Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/Rn_LWQ2zz5B8vjjfKTky5iJRG5I.roa
File: Rn_LWQ2zz5B8vjjfKTky5iJRG5I.roa (raw, json)
Hash identifier: pk0WhtgzYfR29YT2jbmKOU7O0fKCsd1eEEBRxha1qXM=
Subject key identifier: 46:7F:CB:59:0D:B3:CF:90:7C:BE:38:DF:29:39:32:E6:22:51:1B:92
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 0188B344B0AAAE6EF84F2080010547EA0FA5
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/Rn_LWQ2zz5B8vjjfKTky5iJRG5I.roa
Signing time: Tue 13 Jun 2023 05:40:03 +0000
ROA not before: Tue 13 Jun 2023 05:40:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203394
IP address blocks: 212.79.125.0/24 maxlen: 24
212.87.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:44:b0:aa:ae:6e:f8:4f:20:80:01:05:47:ea:0f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jun 13 05:40:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=467fcb590db3cf907cbe38df293932e622511b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:89:3b:35:1b:1f:6c:6e:4f:92:2e:66:15:
1e:94:ff:45:88:6c:38:82:a6:4a:f0:f7:bc:b0:1e:
29:2a:98:2c:2a:9c:c9:b8:a6:6a:8a:36:dc:e6:6f:
69:b4:3b:4c:6b:30:1d:dd:1a:51:49:b6:69:87:2e:
47:a4:69:4b:16:2a:6a:c6:10:36:f6:a7:bb:99:00:
62:8a:e1:16:d3:82:a3:de:8b:da:25:d6:b3:98:1e:
41:97:ec:81:f5:73:d4:53:b8:15:58:f7:2e:e2:8a:
99:9e:c2:af:b0:48:7d:c2:f2:5c:2a:b8:79:d8:86:
fb:3c:9f:29:eb:4f:f1:46:e7:30:a1:82:35:85:bc:
fe:65:3c:cd:34:a3:d3:96:80:b0:85:36:00:27:2b:
62:66:cf:fd:73:54:48:34:53:ec:79:fa:9f:aa:12:
9e:d5:3f:82:ee:22:6c:a0:9a:45:ce:a4:19:14:53:
ad:35:b0:cf:59:d0:fa:f0:26:f1:90:82:cf:e6:8b:
03:a6:79:5b:a8:7f:85:35:f8:7b:e0:d7:61:a4:e0:
e4:5b:a5:8d:ac:8b:38:dc:d1:4e:bb:25:58:9e:59:
59:cf:48:e1:ba:aa:32:0a:b4:28:9c:c3:f4:5b:05:
cf:b1:0f:db:63:29:5b:d1:c7:ed:71:f1:2f:91:a8:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7F:CB:59:0D:B3:CF:90:7C:BE:38:DF:29:39:32:E6:22:51:1B:92
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/Rn_LWQ2zz5B8vjjfKTky5iJRG5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.79.125.0/24
212.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:01:eb:fa:cd:9e:48:26:75:ba:75:a7:63:3e:c3:f0:be:63:
07:4f:28:98:a2:58:11:5d:8c:46:26:ac:a7:d6:60:76:30:c2:
f2:99:74:ff:40:61:74:58:1c:61:4f:f0:0b:6f:bf:42:a9:c3:
4c:46:5b:ec:47:92:3b:d4:eb:fd:20:d4:e0:67:48:a3:d8:a4:
73:6c:66:7c:23:be:c4:6e:f2:c4:54:10:af:ba:df:65:77:16:
27:5a:97:42:2a:7c:7f:1b:fb:20:4d:9b:ec:3a:cb:2f:4c:a7:
91:71:b4:8c:53:6c:eb:8d:25:bd:d5:ca:0f:66:fd:fc:cb:08:
bd:b7:b9:ac:b0:cf:8e:a0:d8:16:ec:a4:e6:60:92:d5:be:9e:
3d:42:4e:4b:cc:6e:64:fc:d1:03:79:bc:f4:24:33:71:cf:94:
0f:1c:3c:e2:d2:9c:1a:9a:02:0c:8a:51:99:58:39:d7:bb:c9:
2c:c5:84:d9:99:3a:dd:f7:7a:b4:89:f7:3d:be:08:ce:af:d1:
c3:2b:a4:92:ee:61:67:dd:7b:c1:e7:91:05:97:e1:6b:b1:cf:
f5:f3:35:11:51:1e:76:7c:7d:c3:a0:7a:af:0b:5c:0e:7f:c0:
57:e0:82:ee:99:69:3c:5c:25:ef:b5:b0:38:54:d5:83:96:7e:
63:1d:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:35 2025 by rpki-client