Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/MOyt5t6Qzqz5Bye6-uZsi3_4psQ.roa
File: MOyt5t6Qzqz5Bye6-uZsi3_4psQ.roa (raw, json)
Hash identifier: 7Fw0Wj4aM99Ng7DN+8cBD4omgUDEy8F/YaqPZjkbpxc=
Subject key identifier: 30:EC:AD:E6:DE:90:CE:AC:F9:07:27:BA:FA:E6:6C:8B:7F:F8:A6:C4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 018997FD99E815CEFB3D21CE82C204DFF14B
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/MOyt5t6Qzqz5Bye6-uZsi3_4psQ.roa
Signing time: Thu 27 Jul 2023 15:35:26 +0000
ROA not before: Thu 27 Jul 2023 15:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48199
IP address blocks: 212.42.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:fd:99:e8:15:ce:fb:3d:21:ce:82:c2:04:df:f1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Jul 27 15:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30ecade6de90ceacf90727bafae66c8b7ff8a6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:ab:d1:10:0b:e1:84:3c:40:09:00:6e:a1:
d0:a6:a3:b3:95:85:4c:5b:c3:56:5f:88:7c:67:78:
ae:81:ab:17:35:e1:d0:05:d4:5a:6e:67:75:88:ce:
70:06:ee:ad:cd:f3:2d:ac:a3:6f:00:ab:b3:33:9a:
81:8a:98:57:82:a8:8f:4f:8c:15:f3:1c:05:e0:85:
27:df:88:a7:be:22:73:d4:7a:f0:1c:57:9d:62:54:
21:84:df:86:f6:9d:0e:aa:72:6c:b4:77:5a:40:70:
ae:79:f4:a3:28:8e:27:ab:7b:74:12:b9:97:e9:6e:
cf:a8:b3:b9:ef:cb:85:46:58:a0:d1:3e:cc:18:e2:
75:13:94:ee:7f:2b:ea:4d:0f:1c:d3:3f:ea:80:37:
65:b3:02:41:eb:af:e0:da:ae:12:fe:70:88:13:ac:
41:f4:4d:fc:23:26:5f:38:15:57:c9:ef:60:2f:e0:
18:12:78:39:de:c9:2a:41:7e:62:1c:f7:35:d4:28:
47:f2:68:da:73:ac:70:5e:92:d1:51:f2:2e:2a:fd:
e6:a5:94:c1:e9:33:33:2a:80:96:3f:1f:ba:58:ba:
23:4c:89:0e:cd:6f:f9:20:77:13:31:b4:11:23:75:
68:31:47:39:3e:b6:e2:54:bc:ef:b7:f6:ac:8c:46:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:AD:E6:DE:90:CE:AC:F9:07:27:BA:FA:E6:6C:8B:7F:F8:A6:C4
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/MOyt5t6Qzqz5Bye6-uZsi3_4psQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.48.0/24
Signature Algorithm: sha256WithRSAEncryption
46:09:68:ba:aa:d6:55:e5:88:54:23:a1:ef:4a:21:41:d4:bd:
2f:35:c9:29:87:19:59:55:15:c8:a6:dc:a4:aa:61:bb:2b:13:
9d:4c:29:21:b6:66:1d:8e:66:ce:7f:0f:1b:90:88:f4:c9:eb:
23:cb:98:d4:14:5f:65:47:e3:58:43:87:42:60:57:6d:22:af:
36:c6:09:e1:4c:b3:a8:5c:fe:fe:44:a5:66:19:da:3b:fd:08:
03:47:4e:63:ce:fe:fb:21:e7:4a:50:99:5e:81:b5:f3:fc:f6:
6a:11:5e:a3:2e:ed:c1:ba:a2:48:42:a2:62:7d:71:76:b6:4d:
6f:c6:f0:41:bd:cb:8c:8d:00:6b:75:1a:f8:8d:56:71:b3:f6:
86:71:32:ab:5e:70:0e:22:e0:f9:ff:9e:64:6d:d7:df:35:8e:
c3:4b:67:44:16:bb:5e:8a:49:cb:0f:8b:50:fd:36:d1:2a:94:
43:2e:2d:23:3f:4e:5d:26:f1:b8:e6:b7:55:fd:78:49:bb:3f:
8c:ac:93:44:16:21:7a:02:da:84:eb:5e:6f:85:b0:9d:ec:36:
b9:de:5c:d8:db:29:95:ba:39:c8:d6:d8:30:01:3b:29:19:02:
8a:a5:b5:f0:19:2f:b1:0a:83:45:9c:5b:ad:4c:60:f6:69:c2:
a6:93:c5:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmX/ZnoFc77PSHOgsIE3/FLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2EyNjcwNTA4Yjk0NTEyM2JlZWNiZjEzMTQ1ZmZiZDdi
ZmNkZTQwHhcNMjMwNzI3MTUzNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGVjYWRlNmRlOTBjZWFjZjkwNzI3YmFmYWU2NmM4YjdmZjhhNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg+r0RAL4YQ8QAkAbqHQpqOzlYVM
W8NWX4h8Z3iugasXNeHQBdRabmd1iM5wBu6tzfMtrKNvAKuzM5qBiphXgqiPT4wV
8xwF4IUn34inviJz1HrwHFedYlQhhN+G9p0OqnJstHdaQHCuefSjKI4nq3t0ErmX
6W7PqLO578uFRlig0T7MGOJ1E5TufyvqTQ8c0z/qgDdlswJB66/g2q4S/nCIE6xB
9E38IyZfOBVXye9gL+AYEng53skqQX5iHPc11ChH8mjac6xwXpLRUfIuKv3mpZTB
6TMzKoCWPx+6WLojTIkOzW/5IHcTMbQRI3VoMUc5PrbiVLzvt/asjEYoJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDDsrebekM6s+QcnuvrmbIt/+KbEMB8GA1UdIwQY
MBaAFEJ6JnBQi5RRI77svxMUX/vXv83kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQt
MDZiM2NlYTQ5MmVlLzEvTU95dDV0NlF6cXo1QnllNi11WnNpM180cHNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQtMDZiM2NlYTQ5MmVl
LzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CowMA0G
CSqGSIb3DQEBCwUAA4IBAQBGCWi6qtZV5YhUI6HvSiFB1L0vNckphxlZVRXIptyk
qmG7KxOdTCkhtmYdjmbOfw8bkIj0yesjy5jUFF9lR+NYQ4dCYFdtIq82xgnhTLOo
XP7+RKVmGdo7/QgDR05jzv77IedKUJlegbXz/PZqEV6jLu3BuqJIQqJifXF2tk1v
xvBBvcuMjQBrdRr4jVZxs/aGcTKrXnAOIuD5/55kbdffNY7DS2dEFrteiknLD4tQ
/TbRKpRDLi0jP05dJvG45rdV/XhJuz+MrJNEFiF6AtqE615vhbCd7Da53lzY2ymV
ujnI1tgwATspGQKKpbXwGS+xCoNFnFutTGD2acKmk8Wf
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:47:26 2025 by rpki-client