Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/G3EdrX-i2j_b2wUvZDcKJBzfGas.roa
File: G3EdrX-i2j_b2wUvZDcKJBzfGas.roa (raw, json)
Hash identifier: 2T2setMiUQIo7xOnQ0qRyo8wieZdCQhuWayxPK9Lum4=
Subject key identifier: 1B:71:1D:AD:7F:A2:DA:3F:DB:DB:05:2F:64:37:0A:24:1C:DF:19:AB
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 0404A21A
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/G3EdrX-i2j_b2wUvZDcKJBzfGas.roa
Signing time: Sat 01 Jan 2022 01:52:31 +0000
ROA not before: Sat 01 Jan 2022 01:52:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59851
IP address blocks: 87.118.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67412506 (0x404a21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b711dad7fa2da3fdbdb052f64370a241cdf19ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:1a:5d:80:e3:8c:72:6c:73:b5:02:d3:99:
f5:f0:c2:fb:95:14:da:36:3f:86:c5:13:23:3b:53:
af:45:03:bc:41:38:02:e4:7e:17:50:5a:12:78:46:
02:fa:6d:e5:69:64:fb:0e:a1:b5:d0:71:c9:cd:69:
c9:3c:a2:0e:b3:26:e0:ef:d6:11:b2:2f:b8:0b:01:
2e:f3:0b:1c:e8:a6:a9:24:53:4e:8e:d6:d6:ea:2d:
12:06:9f:a2:a1:35:67:a9:89:50:cc:e7:59:21:c8:
30:14:97:cf:80:6c:57:a4:68:dc:11:35:45:a4:63:
d3:f6:f9:b1:26:d1:46:30:cf:1a:cb:f8:0c:b9:02:
da:62:5c:1d:cc:a1:b8:b0:8c:d5:7c:b1:84:26:08:
68:36:0e:90:36:f1:4e:34:72:15:65:d3:55:ce:e7:
4d:53:1f:26:3c:c0:20:65:e1:c2:03:0a:e5:73:fd:
9c:43:99:11:22:ed:6a:b2:75:80:97:ce:44:7e:b0:
ec:11:56:b9:bd:26:62:e5:8f:bd:3c:2d:c3:da:8b:
26:e4:d5:55:83:ae:c1:5c:c2:65:1d:f7:1a:dc:4d:
56:19:72:f4:a8:46:2f:46:af:9a:d8:a2:df:a6:dc:
8a:5f:ae:a7:25:4c:81:08:fe:1c:3a:01:13:8d:28:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:71:1D:AD:7F:A2:DA:3F:DB:DB:05:2F:64:37:0A:24:1C:DF:19:AB
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/G3EdrX-i2j_b2wUvZDcKJBzfGas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.135.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6e:f3:ca:f0:ce:20:62:54:57:42:38:4f:85:b8:e2:65:07:
3c:af:d4:f2:9e:81:86:c4:c7:3e:1c:ab:84:96:b8:ac:0a:d2:
d8:12:d2:e7:24:b0:e0:9e:b1:44:5e:58:4a:6d:77:db:70:b9:
b6:d1:3d:f6:89:2a:14:e0:f3:18:1b:af:19:f3:56:b0:bc:15:
49:60:bd:42:18:5c:c4:58:58:e3:0d:aa:ff:cc:22:9c:c0:d0:
c0:ac:0e:57:31:80:f0:15:c7:99:9f:97:da:54:27:da:73:5a:
cc:a0:28:e8:c3:3f:36:81:b5:14:a6:a3:d4:c7:f7:5f:a2:01:
f4:93:dd:1e:1e:ad:c7:e6:57:7d:d2:45:1b:fe:e8:3d:0b:22:
e0:8d:1c:7d:c2:ba:b8:8a:88:ad:68:fd:b3:bc:ba:bb:1f:ad:
47:10:7d:41:73:ec:e5:3b:29:d7:1b:b9:62:a6:a4:a9:8d:8c:
64:f1:be:d6:b7:52:c6:05:b9:bf:9b:63:ab:0e:4f:e9:cc:da:
7b:ab:8f:fe:74:e6:21:c8:6e:58:f3:fa:46:7d:6a:f0:d0:3f:
c8:1e:5c:eb:fc:6c:ef:a2:88:c0:47:5d:08:a7:2a:67:48:1c:
3a:09:27:5d:e4:5d:f8:a4:9d:28:bc:45:48:5a:eb:d6:ba:f0:
72:80:0c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:47 2025 by rpki-client