Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/2FtWeSKN7VyFfT77gen3ShMcnY0.roa
File: 2FtWeSKN7VyFfT77gen3ShMcnY0.roa (raw, json)
Hash identifier: Zk4c336ZA2Z3s0u/5qnp170UsJ+fpsv+x0qlb6RQ6fo=
Subject key identifier: D8:5B:56:79:22:8D:ED:5C:85:7D:3E:FB:81:E9:F7:4A:13:1C:9D:8D
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 01856DCADB3BA60DC142AD3AB7F8202D7F6D
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/2FtWeSKN7VyFfT77gen3ShMcnY0.roa
Signing time: Sun 01 Jan 2023 14:44:49 +0000
ROA not before: Sun 01 Jan 2023 14:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2269
IP address blocks: 138.231.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:db:3b:a6:0d:c1:42:ad:3a:b7:f8:20:2d:7f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Jan 1 14:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d85b5679228ded5c857d3efb81e9f74a131c9d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:f3:20:2e:9f:17:72:91:ed:3b:8b:a7:2a:
c2:d5:41:f2:71:43:cd:bf:ea:b6:fa:2a:45:9c:39:
1a:67:cc:84:28:da:8f:0a:5d:e1:5d:91:7f:55:7f:
f0:24:8d:36:b8:18:37:17:e5:fc:12:12:8b:0e:5e:
71:6f:3f:63:b1:da:da:72:65:a8:90:29:c3:8f:9e:
5a:1d:8c:f1:be:6e:4d:4d:ab:b9:47:a5:d9:54:76:
11:36:73:03:56:ba:f1:b8:92:34:d8:d6:4f:93:5e:
28:c9:93:47:ce:4e:1d:54:b2:8e:e7:fb:1d:3e:46:
82:cd:1c:e7:c6:f2:70:7b:52:5f:29:bc:df:cf:5d:
92:ea:0f:e5:9b:2f:3d:09:7b:a6:03:22:37:49:7d:
43:ed:bf:ad:5b:89:81:ce:4d:79:ce:dd:31:6e:1e:
b0:e4:b4:d1:8d:6a:33:03:c8:5c:04:a6:49:89:82:
00:8f:dc:fd:96:5a:34:8c:ce:42:cf:ba:06:9f:64:
ce:0b:d3:fd:df:64:17:4c:b2:3d:42:63:f4:69:4d:
fb:e5:fd:db:00:b1:06:82:7e:3c:0a:9f:97:49:75:
e3:dd:16:9f:a2:17:94:79:cf:48:bc:b2:eb:7e:3d:
56:13:2e:1c:05:5f:c8:cb:16:e2:28:9a:3c:6d:60:
ab:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5B:56:79:22:8D:ED:5C:85:7D:3E:FB:81:E9:F7:4A:13:1C:9D:8D
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/2FtWeSKN7VyFfT77gen3ShMcnY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:dd:23:7b:cd:ff:94:92:05:7a:76:f7:45:44:d4:76:c8:1f:
5c:5c:08:ee:86:4a:e5:d6:6e:c0:d2:df:c1:ad:a0:3e:e1:bd:
14:d9:e6:f2:0c:cd:ab:bb:e4:86:1f:69:16:a6:dd:64:62:4b:
cc:ae:4e:3d:ea:84:b3:77:32:18:66:d8:92:a4:35:ca:e1:cc:
c6:42:f9:20:5f:83:94:34:15:46:29:b0:e6:7c:0a:61:a1:a1:
fb:03:ea:dc:f6:eb:d0:9c:15:9d:83:df:11:60:96:e5:a3:da:
16:16:24:58:09:df:d0:e4:ad:10:2e:cc:c9:a5:23:9e:3e:2d:
62:ed:80:b3:29:c5:40:bd:29:51:8a:f6:ce:0f:f6:70:ab:0b:
1a:a3:6b:fb:3f:8e:08:d0:f5:36:29:f8:d6:91:06:be:ec:0d:
a5:b5:82:94:43:97:49:66:26:6d:9e:86:77:ed:ea:12:63:6c:
16:0a:18:55:f8:29:5d:16:83:32:e0:e5:5e:20:9d:19:e3:81:
50:f0:1d:db:b3:1a:15:98:ce:51:db:82:7c:ea:a1:04:ff:02:
ac:43:5a:63:84:5d:08:52:a2:8a:e1:99:9a:f2:75:6c:13:2b:
66:6d:2e:29:e3:cb:3d:56:90:bb:91:36:a5:77:16:07:62:47:
e3:1d:4d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:57 2025 by rpki-client