Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/d_HvCTN72pUMiUuaujVWZiz8vVI.roa
File: d_HvCTN72pUMiUuaujVWZiz8vVI.roa (raw, json)
Hash identifier: lL5lyRt4MqP8xUEESfdMXxTuYVAgnZNEtcvrFmihRu0=
Subject key identifier: 77:F1:EF:09:33:7B:DA:95:0C:89:4B:9A:BA:35:56:66:2C:FC:BD:52
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01856D41922FCEFB1DBA6C572BDF4BFA8E15
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/d_HvCTN72pUMiUuaujVWZiz8vVI.roa
Signing time: Sun 01 Jan 2023 12:14:51 +0000
ROA not before: Sun 01 Jan 2023 12:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209575
IP address blocks: 213.208.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:92:2f:ce:fb:1d:ba:6c:57:2b:df:4b:fa:8e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 12:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77f1ef09337bda950c894b9aba3556662cfcbd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:dc:d3:f3:7f:3f:4a:70:44:42:20:f2:fe:
b8:4d:30:9f:7a:7e:de:48:3f:fc:3f:29:38:83:e8:
d7:a6:e4:88:0a:a7:79:2b:62:f5:e7:58:e2:d4:a9:
2e:e9:73:74:2a:3a:21:02:6f:c9:0b:6c:5c:23:3e:
f7:c1:52:12:41:2e:98:9a:36:d1:5e:4d:cc:d8:c8:
a3:11:e8:f9:c1:0e:1a:85:0a:10:21:e6:a2:ed:3f:
63:da:f1:f6:c7:a2:fd:27:1a:67:65:22:15:97:36:
c4:36:98:85:79:8b:f2:7c:84:05:14:85:c3:1a:ac:
24:12:be:93:78:a3:ce:7e:29:2c:49:a8:b5:e2:e1:
7a:74:e9:b6:1e:4f:fc:37:3d:78:24:ca:84:a0:b0:
e7:a8:48:25:ca:78:ef:70:01:8b:fd:87:3b:44:5f:
09:52:b9:45:d4:d5:0c:0e:fd:b9:f0:12:04:ce:da:
4e:b7:81:14:d0:8d:fd:9e:e6:96:57:0a:9f:65:90:
80:d8:6a:fb:6d:70:8f:e1:00:f7:c3:e5:32:33:1b:
91:38:88:81:c0:90:ef:82:9a:89:f6:5c:d2:10:f5:
eb:89:9b:df:5d:76:1f:0e:14:ba:1d:fb:65:72:5e:
fd:92:ed:bc:d2:48:a9:80:10:1a:db:75:8f:23:c5:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F1:EF:09:33:7B:DA:95:0C:89:4B:9A:BA:35:56:66:2C:FC:BD:52
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/d_HvCTN72pUMiUuaujVWZiz8vVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.208.143.0/24
Signature Algorithm: sha256WithRSAEncryption
17:58:a3:fe:a1:bb:8b:74:d9:99:ab:ba:66:32:7a:09:e6:14:
85:1f:e3:bd:b3:8e:ca:31:23:66:8f:c5:82:24:e5:ec:f9:5c:
b7:d8:c0:25:4b:04:2c:53:34:a0:dc:6a:e6:a0:2c:98:e0:87:
fc:f9:fe:85:15:b7:a8:2e:4f:70:53:65:6e:9d:c7:d9:bc:cc:
fe:83:27:2f:42:d6:e3:a4:f5:ca:03:37:ab:a9:33:e2:2d:de:
68:24:6d:f4:ea:fb:e3:8f:9a:24:27:5e:a1:b1:eb:ac:6b:37:
d7:b1:81:de:ab:9f:5d:fb:f1:99:11:27:4a:f8:44:a5:89:1f:
67:2f:8a:24:55:dc:93:56:a1:42:fd:58:f1:c4:41:cf:f0:21:
95:d5:bc:13:0e:7f:0e:18:81:9a:6f:18:8c:bc:fb:a2:46:90:
f5:2a:b8:10:e6:34:3c:01:41:53:2e:31:dc:b3:1a:c5:7a:53:
ae:64:f0:81:e7:c5:b2:20:81:ae:21:36:1e:ee:2c:47:11:cd:
e1:2e:ce:72:c2:5e:f6:24:f3:6f:5b:e0:3f:61:c9:c8:4a:9b:
aa:c5:bf:1c:9a:5d:b3:01:31:94:95:cf:35:e1:49:e8:02:a6:
9f:c7:ae:85:e3:85:2a:67:24:99:16:38:36:93:7d:74:6b:03:
5d:be:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:16 2025 by rpki-client