Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/4v0gMqu4k7nT6H0h8rtsrIqv48M.roa
File: 4v0gMqu4k7nT6H0h8rtsrIqv48M.roa (raw, json)
Hash identifier: yhKK/8PJAGRVV3+xI+o2eLnmnBcF1pIxS8CXxyX9/D0=
Subject key identifier: E2:FD:20:32:AB:B8:93:B9:D3:E8:7D:21:F2:BB:6C:AC:8A:AF:E3:C3
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 018B6B36A0D978AED15DFC06315C23CCCF4F
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/4v0gMqu4k7nT6H0h8rtsrIqv48M.roa
Signing time: Thu 26 Oct 2023 09:00:24 +0000
ROA not before: Thu 26 Oct 2023 09:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201749
IP address blocks: 212.126.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:36:a0:d9:78:ae:d1:5d:fc:06:31:5c:23:cc:cf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Oct 26 09:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2fd2032abb893b9d3e87d21f2bb6cac8aafe3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:e2:9e:6f:df:0c:ba:f2:e7:58:d2:5f:62:
5f:84:4a:04:80:78:b5:fe:2e:54:c4:2c:2f:6e:2c:
4a:52:f0:41:44:fd:27:ed:c2:7e:65:cc:95:22:cf:
de:be:01:05:fc:72:4f:4b:8a:fa:fa:cc:63:43:39:
ea:a9:c3:4f:3e:0a:52:e6:bf:f5:1d:06:2c:53:5e:
9a:f2:53:e1:3b:ab:9d:6b:73:14:a3:58:7a:6e:ae:
8a:1a:9b:39:6c:f3:ee:e1:28:6b:28:ae:d0:af:4c:
0b:51:9b:7e:ca:3d:65:bf:16:aa:03:47:42:56:6a:
51:57:ca:22:31:9f:b5:82:86:a9:f6:f9:95:22:22:
9d:0b:71:ff:c4:09:11:8f:52:01:a8:fd:fc:ad:c7:
54:10:43:86:93:60:09:72:04:21:f1:0c:87:d3:6a:
2c:78:4f:8f:b7:b6:fb:aa:b1:e8:e3:50:54:5c:72:
10:6c:49:75:95:3b:47:30:7c:0a:ca:5e:32:ce:cd:
9c:d6:b7:fd:69:99:0a:b0:5d:bd:aa:c8:16:3f:db:
f5:20:62:d8:2b:a0:03:38:c5:54:29:9f:4c:b2:b7:
c5:f1:9d:c3:e0:cb:ba:35:ed:3b:2e:6c:17:bb:fe:
0b:68:fe:71:15:06:01:8b:c0:71:eb:ed:f8:62:b4:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:20:32:AB:B8:93:B9:D3:E8:7D:21:F2:BB:6C:AC:8A:AF:E3:C3
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/4v0gMqu4k7nT6H0h8rtsrIqv48M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.115.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:6f:c9:eb:5c:3e:b4:31:ad:e5:89:95:5e:c7:5e:69:79:a7:
f9:78:b4:bd:65:4e:90:69:55:94:eb:f5:55:4e:f3:70:c7:21:
51:51:cc:a9:0f:38:97:15:65:6b:6c:48:e6:5b:85:5c:e1:45:
49:8a:f3:08:a7:8c:f0:ce:a7:a2:76:1d:04:11:e9:56:41:44:
79:c7:34:cb:c1:fb:63:d5:d4:92:02:6f:e3:36:2f:16:fe:05:
c2:22:68:90:e9:31:30:fa:c5:ec:93:8b:90:92:da:49:63:f8:
62:52:30:e1:3a:41:7e:4f:45:f9:d6:be:62:7e:53:3a:90:c1:
85:4a:57:8e:60:e8:82:a9:07:96:a5:47:a4:fb:e5:c9:f9:98:
9f:1b:f2:a4:82:f8:7d:b5:5f:0b:9e:7e:e8:2c:1c:01:9d:0b:
f5:d4:0d:e0:1f:c4:e0:e8:69:51:05:1a:d4:a5:d0:d9:ba:4d:
f9:c5:72:9b:90:bd:32:4d:2e:87:08:04:42:dd:23:de:93:cb:
35:3a:b0:8c:79:2a:ab:33:39:47:94:52:5a:ca:e3:99:2a:fe:
10:82:94:82:41:78:af:26:67:7a:03:71:8e:9b:13:e2:ec:b4:
d3:b5:38:ff:c6:5d:b6:45:dc:ba:ef:a2:18:8d:71:fd:bc:08:
dc:7d:13:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:19 2025 by rpki-client