Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/M_GxSfKXhRYqCVesClCeje7cUps.roa
File: M_GxSfKXhRYqCVesClCeje7cUps.roa (raw, json)
Hash identifier: GbWLuitazoKZl9l2FSV1DODMI7fvEHNXOL3KG2Ou4As=
Subject key identifier: 33:F1:B1:49:F2:97:85:16:2A:09:57:AC:0A:50:9E:8D:EE:DC:52:9B
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 018CA57B1E5128FC66212E0E5C0503A80146
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/M_GxSfKXhRYqCVesClCeje7cUps.roa
Signing time: Tue 26 Dec 2023 09:35:58 +0000
ROA not before: Tue 26 Dec 2023 09:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 212.26.0.0/17 maxlen: 17
212.26.18.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a5:7b:1e:51:28:fc:66:21:2e:0e:5c:05:03:a8:01:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Dec 26 09:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33f1b149f29785162a0957ac0a509e8deedc529b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:26:67:fe:b7:68:cf:68:ce:6c:9b:ec:67:
a4:d2:30:64:c6:66:fd:e1:5e:c2:6d:81:34:c6:f8:
60:90:dc:d9:ef:91:80:02:19:5c:9b:b7:84:e3:45:
96:fd:31:57:ff:3c:70:55:eb:fb:6f:bf:3a:0e:dc:
41:80:1f:6c:7e:c9:c8:c1:fe:da:d5:a5:4a:58:86:
61:a1:69:6f:f0:5e:0b:c7:8e:ac:62:0e:f0:e4:ce:
99:7d:d4:13:3b:8b:a9:68:5f:b4:3a:c0:06:69:a2:
e0:b6:d0:3c:fe:99:8a:a5:10:0c:fd:d7:7d:40:d6:
55:e2:1d:b3:9e:61:12:b7:d7:99:1f:9e:0f:53:4f:
c4:bc:2e:92:d2:1e:04:f3:c6:ab:65:56:00:71:32:
4e:86:8a:54:9c:57:de:b3:12:05:54:73:3e:d0:58:
fb:c6:66:20:f9:3a:a4:54:f5:25:f7:df:c5:b8:9e:
be:b3:23:fc:0c:63:62:18:39:5f:0f:c9:72:bc:80:
c3:bd:87:9b:46:f4:93:69:c6:32:b5:67:a4:c3:f7:
9d:2b:23:9d:47:68:64:fb:e6:86:07:1a:7d:1c:1d:
ba:bd:cb:d6:0e:9d:b3:df:20:b6:e7:25:26:3d:17:
cc:22:7f:5c:69:8d:11:78:e2:5a:c0:42:b9:da:53:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:B1:49:F2:97:85:16:2A:09:57:AC:0A:50:9E:8D:EE:DC:52:9B
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/M_GxSfKXhRYqCVesClCeje7cUps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.26.0.0/17
Signature Algorithm: sha256WithRSAEncryption
78:38:66:ee:28:9b:34:d4:bc:e7:51:97:1b:f1:aa:8d:7a:2c:
72:4c:2c:08:0b:05:a7:ed:a2:a7:8d:a2:3b:96:fe:6e:91:e5:
26:ea:6b:ee:b4:79:40:61:7c:37:1c:fb:cf:5f:3c:1b:28:2f:
7c:1d:f2:ce:ac:58:7d:08:48:dd:75:5e:83:49:25:c2:81:fc:
97:93:4c:3c:f7:c6:de:7d:c7:f1:e2:82:9e:da:21:c5:a8:4c:
79:46:f8:11:5e:69:b5:57:0b:53:2d:3f:d4:c9:b5:a5:94:24:
f5:b1:37:bd:f7:71:c0:ae:08:c8:8f:2e:fb:8c:a4:c6:ae:46:
ca:bf:45:13:2d:8c:3f:f4:c5:26:58:66:6a:91:07:a3:54:20:
64:8e:91:95:ae:58:1f:cc:4b:2d:3f:3d:4f:a3:4f:75:c8:62:
a5:06:aa:f2:41:14:ec:d2:43:88:29:81:44:67:7b:d0:cf:78:
62:83:f9:05:e4:49:d5:af:be:7b:93:08:b6:96:ba:f5:85:d4:
f8:48:b6:4c:b6:79:d1:96:b7:62:27:ae:76:eb:6b:56:6e:84:
e1:89:f6:34:cb:c1:30:47:e6:80:35:8a:5c:87:3b:92:0c:4e:
6b:9d:d4:6d:5c:23:4a:52:4b:77:f7:1d:b4:33:14:d4:ff:bf:
4e:5f:c8:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYylex5RKPxmIS4OXAUDqAFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjMxMjI2MDkzNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2YxYjE0OWYyOTc4NTE2MmEwOTU3YWMwYTUwOWU4ZGVlZGM1MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7ImZ/63aM9ozmyb7Gek0jBkxmb9
4V7CbYE0xvhgkNzZ75GAAhlcm7eE40WW/TFX/zxwVev7b786DtxBgB9sfsnIwf7a
1aVKWIZhoWlv8F4Lx46sYg7w5M6ZfdQTO4upaF+0OsAGaaLgttA8/pmKpRAM/dd9
QNZV4h2znmESt9eZH54PU0/EvC6S0h4E88arZVYAcTJOhopUnFfesxIFVHM+0Fj7
xmYg+TqkVPUl99/FuJ6+syP8DGNiGDlfD8lyvIDDvYebRvSTacYytWekw/edKyOd
R2hk++aGBxp9HB26vcvWDp2z3yC25yUmPRfMIn9caY0ReOJawEK52lOCbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPxsUnyl4UWKglXrApQno3u3FKbMB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvTV9HeFNmS1hoUllxQ1Zlc0NsQ2VqZTdjVXBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH1BoAMA0G
CSqGSIb3DQEBCwUAA4IBAQB4OGbuKJs01LznUZcb8aqNeixyTCwICwWn7aKnjaI7
lv5ukeUm6mvutHlAYXw3HPvPXzwbKC98HfLOrFh9CEjddV6DSSXCgfyXk0w898be
fcfx4oKe2iHFqEx5RvgRXmm1VwtTLT/UybWllCT1sTe993HArgjIjy77jKTGrkbK
v0UTLYw/9MUmWGZqkQejVCBkjpGVrlgfzEstPz1Po091yGKlBqryQRTs0kOIKYFE
Z3vQz3hig/kF5EnVr757kwi2lrr1hdT4SLZMtnnRlrdiJ65262tWboThifY0y8Ew
R+aANYpchzuSDE5rndRtXCNKUkt39x20MxTU/79OX8gK
-----END CERTIFICATE-----
Generated at Wed Jun 18 18:18:36 2025 by rpki-client