Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/IsuXML6KZatOxrFgRnBeXXyryoc.roa
File: IsuXML6KZatOxrFgRnBeXXyryoc.roa (raw, json)
Hash identifier: BzabxquQKIeJvs8rG+blKLmum0CNYHB5q3f56uSUqbw=
Subject key identifier: 22:CB:97:30:BE:8A:65:AB:4E:C6:B1:60:46:70:5E:5D:7C:AB:CA:87
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 018A6F72E17A379944D1C556258EB8E22FFE
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/IsuXML6KZatOxrFgRnBeXXyryoc.roa
Signing time: Thu 07 Sep 2023 11:41:54 +0000
ROA not before: Thu 07 Sep 2023 11:41:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 212.114.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:72:e1:7a:37:99:44:d1:c5:56:25:8e:b8:e2:2f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Sep 7 11:41:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22cb9730be8a65ab4ec6b16046705e5d7cabca87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:57:1f:63:95:06:5b:9f:9c:56:35:93:6d:bd:
e7:60:0a:13:bc:b8:1d:56:ea:e2:23:1b:8a:64:e4:
d2:c1:d9:0f:c3:53:78:70:63:fb:23:f1:77:aa:9f:
84:d7:d7:a8:fb:b6:f2:c9:2b:15:af:ef:5d:bc:57:
b7:e5:16:a5:ce:5f:c9:6a:5a:86:b7:3d:9d:2d:15:
fb:d4:23:b7:99:37:0d:96:5f:3b:46:56:29:e9:0d:
26:15:59:6d:22:fb:d5:f0:78:0d:59:42:0e:08:66:
87:2a:20:38:e2:a7:be:ff:23:5c:be:a7:75:95:2e:
58:b0:be:bf:0a:ab:14:70:ac:b7:b0:47:be:73:66:
e0:83:f5:9e:cc:ed:51:e2:ce:bd:ee:ea:e4:56:f0:
32:90:0f:ed:1a:e3:30:08:65:ab:75:dd:32:1e:b0:
4c:b7:95:8b:67:b0:3b:a8:f8:2c:6a:1a:ef:fa:96:
34:51:f1:50:2b:43:16:7a:65:02:4d:9e:c2:ab:85:
45:ef:0a:58:7d:53:17:a0:20:6b:10:83:d4:2b:8f:
c6:63:75:02:51:1a:24:0f:94:52:6d:03:3e:93:22:
a4:84:57:ec:b0:74:f3:09:2a:2f:e1:28:8a:46:13:
5f:58:ff:44:bd:fc:bc:aa:30:cf:7c:d1:69:f0:71:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CB:97:30:BE:8A:65:AB:4E:C6:B1:60:46:70:5E:5D:7C:AB:CA:87
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/IsuXML6KZatOxrFgRnBeXXyryoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.114.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:bc:b6:ac:1d:44:ef:54:9d:65:c3:46:02:3e:31:9c:b5:61:
f3:4e:78:1b:0f:85:df:27:72:6b:e6:da:ee:fe:95:70:21:55:
a6:9e:1e:b6:6d:6c:20:32:0f:8f:c4:14:e2:c7:26:cb:09:0c:
b4:e0:61:75:88:74:46:c8:b9:97:cb:63:cb:b6:ff:1c:d1:6e:
98:99:f8:39:bc:c8:6f:8a:c0:38:76:1b:80:7d:66:e5:50:e1:
ed:ba:75:79:1b:54:e0:7f:6e:e9:75:01:b1:23:e9:a3:9d:77:
4f:f4:04:83:a1:64:5f:e2:c4:c8:3b:ad:ea:6b:d2:45:4f:fa:
06:33:a1:63:11:36:1d:6e:52:6f:62:77:cd:19:9e:80:f6:d6:
f7:7b:73:34:75:21:40:17:af:96:84:ee:4d:20:07:bb:b7:cd:
d8:a5:ed:52:a9:e8:4a:b3:8d:39:46:7e:ab:6d:92:46:77:02:
79:4d:83:17:51:97:50:8b:ed:cd:fd:a4:46:63:a4:ab:da:84:
88:3b:16:26:ff:77:60:0c:1a:37:ed:0d:87:b5:86:ad:fc:c7:
be:15:cf:6f:88:cb:55:59:2e:dc:6c:b6:5c:d0:61:8a:e9:b5:
12:f2:bc:81:a7:4a:cc:ad:7c:c4:71:50:41:1f:f7:f7:bb:17:
6a:96:2c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:48:56 2025 by rpki-client