Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/As_WT1jlu0GkkVga5uo1cXraRbw.roa
File: As_WT1jlu0GkkVga5uo1cXraRbw.roa (raw, json)
Hash identifier: O34L8zCCO5NXCP6f6TySZHrA84MasF6LMo8hx+chSuY=
Subject key identifier: 02:CF:D6:4F:58:E5:BB:41:A4:91:58:1A:E6:EA:35:71:7A:DA:45:BC
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 0189E62B851757FF783F8767557681B6CFF1
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/As_WT1jlu0GkkVga5uo1cXraRbw.roa
Signing time: Fri 11 Aug 2023 19:55:58 +0000
ROA not before: Fri 11 Aug 2023 19:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212165
IP address blocks: 217.196.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e6:2b:85:17:57:ff:78:3f:87:67:55:76:81:b6:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Aug 11 19:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02cfd64f58e5bb41a491581ae6ea35717ada45bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:03:63:25:f5:cb:40:74:49:de:5f:0d:7b:
bc:6e:ec:25:de:7f:0a:09:1c:f2:28:82:d4:32:38:
a4:05:fe:79:8c:c9:17:21:22:19:be:53:19:71:e4:
99:89:6c:80:8a:6b:24:ab:ce:14:9f:fe:ef:3c:c2:
2c:58:a9:4c:46:92:cd:f2:ab:1b:93:d0:9a:1f:50:
d3:3f:d2:f0:31:b2:b6:7e:49:b2:1a:73:ef:22:e6:
63:39:d4:40:f1:c9:95:75:b8:b0:79:80:d1:9a:d5:
e7:c7:f4:f5:04:51:2f:57:e7:21:cf:68:93:e5:c2:
86:81:ba:97:73:bd:63:c6:06:44:70:04:aa:70:20:
d2:29:78:6e:4c:f3:3b:7f:36:19:2b:55:f7:c6:a5:
3a:45:ac:7d:42:e9:19:0f:5f:2c:75:80:3c:bf:84:
8c:6c:52:cb:6c:58:cb:ab:30:7b:d1:3b:38:b1:97:
9c:91:a2:17:30:b0:cb:2b:fc:b2:ed:af:bc:e0:a1:
da:68:f5:a7:ff:c4:ac:50:94:58:51:87:a7:5a:60:
76:a2:f1:f4:d1:5f:b2:17:52:c4:bf:26:a8:74:73:
ab:11:d0:74:1b:e0:64:61:18:c6:8a:78:d1:7b:f7:
5d:74:87:bc:5d:fe:8e:02:61:01:46:37:15:85:d8:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:D6:4F:58:E5:BB:41:A4:91:58:1A:E6:EA:35:71:7A:DA:45:BC
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/As_WT1jlu0GkkVga5uo1cXraRbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.103.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f6:26:f3:da:31:18:42:0f:15:07:cd:10:83:bf:94:53:33:
f1:9d:64:1b:4b:54:e1:af:60:0f:32:12:7b:70:38:f1:89:54:
dd:dd:f4:2b:fd:6d:3a:8c:8f:2e:fd:0c:a3:d5:08:94:fa:e6:
15:87:ea:35:25:8c:a2:9a:2d:ff:5f:29:53:f5:a5:66:41:3f:
8d:2d:3b:18:0f:ba:ff:88:5d:eb:97:ed:7f:c5:9e:7e:94:bc:
84:7f:f3:33:13:45:c8:df:9c:0b:23:ce:a6:f6:19:c4:04:5b:
c7:c4:9d:80:d8:49:f6:bd:20:ef:9e:0d:5c:3b:3b:e8:78:f1:
9e:18:e0:59:31:e4:6b:24:b4:e1:5d:ea:ff:7a:59:e1:de:44:
f8:07:45:f7:6e:dd:ff:1e:c4:c0:8f:4a:3a:65:cb:9a:84:4e:
45:0f:91:61:12:53:6b:9c:5d:23:2b:0b:6f:ee:2d:ac:9a:71:
f0:39:4a:a2:df:3a:78:eb:1e:c1:8f:74:68:f2:44:28:a2:bf:
1d:8a:28:07:c4:c3:3f:eb:93:4b:09:75:d7:05:28:e4:58:8c:
08:d8:34:40:7b:86:28:0f:c0:b5:b1:cb:50:66:ce:6c:ec:9f:
b3:8e:2f:22:b3:0f:e8:be:13:d4:57:c5:9f:76:a1:f1:18:12:
89:0f:9a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:34 2025 by rpki-client