Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/fjRSQ3iu66c-Vq7DivVZWnXUFvU.roa
File: fjRSQ3iu66c-Vq7DivVZWnXUFvU.roa (raw, json)
Hash identifier: bni/pXvh6U5FUUogZxq+PWiRglgsSzmjZ8YD1QE0djI=
Subject key identifier: 7E:34:52:43:78:AE:EB:A7:3E:56:AE:C3:8A:F5:59:5A:75:D4:16:F5
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01856C13918F53A1A76E9843E25D27EED844
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/fjRSQ3iu66c-Vq7DivVZWnXUFvU.roa
Signing time: Sun 01 Jan 2023 06:44:59 +0000
ROA not before: Sun 01 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44870
IP address blocks: 212.107.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:91:8f:53:a1:a7:6e:98:43:e2:5d:27:ee:d8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e34524378aeeba73e56aec38af5595a75d416f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:05:91:da:92:5b:28:c7:cc:65:da:ae:fa:
33:6f:bf:bb:61:43:37:63:5a:ff:42:14:97:d3:fe:
75:91:67:c0:07:f9:e7:40:b8:80:39:ff:1f:d9:e1:
2f:e6:96:2f:a7:8b:7b:ed:17:02:11:4c:4c:6f:76:
ff:75:04:3f:61:9d:92:82:7c:f4:d7:44:b5:e9:59:
8e:b3:27:23:cd:2e:27:b8:0b:57:4b:a5:c8:c1:57:
89:fe:a7:dc:a2:9e:4f:62:89:f3:40:df:cc:60:85:
a3:76:a2:b2:de:47:d5:72:fb:fb:1f:b0:a1:c9:57:
8f:a7:8f:a9:fc:bc:83:16:80:b6:08:c2:78:74:23:
cf:5c:88:d2:80:60:ba:70:94:3a:d0:34:d3:d6:b4:
c2:4e:48:82:d1:5a:bd:ed:8d:41:ae:de:05:83:46:
05:ac:89:0a:56:4b:0d:0c:87:d0:10:96:a9:d4:9d:
c1:55:25:d3:b2:66:ba:a6:c2:95:80:e3:12:9f:01:
6f:f4:a0:c9:56:43:64:73:c6:66:ca:73:4c:d3:8d:
18:40:1f:db:8e:d0:53:4e:d9:c7:71:ca:9f:e6:7b:
8d:1a:70:08:71:33:cf:1b:70:42:5f:66:56:32:d7:
98:40:ef:68:cc:5d:33:f7:1d:3d:2d:84:f7:ee:30:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:34:52:43:78:AE:EB:A7:3E:56:AE:C3:8A:F5:59:5A:75:D4:16:F5
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/fjRSQ3iu66c-Vq7DivVZWnXUFvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.240.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:68:13:22:b9:28:b1:bb:c1:1b:c3:c0:13:57:1a:c6:8d:c1:
a9:11:83:3f:7e:a6:5c:ef:6f:b8:b3:30:2c:69:e7:1a:1d:70:
5c:1c:98:e2:79:b2:0f:69:f6:94:a5:97:c2:02:37:55:ee:fc:
0c:53:a6:bc:31:0c:5a:89:70:9f:68:2f:52:ea:ca:d0:42:7d:
c9:36:4f:4a:2f:30:21:88:9c:ab:c5:65:50:2e:33:23:a3:f5:
b4:46:d8:b0:6e:72:f4:4d:3a:65:1e:b8:0a:45:04:ab:c8:ed:
19:fc:fe:a4:32:83:3d:8a:31:5e:d2:e4:2c:1c:4f:c3:da:3c:
97:50:fe:88:49:47:3c:3a:1a:10:85:75:9b:89:36:36:17:ac:
64:5d:cb:1e:c4:dc:3f:25:94:27:3a:8d:ef:05:d9:8f:be:e7:
55:e7:b4:3f:1b:6e:dd:a7:28:d1:d4:c3:df:34:7b:82:04:c2:
a5:68:17:3e:8f:6a:70:f6:ea:08:6a:ae:c9:66:5b:0d:2b:54:
f6:01:60:95:d7:99:77:00:30:c1:7b:ca:77:34:51:22:44:7e:
bc:84:2e:c2:5c:1c:a7:00:55:30:30:46:e4:85:c5:12:34:b4:
d6:20:ee:6b:eb:50:b4:32:fd:6f:84:1a:05:ab:2c:9d:88:a9:
5d:6b:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:24 2025 by rpki-client