Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/k0G111aKjONPfKAVHR1Hi6ZkxBc.roa
File: k0G111aKjONPfKAVHR1Hi6ZkxBc.roa (raw, json)
Hash identifier: YH94hjzMqV7qffE6Vzx5sqEgWpqt2xDaHGoCc8eqW5Y=
Subject key identifier: 93:41:B5:D7:56:8A:8C:E3:4F:7C:A0:15:1D:1D:47:8B:A6:64:C4:17
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 371D5BF0
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/k0G111aKjONPfKAVHR1Hi6ZkxBc.roa
Signing time: Sat 01 Jan 2022 14:07:47 +0000
ROA not before: Sat 01 Jan 2022 14:07:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47448
IP address blocks: 213.187.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924670960 (0x371d5bf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Jan 1 14:07:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9341b5d7568a8ce34f7ca0151d1d478ba664c417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:71:b0:cb:2f:85:71:02:e1:af:9f:de:c4:
26:a7:c7:46:c5:2d:52:82:ad:16:ce:13:1c:b7:b0:
4a:14:2c:55:cd:7d:9b:6e:ad:10:aa:f7:1d:d1:11:
fe:ae:16:27:c5:bd:1b:f3:e4:c5:45:09:08:ff:1f:
7e:3b:25:97:ef:b7:cb:7d:a7:6b:93:62:99:9f:e4:
c2:88:85:c5:b1:80:94:cf:cd:0c:5b:9f:25:c9:c4:
fd:9d:20:ee:92:cd:fe:fb:c5:8e:93:9c:bd:9e:e0:
7a:77:27:43:37:51:66:b1:f1:25:56:6f:7d:44:b3:
bc:07:d7:27:d6:d7:d3:77:ab:1e:67:8b:5a:d4:2f:
ef:01:b7:aa:d9:d9:41:61:cd:c4:8c:cf:b3:10:6a:
3d:8f:db:d5:24:a1:aa:ab:f3:80:49:87:52:28:3a:
94:44:9e:ad:b7:1d:44:c5:3a:1d:5c:e1:b2:ff:2e:
d3:0c:cd:b7:47:06:8f:ba:3e:c3:17:e3:10:40:d7:
d7:e3:d1:c4:c0:26:ee:91:dd:e2:73:23:b7:34:bd:
d1:a4:79:06:0d:7f:35:35:62:52:c2:96:81:e3:7b:
d9:28:48:bc:1e:2b:1b:b8:1a:a5:7d:62:bb:1e:69:
ce:f7:c9:46:dc:70:2f:0f:62:5e:50:ab:cc:6c:ce:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:41:B5:D7:56:8A:8C:E3:4F:7C:A0:15:1D:1D:47:8B:A6:64:C4:17
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/k0G111aKjONPfKAVHR1Hi6ZkxBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:35:d6:37:16:cd:07:ca:8c:ce:bd:c2:05:71:e5:a0:b9:04:
d7:31:c3:03:ae:a6:42:d9:af:d8:47:62:b0:0d:f5:38:ba:ed:
14:d8:b1:8b:ed:bf:3d:f0:4e:98:fc:85:15:a8:ae:cc:12:95:
70:ad:be:a5:8c:88:7f:7c:dd:b5:9e:e6:ac:41:fe:bc:d0:35:
86:20:7a:d7:ab:9c:89:ba:03:13:4f:d3:98:61:c2:f5:ec:83:
fb:ab:ec:d2:cd:09:9f:a0:f5:a1:1c:6d:cb:f5:13:02:87:41:
63:dc:5f:74:c9:f2:38:87:4b:f7:d2:30:6d:e9:e4:cf:c0:fc:
a4:3d:c8:84:54:56:51:b4:34:6a:0e:94:e0:e8:24:a2:a2:38:
75:29:1d:6f:8f:ca:17:c8:5a:e4:1a:31:35:ee:61:9d:ca:fd:
0b:4e:0c:03:95:75:97:86:23:64:5a:27:64:5f:e6:c6:af:16:
1b:d8:56:c8:9c:7f:cd:36:c8:74:1b:66:35:81:b7:74:ee:9f:
8d:8b:09:1a:5f:0f:41:7b:29:d2:30:1a:c6:2e:8d:88:80:00:
6c:ea:28:31:fc:83:32:c5:94:b2:6e:46:48:6d:82:5d:ae:d4:
9b:5a:c5:67:7f:1c:09:ca:b5:a4:1f:a1:9d:5b:ac:39:ca:d3:
88:1d:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:18 2025 by rpki-client