Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/jO5bZiSM9iArqcz-cyKqRRyKvIg.roa
File: jO5bZiSM9iArqcz-cyKqRRyKvIg.roa (raw, json)
Hash identifier: FIWv1+InFnplSR2O098LeHNs1foklvdF6AfH3ElwdBc=
Subject key identifier: 8C:EE:5B:66:24:8C:F6:20:2B:A9:CC:FE:73:22:AA:45:1C:8A:BC:88
Certificate issuer: /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial: 018570CBD3280DC0DDFABB049B6FB6D19F10
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/jO5bZiSM9iArqcz-cyKqRRyKvIg.roa
Signing time: Mon 02 Jan 2023 04:44:44 +0000
ROA not before: Mon 02 Jan 2023 04:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 212.18.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d3:28:0d:c0:dd:fa:bb:04:9b:6f:b6:d1:9f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Validity
Not Before: Jan 2 04:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cee5b66248cf6202ba9ccfe7322aa451c8abc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:0a:d2:62:a4:30:f8:b0:2f:6f:73:f0:ef:
d8:d0:c3:6f:3f:f1:1b:a4:88:a7:93:ef:29:c0:a8:
29:39:34:c8:33:62:39:1c:84:d5:3d:89:0b:b1:60:
82:01:92:e6:c6:a1:14:72:43:aa:9b:c3:82:61:b8:
77:49:1a:8f:fc:e6:83:67:0b:4d:a1:eb:59:8c:14:
90:a6:ec:35:af:78:37:5f:b0:0f:91:78:04:17:2e:
57:98:62:92:8a:7d:98:35:65:af:1e:2f:41:e4:c0:
fa:ed:e1:00:1f:07:7a:13:33:e4:ed:a7:14:e0:87:
f0:a3:0a:25:ef:9f:07:38:22:71:d1:0a:ea:43:f5:
7b:b2:2e:9e:58:af:db:2f:e8:ce:69:7f:11:25:e9:
1e:ae:63:a7:a5:0a:31:ba:98:a6:19:36:85:d5:44:
81:3f:cb:b7:10:eb:fd:db:68:33:ba:92:8b:64:91:
5e:77:0e:a8:b9:f4:ec:e2:f9:9e:55:b3:30:97:53:
bb:29:32:d9:42:c8:35:32:7b:27:41:ae:fd:5d:2a:
13:5e:7f:6e:d5:90:b4:0a:d5:f5:61:9d:7a:4a:eb:
50:82:c8:52:d5:9b:01:6a:05:5f:f9:9f:d3:af:f4:
ab:50:e9:ec:b5:d9:21:e5:c9:c4:ad:03:02:24:10:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:5B:66:24:8C:F6:20:2B:A9:CC:FE:73:22:AA:45:1C:8A:BC:88
X509v3 Authority Key Identifier:
keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/jO5bZiSM9iArqcz-cyKqRRyKvIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b8:87:96:b6:64:a8:03:e2:b3:9c:3c:41:70:2a:ba:91:55:
14:81:60:dd:0f:60:18:ed:8f:2f:af:78:e3:11:64:79:6e:2e:
db:3a:30:b7:cf:58:72:78:0b:e1:f5:af:50:2a:1a:cc:a2:ff:
a3:43:5e:e9:5d:49:75:70:0a:b8:fb:c3:9b:a3:4d:40:03:80:
8f:3d:b9:f8:d6:a9:00:9d:93:48:a9:45:1b:ed:be:15:03:dd:
f2:ef:1f:f0:87:e0:15:27:f0:07:75:81:06:86:9a:a0:b2:1f:
35:1a:8b:8c:66:51:be:21:b3:43:d0:67:1e:2d:53:2b:df:20:
c1:a9:a8:a0:4b:32:ac:2f:ce:a3:b9:61:d0:ac:f0:78:41:55:
76:86:9b:9d:26:d4:a8:ee:6e:5f:59:8f:54:24:b2:3f:42:d8:
27:d9:0e:cb:f0:3f:6e:63:4d:6e:1a:57:27:c8:c4:df:57:6d:
56:68:c9:d9:6a:60:50:d9:b1:5f:64:5e:6c:08:a1:1a:06:bd:
67:a7:9d:5f:1f:58:4f:90:20:af:a4:8d:1c:b7:8a:f9:d7:49:
49:24:67:5d:1f:82:5f:bb:42:40:72:2a:5e:9d:6a:7e:ae:7c:
b6:c2:c8:3b:10:b0:b1:e1:45:45:d3:06:9a:b8:1c:dd:01:e1:
08:c7:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:47 2025 by rpki-client