Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/rn3eQffdJxLquKyMY6OaqA6qIHc.roa
File: rn3eQffdJxLquKyMY6OaqA6qIHc.roa (raw, json)
Hash identifier: Oog4AW/1htBif3qHWj6goqVyUUeE1djIhqyBYbN9tNQ=
Subject key identifier: AE:7D:DE:41:F7:DD:27:12:EA:B8:AC:8C:63:A3:9A:A8:0E:AA:20:77
Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial: 01856B93423D034AD61741D03E792CED66CE
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/rn3eQffdJxLquKyMY6OaqA6qIHc.roa
Signing time: Sun 01 Jan 2023 04:24:50 +0000
ROA not before: Sun 01 Jan 2023 04:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51703
IP address blocks: 212.174.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:42:3d:03:4a:d6:17:41:d0:3e:79:2c:ed:66:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Validity
Not Before: Jan 1 04:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae7dde41f7dd2712eab8ac8c63a39aa80eaa2077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:3e:72:82:f8:b5:23:39:99:20:ca:ec:48:
fc:cb:a9:ef:60:91:4f:03:56:79:1f:48:a9:4e:85:
da:10:e5:0d:5f:9f:c9:13:e0:6c:b1:6a:fb:77:05:
ca:ed:d2:53:58:ae:85:56:7a:84:4b:fa:24:e6:7e:
ee:24:ab:22:e9:b3:ac:47:20:49:1d:ad:0b:82:0d:
21:16:1b:6e:10:28:97:6f:fa:b4:16:25:74:db:b3:
a4:14:dc:81:b2:04:f8:82:27:b9:96:30:6a:df:6f:
f0:3c:20:6f:fa:d9:f3:06:d1:1d:e8:fb:ab:99:61:
29:b8:1e:27:35:af:87:97:af:db:cc:40:60:10:39:
d5:39:d4:7f:69:de:74:42:07:06:33:ba:68:6f:92:
d8:bf:96:4e:bc:14:eb:08:a1:c5:ac:d1:cd:32:5b:
ac:b4:9a:22:37:1f:0a:42:06:82:46:25:6d:91:df:
5c:7c:90:47:78:4e:2b:c2:dc:cd:bb:5a:c2:d6:fa:
09:2a:a7:48:f7:4b:aa:36:88:37:5c:a2:41:67:9b:
9c:bb:d3:1d:90:46:ff:f2:23:f4:5d:57:42:71:ae:
f5:3f:ef:2b:27:d9:9e:52:c6:6b:cf:5b:96:c9:d8:
40:ea:39:78:00:06:4d:29:16:cc:66:fe:26:83:3a:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:DE:41:F7:DD:27:12:EA:B8:AC:8C:63:A3:9A:A8:0E:AA:20:77
X509v3 Authority Key Identifier:
keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/rn3eQffdJxLquKyMY6OaqA6qIHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.174.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8c:1b:c3:c9:e3:86:c7:ac:10:d2:4e:47:7d:4a:20:96:89:
58:74:b3:fa:e4:79:82:d5:2c:94:06:a3:99:b2:66:38:b5:0a:
f0:29:eb:9b:db:6c:a3:fa:35:ee:63:1f:8b:b4:c3:dc:24:61:
cd:50:9f:20:cb:ef:f0:1d:dd:2f:7e:6a:d1:0a:83:a5:e3:ae:
ca:b8:55:45:7d:c2:af:da:76:cb:ef:2d:da:32:47:08:b5:21:
9c:a4:db:c1:4b:ec:26:0c:a6:4f:0c:40:b8:f5:ae:6f:70:8e:
20:37:1b:5c:e5:a1:b4:eb:20:94:1a:6f:11:9a:06:8b:c1:95:
77:de:a2:96:64:07:77:09:7e:bd:53:41:f3:f9:d6:a8:d4:34:
42:ba:1d:b7:c0:dd:c3:26:dc:f3:6f:ea:9c:7f:bd:78:16:0c:
a5:f3:d6:39:8b:39:9b:40:02:ad:36:e5:af:99:f5:07:2a:46:
1a:65:f2:e9:da:fa:4a:64:3f:64:4c:23:e1:92:61:99:81:86:
0a:2a:a0:c2:b1:5a:3e:0a:70:1a:af:98:50:fc:ba:67:64:91:
c4:6b:16:71:88:6d:10:2e:be:b3:0f:11:39:49:7a:24:51:8c:
97:1b:5c:9f:22:44:df:fd:3d:8b:b3:f7:ee:99:bb:8e:a4:4e:
25:be:78:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrk0I9A0rWF0HQPnks7WbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWYxMWJiOGE4ZDQ4MGEwMzEzZTFmMjE4YTY2YmRmNGU5
NWY2MjcwHhcNMjMwMTAxMDQyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTdkZGU0MWY3ZGQyNzEyZWFiOGFjOGM2M2EzOWFhODBlYWEyMDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqI+coL4tSM5mSDK7Ej8y6nvYJFP
A1Z5H0ipToXaEOUNX5/JE+BssWr7dwXK7dJTWK6FVnqES/ok5n7uJKsi6bOsRyBJ
Ha0Lgg0hFhtuECiXb/q0FiV027OkFNyBsgT4gie5ljBq32/wPCBv+tnzBtEd6Pur
mWEpuB4nNa+Hl6/bzEBgEDnVOdR/ad50QgcGM7pob5LYv5ZOvBTrCKHFrNHNMlus
tJoiNx8KQgaCRiVtkd9cfJBHeE4rwtzNu1rC1voJKqdI90uqNog3XKJBZ5ucu9Md
kEb/8iP0XVdCca71P+8rJ9meUsZrz1uWydhA6jl4AAZNKRbMZv4mgzopkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK593kH33ScS6risjGOjmqgOqiB3MB8GA1UdIwQY
MBaAFD3vEbuKjUgKAxPh8hima99OlfYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWYxNzItMmRlZi00Nzk3LTgwNWYt
YjQ5NDY2NDcyNGFkLzEvcm4zZVFmZmRKeExxdUt5TVk2T2FxQTZxSUhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWYxNzItMmRlZi00Nzk3LTgwNWYtYjQ5NDY2NDcyNGFk
LzEvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1K6LMA0G
CSqGSIb3DQEBCwUAA4IBAQAOjBvDyeOGx6wQ0k5HfUoglolYdLP65HmC1SyUBqOZ
smY4tQrwKeub22yj+jXuYx+LtMPcJGHNUJ8gy+/wHd0vfmrRCoOl467KuFVFfcKv
2nbL7y3aMkcItSGcpNvBS+wmDKZPDEC49a5vcI4gNxtc5aG06yCUGm8RmgaLwZV3
3qKWZAd3CX69U0Hz+dao1DRCuh23wN3DJtzzb+qcf714Fgyl89Y5izmbQAKtNuWv
mfUHKkYaZfLp2vpKZD9kTCPhkmGZgYYKKqDCsVo+CnAar5hQ/LpnZJHEaxZxiG0Q
Lr6zDxE5SXokUYyXG1yfIkTf/T2Ls/fumbuOpE4lvng8
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:27 2025 by rpki-client