Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/rnRbOIkLzwO9Eaj4B2ooiu-BhLc.roa
File: rnRbOIkLzwO9Eaj4B2ooiu-BhLc.roa (raw, json)
Hash identifier: 1tR2nv24vyPr0lI5NsF2oHC4pE/7e6fcajHTiqmE6KE=
Subject key identifier: AE:74:5B:38:89:0B:CF:03:BD:11:A8:F8:07:6A:28:8A:EF:81:84:B7
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 01856FA6DA34D378014EAF41977814502B00
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/rnRbOIkLzwO9Eaj4B2ooiu-BhLc.roa
Signing time: Sun 01 Jan 2023 23:24:43 +0000
ROA not before: Sun 01 Jan 2023 23:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44462
IP address blocks: 81.21.112.0/20 maxlen: 20
2a0a:4d80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:da:34:d3:78:01:4e:af:41:97:78:14:50:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Jan 1 23:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae745b38890bcf03bd11a8f8076a288aef8184b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:9e:6c:d7:cb:91:e1:16:df:ea:69:3c:16:
2b:c4:b8:47:fa:7e:13:bb:fa:2b:c4:49:02:48:74:
d6:c6:fd:06:55:5e:99:60:55:46:ed:56:e1:d6:12:
9f:fa:bd:b7:fa:9d:65:ac:38:78:83:5e:ab:e1:3d:
8a:7d:0a:cf:95:4f:35:41:75:71:b3:95:54:4b:b0:
b2:11:1c:3e:a6:25:c5:33:18:ce:cb:d1:ee:de:44:
e0:f1:1f:43:35:51:cc:13:2c:82:32:c8:a3:61:e6:
55:19:b7:b2:22:b8:a1:b7:62:0f:f4:c6:e4:1f:e5:
ac:9f:a6:71:3e:d5:9e:cc:9f:02:b4:bc:f9:3d:ac:
3f:87:cc:ee:97:2a:0b:8f:e1:68:90:43:75:69:15:
45:7d:8d:f5:5a:f7:3b:28:41:ce:79:60:49:d1:b8:
96:ef:9a:f9:68:c1:51:ef:07:2b:ae:5a:97:d9:6c:
87:5c:c5:48:e0:c5:47:cf:5f:10:5f:34:96:97:52:
3b:71:61:bd:74:1d:ae:7a:16:c2:44:d3:32:34:c4:
b2:d8:10:06:a6:7d:57:0e:14:22:7f:99:84:df:1f:
ea:f2:eb:10:4e:64:4a:d8:d4:2e:17:d4:df:fc:97:
19:f0:57:e1:91:60:bf:e9:02:53:4f:18:43:7e:d0:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:5B:38:89:0B:CF:03:BD:11:A8:F8:07:6A:28:8A:EF:81:84:B7
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/rnRbOIkLzwO9Eaj4B2ooiu-BhLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.112.0/20
IPv6:
2a0a:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
73:20:c7:ad:35:3d:07:73:15:83:2b:da:be:3a:40:7b:d6:71:
53:d8:9d:a0:47:46:98:a4:2a:84:a3:57:fa:d1:c0:84:3a:cd:
61:56:8e:5c:aa:e4:0a:b6:77:ba:79:87:99:8a:e1:9c:95:77:
0a:51:0e:20:b0:3a:9d:0a:f4:80:01:74:df:0b:a9:bc:23:2c:
fe:bd:fc:7b:52:f6:35:11:c7:07:aa:73:b9:cf:c5:96:44:51:
cb:07:ce:1e:02:d7:9e:b8:9e:c4:d7:74:87:38:49:3b:31:9f:
b2:fc:fd:a6:b6:cd:08:fb:c5:98:a2:d9:8d:86:3d:4b:20:1e:
f6:8d:c9:6c:0b:4f:08:b0:78:b3:25:75:93:bf:72:1a:a0:4c:
1b:a5:30:ad:d9:0f:1e:f5:72:0c:cc:65:8a:c7:98:e0:07:df:
f4:bf:58:8c:05:2e:9e:df:3c:e6:1c:28:2a:ce:2e:c0:20:c6:
71:b9:92:3e:bd:ad:9c:54:4f:fc:20:e1:7d:e6:db:8e:74:fd:
fc:c1:5a:41:2d:95:c5:33:a6:84:d1:d4:4e:fc:78:24:83:42:
ec:18:e5:bc:00:f0:6d:e9:52:82:36:35:08:02:5a:f8:8a:e3:
ea:21:e7:b2:5b:76:40:30:a5:0b:8b:72:e8:b8:68:c7:7f:3c:
79:ff:ce:b3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvpto003gBTq9Bl3gUUCsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjQwNjRmOTUzMzFjZjFmMzE1ZGM1MGRlNGRiMDVmZjk1
YWE0MTAwHhcNMjMwMTAxMjMyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTc0NWIzODg5MGJjZjAzYmQxMWE4ZjgwNzZhMjg4YWVmODE4NGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN+ebNfLkeEW3+ppPBYrxLhH+n4T
u/orxEkCSHTWxv0GVV6ZYFVG7Vbh1hKf+r23+p1lrDh4g16r4T2KfQrPlU81QXVx
s5VUS7CyERw+piXFMxjOy9Hu3kTg8R9DNVHMEyyCMsijYeZVGbeyIriht2IP9Mbk
H+Wsn6ZxPtWezJ8CtLz5Paw/h8zulyoLj+FokEN1aRVFfY31Wvc7KEHOeWBJ0biW
75r5aMFR7wcrrlqX2WyHXMVI4MVHz18QXzSWl1I7cWG9dB2uehbCRNMyNMSy2BAG
pn1XDhQif5mE3x/q8usQTmRK2NQuF9Tf/JcZ8FfhkWC/6QJTTxhDftDS9wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK50WziJC88DvRGo+AdqKIrvgYS3MB8GA1UdIwQY
MBaAFJ8kBk+VMxzx8xXcUN5NsF/5WqQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MDA3OWItZmNhYS00NmQ5LTgxNjEt
NjZhNmM4MGQyNmE1LzEvcm5SYk9Ja0x6d085RWFqNEIyb29pdS1CaExjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80MDA3OWItZmNhYS00NmQ5LTgxNjEtNjZhNmM4MGQyNmE1
LzEvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEURVwMA0E
AgACMAcDBQMqCk2AMA0GCSqGSIb3DQEBCwUAA4IBAQBzIMetNT0HcxWDK9q+OkB7
1nFT2J2gR0aYpCqEo1f60cCEOs1hVo5cquQKtne6eYeZiuGclXcKUQ4gsDqdCvSA
AXTfC6m8Iyz+vfx7UvY1EccHqnO5z8WWRFHLB84eAteeuJ7E13SHOEk7MZ+y/P2m
ts0I+8WYotmNhj1LIB72jclsC08IsHizJXWTv3IaoEwbpTCt2Q8e9XIMzGWKx5jg
B9/0v1iMBS6e3zzmHCgqzi7AIMZxuZI+va2cVE/8IOF95tuOdP38wVpBLZXFM6aE
0dRO/Hgkg0LsGOW8APBt6VKCNjUIAlr4iuPqIeeyW3ZAMKULi3LouGjHfzx5/86z
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:02 2025 by rpki-client