Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/AOu_f4H8jIT5uXDU4X7AesNWsp0.roa
File: AOu_f4H8jIT5uXDU4X7AesNWsp0.roa (raw, json)
Hash identifier: awfDAPfW9ELJjViknPICiS0Ma+6bzbvsPt01VGYiqUU=
Subject key identifier: 00:EB:BF:7F:81:FC:8C:84:F9:B9:70:D4:E1:7E:C0:7A:C3:56:B2:9D
Certificate issuer: /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial: 0355A85E
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/AOu_f4H8jIT5uXDU4X7AesNWsp0.roa
Signing time: Sat 01 Jan 2022 13:56:27 +0000
ROA not before: Sat 01 Jan 2022 13:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212302
IP address blocks: 109.70.239.0/24 maxlen: 24
2a0c:2bc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55945310 (0x355a85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Validity
Not Before: Jan 1 13:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00ebbf7f81fc8c84f9b970d4e17ec07ac356b29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:1e:d7:9c:70:e7:40:5a:31:a8:36:5c:ea:
fa:65:b8:7c:9e:1d:85:df:3b:55:49:1d:dd:96:e1:
69:9e:64:80:7b:33:d7:2a:88:82:51:ab:83:6e:43:
eb:1d:5f:07:1c:b0:13:1b:83:4f:0b:46:7c:3b:4c:
be:17:a3:65:a1:e1:0e:ce:9a:31:13:88:f7:56:18:
a1:89:4b:0f:df:26:b9:06:0a:ce:c0:79:6d:2d:42:
82:c2:f9:e5:19:6b:7c:84:bd:98:2a:66:3b:f8:e0:
d6:6a:2f:e9:b2:4f:f7:79:89:ac:c8:d6:a1:6c:83:
e2:a9:fe:5b:53:51:f9:92:f6:15:2d:1f:4d:29:56:
96:4d:55:a1:13:0a:ed:bf:49:50:d0:97:75:f9:e6:
56:16:b9:e1:f8:f1:01:6a:0e:48:4c:a5:3f:c8:dc:
bf:54:98:07:8b:43:bc:f4:1c:fb:21:f5:ec:bb:1f:
4d:9c:96:4c:ee:53:64:45:15:4b:55:ce:75:2e:ab:
e4:95:10:9f:75:2f:79:81:7c:fb:9e:f8:7d:81:e3:
17:19:23:b7:59:12:92:15:af:7d:1f:f3:c3:1d:41:
82:32:9c:4c:dd:58:e5:29:91:d0:e0:02:f9:2c:21:
74:40:6d:a3:a1:da:f7:8c:dd:fb:73:6b:28:b6:e5:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EB:BF:7F:81:FC:8C:84:F9:B9:70:D4:E1:7E:C0:7A:C3:56:B2:9D
X509v3 Authority Key Identifier:
keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/AOu_f4H8jIT5uXDU4X7AesNWsp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.239.0/24
IPv6:
2a0c:2bc0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:78:88:7b:4f:c0:a4:db:2f:63:ce:a2:42:06:2d:64:1d:b6:
f8:4d:44:8f:3c:a8:2c:1f:3c:4d:a5:b6:49:68:6c:61:a2:25:
3f:6b:0d:5b:49:c5:bf:7c:7b:10:1d:fc:ec:63:5d:8c:e3:86:
20:1b:d3:a5:21:2b:73:47:e7:cb:54:b4:12:3e:1a:39:1f:08:
db:fe:28:ef:ea:af:40:06:b5:ee:07:b0:d9:9c:8f:81:63:2e:
11:aa:0b:b6:40:5c:fe:d7:3e:67:a4:fe:4b:38:a2:cc:c9:00:
50:4b:aa:63:b1:96:3a:fc:71:cb:5e:6d:b0:bd:fb:d3:de:47:
47:28:81:ca:17:14:3e:0e:67:a9:7d:b3:de:40:09:0a:88:4b:
74:ec:64:ac:09:fa:70:1b:c8:b6:d4:78:91:52:5f:40:c4:21:
a8:04:69:c8:40:08:b5:78:b4:1d:28:a0:6c:4a:8b:fa:a8:b7:
83:1b:b4:7e:75:6b:30:d1:8b:ed:97:6d:5b:cf:58:a5:f4:fa:
f0:09:3d:6f:29:77:62:d8:3f:33:65:23:57:53:b9:64:b2:b0:
29:36:4a:6c:8f:f4:f6:3f:c0:27:0f:08:36:0d:52:8b:0f:92:
da:5b:bb:1c:d1:71:1c:92:6e:fc:c0:b1:53:5b:0e:43:85:12:
a4:fe:3c:e0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEA1WoXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
Y2NlNWQ1MWZhNzViYmI2ZWQ5NjJhNDE2NmVmNmY4NjMwYTAyNTgxMB4XDTIyMDEw
MTEzNTYyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDBlYmJmN2Y4MWZj
OGM4NGY5Yjk3MGQ0ZTE3ZWMwN2FjMzU2YjI5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK1/HteccOdAWjGoNlzq+mW4fJ4dhd87VUkd3ZbhaZ5kgHsz
1yqIglGrg25D6x1fBxywExuDTwtGfDtMvhejZaHhDs6aMROI91YYoYlLD98muQYK
zsB5bS1CgsL55RlrfIS9mCpmO/jg1mov6bJP93mJrMjWoWyD4qn+W1NR+ZL2FS0f
TSlWlk1VoRMK7b9JUNCXdfnmVha54fjxAWoOSEylP8jcv1SYB4tDvPQc+yH17Lsf
TZyWTO5TZEUVS1XOdS6r5JUQn3UveYF8+574fYHjFxkjt1kSkhWvfR/zwx1BgjKc
TN1Y5SmR0OAC+SwhdEBto6Ha94zd+3NrKLblAPcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQA679/gfyMhPm5cNThfsB6w1aynTAfBgNVHSMEGDAWgBQszl1R+nW7tu2W
KkFm72+GMKAlgTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xNNWRVZnAxdTdidGxpcEJadTl2aGpDZ0pZRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjMvMmI1ZWQ2LTNhN2MtNDYzMS1iNDlkLWJmNTViOGIxNjY5Yy8x
L0FPdV9mNEg4aklUNXVYRFU0WDdBZXNOV3NwMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMv
MmI1ZWQ2LTNhN2MtNDYzMS1iNDlkLWJmNTViOGIxNjY5Yy8xL0xNNWRVZnAxdTdi
dGxpcEJadTl2aGpDZ0pZRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAG1G7zANBAIAAjAHAwUDKgwrwDAN
BgkqhkiG9w0BAQsFAAOCAQEAHXiIe0/ApNsvY86iQgYtZB22+E1EjzyoLB88TaW2
SWhsYaIlP2sNW0nFv3x7EB387GNdjOOGIBvTpSErc0fny1S0Ej4aOR8I2/4o7+qv
QAa17gew2ZyPgWMuEaoLtkBc/tc+Z6T+SziizMkAUEuqY7GWOvxxy15tsL37095H
RyiByhcUPg5nqX2z3kAJCohLdOxkrAn6cBvIttR4kVJfQMQhqARpyEAItXi0HSig
bEqL+qi3gxu0fnVrMNGL7ZdtW89YpfT68Ak9byl3Ytg/M2UjV1O5ZLKwKTZKbI/0
9j/AJw8INg1Siw+S2lu7HNFxHJJu/MCxU1sOQ4USpP484A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:03 2025 by rpki-client