Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/_3XFTqO3UKuBHX3ab1wQdyZ8Rb4.roa
File: _3XFTqO3UKuBHX3ab1wQdyZ8Rb4.roa (raw, json)
Hash identifier: vrNTRdjqxRwq6X0LrOd2ltbPN5+ZfjBbfG+hXKK2kOY=
Subject key identifier: FF:75:C5:4E:A3:B7:50:AB:81:1D:7D:DA:6F:5C:10:77:26:7C:45:BE
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50DD93FD
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/_3XFTqO3UKuBHX3ab1wQdyZ8Rb4.roa
Signing time: Sat 01 Jan 2022 16:01:53 +0000
ROA not before: Sat 01 Jan 2022 16:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60420
IP address blocks: 212.243.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356698621 (0x50dd93fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff75c54ea3b750ab811d7dda6f5c1077267c45be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:8b:95:78:c8:de:1d:22:03:45:e3:d7:f0:
54:37:7e:9d:d2:94:93:10:20:d4:78:db:be:bb:90:
f5:d6:91:5e:b4:88:3d:f9:b1:be:f0:69:4c:2c:1f:
6d:f2:20:44:4a:d2:c8:f7:da:6a:28:a0:6c:d9:02:
da:43:c4:3c:f7:dc:7b:e2:28:65:5d:9b:4c:ca:99:
87:98:91:9b:43:86:b1:30:db:0c:d9:2b:85:f8:33:
bc:72:85:fe:33:54:22:df:3c:76:8b:ef:6b:b9:8b:
d2:a3:e4:3b:26:48:67:bb:d4:91:fc:93:38:e2:fc:
57:79:82:58:41:fb:f6:7f:39:57:90:60:72:57:6f:
f4:aa:c0:cc:cf:ae:89:8f:bf:89:04:83:05:d4:bb:
d8:ec:3f:bf:dc:a0:9a:af:94:7a:2b:d6:b6:dd:39:
a2:7b:94:4c:7b:8d:fb:7c:ed:1e:47:1a:6a:8c:56:
f1:3b:04:07:5a:18:b1:b5:07:5c:b6:02:5b:7a:0c:
8b:b6:42:5e:d0:19:ee:8e:e1:c8:d7:6c:c5:31:3b:
64:a6:13:84:4f:c7:41:ed:f0:6e:a2:1b:b7:3f:00:
dd:7c:b0:f8:4b:92:93:89:b5:5c:38:d6:e0:3e:02:
b8:ad:88:89:90:bd:26:b8:7c:67:46:6a:7f:fc:8e:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:C5:4E:A3:B7:50:AB:81:1D:7D:DA:6F:5C:10:77:26:7C:45:BE
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/_3XFTqO3UKuBHX3ab1wQdyZ8Rb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.127.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c7:15:d1:d4:7a:1c:53:fc:4e:33:b0:1c:3b:30:bf:e5:a5:
d9:5a:7a:4b:70:5a:6c:40:c5:a1:9b:33:f1:6d:a4:36:74:52:
ff:2b:1d:8b:fe:7a:68:b3:f9:48:57:e3:12:e4:90:5a:e7:51:
f1:f4:50:5b:83:62:ab:48:ab:3d:60:d6:e4:e6:af:77:50:1d:
6f:73:48:73:1d:38:36:8a:7c:88:54:1e:6e:ef:5f:f3:04:8f:
d0:27:72:07:5c:1c:28:19:e6:58:7b:12:ff:7b:c3:74:93:a5:
f9:a1:43:3b:d1:eb:b8:87:19:27:b2:aa:f3:f9:be:1c:a8:2f:
3c:8f:4f:65:cc:ec:0e:14:87:ad:dd:e1:a0:b9:0f:02:ac:be:
db:38:f6:cc:f3:41:e2:0c:a2:a3:91:db:d8:a2:5d:c8:b0:f2:
33:40:f7:c8:f6:01:35:03:7f:24:e6:a8:10:f5:59:9d:b8:01:
a8:12:c6:65:c9:52:f2:de:2c:97:21:ea:30:5d:46:44:f8:57:
9f:73:1d:18:bc:82:9e:c4:42:df:9a:03:91:81:fc:1c:6a:58:
e9:15:c1:d5:ce:b2:a7:9b:93:cc:fd:b3:0b:97:61:ee:e5:9f:
57:75:cc:46:ab:cd:f1:da:fc:f4:f2:89:ac:ee:da:a7:14:d0:
9e:2f:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:36 2025 by rpki-client