Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/K_AaxQ8ADY7aAbWWzyWySgg9N9A.roa
File: K_AaxQ8ADY7aAbWWzyWySgg9N9A.roa (raw, json)
Hash identifier: cMFXS6gce/d/ZxPBrEo1+xXWHx06PFr6Vayw98dL4bw=
Subject key identifier: 2B:F0:1A:C5:0F:00:0D:8E:DA:01:B5:96:CF:25:B2:4A:08:3D:37:D0
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 09BC8704
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/K_AaxQ8ADY7aAbWWzyWySgg9N9A.roa
Signing time: Wed 06 Apr 2022 05:55:05 +0000
ROA not before: Wed 06 Apr 2022 05:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 132.75.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163350276 (0x9bc8704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Apr 6 05:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bf01ac50f000d8eda01b596cf25b24a083d37d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:29:3b:44:b0:54:ea:4c:de:88:c1:02:a5:
5c:70:a9:3f:62:ec:80:7f:e9:36:b0:20:2e:27:ae:
eb:5a:9d:2d:1b:d6:36:a7:b4:c0:b1:b6:25:9b:f1:
f7:c7:3d:8f:65:fc:f9:49:96:5c:98:56:64:e3:e1:
48:91:ca:42:be:d2:c9:c2:da:f7:be:8a:f5:6f:c6:
a3:c4:7d:12:e5:de:61:11:d4:87:53:87:16:b8:4c:
7a:73:3d:71:d9:01:37:60:70:78:38:94:53:70:15:
5b:fa:4a:db:f3:8c:e3:f3:4c:e4:a2:a1:3f:bc:35:
14:ee:9f:d9:93:e1:c2:80:b3:be:fd:75:0b:8c:39:
8b:b7:22:00:bb:94:aa:ae:83:b4:18:3d:d6:96:a7:
13:75:86:f1:eb:38:85:09:1e:6c:98:0e:23:69:45:
85:80:bc:85:92:f1:bf:01:a0:fa:fd:e9:c6:04:d5:
b3:ae:ce:f5:ed:63:a3:4c:5e:bf:d9:3f:69:6c:ab:
cd:46:f5:c5:f1:ec:fc:f2:c5:5b:72:ca:5f:c2:cf:
36:26:08:5e:9b:b0:4b:b1:79:93:c4:98:a1:3b:cf:
5e:df:57:54:f3:b2:f6:72:ba:54:b8:41:db:9f:89:
20:98:1c:4f:2d:09:a1:18:9b:87:51:50:bf:58:7d:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F0:1A:C5:0F:00:0D:8E:DA:01:B5:96:CF:25:B2:4A:08:3D:37:D0
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/K_AaxQ8ADY7aAbWWzyWySgg9N9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.75.96.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5c:ab:3f:91:03:22:4a:32:f5:18:72:98:4c:01:b5:a5:51:
c0:94:9e:41:c1:f6:06:0e:bc:5e:ad:c6:61:f5:f9:83:e9:29:
c3:cf:73:25:11:80:62:63:e6:34:79:43:6f:22:d9:5f:32:00:
24:71:a5:c2:50:e9:a3:6f:75:70:f1:f5:23:00:37:a5:be:80:
ce:55:3d:75:3f:b2:4f:c5:f8:39:d8:04:14:ba:b8:b8:fd:8d:
a9:ce:2c:05:bb:c0:30:a3:21:8e:b6:39:0f:75:c0:03:ab:fe:
9d:25:d2:9c:24:32:6c:0a:70:b6:f3:5a:b0:14:6a:d0:1d:7f:
f3:0e:12:fb:e0:3d:d8:ca:e8:9f:8d:e7:4c:bd:ff:d5:57:34:
c2:af:49:df:93:0f:a1:74:b9:12:6d:2d:4e:db:65:04:30:a6:
55:68:c1:89:98:64:1b:0c:c2:ed:c1:9c:cf:57:52:2d:e4:53:
25:ae:84:77:32:3d:15:28:d2:aa:a5:28:04:6c:22:b8:f4:2a:
c0:02:0f:f1:da:70:f3:57:66:ac:d5:69:82:ac:cf:a4:d4:3c:
0f:60:43:88:30:26:2e:36:b0:b0:a4:8f:7f:44:48:d7:ae:98:
bb:6a:f7:8e:be:8f:e4:15:25:47:8c:f6:d9:a5:68:bb:18:ae:
0e:90:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:01 2025 by rpki-client