Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/IWcmoPgNevLMJ5LujUaYAgzP1AQ.roa
File: IWcmoPgNevLMJ5LujUaYAgzP1AQ.roa (raw, json)
Hash identifier: padzNWb2MGW3bH3673RTsEN2dO/y0S1gP5MjRbafCIY=
Subject key identifier: 21:67:26:A0:F8:0D:7A:F2:CC:27:92:EE:8D:46:98:02:0C:CF:D4:04
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0188EA5E1FB93AD72C1BE3F5404FA0BD1EEA
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/IWcmoPgNevLMJ5LujUaYAgzP1AQ.roa
Signing time: Fri 23 Jun 2023 22:26:57 +0000
ROA not before: Fri 23 Jun 2023 22:26:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 212.116.226.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ea:5e:1f:b9:3a:d7:2c:1b:e3:f5:40:4f:a0:bd:1e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 23 22:26:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=216726a0f80d7af2cc2792ee8d4698020ccfd404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:94:96:b8:79:ca:1c:0e:ad:5e:26:01:1c:
72:72:9f:19:1b:ed:ff:5c:bc:17:57:74:4e:93:f4:
49:46:ce:28:18:d1:14:19:c8:ff:29:e6:9e:dd:ab:
d4:fa:31:89:6b:6a:1c:e2:3c:47:5b:7c:05:6a:9e:
31:0b:b8:a8:cd:12:b7:a6:3b:ff:d3:b5:02:11:15:
c9:e6:9c:84:f7:cb:07:16:bd:83:81:23:77:54:36:
ed:16:67:ee:8e:78:df:2f:07:67:4a:59:11:bf:9b:
3e:f7:05:5f:3f:93:ca:d8:61:0e:9f:75:6a:a6:63:
59:ee:80:9d:af:ea:95:8a:21:29:5d:7f:69:00:c0:
0c:48:ae:fd:de:14:72:ab:a7:38:01:78:56:5b:06:
f4:f7:a4:67:83:db:2c:2c:80:02:35:c3:28:d2:95:
5a:cb:31:9d:5e:67:b7:cf:b1:3f:c7:1a:d0:c7:1d:
49:70:3f:17:b9:87:74:c7:31:80:da:c4:bb:29:84:
33:c5:0d:c9:6f:b9:99:d7:c4:09:0b:1b:30:da:b0:
45:56:14:6e:3d:53:73:eb:00:d8:af:17:89:13:15:
d5:15:a0:7a:18:90:fd:82:b3:42:0b:d7:00:64:e7:
21:06:55:ec:b1:87:7e:02:25:8c:ab:d5:46:c7:54:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:67:26:A0:F8:0D:7A:F2:CC:27:92:EE:8D:46:98:02:0C:CF:D4:04
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/IWcmoPgNevLMJ5LujUaYAgzP1AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
Signature Algorithm: sha256WithRSAEncryption
77:22:e2:21:7a:e1:c0:2f:0d:8e:ea:35:8c:10:ab:88:80:d5:
d9:2a:88:c3:53:2e:be:5b:fa:a3:4f:d9:35:16:67:ed:ea:20:
f1:c1:86:13:3a:04:a9:30:8c:af:30:39:e9:41:91:02:90:e6:
0f:83:4a:27:82:29:c0:1e:fa:52:19:a7:05:9e:cb:9b:7a:49:
6a:28:31:63:ec:c6:1c:4c:69:27:a4:94:65:7d:35:a6:e8:f7:
74:fe:c8:27:14:51:9d:1e:dd:4b:83:90:d8:0d:99:8e:07:ee:
73:4f:8f:ce:2f:d3:df:17:ca:88:93:45:5a:10:54:c4:31:0b:
21:49:02:f8:88:9f:b5:1c:c3:70:aa:18:01:91:00:c7:74:88:
6a:72:3d:21:8f:40:8f:7b:f2:61:1b:5c:2c:5c:df:f3:47:9f:
ea:07:78:a9:73:81:a9:7b:5d:0d:fc:8e:7c:73:e7:f5:0e:6e:
22:eb:21:2e:c6:ae:a4:b7:ce:f0:c5:85:ed:df:68:f3:ca:a2:
9c:bc:50:82:f4:cf:a1:eb:00:52:1b:ff:cc:7d:df:a1:13:95:
10:3b:f4:88:a5:07:90:8f:54:41:7c:47:8d:a4:2c:06:bc:92:
eb:9c:27:08:6b:56:39:cb:d4:32:95:6b:a2:9b:e0:9c:b7:33:
17:88:ef:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:21 2025 by rpki-client