Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/pXjvH424orPOpvAnRSWgPuv0vfA.roa
File: pXjvH424orPOpvAnRSWgPuv0vfA.roa (raw, json)
Hash identifier: XiHmzC981KV5TNAzaCz4VwEXVDDS/1gMb1P6jAALVl4=
Subject key identifier: A5:78:EF:1F:8D:B8:A2:B3:CE:A6:F0:27:45:25:A0:3E:EB:F4:BD:F0
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018571278B0BD9BB15DE1F840C89853A6E5B
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/pXjvH424orPOpvAnRSWgPuv0vfA.roa
Signing time: Mon 02 Jan 2023 06:24:54 +0000
ROA not before: Mon 02 Jan 2023 06:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47333
IP address blocks: 213.108.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:8b:0b:d9:bb:15:de:1f:84:0c:89:85:3a:6e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 06:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a578ef1f8db8a2b3cea6f0274525a03eebf4bdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:4b:53:e5:ac:eb:e7:93:f4:4f:ba:b7:ef:
44:8a:22:d5:72:21:c9:37:49:9b:36:85:10:3e:1e:
25:4e:40:2d:af:a3:bd:49:3a:1f:b3:ed:40:ae:df:
71:ac:25:b0:00:9a:e1:58:07:c9:60:66:ef:f2:d2:
8a:01:48:7b:72:eb:11:11:50:87:f0:18:7f:bb:3b:
d2:4b:0e:77:e5:aa:f7:21:64:ea:36:76:0d:c2:ab:
57:61:67:b8:b2:37:48:48:ae:4a:6d:d7:b7:e3:ac:
7e:b7:ff:ea:ce:10:2a:89:99:56:3c:30:66:6d:6a:
ec:a5:06:33:65:98:69:10:5e:37:1c:8f:d0:77:66:
ee:3c:1b:44:ff:2e:f1:30:b1:f4:62:a8:88:72:02:
8e:97:05:b8:25:9f:61:aa:27:27:c6:7b:bd:35:16:
18:fd:1b:c2:8d:86:e9:1c:97:25:0c:10:b5:69:e6:
8d:52:0a:a8:91:2c:c7:40:39:9c:92:b8:b9:4c:9e:
16:c7:32:83:d4:fe:03:d6:2e:48:d6:cc:4a:2d:c0:
86:9c:8b:c3:13:7b:9a:10:1d:87:24:55:e2:cf:a6:
f5:64:79:c0:88:61:65:81:d3:81:22:8b:a0:25:98:
7a:35:5f:04:45:b0:f6:cc:15:14:68:f5:26:e7:87:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:78:EF:1F:8D:B8:A2:B3:CE:A6:F0:27:45:25:A0:3E:EB:F4:BD:F0
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/pXjvH424orPOpvAnRSWgPuv0vfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.32.0/21
Signature Algorithm: sha256WithRSAEncryption
13:e2:28:14:0e:f8:8e:f9:96:80:33:28:b2:39:08:e7:81:8a:
7e:de:d3:ba:47:d7:85:c5:88:27:18:07:da:e5:e4:50:16:1a:
fb:2c:5a:97:d6:52:3c:09:fb:27:88:7c:f6:00:9d:8e:8a:22:
23:ae:ea:4f:f2:ec:c0:96:ec:aa:da:6b:eb:09:0e:48:18:9c:
c7:27:1d:7a:c5:fe:72:d8:19:9a:9d:04:de:23:16:3d:5e:79:
84:c1:a8:69:a5:01:42:d9:3e:f1:46:b8:b0:1b:f1:ec:b3:50:
db:bb:e2:82:a3:0a:01:4d:21:1b:5e:b1:a9:ed:7f:7e:f4:a4:
c0:79:d0:8a:e2:4d:17:58:c3:1a:b6:00:d3:52:95:be:1c:00:
27:9d:45:3c:11:f2:fd:72:f5:8b:18:ee:bd:72:08:bc:db:6e:
1f:90:ce:c9:c7:5c:49:7f:72:eb:f0:50:2e:c5:53:ac:57:1e:
87:7e:f0:dc:94:08:3a:e9:65:28:5e:21:01:f9:a8:4d:be:00:
9a:19:09:09:ea:25:0e:ce:38:05:45:c5:19:4b:fc:cc:85:42:
5a:ce:c9:02:53:0b:65:19:58:40:98:a1:1c:03:dc:28:db:3f:
40:04:7d:d4:e0:2a:33:77:81:4d:22:1d:8e:d4:64:2d:24:55:
06:b3:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:57 2025 by rpki-client