Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/a3v4v3A_jQmStU8khnXzB2ixWts.roa
File: a3v4v3A_jQmStU8khnXzB2ixWts.roa (raw, json)
Hash identifier: mWtTF2LpU2kvaOefIYocRmPtjUPp50ZTHeTKrcl1sL0=
Subject key identifier: 6B:7B:F8:BF:70:3F:8D:09:92:B5:4F:24:86:75:F3:07:68:B1:5A:DB
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 01863BE6D29814ECEC6949402735E204D561
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/a3v4v3A_jQmStU8khnXzB2ixWts.roa
Signing time: Fri 10 Feb 2023 15:17:08 +0000
ROA not before: Fri 10 Feb 2023 15:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9076
IP address blocks: 212.104.0.0/20 maxlen: 24
212.104.0.0/19 maxlen: 19
212.104.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:e6:d2:98:14:ec:ec:69:49:40:27:35:e2:04:d5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Feb 10 15:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b7bf8bf703f8d0992b54f248675f30768b15adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:bd:a7:a7:43:ca:b5:31:e4:b4:2e:fc:4c:
61:0a:61:c6:07:e5:9e:6e:ba:dc:93:74:23:8b:ac:
3f:bf:c4:2f:50:91:5b:12:74:22:00:97:6e:5a:71:
7b:18:aa:60:24:6e:c7:0f:24:16:87:f5:3c:a5:6d:
21:8f:36:b6:8b:60:1b:3f:57:cf:df:c3:93:6e:ce:
cb:36:50:f7:76:09:9e:3e:f1:ab:a3:dd:12:c9:7b:
35:da:fc:3c:68:e1:3b:be:4c:d6:7f:db:d9:16:4c:
1f:67:22:42:90:d1:21:6f:bc:04:4c:36:fc:7b:a6:
7e:86:fe:55:47:2a:51:10:93:3e:e5:02:f8:05:48:
4b:14:d7:94:ed:f4:71:f1:de:88:bd:06:49:9d:c6:
bd:8b:f6:a2:9f:1e:e3:3a:f8:43:87:90:0f:c0:de:
c2:a1:48:5c:b5:d5:93:ed:d0:ee:37:a7:4d:01:15:
dc:aa:ef:ff:41:1c:d3:93:88:0d:43:f8:47:25:fe:
61:74:c9:bc:7c:be:13:ba:5c:2b:47:ea:5f:20:0e:
ea:94:18:fb:cd:b5:35:9e:b9:0c:ba:7e:ee:fc:68:
ac:40:96:37:e7:38:70:08:cf:ee:5d:4e:80:37:dd:
95:7b:b2:91:41:85:d9:cf:c8:5f:31:c4:23:ed:5f:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7B:F8:BF:70:3F:8D:09:92:B5:4F:24:86:75:F3:07:68:B1:5A:DB
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/a3v4v3A_jQmStU8khnXzB2ixWts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.0.0-212.104.47.255
Signature Algorithm: sha256WithRSAEncryption
a1:75:24:e5:b8:67:82:b3:66:14:15:c7:76:5a:bf:ca:c3:b3:
ec:89:7f:fc:9d:89:54:cf:56:ba:9f:80:cf:4d:73:96:b2:c2:
61:23:87:35:9f:d3:8f:f1:ed:02:b6:fb:ff:31:a7:30:45:90:
ac:f5:35:52:c7:8a:60:17:97:52:b2:69:d0:a8:3f:46:98:23:
98:b9:89:85:e6:d6:9f:1f:e5:87:71:52:40:1a:20:d7:2e:2b:
69:af:c7:a0:6a:7f:96:b3:34:bd:a1:b0:19:41:f5:4d:e0:50:
30:37:a3:90:52:10:c1:a8:88:4f:07:37:cb:c9:ba:c5:aa:eb:
35:00:8b:6b:bb:19:91:c8:12:da:07:71:8b:0a:86:88:e0:ff:
6f:3f:6c:d4:76:6f:34:bc:2e:84:6b:44:af:ec:c9:9e:3f:9b:
db:d6:ab:b8:5f:ea:46:54:c9:ce:d3:fc:4f:58:ed:2e:e8:1c:
fb:05:e3:39:bd:31:7a:46:0a:6e:b7:23:ce:18:0c:7c:a5:87:
ba:f9:ac:92:5b:2c:70:ea:86:8b:09:86:df:e2:6f:d2:b1:35:
47:4e:60:f3:1b:7f:60:ff:66:60:2e:2a:87:dd:6f:51:00:0e:
6b:2b:0c:ea:b0:2a:9d:ab:51:e4:55:51:a3:a2:f2:73:34:eb:
4c:9a:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:31:16 2025 by rpki-client