Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oVq6DRlh_rAvAP7b-Fh6GssadIA.roa
File: oVq6DRlh_rAvAP7b-Fh6GssadIA.roa (raw, json)
Hash identifier: hH5tP7iUWhEtE3dYY9/OFbCMfju/KB1bi3In1acS/Yk=
Subject key identifier: A1:5A:BA:0D:19:61:FE:B0:2F:00:FE:DB:F8:58:7A:1A:CB:1A:74:80
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50DF62DB
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oVq6DRlh_rAvAP7b-Fh6GssadIA.roa
Signing time: Sat 01 Jan 2022 16:01:54 +0000
ROA not before: Sat 01 Jan 2022 16:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199225
IP address blocks: 212.243.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356817115 (0x50df62db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a15aba0d1961feb02f00fedbf8587a1acb1a7480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:28:40:9b:e6:46:13:65:d2:0b:23:36:b1:
b5:74:16:b2:f8:3d:42:ca:05:a5:26:05:d7:e9:e9:
74:9e:6a:d9:35:e7:c1:7b:25:df:62:e1:c5:cd:c5:
f9:77:88:ab:a5:60:3d:36:a8:6b:ed:31:f8:f8:2f:
84:a9:30:8c:05:32:7d:15:c7:5d:31:f4:06:a6:19:
d4:99:f2:c9:d6:04:15:4c:7c:30:a0:8e:d3:66:14:
1d:ef:2d:e1:4e:ef:16:81:da:0c:f5:ed:63:a7:14:
86:e6:0c:4d:21:94:66:d5:31:06:54:7e:c0:45:72:
2a:59:b8:d6:6a:e5:51:d7:94:64:fd:57:46:44:2e:
ba:d9:01:88:10:7d:14:61:a1:fe:96:05:c3:6a:0b:
61:26:88:83:79:d7:70:6b:23:df:00:dd:fc:46:11:
7b:2c:ee:9f:60:4a:6e:2d:03:aa:e1:03:b2:8d:97:
81:6e:d4:24:ba:c7:e8:0c:5c:00:9c:78:2d:4e:d7:
14:7d:c7:cd:c7:c2:96:bc:77:a7:0b:21:75:59:06:
f6:4c:0a:56:53:75:3c:9c:4e:76:a3:bb:a3:af:b0:
ce:ae:58:3e:6a:23:b3:7b:a0:75:bf:b8:59:06:8e:
6e:a0:e0:65:81:01:58:83:d9:42:9b:bc:17:3a:56:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5A:BA:0D:19:61:FE:B0:2F:00:FE:DB:F8:58:7A:1A:CB:1A:74:80
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oVq6DRlh_rAvAP7b-Fh6GssadIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.123.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2e:53:22:4d:91:13:d3:59:07:27:37:d8:b8:57:c4:1d:ea:
79:0f:05:62:32:1c:37:81:34:1d:9b:52:0c:fe:18:e8:e5:4d:
6c:5e:de:57:57:40:49:e5:10:67:79:10:5b:4c:d9:92:c3:06:
39:53:c7:e3:9d:a3:d6:7f:98:5a:c7:ee:b1:6d:12:21:b3:5c:
57:f2:74:ec:c4:64:87:71:fe:47:df:0b:a8:90:db:94:78:f8:
b8:c3:b7:72:0d:8a:ba:9c:ae:c0:52:20:78:48:4f:de:63:5e:
ef:b5:97:99:e0:b0:23:1c:be:3e:ac:5c:8f:17:6d:f2:fd:42:
85:1e:32:cd:a5:eb:27:90:97:55:86:1b:17:c3:36:7b:36:60:
1d:15:b1:f0:ee:26:51:ff:51:33:8a:1e:cd:26:00:96:fc:cf:
73:f1:59:5b:f5:f3:1b:3a:a9:cb:4f:f6:9a:d5:a0:37:94:fc:
ce:b9:c6:b9:75:3d:f8:5c:71:4b:cc:cc:4f:c8:e1:2f:8e:24:
fc:11:bf:ff:70:87:c0:c5:33:90:82:c5:42:97:f9:6a:ca:8a:
e4:ff:72:63:64:f9:3d:3f:73:81:7e:0f:d0:98:29:4f:6e:64:
a1:db:0b:b9:1e:17:5c:2c:15:66:a5:94:4d:4e:e7:a1:7e:5e:
5b:a6:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:40 2025 by rpki-client