Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/CJ4Fqy4REj5Pm5DQTP6QyS2W2mM.roa
File: CJ4Fqy4REj5Pm5DQTP6QyS2W2mM.roa (raw, json)
Hash identifier: FQFl0CK8wpz+C+AuutQk1eCqs61WBcPpNBXqvIt6EwY=
Subject key identifier: 08:9E:05:AB:2E:11:12:3E:4F:9B:90:D0:4C:FE:90:C9:2D:96:DA:63
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018973A14190C3B9D80E0C0D1D625EF079C2
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/CJ4Fqy4REj5Pm5DQTP6QyS2W2mM.roa
Signing time: Thu 20 Jul 2023 14:08:15 +0000
ROA not before: Thu 20 Jul 2023 14:08:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61272
IP address blocks: 213.252.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:a1:41:90:c3:b9:d8:0e:0c:0d:1d:62:5e:f0:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jul 20 14:08:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=089e05ab2e11123e4f9b90d04cfe90c92d96da63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:80:ef:93:9f:ef:04:ac:59:9e:09:6b:08:
34:18:cf:b5:3f:7a:ba:7c:0e:e0:39:8f:fd:b3:36:
eb:55:b5:f4:2e:e4:d4:fb:a7:1a:d4:b9:ef:cd:79:
52:73:a5:89:d1:59:a9:30:72:a9:a4:4b:90:ee:61:
78:34:ee:99:1c:13:bf:1e:f1:a0:fd:84:b4:11:60:
64:d7:6d:3d:ac:61:32:43:90:1e:65:3b:15:29:a4:
6c:43:00:0f:37:30:cb:a5:2a:e3:0e:25:01:86:25:
f9:1d:fa:f8:1f:ad:f8:10:90:12:13:ff:4a:c5:d2:
ee:34:ce:70:90:57:8c:ba:61:de:6e:8c:47:67:53:
d2:e5:52:b4:e9:38:ec:8d:d1:9f:63:ae:8d:08:09:
47:8c:0a:21:86:9f:42:1f:fa:f1:f9:99:98:a2:f2:
01:45:bb:bd:1b:cd:f8:b6:33:66:ad:07:83:c3:c3:
e5:02:e0:d4:db:bc:21:27:9e:b1:fa:f5:6d:2e:71:
6f:13:69:83:c4:6c:d9:20:74:65:67:0e:b7:59:3d:
a8:42:83:7c:eb:cc:72:38:b6:d6:c8:fd:b5:57:95:
18:a9:87:d9:85:01:15:a2:9f:e2:e5:33:09:2e:b1:
a5:d3:a6:09:93:7d:5d:4a:f2:9a:30:0c:2e:aa:d4:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9E:05:AB:2E:11:12:3E:4F:9B:90:D0:4C:FE:90:C9:2D:96:DA:63
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/CJ4Fqy4REj5Pm5DQTP6QyS2W2mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.244.0/22
Signature Algorithm: sha256WithRSAEncryption
51:5a:b3:f5:2f:28:de:0b:7d:09:c9:65:e7:41:ea:df:40:8f:
e1:b0:0e:d0:93:05:88:9d:69:9b:e0:4b:cf:06:27:52:97:46:
2d:5e:53:ec:48:69:9a:02:1a:04:b3:00:ae:5f:42:fa:68:02:
c1:f1:bc:c7:74:4d:d7:a1:f3:1f:df:f9:fe:ba:c6:7e:c3:15:
89:37:b7:f9:b1:2c:81:73:77:98:1a:2a:ba:83:9b:c5:5e:70:
40:ee:92:bb:95:bf:c7:84:d2:2d:a8:8d:fe:9e:f1:bb:e5:41:
10:01:54:ba:ee:b3:84:f4:8e:12:cf:6e:9b:13:9b:32:a0:15:
f0:0d:36:05:b3:98:bf:f0:9e:fb:5c:f1:32:3d:a8:f4:0f:60:
c8:69:cc:11:7d:6e:eb:ec:1f:f0:18:30:96:0e:50:9f:99:d5:
64:b4:e0:1a:55:91:73:71:be:9d:84:34:b7:58:5c:8c:5a:36:
2f:58:00:5f:e1:83:df:02:1e:e8:a6:1e:a4:8b:d7:34:d9:ff:
fb:59:94:df:99:08:5c:ba:ec:21:4f:39:76:37:10:cb:3e:8f:
68:76:cc:50:8b:19:1e:5e:f3:69:73:d5:a7:84:89:68:60:02:
1b:17:60:17:0e:8c:3e:3a:13:a3:45:2b:ea:83:29:61:1d:63:
e9:27:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:47 2025 by rpki-client