Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/CEue5J1WpG83UTOowWPI_AJ3GH4.roa
File: CEue5J1WpG83UTOowWPI_AJ3GH4.roa (raw, json)
Hash identifier: NEpT+rw2eihLaW/bawvOZYWd+39cl+VNz1sOjVuXgys=
Subject key identifier: 08:4B:9E:E4:9D:56:A4:6F:37:51:33:A8:C1:63:C8:FC:02:77:18:7E
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0189F7C0B15CFCEF9C29652095FCABF1DC05
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/CEue5J1WpG83UTOowWPI_AJ3GH4.roa
Signing time: Tue 15 Aug 2023 05:52:27 +0000
ROA not before: Tue 15 Aug 2023 05:52:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.98.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.96.0/21 maxlen: 21
212.126.96.0/22 maxlen: 22
212.126.96.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.104.0/22 maxlen: 22
212.126.104.0/21 maxlen: 21
212.126.104.0/24 maxlen: 24
212.126.104.0/23 maxlen: 23
212.126.103.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.108.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.107.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.124.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.123.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:c0:b1:5c:fc:ef:9c:29:65:20:95:fc:ab:f1:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Aug 15 05:52:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=084b9ee49d56a46f375133a8c163c8fc0277187e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:79:21:88:33:68:dd:1c:42:c2:2c:83:70:
bb:c1:9e:46:d3:e8:22:ce:d6:0c:fc:fe:54:e7:de:
9b:df:dd:03:4c:d7:5d:20:54:53:66:89:79:34:fd:
4d:95:09:92:73:c1:09:c0:7b:42:0b:8b:a4:b0:2e:
cc:e2:b1:1e:63:8e:ab:59:82:60:45:d1:67:b7:87:
ed:8e:3d:30:d2:d0:93:72:f5:e9:97:84:06:bc:d8:
29:08:f9:31:fa:c0:57:de:93:23:61:5e:fd:70:58:
24:d2:b7:36:52:f4:0c:8c:5e:2c:8e:61:f8:c9:b9:
5a:e3:0b:c0:59:e6:f0:13:48:c8:d3:d6:96:86:6b:
7d:17:22:a3:dc:73:9e:2a:66:5c:6c:34:a3:20:30:
dd:ef:1e:8c:4e:bd:a4:3a:ab:0d:e2:54:27:1d:49:
17:e7:97:f9:70:68:6a:74:07:b2:c5:50:08:40:28:
a0:18:b8:17:15:a1:58:24:7d:20:b7:af:41:64:ac:
0b:39:4b:09:b2:bf:70:7b:44:07:8e:5d:1c:26:a4:
a0:c6:0d:96:02:5d:3e:59:ec:88:04:52:b0:48:30:
c1:f4:07:ff:5f:7b:b4:87:4a:f3:c9:5b:c2:53:54:
87:5a:48:93:52:44:b2:92:8f:bc:22:68:fd:29:e8:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4B:9E:E4:9D:56:A4:6F:37:51:33:A8:C1:63:C8:FC:02:77:18:7E
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/CEue5J1WpG83UTOowWPI_AJ3GH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::-2a04:2dc0:19:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
c2:5b:06:cf:6b:7b:d2:30:4d:5b:54:b1:ee:a3:55:fb:5d:ad:
a8:4d:b2:c7:4b:03:9d:2b:84:e3:f3:2a:6e:49:90:e6:3d:fc:
c3:de:d2:25:93:15:46:4d:6e:32:cd:e7:65:16:33:7b:b7:2e:
e7:60:80:ac:db:c0:43:ef:26:ed:6e:78:6f:43:58:41:2b:87:
ca:a8:0a:34:34:03:05:1d:2a:2f:c1:83:27:4c:37:67:60:35:
c3:21:7b:ae:7b:76:19:a4:3b:08:42:07:40:af:56:a7:ba:2b:
7a:ce:a1:ff:a3:a6:46:10:d5:5b:ad:46:82:7f:85:d2:ad:fe:
11:70:32:8e:33:68:28:d8:1c:8f:63:31:db:04:da:7b:d6:1e:
69:25:bb:c0:fb:dd:bd:53:cc:2f:30:57:90:39:6b:98:20:cf:
8a:ed:d3:96:bf:09:81:19:f4:a4:73:5f:96:1c:21:7c:e0:d1:
73:67:0d:a4:5b:9d:09:f4:e1:b4:0a:ea:c1:3c:f8:4e:92:10:
1e:0e:eb:25:76:0e:1e:aa:16:cf:d7:77:59:92:1d:3b:a6:4e:
2f:38:3f:ba:2d:6a:f0:61:16:52:48:c8:d9:db:32:1e:f8:0a:
23:fb:c3:16:0e:36:64:51:aa:68:cf:1d:62:dd:b9:8c:72:4d:
31:96:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:04 2025 by rpki-client