Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/32N5XGM6WJ8ZLhwofBzbPu97rk0.roa
File: 32N5XGM6WJ8ZLhwofBzbPu97rk0.roa (raw, json)
Hash identifier: rdMVgVy9qDPZhXmsF0stXWSHEwvjoV7yndfzy6rF3fs=
Subject key identifier: DF:63:79:5C:63:3A:58:9F:19:2E:1C:28:7C:1C:DB:3E:EF:7B:AE:4D
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 41F83AE6
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/32N5XGM6WJ8ZLhwofBzbPu97rk0.roa
Signing time: Sat 01 Jan 2022 16:05:08 +0000
ROA not before: Sat 01 Jan 2022 16:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202934
IP address blocks: 213.59.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106787046 (0x41f83ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df63795c633a589f192e1c287c1cdb3eef7bae4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:19:6d:11:34:43:9a:f3:8c:ed:65:b4:23:eb:
f6:e3:2c:21:11:1b:3e:76:ab:a9:83:4c:26:28:a1:
a4:02:24:19:de:35:40:3f:00:ca:4a:45:7b:89:17:
47:6b:f7:83:b7:02:3a:82:cb:31:bd:2d:c7:ad:f3:
e9:29:53:81:dd:51:b1:e4:3d:20:f7:43:4d:f6:71:
7d:30:c4:20:bc:70:93:d9:24:98:c8:0e:35:3e:fc:
0c:82:a0:74:04:3b:44:25:07:f0:74:dd:51:32:58:
a2:73:7d:f8:2c:94:c6:d4:42:fb:7c:41:a7:e9:54:
e7:20:fc:95:a0:02:2e:c7:9a:2f:6c:d7:b4:b9:03:
c6:f7:ef:7b:e8:89:de:a6:d7:45:86:0e:56:e5:95:
f2:e0:ff:95:c9:6f:5b:04:d5:fe:ac:4d:2f:5c:91:
90:66:21:3c:66:7d:e6:28:ac:65:e9:8f:89:4e:20:
0f:19:2f:80:5c:75:f0:38:d3:e3:73:05:74:00:87:
3a:1a:e3:bb:66:27:43:e5:04:d2:f4:63:03:f1:ce:
02:13:ab:ee:d3:b9:82:a2:c7:72:a5:a6:02:f3:0d:
0d:cb:ee:5b:34:e7:29:c8:f5:8d:b6:bc:4d:30:55:
0d:87:38:8d:8b:c0:07:16:b1:76:f0:75:5b:9c:41:
7b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:63:79:5C:63:3A:58:9F:19:2E:1C:28:7C:1C:DB:3E:EF:7B:AE:4D
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/32N5XGM6WJ8ZLhwofBzbPu97rk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.59.185.0/24
Signature Algorithm: sha256WithRSAEncryption
64:74:18:58:ce:1c:65:ca:2f:d1:f8:be:25:ef:85:18:aa:a9:
52:be:b1:9e:ca:10:30:00:1b:01:4b:35:47:8c:25:ef:bf:eb:
47:03:1b:2e:1b:b6:ad:83:5e:40:ab:06:a8:55:8b:a2:23:57:
b2:37:ed:9b:b1:2d:dd:c2:d9:89:b3:3b:5d:6f:5e:1a:3e:51:
3c:95:81:a8:ab:a9:c9:e7:e2:50:36:4d:43:9c:6f:e3:47:1b:
37:f9:5d:71:5e:d2:c4:06:b4:a0:74:26:4d:5d:88:90:3e:d0:
7f:31:f9:8a:c8:4f:0e:13:bf:ec:fb:ba:a1:d9:3d:61:73:18:
4d:f4:b5:be:15:1d:7e:55:3b:4f:e6:b4:c0:bd:43:34:b9:48:
70:68:73:48:87:45:22:8c:75:4a:d1:67:22:9a:0b:7f:79:5a:
c2:e8:a2:27:4b:2a:e4:f1:b8:ce:72:b0:17:60:25:84:fc:37:
68:1a:e7:d0:7a:69:d6:ce:f6:84:29:01:5f:4e:f5:11:f2:8b:
7b:cd:dc:01:2c:2e:da:1b:ac:c0:d9:48:4e:f4:46:6b:35:ac:
ec:1a:1a:c7:87:29:99:ec:2b:10:3d:4c:75:ba:d5:90:68:ee:
68:50:0c:91:9c:3a:49:ae:13:c0:b3:85:c4:83:2e:d5:e9:d9:
30:79:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:52 2025 by rpki-client