Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/RLfFULSUry6v1kTPoawvObB39LA.roa
File: RLfFULSUry6v1kTPoawvObB39LA.roa (raw, json)
Hash identifier: qYKRtQutJgPKbgIXbeP3GEzmtg0S3bPcaToJqOievWI=
Subject key identifier: 44:B7:C5:50:B4:94:AF:2E:AF:D6:44:CF:A1:AC:2F:39:B0:77:F4:B0
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 018B4D79E4D2AE37EF10FAC72156DDE0FD6D
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/RLfFULSUry6v1kTPoawvObB39LA.roa
Signing time: Fri 20 Oct 2023 14:25:15 +0000
ROA not before: Fri 20 Oct 2023 14:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56958
IP address blocks: 201.46.112.0/23 maxlen: 24
178.211.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:79:e4:d2:ae:37:ef:10:fa:c7:21:56:dd:e0:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Oct 20 14:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44b7c550b494af2eafd644cfa1ac2f39b077f4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:a4:c7:1b:8e:bd:07:80:fe:0c:fe:bb:81:
92:4b:9c:ab:7d:4c:ba:f4:28:1a:de:c5:df:05:92:
32:c4:bd:3e:e5:e9:3a:04:d5:4b:a7:b9:20:40:46:
4f:4e:3b:e3:e6:28:98:98:62:07:68:b5:4d:60:76:
d7:c1:07:36:3b:51:c0:b7:fa:91:f1:a1:78:75:90:
fc:87:a8:7c:20:80:b1:e3:e1:33:90:5c:f8:8e:2e:
55:b6:73:3c:c1:58:e5:73:9c:f0:2a:99:69:a0:25:
d7:fe:31:a6:5d:a4:43:18:fa:ee:9e:7d:5b:84:6a:
2a:22:4a:21:39:83:3c:82:91:85:7a:55:33:2f:d2:
15:4d:3e:98:44:5c:87:99:45:b5:30:e1:82:ab:fb:
16:41:16:d3:b5:54:3a:a5:54:8b:31:e5:c6:80:d8:
01:c2:10:00:56:35:88:2a:f4:0b:35:76:83:9c:9c:
f7:7f:35:12:d1:10:e5:c4:23:4a:ad:2d:b4:fa:80:
45:c1:0c:5a:e0:66:ba:d1:06:1f:33:7c:7e:2f:85:
88:5d:92:ab:26:51:47:f5:e0:77:49:58:fa:ab:63:
86:9c:63:6c:08:17:48:ae:d3:0d:ce:e5:b6:e4:9b:
10:ed:e3:a1:92:1f:08:bf:3e:6b:fb:ff:e8:46:5a:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B7:C5:50:B4:94:AF:2E:AF:D6:44:CF:A1:AC:2F:39:B0:77:F4:B0
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/RLfFULSUry6v1kTPoawvObB39LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.133.0/24
201.46.112.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:52:27:5b:9c:73:45:74:21:05:05:e8:ae:28:ca:56:6b:25:
15:2f:dd:7c:36:81:86:5f:44:ae:c2:e9:5d:e5:bf:66:94:06:
5b:8c:d4:e9:76:dd:84:8b:cb:c6:d4:b4:8f:b5:e5:0a:6e:c9:
42:5b:f4:ac:78:7a:72:12:2c:31:c6:2e:15:d3:f7:a2:c4:c2:
1f:d1:e4:e4:ba:e0:db:86:c2:3a:29:cc:de:46:52:bd:5e:72:
c5:51:71:e6:58:03:49:99:57:69:59:2a:1c:c9:76:fe:22:51:
7c:a1:6b:72:dc:57:fd:5d:dd:47:a8:b5:52:0a:f1:0f:e9:a5:
79:a9:81:77:e0:29:83:03:66:f9:16:e8:23:b0:db:af:73:26:
40:fa:10:36:dc:f0:a1:b1:0d:cf:d6:55:8f:90:67:26:04:25:
de:55:3f:49:3a:df:dd:68:84:a7:76:53:13:36:f2:67:1c:9b:
53:f6:47:71:2c:30:63:60:f0:5a:45:b7:b4:02:80:b5:82:32:
93:fe:7d:ae:59:4e:9f:cf:0f:f9:f3:51:27:fb:48:0f:c8:e1:
f8:60:18:05:eb:ce:e2:ca:72:80:05:6c:38:76:f9:84:ff:c1:
45:cd:b7:2e:19:48:f3:7f:7c:36:cf:05:ae:6f:f7:7f:2f:20:
2f:a3:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:34 2025 by rpki-client