Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/4PLF7VLFw59Xnvb1-MW-4fq0TKM.roa
File: 4PLF7VLFw59Xnvb1-MW-4fq0TKM.roa (raw, json)
Hash identifier: fWwDwu8k9EiT2pxx3/KGxRj8/2xkxWd9Zy79PVNlVSA=
Subject key identifier: E0:F2:C5:ED:52:C5:C3:9F:57:9E:F6:F5:F8:C5:BE:E1:FA:B4:4C:A3
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 01856FD4F20137D26D1BE98F9CEC6FEA6DD2
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/4PLF7VLFw59Xnvb1-MW-4fq0TKM.roa
Signing time: Mon 02 Jan 2023 00:15:04 +0000
ROA not before: Mon 02 Jan 2023 00:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24940
IP address blocks: 178.212.75.0/24 maxlen: 24
2a11:e980::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f2:01:37:d2:6d:1b:e9:8f:9c:ec:6f:ea:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: Jan 2 00:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0f2c5ed52c5c39f579ef6f5f8c5bee1fab44ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:e5:38:f4:90:0e:ce:e9:b6:02:c4:5c:57:
54:e2:1c:54:b1:ae:19:cf:9f:63:91:99:f7:db:0f:
20:ac:44:bf:ef:8d:a6:34:c9:e2:45:f7:13:98:85:
26:33:67:46:dd:80:0a:77:3c:57:94:2e:2c:ef:5d:
1a:4d:bc:5a:5c:55:18:4e:ef:26:eb:11:66:7a:b0:
10:a9:d9:ee:32:fe:9d:b2:2e:42:d9:52:f5:3a:e3:
b3:03:f5:1b:58:93:11:86:de:c8:e4:6e:de:20:65:
4a:cc:5b:f2:4a:65:fa:d2:10:d7:e7:8a:71:17:3a:
1b:21:59:99:de:e7:fb:60:1b:4d:ae:86:b4:2e:43:
25:41:c2:02:91:27:7c:79:d1:c7:46:14:9f:74:9d:
b6:71:37:3d:0c:1b:f2:d9:5a:d5:0a:04:7d:dd:9f:
cb:b7:66:c7:ab:41:11:66:d4:2b:78:5a:fd:e8:99:
c8:5a:2f:6b:28:41:9f:fd:4c:89:6a:08:b2:63:d3:
e8:5d:b5:44:56:4e:8e:53:50:e8:20:6d:cd:0f:97:
6f:ed:30:c7:5f:28:ae:c0:ee:e8:30:55:58:b4:1b:
8f:d9:9c:54:19:34:69:14:f8:0e:7b:eb:2c:5b:bb:
3f:6f:48:b4:40:be:23:93:cf:36:d0:c3:75:3b:93:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F2:C5:ED:52:C5:C3:9F:57:9E:F6:F5:F8:C5:BE:E1:FA:B4:4C:A3
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/4PLF7VLFw59Xnvb1-MW-4fq0TKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.75.0/24
IPv6:
2a11:e980::/29
Signature Algorithm: sha256WithRSAEncryption
b3:13:72:e0:ba:91:c1:03:24:ce:4f:b1:7c:cd:8f:06:19:61:
93:bf:49:b6:3e:a6:ac:2e:8d:05:90:cd:a6:85:f0:d2:ca:df:
c8:87:da:40:06:ee:e3:2b:bf:00:8c:d8:7c:93:35:6a:87:5a:
0c:d0:39:a7:9d:06:dc:8f:57:01:de:8a:14:7d:7f:1d:6c:71:
25:fc:17:a9:e1:3a:9d:83:08:f7:8a:db:76:d0:b0:a0:02:d8:
11:b6:3a:b9:45:3d:cd:27:58:a5:fa:d0:24:ba:22:9e:cc:4b:
07:6f:cc:7f:c8:e6:e6:6f:50:1d:84:81:b5:7e:7b:95:80:54:
94:47:23:3d:14:43:40:05:da:05:07:6f:d8:e4:f4:60:42:22:
ee:13:9e:02:f9:f5:5d:0b:f8:f7:fd:f4:fd:7f:c8:9c:bb:91:
a7:ab:55:6e:9c:ff:ad:2b:74:e0:f4:d7:7a:29:94:27:71:30:
33:5e:b5:79:37:ca:fa:6c:3a:ae:0f:5b:96:26:8c:d7:71:c0:
5d:4a:3e:0b:3c:14:97:b8:ff:66:e1:3b:b5:63:dd:3d:7a:ef:
c2:50:53:5d:f5:89:e7:04:88:ec:69:bb:3b:0c:2a:5a:fe:84:
b7:22:09:39:64:1b:5d:c5:75:fa:a7:85:02:c4:52:3b:8c:a4:
96:bb:c4:dd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVv1PIBN9JtG+mPnOxv6m3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmVkMjQ3MDNkMzM0YjExY2QyMmVlNDg5ZmMzYzY0YmRj
MDZmNGIwHhcNMjMwMTAyMDAxNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGYyYzVlZDUyYzVjMzlmNTc5ZWY2ZjVmOGM1YmVlMWZhYjQ0Y2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5DlOPSQDs7ptgLEXFdU4hxUsa4Z
z59jkZn32w8grES/742mNMniRfcTmIUmM2dG3YAKdzxXlC4s710aTbxaXFUYTu8m
6xFmerAQqdnuMv6dsi5C2VL1OuOzA/UbWJMRht7I5G7eIGVKzFvySmX60hDX54px
FzobIVmZ3uf7YBtNroa0LkMlQcICkSd8edHHRhSfdJ22cTc9DBvy2VrVCgR93Z/L
t2bHq0ERZtQreFr96JnIWi9rKEGf/UyJagiyY9PoXbVEVk6OU1DoIG3ND5dv7TDH
XyiuwO7oMFVYtBuP2ZxUGTRpFPgOe+ssW7s/b0i0QL4jk8820MN1O5PCDQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFODyxe1SxcOfV5729fjFvuH6tEyjMB8GA1UdIwQY
MBaAFAsu0kcD0zSxHNIu5In8PGS9wG9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3k3U1J3UFROTEVjMGk3a2lmdzhaTDNBYjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS83MTcwZTAtYTA0My00Yjc4LWFhYjEt
YjY0ODhhZWM1MzNiLzEvNFBMRjdWTEZ3NTlYbnZiMS1NVy00ZnEwVEtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS83MTcwZTAtYTA0My00Yjc4LWFhYjEtYjY0ODhhZWM1MzNi
LzEvQ3k3U1J3UFROTEVjMGk3a2lmdzhaTDNBYjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAstRLMA0E
AgACMAcDBQMqEemAMA0GCSqGSIb3DQEBCwUAA4IBAQCzE3LgupHBAyTOT7F8zY8G
GWGTv0m2PqasLo0FkM2mhfDSyt/Ih9pABu7jK78AjNh8kzVqh1oM0DmnnQbcj1cB
3ooUfX8dbHEl/Bep4Tqdgwj3itt20LCgAtgRtjq5RT3NJ1il+tAkuiKezEsHb8x/
yObmb1AdhIG1fnuVgFSURyM9FENABdoFB2/Y5PRgQiLuE54C+fVdC/j3/fT9f8ic
u5Gnq1VunP+tK3Tg9Nd6KZQncTAzXrV5N8r6bDquD1uWJozXccBdSj4LPBSXuP9m
4Tu1Y909eu/CUFNd9YnnBIjsabs7DCpa/oS3Igk5ZBtdxXX6p4UCxFI7jKSWu8Td
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:06 2025 by rpki-client