Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/8PO3EpRwUKvlqLfU8Hlz7ToEG_M.roa
File: 8PO3EpRwUKvlqLfU8Hlz7ToEG_M.roa (raw, json)
Hash identifier: C08BCDykip6pRF90B0zZygR9wXzHsGP8RN5e3sJN35o=
Subject key identifier: F0:F3:B7:12:94:70:50:AB:E5:A8:B7:D4:F0:79:73:ED:3A:04:1B:F3
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 018C822D26C3055853180EE8DFD31313883C
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/8PO3EpRwUKvlqLfU8Hlz7ToEG_M.roa
Signing time: Tue 19 Dec 2023 13:04:06 +0000
ROA not before: Tue 19 Dec 2023 13:04:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215876
IP address blocks: 5.61.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:2d:26:c3:05:58:53:18:0e:e8:df:d3:13:13:88:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Dec 19 13:04:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0f3b712947050abe5a8b7d4f07973ed3a041bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:39:25:a6:8d:11:99:eb:f5:18:8a:6d:26:
47:46:38:70:ea:4a:a3:aa:01:31:31:d2:2b:e3:ec:
57:17:df:86:d6:fa:3b:24:24:24:ff:4b:fe:7c:f7:
58:fb:a9:81:4f:45:20:d2:8f:93:2a:07:2a:2f:bf:
1c:78:8d:68:89:46:ff:6e:07:af:2c:fb:51:d1:66:
16:a0:34:e2:11:06:3a:4d:89:fb:dc:eb:26:ea:da:
32:04:78:c7:01:98:aa:d2:7f:7d:dd:90:3b:0b:8a:
ff:aa:d3:41:0d:62:46:72:ac:81:c0:8a:ee:5e:f8:
4d:d1:86:52:e0:8b:48:6e:77:41:89:db:60:49:8a:
6b:76:0d:57:23:22:11:f2:fb:e0:b0:12:78:ee:15:
62:66:7d:60:8a:58:49:48:7b:7d:af:c5:09:8b:f2:
31:da:c9:b9:1d:8d:fc:ad:93:52:d6:a5:58:62:88:
4d:17:93:26:a4:37:5d:2b:4d:d6:00:75:3e:45:54:
ac:a5:df:61:eb:de:76:d0:be:b7:b2:3f:17:1b:d1:
82:e5:e1:7b:5e:ad:33:9a:8d:3a:f2:a6:f0:ed:8c:
e8:2f:7b:1d:3f:88:23:09:72:6e:3b:aa:a0:a5:58:
99:4e:29:b2:80:38:31:2c:c5:cc:4d:fd:10:76:d5:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F3:B7:12:94:70:50:AB:E5:A8:B7:D4:F0:79:73:ED:3A:04:1B:F3
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/8PO3EpRwUKvlqLfU8Hlz7ToEG_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.149.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e8:6c:0d:bc:4e:4c:ca:37:e8:18:4d:4a:be:25:74:73:20:
a2:ed:c0:79:bd:45:bb:c2:15:07:91:73:e4:2b:89:c7:90:9d:
f4:b2:ed:31:c3:3e:82:7d:c8:e9:ba:0b:79:63:53:22:2d:42:
5e:c8:14:e5:10:a7:31:26:85:03:1a:84:8e:22:52:0f:68:1c:
a1:09:2d:3e:4e:54:59:57:87:b1:77:23:b9:bb:43:3f:12:0d:
9c:b5:3c:dd:b8:fb:30:17:f0:b9:c1:93:d5:f1:f6:95:9f:a6:
88:77:24:d5:e0:f1:b7:db:5e:e3:1e:61:39:4c:6d:f7:5b:3f:
2c:e7:86:da:e0:95:34:f0:da:db:27:66:19:69:1d:d0:37:ea:
5b:2d:e5:79:56:ee:8d:3b:ec:2e:5f:d0:8e:06:84:a2:33:5c:
28:4d:63:01:9c:11:b5:c3:94:30:63:3f:d7:2a:45:41:2e:67:
48:2b:9f:68:41:eb:c2:87:77:c3:8c:d9:1f:08:8a:0e:7e:21:
cc:9d:6f:b6:4d:a8:9d:c8:54:a2:7b:f5:dc:f0:75:e1:61:b3:
6c:85:6b:5b:44:87:10:38:33:31:d2:2d:e2:e4:8a:83:00:fd:
9a:1a:88:98:00:d5:46:07:0b:be:a5:db:22:d0:9c:6d:31:b3:
90:c9:3c:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyCLSbDBVhTGA7o39MTE4g8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjM2YjVjNmNhN2ExNjk4ZTc0MjFhMjdlM2Q0YTZiNzY0
ODE0OGQwHhcNMjMxMjE5MTMwNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGYzYjcxMjk0NzA1MGFiZTVhOGI3ZDRmMDc5NzNlZDNhMDQxYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqA5JaaNEZnr9RiKbSZHRjhw6kqj
qgExMdIr4+xXF9+G1vo7JCQk/0v+fPdY+6mBT0Ug0o+TKgcqL78ceI1oiUb/bgev
LPtR0WYWoDTiEQY6TYn73Osm6toyBHjHAZiq0n993ZA7C4r/qtNBDWJGcqyBwIru
XvhN0YZS4ItIbndBidtgSYprdg1XIyIR8vvgsBJ47hViZn1gilhJSHt9r8UJi/Ix
2sm5HY38rZNS1qVYYohNF5MmpDddK03WAHU+RVSspd9h69520L63sj8XG9GC5eF7
Xq0zmo068qbw7YzoL3sdP4gjCXJuO6qgpViZTimygDgxLMXMTf0QdtWIPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPDztxKUcFCr5ai31PB5c+06BBvzMB8GA1UdIwQY
MBaAFCbza1xsp6FpjnQhon49Smt2SBSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZOclhHeW5vV21PZENHaWZqMUthM1pJRkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83Y2MwZjYtNzRlZi00MjNhLWE2OTYt
NGEyYmY0YWIxOTlkLzEvOFBPM0VwUndVS3ZscUxmVThIbHo3VG9FR19NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83Y2MwZjYtNzRlZi00MjNhLWE2OTYtNGEyYmY0YWIxOTlk
LzEvSnZOclhHeW5vV21PZENHaWZqMUthM1pJRkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABT2VMA0G
CSqGSIb3DQEBCwUAA4IBAQAI6GwNvE5MyjfoGE1KviV0cyCi7cB5vUW7whUHkXPk
K4nHkJ30su0xwz6Cfcjpugt5Y1MiLUJeyBTlEKcxJoUDGoSOIlIPaByhCS0+TlRZ
V4exdyO5u0M/Eg2ctTzduPswF/C5wZPV8faVn6aIdyTV4PG3217jHmE5TG33Wz8s
54ba4JU08NrbJ2YZaR3QN+pbLeV5Vu6NO+wuX9COBoSiM1woTWMBnBG1w5QwYz/X
KkVBLmdIK59oQevCh3fDjNkfCIoOfiHMnW+2TaidyFSie/Xc8HXhYbNshWtbRIcQ
ODMx0i3i5IqDAP2aGoiYANVGBwu+pdsi0JxtMbOQyTzh
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:25 2025 by rpki-client