Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Rldv--SXpDINhB1Pd1idO_QnMFI.roa
File: Rldv--SXpDINhB1Pd1idO_QnMFI.roa (raw, json)
Hash identifier: +//Zd7RdL7vDOSeh1UyKotrZT8FHdV0If0qD+T9uaT8=
Subject key identifier: 46:57:6F:FB:E4:97:A4:32:0D:84:1D:4F:77:58:9D:3B:F4:27:30:52
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AAD5345641FFD4331290C6F24344E29E4
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Rldv--SXpDINhB1Pd1idO_QnMFI.roa
Signing time: Tue 19 Sep 2023 12:03:50 +0000
ROA not before: Tue 19 Sep 2023 12:03:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43519
IP address blocks: 213.248.254.0/24 maxlen: 24
2a01:618:404::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:53:45:64:1f:fd:43:31:29:0c:6f:24:34:4e:29:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 19 12:03:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46576ffbe497a4320d841d4f77589d3bf4273052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:dd:6d:16:be:12:76:31:82:d5:82:f1:b2:
e4:5c:81:ae:f1:aa:3c:b7:13:2e:fc:5f:43:ff:ea:
71:81:f4:ff:2f:99:01:42:60:9f:e0:40:2a:7e:5e:
49:30:29:ff:be:85:a2:5a:aa:36:8a:b9:7c:2f:e8:
9f:ae:a5:a9:11:48:21:e0:e4:fc:c2:c4:eb:4d:6c:
d8:08:b7:69:72:17:0d:d6:64:b5:b0:18:7b:62:5c:
73:01:86:e3:9b:ed:97:7e:e0:98:62:60:f8:eb:4a:
cb:34:98:e6:f3:53:a6:1e:02:93:24:2e:10:46:54:
18:82:7d:5f:9f:92:09:9e:fe:78:5f:96:98:3d:a6:
7e:e4:20:d8:b5:33:a0:07:ae:2d:53:cd:33:78:37:
53:1a:94:5e:13:e2:ed:e9:3f:b6:d9:8e:cc:de:d1:
a7:ec:98:5c:ee:63:63:45:e1:2a:fc:6a:ac:bf:34:
89:50:ac:d2:32:6a:b4:8d:b1:7a:a8:da:f5:fe:56:
68:6d:fd:0e:9e:a7:88:3f:a5:d1:b9:ce:a4:4d:cb:
ce:e2:7b:b4:62:6a:05:f1:0b:90:7f:99:77:54:16:
39:61:81:84:eb:dc:87:e8:ac:7c:75:45:5f:fb:cc:
2f:a3:88:b7:73:d7:c4:e0:44:db:a0:c2:c0:03:e6:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:6F:FB:E4:97:A4:32:0D:84:1D:4F:77:58:9D:3B:F4:27:30:52
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Rldv--SXpDINhB1Pd1idO_QnMFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.254.0/24
IPv6:
2a01:618:404::/48
Signature Algorithm: sha256WithRSAEncryption
75:eb:bc:73:99:df:3a:d7:cc:bc:d2:b0:b3:2e:86:28:fa:58:
cc:14:6b:18:b5:39:b6:31:52:ef:be:62:b5:36:96:e3:37:66:
a4:7c:90:2b:63:38:fe:46:b2:fa:17:64:0b:f0:c7:ec:83:15:
e2:52:84:09:12:e7:33:69:f5:ae:28:70:26:4d:10:53:71:29:
c5:fb:49:5c:c5:28:67:56:6e:05:27:6c:63:4a:7d:e4:ce:7e:
9b:29:73:53:f8:5c:58:f2:ba:10:7a:db:31:09:c6:05:2b:8d:
1e:b1:01:c0:9b:26:52:a6:57:b6:23:cb:93:7a:f9:fc:26:52:
d2:aa:4d:5e:1c:26:d9:49:4c:42:76:df:cc:4f:bf:8b:38:e8:
41:e5:6b:62:1e:77:99:e4:03:72:79:5f:2c:b3:53:c9:0c:d3:
11:83:50:46:d1:1b:14:6d:75:55:f7:97:70:2f:b8:7b:7a:bc:
74:db:e4:be:e9:4d:d2:dd:8a:77:71:3e:ce:93:96:8f:0f:f6:
15:7b:9f:45:7f:a1:0f:52:83:f6:6b:0e:51:b7:fd:3b:53:05:
22:32:62:d6:36:1e:fb:9b:a6:66:54:85:5c:fa:9b:69:b5:43:
18:db:db:9f:6c:d0:33:69:84:a4:cf:ac:23:09:4f:07:70:32:
38:d7:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:19 2025 by rpki-client