Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/1EhfAW51tnSZIAIWWXjibjZbU4k.roa
File: 1EhfAW51tnSZIAIWWXjibjZbU4k.roa (raw, json)
Hash identifier: omG5dQZbO1633FQhY+7OV4Q3I1y5l3+2o7R2DtDAKAw=
Subject key identifier: D4:48:5F:01:6E:75:B6:74:99:20:02:16:59:78:E2:6E:36:5B:53:89
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 6D3C
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/1EhfAW51tnSZIAIWWXjibjZbU4k.roa
Signing time: Thu 06 Jan 2022 13:53:01 +0000
ROA not before: Thu 06 Jan 2022 13:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210168
IP address blocks: 5.1.127.0/24 maxlen: 24
2a02:e747::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27964 (0x6d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Jan 6 13:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4485f016e75b674992002165978e26e365b5389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:31:11:d9:31:c4:b3:4d:80:cd:49:64:97:
2b:9a:1c:25:21:38:f6:b8:81:58:16:08:3f:b0:e3:
6f:b2:5d:4d:3f:4f:95:c0:80:95:41:82:a5:ac:30:
ab:8e:8f:87:23:c5:52:b6:d9:5d:70:56:77:d6:40:
a4:75:fb:af:e9:fd:35:ca:68:87:46:bc:05:41:0b:
bf:87:5c:65:8d:fe:4c:e6:bf:10:e2:05:22:e7:ef:
c6:72:29:d6:f1:f9:88:85:94:31:2e:5e:f2:63:39:
e3:10:c4:fe:3b:84:33:7f:60:b8:42:5b:19:14:0a:
b4:7d:79:25:0a:37:87:c9:8d:76:b8:59:a4:dd:45:
04:a6:76:09:22:8c:fb:53:9f:e4:68:79:e5:b9:e0:
ff:e5:54:b4:c8:e4:3d:e5:91:d8:04:15:cb:2e:15:
74:26:8e:97:86:0e:da:b7:38:93:03:77:c4:02:bc:
36:6d:18:83:48:f7:2e:cc:97:f4:6a:0b:17:45:88:
05:bf:0d:d8:21:92:df:a9:84:5c:e8:1e:30:88:e4:
0f:a7:fa:58:50:d2:a0:4b:27:fa:e4:a4:dc:26:4b:
b2:99:76:c9:1a:2c:66:b4:b6:2b:0d:5a:fc:cb:2a:
1d:63:a9:06:9f:76:cd:45:87:12:93:84:cd:63:6c:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:48:5F:01:6E:75:B6:74:99:20:02:16:59:78:E2:6E:36:5B:53:89
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/1EhfAW51tnSZIAIWWXjibjZbU4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.127.0/24
IPv6:
2a02:e747::/48
Signature Algorithm: sha256WithRSAEncryption
7b:42:66:3f:99:00:24:a3:d1:69:3d:fe:e4:94:49:ec:09:ca:
e7:1a:75:23:4c:46:96:ba:c7:d8:7e:96:44:87:3d:29:f0:7e:
31:c5:03:68:2d:94:b1:83:d9:62:9f:b0:c2:8a:23:a8:93:a9:
7e:01:d0:9f:7b:c5:76:7c:f3:f6:06:ae:3c:8e:75:a1:61:30:
7e:cd:76:1e:51:67:38:70:33:98:ff:40:dc:fa:19:fe:3a:13:
15:55:dd:a0:47:b7:d5:d5:45:51:61:02:32:83:38:61:20:1b:
5a:d8:10:40:c3:bf:3f:1b:ef:c1:0c:37:45:12:7b:cb:0b:da:
c7:39:c1:d3:1a:29:fb:a1:1d:59:08:95:cb:c8:a3:29:8a:ee:
d8:ab:77:fd:b0:28:2b:76:6a:9a:9d:78:08:5d:8e:8b:12:9a:
c2:7e:4d:f5:4b:64:97:6b:89:b0:cc:36:74:92:78:9d:86:d7:
be:f9:20:f6:25:ae:a5:f7:3c:58:ae:80:bc:cf:42:d5:fd:d0:
17:d1:8a:ea:72:c6:2a:41:cb:48:46:a6:e2:1a:cc:5f:fa:ef:
b3:fb:3c:8e:8b:42:d1:2c:73:2f:64:70:e2:0b:82:50:05:58:
22:12:19:fc:81:07:6e:95:04:c1:2e:9f:d5:06:16:bf:4f:a3:
8d:8f:52:34
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgICbTwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjdm
OTU4YzNiNzU5YjJjNzg5NmY1ZWQ2NjNlODA3NzgxZjNmZjVhMjAeFw0yMjAxMDYx
MzUzMDFaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGQ0NDg1ZjAxNmU3NWI2
NzQ5OTIwMDIxNjU5NzhlMjZlMzY1YjUzODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCbzER2THEs02AzUlklyuaHCUhOPa4gVgWCD+w42+yXU0/T5XA
gJVBgqWsMKuOj4cjxVK22V1wVnfWQKR1+6/p/TXKaIdGvAVBC7+HXGWN/kzmvxDi
BSLn78ZyKdbx+YiFlDEuXvJjOeMQxP47hDN/YLhCWxkUCrR9eSUKN4fJjXa4WaTd
RQSmdgkijPtTn+RoeeW54P/lVLTI5D3lkdgEFcsuFXQmjpeGDtq3OJMDd8QCvDZt
GINI9y7Ml/RqCxdFiAW/Ddghkt+phFzoHjCI5A+n+lhQ0qBLJ/rkpNwmS7KZdska
LGa0tisNWvzLKh1jqQafds1FhxKThM1jbCULAgMBAAGjggIaMIICFjAdBgNVHQ4E
FgQU1EhfAW51tnSZIAIWWXjibjZbU4kwHwYDVR0jBBgwFoAUJ/lYw7dZsseJb17W
Y+gHeB8/9aIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9K
X2xZdzdkWnNzZUpiMTdXWS1nSGVCOF85YUkuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL2EzL2NkYmZiZC1lZDY3LTQ0YjctOWUxZi1iMjkxMDdiOThhY2MvMS8x
RWhmQVc1MXRuU1pJQUlXV1hqaWJqWmJVNGsucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2Nk
YmZiZC1lZDY3LTQ0YjctOWUxZi1iMjkxMDdiOThhY2MvMS9KX2xZdzdkWnNzZUpi
MTdXWS1nSGVCOF85YUkuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYI
KwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAAFAX8wDwQCAAIwCQMHACoC50cAADAN
BgkqhkiG9w0BAQsFAAOCAQEAe0JmP5kAJKPRaT3+5JRJ7AnK5xp1I0xGlrrH2H6W
RIc9KfB+McUDaC2UsYPZYp+wwoojqJOpfgHQn3vFdnzz9gauPI51oWEwfs12HlFn
OHAzmP9A3PoZ/joTFVXdoEe31dVFUWECMoM4YSAbWtgQQMO/PxvvwQw3RRJ7ywva
xznB0xop+6EdWQiVy8ijKYru2Kt3/bAoK3Zqmp14CF2OixKawn5N9Utkl2uJsMw2
dJJ4nYbXvvkg9iWupfc8WK6AvM9C1f3QF9GK6nLGKkHLSEam4hrMX/rvs/s8jotC
0SxzL2Rw4guCUAVYIhIZ/IEHbpUEwS6f1QYWv0+jjY9SNA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:55 2025 by rpki-client