Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/Q1Dpbareyy4YkfZ7wN4f9OU5xlI.roa
File: Q1Dpbareyy4YkfZ7wN4f9OU5xlI.roa (raw, json)
Hash identifier: hQbmozaGKmsrqdkGZZW4OO5z7K9tYKfLcl2ysYWcNPY=
Subject key identifier: 43:50:E9:6D:AA:DE:CB:2E:18:91:F6:7B:C0:DE:1F:F4:E5:39:C6:52
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 01858671F8C9FA97627279A5ECC1063736F0
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/Q1Dpbareyy4YkfZ7wN4f9OU5xlI.roa
Signing time: Fri 06 Jan 2023 09:38:14 +0000
ROA not before: Fri 06 Jan 2023 09:38:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203971
IP address blocks: 213.154.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:71:f8:c9:fa:97:62:72:79:a5:ec:c1:06:37:36:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Jan 6 09:38:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4350e96daadecb2e1891f67bc0de1ff4e539c652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:ea:51:9e:40:d5:ca:7d:10:f5:b4:c3:b3:
a5:54:7b:61:bf:c7:7c:a0:40:5b:8d:1f:98:28:45:
b2:03:da:6e:4b:62:a1:fa:fd:33:90:d3:c1:99:3f:
d3:0b:ce:be:7d:c0:10:98:d0:c4:03:1f:76:92:e8:
36:10:82:cf:66:c5:85:4e:65:72:23:85:69:9e:fa:
11:b1:7f:f1:07:30:e6:cf:df:3a:9b:7f:d9:a2:6e:
f6:5f:63:06:7a:41:8c:11:ad:b1:68:b3:35:42:4b:
fd:2e:f7:7a:10:cb:68:68:aa:b8:e8:b0:5f:e1:a4:
dc:1f:b1:5b:b3:29:62:f7:f6:58:7a:8c:c1:5e:9e:
8b:cb:5f:f0:6f:b3:c7:a2:db:52:f4:b9:c5:36:d1:
a7:ce:ec:11:02:03:af:64:77:25:3f:6e:65:c5:23:
be:b9:6e:eb:55:19:f9:12:bb:75:6f:13:08:0e:a1:
45:14:ff:ce:eb:41:5d:bd:23:f1:8d:14:89:d9:79:
64:df:cd:d8:51:e9:b1:20:95:d1:e1:7b:6c:29:b0:
d0:27:c4:f5:c8:26:ad:96:31:1b:c8:8a:74:59:14:
64:05:f7:03:27:f6:14:46:7a:23:28:0a:da:ce:bb:
95:5a:c0:49:3d:86:fa:f1:14:b2:4c:0f:52:04:dc:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:50:E9:6D:AA:DE:CB:2E:18:91:F6:7B:C0:DE:1F:F4:E5:39:C6:52
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/Q1Dpbareyy4YkfZ7wN4f9OU5xlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.154.24.0/22
Signature Algorithm: sha256WithRSAEncryption
33:8a:92:d7:c3:ec:08:da:da:2c:35:3b:01:7c:3c:2a:e9:11:
fa:05:92:bd:9f:ec:97:9f:9a:90:ef:2f:bd:28:cd:ab:96:51:
16:04:de:be:f3:6f:ed:9d:da:3e:54:2f:2b:bf:91:24:d7:f0:
63:79:52:a0:5f:63:a9:7c:50:f1:84:b7:eb:45:91:37:9f:af:
82:d7:a9:2b:b9:33:48:19:d5:cc:ad:68:c6:f6:21:b0:38:27:
f6:a1:50:f3:33:53:05:3f:34:5f:ff:e8:fd:3d:91:50:c9:ab:
54:e2:12:29:aa:2a:a4:c6:39:5c:db:b5:6a:ea:96:35:88:d5:
16:af:65:b3:3e:a4:b5:2b:fa:df:d2:c0:7e:92:d6:14:a4:4a:
d7:d5:cc:88:c4:1a:22:c1:22:9a:e3:ca:cd:e0:96:95:e7:bb:
a0:3a:90:e2:2a:31:67:d6:89:10:fd:48:c6:2a:bf:de:fc:0f:
a0:fa:d7:97:bc:9d:0d:c1:d1:73:66:16:98:4e:99:2d:c7:3c:
1e:7b:cc:dc:4e:12:f6:da:72:ee:80:72:89:07:4d:aa:7b:11:
fd:17:8e:16:2e:fc:8e:a9:b0:22:1e:37:94:95:44:9f:4e:53:
51:de:21:ff:35:f4:ac:c5:8c:31:cb:7b:20:74:48:2b:9c:53:
e2:d4:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:16 2025 by rpki-client