Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/f07UAikRkFugNp3mHTZx1V3G8MI.roa
File: f07UAikRkFugNp3mHTZx1V3G8MI.roa (raw, json)
Hash identifier: ZO6OR8VYJpDW+7a2CcIUBwYeHIayyndKUbAPGLaI6sQ=
Subject key identifier: 7F:4E:D4:02:29:11:90:5B:A0:36:9D:E6:1D:36:71:D5:5D:C6:F0:C2
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 01877A2E8345718A73E7CD834779825CDC99
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/f07UAikRkFugNp3mHTZx1V3G8MI.roa
Signing time: Thu 13 Apr 2023 10:34:41 +0000
ROA not before: Thu 13 Apr 2023 10:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29672
IP address blocks: 217.21.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:2e:83:45:71:8a:73:e7:cd:83:47:79:82:5c:dc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Apr 13 10:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f4ed4022911905ba0369de61d3671d55dc6f0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:0f:a5:92:a0:43:e6:bc:60:c0:81:53:c7:
ac:09:f0:9f:09:fc:e4:68:78:9e:44:fe:ac:18:37:
96:0e:58:0d:61:ca:81:b5:98:90:23:8b:4b:e3:51:
e0:dd:38:46:a4:3e:74:5b:75:e1:c4:e1:16:25:1a:
c9:dc:83:51:e8:1e:5b:59:b7:d6:1d:ef:32:69:87:
b3:1f:1f:45:de:ff:51:44:c2:d5:e2:ab:d9:81:2c:
dd:20:46:49:53:3d:d8:44:cc:61:48:b3:89:ef:64:
a1:9d:14:3b:a8:3e:2d:c6:bc:00:1b:9d:4f:6e:b7:
30:d6:8e:69:8b:3d:93:38:d9:09:3a:62:4c:9d:e1:
bf:59:b9:bf:66:85:57:f7:1b:17:15:ed:76:25:5f:
19:2d:4e:5d:e9:41:ff:2c:47:94:59:53:35:ed:0b:
6d:e7:4d:23:62:fb:0b:39:1f:9f:da:63:21:97:dc:
9a:1b:6d:c0:54:50:61:a8:bf:45:e9:00:06:6e:70:
29:ae:5b:c6:31:41:39:cf:c3:db:13:13:fa:ce:97:
8c:c1:83:b1:fd:83:27:c7:7c:a4:ec:ea:14:e7:cf:
b7:c1:b8:d7:52:4c:e4:8c:22:b1:51:88:1e:c0:81:
7c:44:df:83:cd:33:01:ab:7a:b1:03:c4:69:3d:17:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4E:D4:02:29:11:90:5B:A0:36:9D:E6:1D:36:71:D5:5D:C6:F0:C2
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/f07UAikRkFugNp3mHTZx1V3G8MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:79:c9:ae:64:a6:ab:dc:eb:a9:1e:e2:06:de:3d:27:7f:e6:
b5:a2:72:64:63:ad:bc:3a:c4:1b:32:0c:ef:b4:90:70:9e:75:
bf:b3:33:b8:06:ae:d6:84:38:86:bb:f5:4f:6e:cd:87:24:e2:
76:00:92:c0:b1:57:a5:f4:1f:0d:6f:b6:aa:23:41:b0:91:50:
b8:59:34:8d:fd:4e:9b:b8:bc:c8:cb:3a:cb:0a:b8:f5:77:5b:
81:36:da:7a:62:9c:01:a6:ac:c7:5f:40:14:63:b2:e0:44:24:
23:cf:15:4b:37:0d:99:42:72:e8:f2:17:82:50:07:f1:51:dd:
e5:8a:d3:06:5d:cb:75:6a:61:2c:10:1f:d7:85:85:06:de:59:
b1:89:38:2d:8c:3c:58:16:ec:02:bd:3e:a4:9b:7a:61:a8:43:
6f:0d:e0:68:2d:be:aa:2a:c5:f5:56:cc:28:c6:53:ce:33:57:
67:ac:69:5a:bd:bc:bc:9f:d3:cc:19:18:66:84:35:a8:1c:f1:
08:06:cc:87:bd:00:07:6b:c1:f7:07:ec:7e:9c:07:69:54:b7:
aa:5f:c4:91:0e:c8:eb:95:a2:0f:a1:6b:21:44:d5:4e:78:6b:
93:2e:64:d3:bf:ab:73:3d:b2:83:96:6e:6a:12:2c:14:e0:6c:
55:00:d5:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd6LoNFcYpz582DR3mCXNyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MjE1YjU3ZDMzY2IyZjM0YzE3YzBlODEwM2JiMDUxZmY4
MDFlYmYwHhcNMjMwNDEzMTAzNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjRlZDQwMjI5MTE5MDViYTAzNjlkZTYxZDM2NzFkNTVkYzZmMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEQPpZKgQ+a8YMCBU8esCfCfCfzk
aHieRP6sGDeWDlgNYcqBtZiQI4tL41Hg3ThGpD50W3XhxOEWJRrJ3INR6B5bWbfW
He8yaYezHx9F3v9RRMLV4qvZgSzdIEZJUz3YRMxhSLOJ72ShnRQ7qD4txrwAG51P
brcw1o5piz2TONkJOmJMneG/Wbm/ZoVX9xsXFe12JV8ZLU5d6UH/LEeUWVM17Qtt
500jYvsLOR+f2mMhl9yaG23AVFBhqL9F6QAGbnAprlvGMUE5z8PbExP6zpeMwYOx
/YMnx3yk7OoU58+3wbjXUkzkjCKxUYgewIF8RN+DzTMBq3qxA8RpPRd8MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9O1AIpEZBboDad5h02cdVdxvDCMB8GA1UdIwQY
MBaAFNghW1fTPLLzTBfA6BA7sFH/gB6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYt
NjJkYzQ0N2ZlNDM4LzEvZjA3VUFpa1JrRnVnTnAzbUhUWngxVjNHOE1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYtNjJkYzQ0N2ZlNDM4
LzEvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2RXgMA0G
CSqGSIb3DQEBCwUAA4IBAQBcecmuZKar3OupHuIG3j0nf+a1onJkY628OsQbMgzv
tJBwnnW/szO4Bq7WhDiGu/VPbs2HJOJ2AJLAsVel9B8Nb7aqI0GwkVC4WTSN/U6b
uLzIyzrLCrj1d1uBNtp6YpwBpqzHX0AUY7LgRCQjzxVLNw2ZQnLo8heCUAfxUd3l
itMGXct1amEsEB/XhYUG3lmxiTgtjDxYFuwCvT6km3phqENvDeBoLb6qKsX1Vswo
xlPOM1dnrGlavby8n9PMGRhmhDWoHPEIBsyHvQAHa8H3B+x+nAdpVLeqX8SRDsjr
laIPoWshRNVOeGuTLmTTv6tzPbKDlm5qEiwU4GxVANWH
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:33:14 2025 by rpki-client