Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/aKxBCz_BxvUH5LONhb2RFGJ5xZk.roa
File: aKxBCz_BxvUH5LONhb2RFGJ5xZk.roa (raw, json)
Hash identifier: kfYuvOfooFAkvQBPXev6MuBhI917eqtOoU7Ugq9jZH4=
Subject key identifier: 68:AC:41:0B:3F:C1:C6:F5:07:E4:B3:8D:85:BD:91:14:62:79:C5:99
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 120E4333
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/aKxBCz_BxvUH5LONhb2RFGJ5xZk.roa
Signing time: Sat 01 Jan 2022 01:56:31 +0000
ROA not before: Sat 01 Jan 2022 01:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43116
IP address blocks: 213.144.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302924595 (0x120e4333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jan 1 01:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68ac410b3fc1c6f507e4b38d85bd91146279c599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:c3:af:0f:c1:72:0f:01:4b:2c:41:1a:6e:
9a:5e:a6:8a:94:d6:33:c0:f0:a6:db:3a:96:31:7b:
c3:2c:5a:c2:52:90:99:d8:7e:90:9c:75:21:2f:41:
8c:61:b5:46:5c:0e:b2:10:ee:0f:62:0f:5e:6b:ed:
79:19:9d:c3:f8:1d:ac:a6:51:e5:26:f0:90:44:02:
c3:c0:fb:ea:3b:ed:e3:6a:cd:c0:fd:b6:13:a4:be:
5e:32:04:4d:f5:02:6e:76:b4:d1:98:94:6c:47:b3:
4b:42:fa:08:92:49:bb:4e:56:34:59:c6:fb:14:c4:
ad:86:ac:31:42:1d:7a:ad:8e:72:36:9b:25:d1:4f:
f2:1c:d5:19:b3:04:f3:1b:86:f9:be:04:f5:fe:67:
4f:b5:89:0c:8d:d7:41:b7:7c:4b:82:40:c7:13:e3:
3c:e4:50:57:94:c1:8c:d8:8a:f5:1e:f8:10:48:1d:
ae:25:ae:d4:73:ea:0a:2a:3c:b1:5e:95:52:a5:c8:
c4:ca:4b:58:6b:69:35:85:17:99:c8:f4:0a:fd:65:
25:96:0e:41:97:4e:75:cf:19:8e:21:7c:f2:28:1a:
20:bf:5a:a8:f5:54:45:80:6f:89:57:03:be:d7:1a:
e2:76:5f:60:86:6c:df:62:2e:b1:41:6d:f9:2c:9a:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AC:41:0B:3F:C1:C6:F5:07:E4:B3:8D:85:BD:91:14:62:79:C5:99
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/aKxBCz_BxvUH5LONhb2RFGJ5xZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.144.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9e:a1:11:aa:bd:40:b7:5f:f4:2b:5e:b7:b8:af:ba:d8:a8:
10:91:05:99:cb:9d:5a:b0:6b:20:45:fc:c5:7c:25:63:65:8d:
b4:cd:8e:f5:a2:5d:4a:a2:9e:5f:81:69:f4:e6:b6:9d:a6:ca:
cd:01:56:90:d7:e4:ab:52:a4:27:d0:8f:a8:5f:54:1b:1c:9e:
d6:10:14:b1:21:3a:80:ed:54:ab:ea:08:a7:b4:36:49:17:36:
68:8e:59:ad:ce:be:12:10:a9:26:df:b0:fa:06:13:fd:dd:3e:
01:4c:ad:13:f9:87:da:0a:31:fc:83:9a:c2:4e:f9:1c:f7:5c:
b9:a8:f1:be:c8:ca:87:05:60:a8:07:e4:bc:0c:08:c0:4a:80:
6a:62:ce:27:c1:54:4e:7f:c5:2e:2d:4b:12:dc:5b:59:ad:3a:
16:06:6f:8f:24:4e:e6:a0:77:75:80:f7:d7:51:2b:3b:18:3f:
0c:26:a9:2d:85:0e:3b:e6:a8:e3:d4:4d:de:16:7e:84:75:b4:
ce:08:eb:95:93:08:e2:e7:68:ff:b9:e0:61:68:44:44:dc:0f:
c9:01:03:42:13:c2:3f:48:c7:be:4e:9c:15:55:73:91:0d:f1:
af:7f:05:e8:f2:f9:ac:69:81:a2:b3:5b:5f:72:d1:5c:fd:bb:
83:fc:dd:e3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEg5DMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YTk2MjE4YzIwZWZkOGZlNTNmY2E5OTkwYjcyNWRkNzk2M2M4ODVjMB4XDTIyMDEw
MTAxNTYzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjhhYzQxMGIzZmMx
YzZmNTA3ZTRiMzhkODViZDkxMTQ2Mjc5YzU5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMeNw68PwXIPAUssQRpuml6mipTWM8Dwpts6ljF7wyxawlKQ
mdh+kJx1IS9BjGG1RlwOshDuD2IPXmvteRmdw/gdrKZR5SbwkEQCw8D76jvt42rN
wP22E6S+XjIETfUCbna00ZiUbEezS0L6CJJJu05WNFnG+xTErYasMUIdeq2Ocjab
JdFP8hzVGbME8xuG+b4E9f5nT7WJDI3XQbd8S4JAxxPjPORQV5TBjNiK9R74EEgd
riWu1HPqCio8sV6VUqXIxMpLWGtpNYUXmcj0Cv1lJZYOQZdOdc8ZjiF88igaIL9a
qPVURYBviVcDvtca4nZfYIZs32IusUFt+SyakS0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRorEELP8HG9Qfks42FvZEUYnnFmTAfBgNVHSMEGDAWgBTKliGMIO/Y/lP8
qZkLcl3XljyIXDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lwWWhqQ0R2MlA1VF9LbVpDM0pkMTVZOGlGdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvOTc1NWQ1LTdmMGItNDI3Zi1hZmUwLWQ3MTJkNDczODA0Ni8x
L2FLeEJDel9CeHZVSDVMT05oYjJSRkdKNXhaay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
OTc1NWQ1LTdmMGItNDI3Zi1hZmUwLWQ3MTJkNDczODA0Ni8xL3lwWWhqQ0R2MlA1
VF9LbVpDM0pkMTVZOGlGdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWQZjANBgkqhkiG9w0BAQsFAAOC
AQEAqZ6hEaq9QLdf9Ctet7ivutioEJEFmcudWrBrIEX8xXwlY2WNtM2O9aJdSqKe
X4Fp9Oa2nabKzQFWkNfkq1KkJ9CPqF9UGxye1hAUsSE6gO1Uq+oIp7Q2SRc2aI5Z
rc6+EhCpJt+w+gYT/d0+AUytE/mH2gox/IOawk75HPdcuajxvsjKhwVgqAfkvAwI
wEqAamLOJ8FUTn/FLi1LEtxbWa06FgZvjyRO5qB3dYD311ErOxg/DCapLYUOO+ao
49RN3hZ+hHW0zgjrlZMI4udo/7ngYWhERNwPyQEDQhPCP0jHvk6cFVVzkQ3xr38F
6PL5rGmBorNbX3LRXP27g/zd4w==
-----END CERTIFICATE-----
Generated at Thu May 15 13:31:04 2025 by rpki-client