Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/DwDit4Cu74NymKtW_ltUlBTbVV8.roa
File: DwDit4Cu74NymKtW_ltUlBTbVV8.roa (raw, json)
Hash identifier: HfS70sAj3RiqiC46psjupbyr/lqjix9YrmtOA6jcVt4=
Subject key identifier: 0F:00:E2:B7:80:AE:EF:83:72:98:AB:56:FE:5B:54:94:14:DB:55:5F
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 018225990B9556B860862C08109D14650A04
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/DwDit4Cu74NymKtW_ltUlBTbVV8.roa
Signing time: Fri 22 Jul 2022 11:09:23 +0000
ROA not before: Fri 22 Jul 2022 11:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206244
IP address blocks: 213.169.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:99:0b:95:56:b8:60:86:2c:08:10:9d:14:65:0a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jul 22 11:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f00e2b780aeef837298ab56fe5b549414db555f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:65:f0:20:11:c4:5f:ba:31:fe:40:cf:ba:
36:58:f7:9d:d7:a7:b2:42:eb:ae:4a:d8:74:77:ea:
d8:3f:2c:76:95:a3:8a:e3:b4:e2:e8:9a:11:81:b1:
c5:5c:71:86:cb:d9:49:66:62:fd:06:d7:d3:ad:68:
f3:15:ad:a0:1b:e9:4f:59:31:b6:1f:24:0f:71:e4:
1e:6e:85:17:36:3d:37:37:b8:36:39:61:42:ea:b2:
6d:39:57:94:2e:3c:6b:80:e5:6e:e9:c5:b8:90:68:
a5:63:e5:52:7d:9d:ef:ab:20:0a:68:9f:c4:8d:59:
31:7f:66:f3:08:f1:1e:d2:89:bc:9f:ac:57:44:a0:
29:0c:e7:ce:0e:6e:61:10:c9:87:7c:e2:ed:db:42:
f2:31:7b:09:75:d6:b4:ce:f2:dd:8b:6c:99:3d:66:
42:af:4f:54:62:a0:86:90:6e:82:b2:d3:14:79:a5:
07:a5:49:68:8a:e1:67:13:c5:a2:9b:80:fa:e2:a8:
53:ad:5a:c3:17:5e:ee:11:cd:ba:36:aa:3b:85:5d:
d7:a5:ae:27:eb:0a:30:c5:0d:3d:10:47:32:f7:28:
0d:14:9b:22:d8:de:c2:49:63:d9:43:33:9a:b9:cc:
95:f9:d7:35:dd:f1:e0:b9:d0:8d:ac:ac:63:17:c2:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:00:E2:B7:80:AE:EF:83:72:98:AB:56:FE:5B:54:94:14:DB:55:5F
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/DwDit4Cu74NymKtW_ltUlBTbVV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ef:c9:4c:3f:4e:43:fe:27:c4:03:28:9d:68:c9:88:dc:cc:
ce:e9:1f:5b:f7:61:9f:48:e7:8b:36:0f:28:87:db:2a:25:2b:
84:33:8d:c6:35:ff:e5:d9:95:a7:04:2a:41:5d:99:fc:a5:b2:
94:40:53:d6:77:43:0f:28:89:73:44:26:d9:46:24:67:81:d2:
e2:12:ce:18:b7:39:25:6b:11:c7:2d:d1:df:33:9b:4e:45:49:
4f:a9:52:06:98:e6:bb:25:c7:a4:a5:f6:e3:04:69:8c:fc:d1:
59:5a:51:a8:df:c7:77:9a:63:53:d9:7f:a1:bb:bc:fc:86:b5:
6b:f9:da:15:e8:47:2e:69:9a:0e:b5:5a:07:5e:b9:7f:ce:e1:
d7:f9:4c:c2:04:de:da:ec:05:50:ee:72:39:f6:64:8f:05:6f:
f9:d3:a9:6a:04:71:76:42:4d:79:fc:61:29:8c:28:c9:45:fc:
9b:75:46:63:69:b1:a5:71:52:57:94:57:27:9f:5b:72:26:1f:
b9:2c:e9:87:5b:39:6e:f3:ad:cd:dd:a2:ea:ac:89:4f:ad:05:
84:8a:b8:4e:0e:45:55:f9:10:33:a7:e1:48:a6:60:5f:8d:55:
2e:54:63:e6:31:96:58:2b:72:90:58:db:15:54:77:19:68:d1:
ba:63:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:46 2025 by rpki-client