Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/1QCU2HnpCF2Dn-B1NxcFBXA2wiw.roa
File: 1QCU2HnpCF2Dn-B1NxcFBXA2wiw.roa (raw, json)
Hash identifier: u5a2xUhY1NR+QmCp+M6BYnt/gVoeYL8XsNHjF7Uh/Hs=
Subject key identifier: D5:00:94:D8:79:E9:08:5D:83:9F:E0:75:37:17:05:05:70:36:C2:2C
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0185720344D61AFECEE3362E690375473175
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/1QCU2HnpCF2Dn-B1NxcFBXA2wiw.roa
Signing time: Mon 02 Jan 2023 10:24:54 +0000
ROA not before: Mon 02 Jan 2023 10:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49178
IP address blocks: 213.162.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:44:d6:1a:fe:ce:e3:36:2e:69:03:75:47:31:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 10:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d50094d879e9085d839fe075371705057036c22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:dc:3d:a2:70:c4:d6:db:81:1a:e0:4d:ed:
fb:8e:c5:84:89:3d:6c:66:70:f4:95:a0:27:55:01:
21:a9:85:c4:31:f6:4f:58:79:64:f6:89:8e:a9:9e:
59:53:4f:42:90:d5:9d:8e:90:0e:ce:49:88:7f:bc:
3d:2d:43:f7:01:7d:4e:0d:c7:cf:6b:96:16:d3:66:
72:7a:fc:7a:39:f7:13:55:5d:a0:4d:18:e5:5b:81:
fd:95:77:05:fd:41:03:3f:0b:bd:23:08:d1:41:77:
c2:37:5e:50:58:38:70:f5:27:3a:44:05:72:d4:c5:
03:4c:fe:80:6e:e0:17:51:87:4e:81:ef:45:65:37:
92:b3:3a:71:ec:cd:07:46:91:ef:69:7f:73:01:43:
26:12:4b:ca:6e:79:66:11:b7:15:81:09:c2:39:0f:
45:d0:b2:81:6d:21:a8:69:22:d6:c0:ad:60:3b:7f:
13:d5:73:0e:fe:3a:a9:f3:56:e5:e6:36:55:2f:69:
cd:20:1a:b3:12:af:b2:44:2c:3c:0c:2f:b6:73:19:
25:e3:80:f2:55:c2:ef:99:39:73:62:25:5b:d7:ee:
8c:0f:30:d2:83:5d:97:2b:0b:33:03:d7:06:82:8b:
b7:c1:df:28:42:aa:1d:af:c6:3d:65:5a:d2:f7:05:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:00:94:D8:79:E9:08:5D:83:9F:E0:75:37:17:05:05:70:36:C2:2C
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/1QCU2HnpCF2Dn-B1NxcFBXA2wiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.204.0/24
Signature Algorithm: sha256WithRSAEncryption
03:36:99:34:9d:d3:00:a2:7c:b5:78:3f:40:03:36:93:98:c9:
07:29:80:ab:e2:ae:49:d6:24:33:05:af:1f:d2:ec:79:58:ce:
5f:57:43:b0:77:2e:03:26:d4:31:9f:23:29:e0:7e:12:7f:aa:
61:37:88:cb:8e:b9:42:26:92:1d:ce:eb:79:28:be:c2:bb:44:
ae:6a:9c:36:e4:db:08:96:92:4c:34:bf:38:71:54:00:21:b4:
8f:81:59:ee:e6:53:e8:d9:a2:12:55:11:f1:e3:96:ac:2f:05:
4d:d4:e9:fa:8f:61:a6:cd:9c:30:52:74:89:2e:dd:ee:6c:10:
5f:ee:68:9e:dd:3c:60:eb:95:b2:26:c4:ba:d5:c3:85:df:01:
48:e2:b9:3a:27:07:95:cf:7e:9b:46:61:e7:8f:d6:4d:21:5c:
38:cb:a0:99:79:3d:9b:65:04:23:38:f3:eb:40:89:bd:c7:ef:
ec:b9:a9:59:ed:a4:d1:ad:0f:5c:7b:d0:6f:3a:6d:93:5c:a4:
72:03:1c:af:e7:aa:ab:a4:b2:7e:73:00:ed:37:db:2a:d8:ef:
e9:69:a2:ef:ff:30:b7:3b:da:fd:a6:48:34:d1:f0:27:ba:a3:
2f:79:ab:3f:da:51:43:31:5c:d8:29:30:d9:1f:37:d1:55:6f:
30:e2:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:22 2025 by rpki-client