Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/swbtsa0OmvunPHEC0m5ZyGDxhQA.roa
File: swbtsa0OmvunPHEC0m5ZyGDxhQA.roa (raw, json)
Hash identifier: aKFVgGLceFpEJPC6MaxPsjjWcJROYohH/ZgS4XqDi80=
Subject key identifier: B3:06:ED:B1:AD:0E:9A:FB:A7:3C:71:02:D2:6E:59:C8:60:F1:85:00
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 10C0C897
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/swbtsa0OmvunPHEC0m5ZyGDxhQA.roa
Signing time: Sat 01 Jan 2022 13:02:20 +0000
ROA not before: Sat 01 Jan 2022 13:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201044
IP address blocks: 213.199.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281069719 (0x10c0c897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 13:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b306edb1ad0e9afba73c7102d26e59c860f18500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:69:c7:2d:44:9e:dd:23:94:ca:cf:31:9b:
bb:4b:f3:5d:95:75:af:66:b1:db:96:b5:c6:32:92:
6a:a1:2f:8b:8d:fe:b2:3c:61:01:57:2d:fc:86:7b:
cb:e3:cc:c3:26:74:f6:f7:4d:34:0d:b2:60:29:aa:
f0:f9:f7:03:63:3a:48:d3:26:6c:8a:4f:9a:c7:6e:
7c:99:c6:73:02:eb:39:27:55:4b:fc:a0:d3:4e:bc:
b8:8f:ea:44:84:48:3d:e7:c1:fb:7c:7e:c2:aa:59:
a0:c2:af:fd:76:0e:66:af:8c:bf:3e:4c:86:48:90:
66:73:d5:aa:8a:34:5c:b7:fc:08:50:b9:7d:88:41:
16:1b:6d:c7:b7:8a:aa:4e:dc:29:30:9f:56:07:37:
e6:22:45:25:6a:41:d8:82:2d:63:5a:25:d7:c3:a4:
39:b2:62:62:4f:ea:fd:e4:0b:50:ed:49:42:70:2b:
50:0c:0a:53:28:97:09:7b:78:a0:7e:48:a4:a9:1a:
b8:17:df:c1:6e:e3:3d:06:40:98:71:d0:ec:5b:f3:
56:10:66:5e:68:1a:c1:ca:26:7f:1f:29:d2:5a:d1:
27:b0:2a:24:56:d9:47:e5:3a:90:fb:75:1e:bf:5c:
5a:65:7b:bb:79:97:1a:a4:a6:3e:4b:19:84:86:8a:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:06:ED:B1:AD:0E:9A:FB:A7:3C:71:02:D2:6E:59:C8:60:F1:85:00
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/swbtsa0OmvunPHEC0m5ZyGDxhQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.199.251.0/24
Signature Algorithm: sha256WithRSAEncryption
af:68:c1:4b:4b:96:ed:79:a0:60:af:db:83:28:0a:76:ec:e7:
09:ab:11:83:20:0e:a4:8a:54:63:6c:8f:14:95:93:4c:a2:aa:
46:54:da:36:18:de:50:20:6c:c6:2d:eb:07:f2:c7:f1:b8:47:
d7:1e:a6:9d:bb:6c:b1:44:31:9a:90:c1:dc:6f:9c:89:d9:22:
b0:fe:18:55:a3:8c:cd:74:33:2d:5d:d7:f1:65:82:cc:fc:d3:
9e:ba:1f:6d:b0:83:13:c0:96:f3:0b:68:9d:35:ed:cd:ad:b2:
cb:cd:63:dd:5d:90:18:e6:83:16:93:6f:bf:fb:dc:64:f4:0e:
53:7c:3a:2d:97:59:ec:e0:51:d0:e5:e8:01:c4:9a:7e:86:ee:
c7:30:1d:4c:87:e9:34:b9:83:43:ea:46:17:74:a7:50:9c:3d:
cd:fb:ec:73:95:40:e9:9c:0e:36:d3:0f:7f:fe:ff:f5:12:aa:
41:f2:c9:85:c0:ac:63:04:c5:61:46:0a:97:dc:3f:b0:5a:3d:
30:f8:ed:80:28:8f:ce:cb:8f:d1:76:fc:3d:33:ca:0a:39:2b:
d6:bc:84:51:56:6e:e5:81:44:29:0c:2a:e7:c7:3b:33:89:44:
93:51:ad:d8:a5:48:a3:1d:d2:22:5d:bf:cf:ba:49:94:fe:a9:
bf:ca:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:24 2025 by rpki-client