Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/kOuVjc6mqTfjxIeWPXO63HxW1_s.roa
File: kOuVjc6mqTfjxIeWPXO63HxW1_s.roa (raw, json)
Hash identifier: BAG+DsHkIQg4BS3SpwbopIdHX5uL86T2+IXtLdGBcHk=
Subject key identifier: 90:EB:95:8D:CE:A6:A9:37:E3:C4:87:96:3D:73:BA:DC:7C:56:D7:FB
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 01856CC1771E004B6FC133AE18185B702CED
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/kOuVjc6mqTfjxIeWPXO63HxW1_s.roa
Signing time: Sun 01 Jan 2023 09:54:56 +0000
ROA not before: Sun 01 Jan 2023 09:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28851
IP address blocks: 213.250.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:77:1e:00:4b:6f:c1:33:ae:18:18:5b:70:2c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Jan 1 09:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90eb958dcea6a937e3c487963d73badc7c56d7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:5c:ae:dd:f1:56:0f:ff:7d:49:95:2c:d1:
5c:91:e0:1c:e9:ed:61:81:46:0e:ba:eb:24:3b:df:
ae:8e:cc:b2:6d:bb:56:8e:d3:56:4d:e3:e2:ec:55:
91:c9:28:c2:a2:10:ef:85:af:23:cc:80:40:70:21:
33:62:a6:d3:f5:d5:06:c3:79:4c:ee:75:10:4e:68:
27:5d:1f:0e:12:50:57:e4:3b:4e:9b:38:17:f7:97:
b2:5e:d0:5d:c4:1a:28:3d:06:a4:bf:a0:ae:b7:3e:
b4:07:5f:19:b4:3f:2c:d6:d4:a8:e5:1c:2f:06:a7:
83:23:da:92:e6:07:04:ea:e3:2d:7b:4c:3c:85:63:
f9:6a:4c:88:ab:de:65:e0:24:e0:80:25:c8:9d:a0:
55:af:84:46:c3:33:4e:ba:db:be:fe:6a:b2:2f:f4:
e0:74:b9:25:b1:53:bc:bb:86:c0:96:af:d9:cb:fc:
ce:21:a2:9f:19:81:49:34:71:4d:2e:bc:8f:33:73:
d9:9f:e6:93:1b:46:16:10:42:b1:2d:c1:65:6d:07:
fe:53:de:28:b6:3c:f1:1a:41:49:78:e6:ac:c1:06:
74:6e:dd:89:d0:c0:9b:66:74:3f:c5:38:f8:d0:4a:
d7:1c:a2:52:4d:d3:e7:de:ce:c4:cc:ee:32:2d:97:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:95:8D:CE:A6:A9:37:E3:C4:87:96:3D:73:BA:DC:7C:56:D7:FB
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/kOuVjc6mqTfjxIeWPXO63HxW1_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.250.192.0/18
Signature Algorithm: sha256WithRSAEncryption
16:c6:a9:56:c7:f3:70:54:1f:68:77:66:62:a9:7d:73:4f:0d:
eb:06:ba:94:8a:a8:4b:cf:60:00:d9:53:ac:0d:f0:4d:dd:c6:
db:db:db:06:61:78:b5:2f:6a:ba:1d:ce:87:9d:98:c8:f7:1f:
47:62:1b:86:28:18:63:91:6d:24:da:5e:69:ed:e5:e0:7b:3c:
8d:32:50:22:5f:f3:17:03:96:fd:bf:e5:38:85:6e:a7:1e:ff:
80:10:65:5e:0a:f1:04:a5:aa:5f:6e:62:a8:a5:68:18:24:86:
d5:4b:eb:6a:c1:2c:97:20:76:d0:52:c4:54:a1:64:d8:c1:17:
f2:6a:2f:5f:33:8a:8f:75:2c:d8:7a:d3:81:9b:b1:9f:2b:80:
3c:0a:c3:d2:87:fe:eb:d7:55:60:11:44:da:46:35:ce:86:2d:
21:41:53:8f:7c:6e:07:68:05:90:66:e7:5e:5f:04:06:e0:51:
96:b3:b3:8b:ec:8b:5a:60:3f:5c:d8:09:41:c9:f7:8d:ba:84:
16:07:49:32:fc:59:7c:0b:9a:f4:39:c3:5f:27:bb:4e:3f:c4:
14:46:39:05:dc:c2:5b:fc:4d:ab:9f:5f:68:1f:e3:55:9a:ee:
bd:e0:00:08:ee:8b:74:8c:39:da:05:29:b9:fe:8f:8c:fb:c6:
49:a2:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:49 2025 by rpki-client