Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/Et78qz149zpDA0Ogs37wjyRRDjo.roa
File: Et78qz149zpDA0Ogs37wjyRRDjo.roa (raw, json)
Hash identifier: MhSg7y0L8XBViPowMdtoJtJXpsoH/sm2MXp/0axgrYw=
Subject key identifier: 12:DE:FC:AB:3D:78:F7:3A:43:03:43:A0:B3:7E:F0:8F:24:51:0E:3A
Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial: 018572E81CF0F0B92EBE6CD78D20F96666C5
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/Et78qz149zpDA0Ogs37wjyRRDjo.roa
Signing time: Mon 02 Jan 2023 14:34:52 +0000
ROA not before: Mon 02 Jan 2023 14:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12810
IP address blocks: 78.40.0.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:1c:f0:f0:b9:2e:be:6c:d7:8d:20:f9:66:66:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Validity
Not Before: Jan 2 14:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12defcab3d78f73a430343a0b37ef08f24510e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:4a:09:5e:14:5d:3a:b2:ef:93:2a:e9:86:
3f:4a:03:80:c2:2b:79:f4:71:86:bd:12:68:61:54:
2f:fa:c5:38:77:b7:6f:d6:18:14:25:07:a1:24:68:
af:af:ea:0e:4d:d4:a6:22:cc:bc:f1:e1:34:b6:ac:
6e:a0:fc:68:f5:01:b6:38:41:ed:5d:81:ee:82:ac:
fc:19:76:71:7f:44:56:bc:70:58:10:73:9e:6d:d3:
24:49:52:32:55:65:79:bd:bf:c5:49:cd:04:1c:2f:
c3:37:bf:b5:cb:87:e9:c2:0a:59:a5:e8:c9:7a:3c:
0b:b0:81:7f:92:73:82:50:99:08:e0:3f:e3:22:b3:
9b:71:45:b4:85:a3:79:84:b5:91:59:ab:8e:ba:e3:
63:aa:b3:2a:d1:0d:ae:bb:a2:9e:eb:01:67:69:a3:
35:84:bf:f4:83:7f:c1:22:44:9d:91:e8:65:24:97:
c5:0b:0d:06:90:00:5b:93:2e:f3:96:3b:c2:9a:a6:
a6:27:71:21:9a:36:14:96:0d:24:c3:3e:e8:c4:75:
77:8b:a3:31:5c:e7:38:e4:d1:2d:d5:6b:ce:69:93:
3c:d2:15:4b:a1:4e:f9:15:c5:c7:c1:e2:c6:4e:29:
80:a8:09:2d:ed:02:17:d4:01:4e:07:70:ca:91:26:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:FC:AB:3D:78:F7:3A:43:03:43:A0:B3:7E:F0:8F:24:51:0E:3A
X509v3 Authority Key Identifier:
keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/Et78qz149zpDA0Ogs37wjyRRDjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.0.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:e8:ac:69:cf:b9:5c:25:b5:75:14:b7:c9:a7:22:3a:84:f8:
ab:f0:64:8e:8f:d8:08:84:98:69:fd:c0:66:71:83:29:f0:df:
3d:15:8d:73:2d:80:b8:44:5d:d9:82:af:71:7e:e3:0b:bc:3a:
21:7d:9f:22:3f:c6:98:0b:cb:ee:4f:51:af:df:eb:cc:be:fe:
4b:3b:12:cd:60:23:56:ec:7d:b7:6f:91:7e:c6:d1:12:d1:ed:
66:1e:49:47:39:42:24:5a:e6:8a:85:19:1b:06:74:b5:b7:1b:
05:4e:1a:86:1e:92:5f:76:d4:32:92:56:d9:19:aa:30:58:71:
95:9f:6f:f7:66:84:44:3d:4c:9d:a8:d0:f9:5d:fe:ce:79:fd:
8a:75:ba:fe:73:61:d4:c4:7d:9c:80:72:07:fa:a9:6f:05:09:
19:01:e3:26:da:ba:32:98:e7:bc:f9:94:bf:18:1a:89:af:51:
78:6f:9e:4a:d8:3d:b2:52:3e:f7:d7:a1:56:b7:9d:f4:56:5a:
38:da:7f:e2:f5:08:db:2c:c1:4b:d9:10:c3:91:0a:2c:27:f3:
ac:31:67:cb:46:f6:64:54:33:81:74:38:84:9e:78:60:8d:10:
47:0a:57:1c:d3:35:e4:f4:b1:a3:2a:3e:ed:71:92:a8:67:b1:
6d:2e:d9:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6Bzw8LkuvmzXjSD5ZmbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTcyMDlhOGM5YjE3NmZiZjYyM2VkZjNlZTBiODIwMDdm
YzJjNDAwHhcNMjMwMTAyMTQzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmRlZmNhYjNkNzhmNzNhNDMwMzQzYTBiMzdlZjA4ZjI0NTEwZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskVKCV4UXTqy75Mq6YY/SgOAwit5
9HGGvRJoYVQv+sU4d7dv1hgUJQehJGivr+oOTdSmIsy88eE0tqxuoPxo9QG2OEHt
XYHugqz8GXZxf0RWvHBYEHOebdMkSVIyVWV5vb/FSc0EHC/DN7+1y4fpwgpZpejJ
ejwLsIF/knOCUJkI4D/jIrObcUW0haN5hLWRWauOuuNjqrMq0Q2uu6Ke6wFnaaM1
hL/0g3/BIkSdkehlJJfFCw0GkABbky7zljvCmqamJ3EhmjYUlg0kwz7oxHV3i6Mx
XOc45NEt1WvOaZM80hVLoU75FcXHweLGTimAqAkt7QIX1AFOB3DKkSY5iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBLe/Ks9ePc6QwNDoLN+8I8kUQ46MB8GA1UdIwQY
MBaAFJnnIJqMmxdvv2I+3z7guCAH/CxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUt
YjJkY2MxODYzZThiLzEvRXQ3OHF6MTQ5enBEQTBPZ3MzN3dqeVJSRGpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUtYjJkY2MxODYzZThi
LzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTigAMA0G
CSqGSIb3DQEBCwUAA4IBAQCM6Kxpz7lcJbV1FLfJpyI6hPir8GSOj9gIhJhp/cBm
cYMp8N89FY1zLYC4RF3Zgq9xfuMLvDohfZ8iP8aYC8vuT1Gv3+vMvv5LOxLNYCNW
7H23b5F+xtES0e1mHklHOUIkWuaKhRkbBnS1txsFThqGHpJfdtQyklbZGaowWHGV
n2/3ZoREPUydqND5Xf7Oef2Kdbr+c2HUxH2cgHIH+qlvBQkZAeMm2roymOe8+ZS/
GBqJr1F4b55K2D2yUj7316FWt530Vlo42n/i9QjbLMFL2RDDkQosJ/OsMWfLRvZk
VDOBdDiEnnhgjRBHClcc0zXk9LGjKj7tcZKoZ7FtLtl7
-----END CERTIFICATE-----
Generated at Thu May 15 06:49:38 2025 by rpki-client