Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/Q6jTGd5jI6OT97AhqR2rnJt4G-E.roa
File: Q6jTGd5jI6OT97AhqR2rnJt4G-E.roa (raw, json)
Hash identifier: LDEqRe2xzbJElSrHMScfto/M9yeysurnvqLfTKrXRMI=
Subject key identifier: 43:A8:D3:19:DE:63:23:A3:93:F7:B0:21:A9:1D:AB:9C:9B:78:1B:E1
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 104687F6
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/Q6jTGd5jI6OT97AhqR2rnJt4G-E.roa
Signing time: Sat 01 Jan 2022 03:02:24 +0000
ROA not before: Sat 01 Jan 2022 03:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 132.231.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273057782 (0x104687f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Jan 1 03:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43a8d319de6323a393f7b021a91dab9c9b781be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:58:78:7d:6a:65:11:c6:df:e1:5c:80:b8:c6:
a9:f6:50:56:f9:17:0a:46:05:12:a7:e5:9e:23:34:
9f:a8:16:63:b1:93:89:ef:1e:bc:b1:71:17:6e:75:
e4:73:db:94:ce:9a:33:a3:e9:ed:a8:66:a8:1e:7d:
8c:02:a4:4d:9b:4e:bf:ef:46:60:85:1c:a0:fa:11:
78:e5:28:c7:66:a9:2b:17:20:bd:07:96:6e:6f:88:
42:46:96:dc:8b:74:1d:81:98:2a:0f:97:99:3e:8c:
0b:dc:5d:de:b7:29:25:4b:27:3d:63:aa:f3:6d:f9:
21:f5:78:48:0d:23:0c:4c:3a:85:7e:9f:c1:40:a0:
8b:5f:96:d4:bf:a5:80:9e:55:67:8d:60:c6:a7:1a:
ba:71:7c:0c:8b:7e:89:3a:b1:e8:04:6d:b4:f8:95:
57:83:77:11:ab:71:ef:36:a0:32:33:2f:d0:8c:37:
36:e7:cb:77:68:4d:6c:a9:d0:8b:4a:bd:9d:03:89:
2d:a7:f5:10:00:da:2b:20:d3:8d:b7:ac:ed:26:d0:
fe:ec:fc:a4:f0:36:d4:e2:e0:41:25:d8:15:7e:da:
8a:d6:06:ff:4a:89:e8:b7:5b:6c:a1:1a:4f:c5:6c:
5a:de:32:9c:9e:65:0e:26:6c:10:d6:54:f1:51:a7:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A8:D3:19:DE:63:23:A3:93:F7:B0:21:A9:1D:AB:9C:9B:78:1B:E1
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/Q6jTGd5jI6OT97AhqR2rnJt4G-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:1e:a8:03:74:35:1b:dc:cf:ee:71:e7:b3:39:68:37:87:13:
43:b8:88:44:4a:f3:62:ad:5c:de:1d:22:09:42:ea:6a:67:07:
0e:c5:ec:73:c0:5a:11:d5:47:11:44:7e:70:19:4b:75:36:f6:
8d:f9:4d:f2:ec:03:f1:64:9c:ef:3c:29:b5:67:41:8a:b2:66:
0f:95:d0:da:5f:02:83:3a:35:60:67:1f:2e:d4:ef:3d:08:26:
06:81:43:10:ab:02:9d:50:1f:e0:83:a4:04:9f:51:98:4f:2f:
c2:4d:71:7d:c2:2e:d1:72:65:c3:58:a8:6c:da:1d:14:9f:a3:
b7:3c:1e:80:8c:30:87:95:b0:ed:43:c5:73:e0:de:1a:a6:fc:
7a:c6:73:78:0a:17:9e:5c:56:86:8e:dc:89:27:f1:7c:d8:9c:
69:12:14:d0:72:83:fa:b8:87:e9:85:db:7f:8d:18:4d:28:f0:
49:d5:db:15:78:af:8f:53:d9:9c:85:69:b6:59:a9:19:a3:ee:
84:1e:47:e0:51:f8:97:75:03:69:95:23:e5:a5:66:e8:54:10:
17:09:ac:c5:12:2d:b5:80:3d:ee:f5:64:64:8a:ea:fc:cb:15:
6b:fa:81:4b:56:9c:07:e9:d9:17:f6:78:df:10:cc:af:f0:62:
d6:79:d6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:27 2025 by rpki-client