Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/P_Wx2D88vG7VPKxd0OzwQDXa7bo.roa
File: P_Wx2D88vG7VPKxd0OzwQDXa7bo.roa (raw, json)
Hash identifier: rSMXLsUdbs7i6XVlBQY+zb4NFMaiAR/G7Qw3vfwhcEE=
Subject key identifier: 3F:F5:B1:D8:3F:3C:BC:6E:D5:3C:AC:5D:D0:EC:F0:40:35:DA:ED:BA
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 018B3ABFA8A217196CC0F24884AA136C131A
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/P_Wx2D88vG7VPKxd0OzwQDXa7bo.roa
Signing time: Mon 16 Oct 2023 23:08:40 +0000
ROA not before: Mon 16 Oct 2023 23:08:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20618
IP address blocks: 213.132.0.0/19 maxlen: 19
2a02:4bc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:bf:a8:a2:17:19:6c:c0:f2:48:84:aa:13:6c:13:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Oct 16 23:08:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ff5b1d83f3cbc6ed53cac5dd0ecf04035daedba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:23:ac:0b:b6:fe:03:36:83:f6:4c:0d:9b:
87:9b:cf:d2:bd:57:d4:28:e3:2f:44:76:d1:83:40:
12:9e:cc:cf:52:bc:56:29:50:56:bc:83:b0:7b:81:
34:ba:a9:48:45:8a:24:a3:cd:bd:20:47:03:eb:78:
fa:2a:28:60:56:45:2c:f9:79:fe:0a:a7:d2:69:c8:
74:dd:0a:26:88:3d:18:53:a4:dd:a1:40:16:15:e8:
85:d1:77:42:6b:c4:fb:a0:ff:3b:b0:d3:d3:8a:c7:
69:1e:3b:30:60:e3:ad:36:51:50:31:e8:d9:b3:b4:
38:32:eb:93:39:28:62:9f:fb:cf:3b:93:6e:5d:24:
e6:10:f2:83:a0:36:14:0a:19:52:86:c0:43:fe:90:
4c:e3:15:42:a5:4d:a7:44:da:48:13:33:c1:e3:84:
af:58:28:fa:de:7b:77:da:ac:02:17:5d:9e:6e:e7:
2d:07:40:0f:0e:f6:66:ca:77:6e:66:df:1c:75:35:
77:5e:72:4c:67:ee:59:8e:f3:26:7b:1f:f7:01:38:
e8:8d:aa:83:68:63:b9:ca:97:8c:db:0b:d9:c7:f3:
b9:50:3f:b0:14:e3:7e:d9:4f:a0:1a:77:c7:9d:6f:
a1:a0:31:e0:af:75:6b:14:6b:45:29:6c:9c:47:b7:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:B1:D8:3F:3C:BC:6E:D5:3C:AC:5D:D0:EC:F0:40:35:DA:ED:BA
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/P_Wx2D88vG7VPKxd0OzwQDXa7bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.132.0.0/19
IPv6:
2a02:4bc0::/32
Signature Algorithm: sha256WithRSAEncryption
bb:cf:a7:28:06:bd:ee:09:c9:80:ee:e2:95:4c:03:c4:11:83:
3b:6b:8a:b8:1d:37:b3:4e:ec:f1:c4:b2:63:47:31:e5:d0:07:
d1:eb:20:23:76:c2:b2:3c:d2:aa:49:f0:c0:0f:e8:f2:9e:40:
94:71:1c:42:29:b0:84:d7:18:c1:fe:54:10:3c:dc:94:d3:35:
04:99:a5:dc:7d:59:61:56:a4:4f:8d:19:85:f0:1a:ef:5e:88:
35:e7:df:ec:b0:96:ca:a1:ba:58:e9:62:9c:4d:77:51:56:6a:
78:ee:a0:c0:75:ac:29:47:7c:5d:70:d9:91:37:22:f5:f8:e5:
6c:23:1c:f0:c0:c7:07:b5:54:e1:03:f9:76:19:01:cf:41:f5:
d6:80:e5:24:46:0a:2b:8e:6d:c8:ee:76:a6:3a:93:32:68:cc:
87:4b:e3:03:e5:b5:40:70:d3:d9:d3:19:f5:bb:c9:21:f9:50:
70:85:e3:3a:4c:b7:e7:40:93:85:df:59:84:60:3a:f7:6e:0e:
80:c2:94:4b:5e:db:2a:7d:18:72:cb:28:be:b1:11:23:db:5d:
27:48:fa:19:c4:2a:5a:79:37:ae:fd:1a:d7:85:85:00:73:eb:
7e:2f:7f:fd:0f:18:e5:2a:33:6d:5f:1f:58:88:0e:e6:bd:e8:
e7:bf:5a:5c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYs6v6iiFxlswPJIhKoTbBMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw
MDkzMWEwHhcNMjMxMDE2MjMwODQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmY1YjFkODNmM2NiYzZlZDUzY2FjNWRkMGVjZjA0MDM1ZGFlZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtMjrAu2/gM2g/ZMDZuHm8/SvVfU
KOMvRHbRg0ASnszPUrxWKVBWvIOwe4E0uqlIRYoko829IEcD63j6KihgVkUs+Xn+
CqfSach03QomiD0YU6TdoUAWFeiF0XdCa8T7oP87sNPTisdpHjswYOOtNlFQMejZ
s7Q4MuuTOShin/vPO5NuXSTmEPKDoDYUChlShsBD/pBM4xVCpU2nRNpIEzPB44Sv
WCj63nt32qwCF12ebuctB0APDvZmynduZt8cdTV3XnJMZ+5ZjvMmex/3ATjojaqD
aGO5ypeM2wvZx/O5UD+wFON+2U+gGnfHnW+hoDHgr3VrFGtFKWycR7fSawIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD/1sdg/PLxu1TysXdDs8EA12u26MB8GA1UdIwQY
MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt
NGI4NzkzZGI3NDYwLzEvUF9XeDJEODh2RzdWUEt4ZDBPendRRFhhN2JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw
LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1YQAMA0E
AgACMAcDBQAqAkvAMA0GCSqGSIb3DQEBCwUAA4IBAQC7z6coBr3uCcmA7uKVTAPE
EYM7a4q4HTezTuzxxLJjRzHl0AfR6yAjdsKyPNKqSfDAD+jynkCUcRxCKbCE1xjB
/lQQPNyU0zUEmaXcfVlhVqRPjRmF8BrvXog159/ssJbKobpY6WKcTXdRVmp47qDA
dawpR3xdcNmRNyL1+OVsIxzwwMcHtVThA/l2GQHPQfXWgOUkRgorjm3I7namOpMy
aMyHS+MD5bVAcNPZ0xn1u8kh+VBwheM6TLfnQJOF31mEYDr3bg6AwpRLXtsqfRhy
yyi+sREj210nSPoZxCpaeTeu/RrXhYUAc+t+L3/9DxjlKjNtXx9YiA7mvejnv1pc
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:49 2025 by rpki-client