Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/j4VyI0f4IweQALQOcVZiqoI-zBc.roa
File: j4VyI0f4IweQALQOcVZiqoI-zBc.roa (raw, json)
Hash identifier: 6oZ97VFIqxhsPZjbDtfvRS/fNU5VjZyEiAqYSOdRVSw=
Subject key identifier: 8F:85:72:23:47:F8:23:07:90:00:B4:0E:71:56:62:AA:82:3E:CC:17
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 41F0282C
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/j4VyI0f4IweQALQOcVZiqoI-zBc.roa
Signing time: Sat 01 Jan 2022 16:05:05 +0000
ROA not before: Sat 01 Jan 2022 16:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15868
IP address blocks: 213.222.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106257964 (0x41f0282c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f85722347f823079000b40e715662aa823ecc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:b3:a7:ad:b1:a9:1b:98:fb:70:67:18:e3:
10:dd:2c:31:28:83:ae:3d:8c:51:e6:13:0c:77:c4:
e0:b0:11:95:50:dd:22:b0:58:a5:82:bc:b9:fd:91:
ed:f1:7f:4c:b7:29:f7:0c:63:3b:13:e2:0a:7e:9e:
8b:12:ca:c7:f5:b6:d8:5b:1b:f8:88:93:52:56:50:
3f:a5:9f:6d:ff:d5:6b:72:bb:ed:0c:fe:85:62:fe:
89:df:07:53:53:81:31:03:92:4d:90:7e:8d:d9:20:
fc:75:5c:71:ac:c6:4c:68:a4:ff:19:83:4a:4b:2e:
40:30:f2:73:a7:2a:40:61:8f:67:49:ad:fc:86:b2:
58:6d:42:b8:bb:0d:cd:eb:57:e1:8c:15:36:fc:93:
49:12:da:31:53:91:ae:72:48:b7:bd:52:07:fa:af:
b8:0c:31:11:2f:bd:cc:b0:59:07:d1:0d:fd:b9:20:
08:04:a7:ee:e5:5c:5a:8d:ae:66:2c:e9:c6:6b:fa:
37:59:f3:7a:29:41:f5:e5:25:60:f7:92:fa:3f:a6:
56:66:ad:10:f8:1d:fa:d4:ef:9b:d2:1a:1d:4a:e4:
55:36:8e:b8:4f:85:e1:c0:67:d2:33:cf:a3:b1:3b:
79:9e:ff:36:f8:07:ba:1c:c4:70:21:e0:7e:fb:92:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:85:72:23:47:F8:23:07:90:00:B4:0E:71:56:62:AA:82:3E:CC:17
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/j4VyI0f4IweQALQOcVZiqoI-zBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.222.228.0/22
Signature Algorithm: sha256WithRSAEncryption
93:68:d3:e2:02:e9:39:bf:30:ce:d9:57:5c:31:40:77:88:8a:
33:94:db:e0:42:31:24:0e:f6:b1:8b:ee:ff:de:bc:db:d6:d4:
90:c2:12:12:70:70:7c:6a:6f:98:dc:61:fd:0b:4c:00:cb:c0:
42:2a:89:c5:fc:7f:70:9b:72:9e:fe:6f:da:23:66:fb:fc:0a:
80:3c:31:cf:85:3e:0c:bd:00:d6:73:0e:96:bf:d3:03:46:09:
0b:c9:91:0d:ae:ea:17:7c:80:a6:19:d5:b4:2c:97:10:f6:af:
7e:77:a8:c7:c8:52:ae:e6:ce:93:8b:32:7c:b9:4e:39:53:9b:
7e:75:47:48:1d:db:4f:56:bf:3e:40:9c:f3:96:23:ee:9f:8b:
6d:29:56:8d:6e:77:2d:75:16:d0:95:02:a7:22:2e:c7:03:c6:
20:83:9e:ed:81:85:96:66:b2:76:da:c2:fe:e6:50:a6:2b:aa:
27:db:d4:9a:14:7b:35:74:a4:f8:c9:3c:8d:74:f3:00:b0:a4:
c6:bc:b6:83:54:8a:25:98:d9:e8:9f:e9:44:a7:76:fb:37:7e:
6d:75:26:8a:4c:0a:a0:1b:c3:5d:c1:ed:9e:4e:28:89:25:e1:
59:8d:62:c5:ba:52:38:b3:37:7f:d0:3a:1c:70:c2:67:2f:5b:
a9:72:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:29 2025 by rpki-client