25:
f8:4d:06:8a:62:e2:de:26:7e:b2:aa:dd:2f:99:18:81:be:00:
e3:0a:1d:d3:7a:1f:f6:84:6b:30:12:b5:25:58:c7:d3:f5:82:
2a:8e:74:f7:e3:30:cc:19:7f:db:5d:cb:df:07:b4:07:97:a0:
4b:d2:e2:00:1d:37:6c:fb:12:3d:c1:f7:56:70:23:2d:09:9b:
60:67:99:3c:46:ca:f9:93:a6:af:80:86:df:bd:6a:1e:a2:db:
d7:ff:44:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwgrLBkJN4FawEPXNhlx+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMGFjOGQzNjkwNTExMjAzYTMxZWY3ODVlNmQxYzQ0Mzky
Y2EyOGIwHhcNMjMwMTAyMDMyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2IxZWM4OGRkMjU1ZjhlNDQzMWJkOTIyYWY0ZTBlNzk2Mzc4MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeZ5Ce+RfR22MsroPYGoeCPceRBQ
PN2hESEyxsiV8CNf1Qc/u/KLBhkXVmeNypMWsjLwOL75EwqGiUC4m9XbKHkA861K
gbNUi5CMb4YWfi5yyG28TFYQwIUdyuKI1Fws4CY+9OELLTMELdZeuXIWFlsfGmBx
iBMtB9JXfcHeu3FBK+OyoMNwJR0DDy/uPqYKPKwu22kS/QL4IxaCJgbxa4JaYc3A
Qse/RQuFIjwFG+cGBS5xgSSekyI0VFagx/6vjFpkciR9NQvPdIUhiTLzoUC0KLmB
1FSgyT6nVGLaB25YSeCrOI/0A8RoZiobDQFUQvZRjWp12RtftxB1lKKNiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLex7IjdJV+ORDG9kir04OeWN4MdMB8GA1UdIwQY
MBaAFCwKyNNpBREgOjHveF5tHEQ5LKKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZWZkMmUtNjkyYy00ZjQ3LWI3NDkt
NGYzNmM2YTIwYzBlLzEvdDdIc2lOMGxYNDVFTWIyU0t2VGc1NVkzZ3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84ZWZkMmUtNjkyYy00ZjQ3LWI3NDktNGYzNmM2YTIwYzBl
LzEvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SBMA0G
CSqGSIb3DQEBCwUAA4IBAQAMJg+ILnULcUQ19o1J46gqFmcWfKZhiORAgLXoHM7O
JKW2LsnNG45QfShEro7Pk75oglBM4N/lOx6Xu33Kl/sGjgHJ4rEuQtnO0bSPXF5F
3KhD5Ca4HYgkv2gZ6Q+P/XTx+do+eRLG/8QDCvOepJ6OQSbwAYEmlAVf66bRSpUh
Jrge7BBqqUD6ATH+S3w7Zl6yrqvcr47vtku89gYStCKaryX4TQaKYuLeJn6yqt0v
mRiBvgDjCh3Teh/2hGswErUlWMfT9YIqjnT34zDMGX/bXcvfB7QHl6BL0uIAHTds
+xI9wfdWcCMtCZtgZ5k8Rsr5k6avgIbfvWoeotvX/0S4
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:22 2025 by rpki-client