Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/Po8-n7YBIv3m4iUjNVgID4f2Pw0.roa
File: Po8-n7YBIv3m4iUjNVgID4f2Pw0.roa (raw, json)
Hash identifier: x//yT7r03EcD8dK2VgDSppMBn96UQqcZsnLRuJVLGWg=
Subject key identifier: 3E:8F:3E:9F:B6:01:22:FD:E6:E2:25:23:35:58:08:0F:87:F6:3F:0D
Certificate issuer: /CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Certificate serial: 08B27FFF
Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/Po8-n7YBIv3m4iUjNVgID4f2Pw0.roa
Signing time: Sat 01 Jan 2022 15:05:14 +0000
ROA not before: Sat 01 Jan 2022 15:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 378
IP address blocks: 132.72.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145915903 (0x8b27fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Validity
Not Before: Jan 1 15:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e8f3e9fb60122fde6e225233558080f87f63f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:10:87:f8:e8:1a:43:be:68:f5:3e:d4:8b:
d9:b1:f9:9f:ec:a8:8f:b4:9a:26:0e:4c:91:0e:b5:
ca:f5:2a:76:07:e2:8b:49:05:da:1a:62:09:ab:13:
53:d9:6c:96:fe:fa:e2:f9:04:c2:b8:d7:e2:30:6f:
68:69:86:26:34:2d:5c:83:01:88:68:fa:2d:bb:9d:
4c:e0:5f:dc:a7:1e:ec:6f:5b:81:15:54:5c:73:0f:
04:67:fc:66:3a:a1:86:8b:48:24:ed:a8:1e:0d:b7:
0b:36:d5:b0:4d:86:28:9e:39:f6:09:0e:fb:52:d9:
8f:cb:b5:82:5d:1b:a6:89:f0:12:77:32:0f:ba:9a:
62:6a:02:05:fc:d7:67:23:84:ae:a6:13:a2:db:39:
aa:f8:08:9d:5b:90:dc:cb:4c:7c:36:0b:28:8d:9d:
a6:bc:7c:99:f1:62:d6:ec:d1:f4:0a:df:46:ef:84:
1c:97:6d:cd:76:66:4e:d3:00:41:a8:80:f5:eb:67:
31:cf:05:9b:91:8f:b2:1f:a6:be:54:cf:52:cb:14:
09:c0:ff:ec:95:d8:09:3c:6e:18:8d:52:11:3a:dd:
32:71:5e:7b:5e:0a:d6:09:01:b3:f8:ff:de:6e:d8:
a4:77:ac:c9:72:f5:ea:46:16:5e:e6:a0:1b:93:6f:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8F:3E:9F:B6:01:22:FD:E6:E2:25:23:35:58:08:0F:87:F6:3F:0D
X509v3 Authority Key Identifier:
keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/Po8-n7YBIv3m4iUjNVgID4f2Pw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.72.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7d:31:eb:92:b5:cf:4b:b9:72:22:52:c7:4e:ad:a7:6d:23:41:
29:74:15:d8:cb:e1:da:ea:9c:93:55:18:01:7c:27:b7:28:f6:
da:2c:2b:49:d8:b5:9f:d7:57:1f:99:1c:a5:2b:a2:41:b0:87:
28:ec:08:39:eb:3e:4d:92:ce:9f:9e:0e:cc:81:34:67:59:19:
d7:eb:09:0a:b4:31:24:9a:c7:a1:5c:8d:ab:e0:c7:37:c2:4b:
e0:93:79:b8:4d:31:3b:51:6c:fb:1c:86:e6:da:89:04:02:94:
1b:d1:ae:4f:bb:9c:8f:11:ac:6f:88:e4:37:cc:c5:c1:0f:e1:
1a:cf:3d:32:f6:75:b5:7e:19:e4:2f:89:a6:1b:4a:9e:93:3a:
1c:c0:a7:3b:f1:6a:ea:75:30:29:c2:94:e5:61:d7:ce:b9:9f:
5b:c7:08:db:5c:e0:23:db:5d:48:09:fb:e3:0c:31:8a:26:ad:
0e:49:6d:29:82:81:6f:96:84:ba:f2:e1:72:8c:d3:ab:c2:73:
06:42:97:ef:17:29:0d:7b:fc:3f:51:d1:8c:93:bf:a7:9e:6a:
5a:4e:29:a1:48:ef:40:38:d1:b9:f2:d7:d7:08:1b:f9:96:6c:
08:a1:a4:5a:dc:22:cd:cf:1b:7a:31:9d:82:88:72:43:3b:22:
c4:51:62:5c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIECLJ//zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YTkzZWRmYzJhYTc0OGU0OTgxMDUwZWMwNmUzYTY2OTIwMjY1ZTE3MB4XDTIyMDEw
MTE1MDUxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2U4ZjNlOWZiNjAx
MjJmZGU2ZTIyNTIzMzU1ODA4MGY4N2Y2M2YwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKelEIf46BpDvmj1PtSL2bH5n+yoj7SaJg5MkQ61yvUqdgfi
i0kF2hpiCasTU9lslv764vkEwrjX4jBvaGmGJjQtXIMBiGj6LbudTOBf3Kce7G9b
gRVUXHMPBGf8ZjqhhotIJO2oHg23CzbVsE2GKJ459gkO+1LZj8u1gl0bponwEncy
D7qaYmoCBfzXZyOErqYTots5qvgInVuQ3MtMfDYLKI2dprx8mfFi1uzR9ArfRu+E
HJdtzXZmTtMAQaiA9etnMc8Fm5GPsh+mvlTPUssUCcD/7JXYCTxuGI1SETrdMnFe
e14K1gkBs/j/3m7YpHesyXL16kYWXuagG5NvwF8CAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBQ+jz6ftgEi/ebiJSM1WAgPh/Y/DTAfBgNVHSMEGDAWgBTqk+38KqdI5JgQ
UOwG46ZpICZeFzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZwUHRfQ3FuU09TWUVGRHNCdU9tYVNBbVhoYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2MvMGZkNWY0LTU2YzAtNDhiYS1iMDJiLWQxMzhhOWM0ZTQzZi8x
L1BvOC1uN1lCSXYzbTRpVWpOVmdJRDRmMlB3MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Mv
MGZkNWY0LTU2YzAtNDhiYS1iMDJiLWQxMzhhOWM0ZTQzZi8xLzZwUHRfQ3FuU09T
WUVGRHNCdU9tYVNBbVhoYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAYRIMA0GCSqGSIb3DQEBCwUAA4IB
AQB9MeuStc9LuXIiUsdOradtI0EpdBXYy+Ha6pyTVRgBfCe3KPbaLCtJ2LWf11cf
mRylK6JBsIco7Ag56z5Nks6fng7MgTRnWRnX6wkKtDEkmsehXI2r4Mc3wkvgk3m4
TTE7UWz7HIbm2okEApQb0a5Pu5yPEaxviOQ3zMXBD+Eazz0y9nW1fhnkL4mmG0qe
kzocwKc78WrqdTApwpTlYdfOuZ9bxwjbXOAj211ICfvjDDGKJq0OSW0pgoFvloS6
8uFyjNOrwnMGQpfvFykNe/w/UdGMk7+nnmpaTimhSO9AONG58tfXCBv5lmwIoaRa
3CLNzxt6MZ2CiHJDOyLEUWJc
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:19:18 2025 by rpki-client