Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/d_H-0xRZQKS1JPQqS6Yxz194sbY.roa
File: d_H-0xRZQKS1JPQqS6Yxz194sbY.roa (raw, json)
Hash identifier: cYMZKczH9EgMtb7JvQlzh3000wT2A5ylQp9A5sIZpiE=
Subject key identifier: 77:F1:FE:D3:14:59:40:A4:B5:24:F4:2A:4B:A6:31:CF:5F:78:B1:B6
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 050D76EB
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/d_H-0xRZQKS1JPQqS6Yxz194sbY.roa
Signing time: Sat 01 Jan 2022 05:58:15 +0000
ROA not before: Sat 01 Jan 2022 05:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12437
IP address blocks: 212.101.192.0/19 maxlen: 24
2a06:7880::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84768491 (0x50d76eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jan 1 05:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77f1fed3145940a4b524f42a4ba631cf5f78b1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:f7:4c:d9:a9:9e:f6:8e:2d:42:68:1c:7e:
6f:56:c5:5e:08:19:30:a4:d1:88:eb:d8:a9:48:c5:
ec:88:db:a0:81:37:3c:c0:93:d3:62:51:c3:d5:91:
d7:29:fb:49:bf:93:c7:52:64:6c:30:ae:5b:76:7b:
f8:82:14:f9:f4:71:8f:de:43:1f:0d:e2:c0:2f:ae:
25:1c:5c:d6:e2:4e:0e:98:d0:ef:f1:18:29:ba:5b:
d4:6d:b7:dd:0e:29:7d:a4:ea:e7:27:9a:0c:6a:20:
08:5e:43:49:82:64:c5:73:d9:34:b8:82:ef:ed:99:
27:12:0f:5e:75:0d:02:c2:f9:34:c0:10:0a:4b:3c:
0d:af:fe:48:1c:00:8d:36:4a:a0:ba:24:8f:6a:2e:
21:2e:1d:53:83:1a:7e:69:a5:63:0c:44:89:3b:4d:
1c:eb:41:80:52:24:b9:99:1a:65:b5:f6:a7:64:3e:
16:ee:2b:44:d4:e1:e0:26:14:ca:81:3c:5e:d7:ff:
82:43:78:72:4f:9f:84:4a:28:57:5a:1d:b2:00:6d:
1d:3b:2a:75:0a:32:bc:2b:4c:4a:d6:80:65:9a:93:
a7:b7:46:d0:e5:8e:b2:bf:f6:82:5d:b2:aa:24:50:
c4:f7:02:21:41:6b:5b:21:f3:a2:db:d6:17:cd:77:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F1:FE:D3:14:59:40:A4:B5:24:F4:2A:4B:A6:31:CF:5F:78:B1:B6
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/d_H-0xRZQKS1JPQqS6Yxz194sbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.101.192.0/19
IPv6:
2a06:7880::/29
Signature Algorithm: sha256WithRSAEncryption
05:ed:1a:4d:fd:69:ad:e6:73:43:b2:d2:e8:32:24:6e:60:59:
3c:d1:4b:09:d1:e9:92:c4:fa:53:3b:2e:55:ed:b7:17:5c:27:
63:85:bd:1c:40:b3:1c:44:6e:08:99:fd:45:50:59:23:26:7e:
c4:8b:29:3c:d6:1f:e1:73:10:cd:1b:1a:ee:a0:a2:35:6f:14:
7e:a2:19:a1:3c:9f:cc:e6:b4:6d:ca:0c:d4:7a:00:01:0a:e7:
4e:a4:d6:05:1b:35:48:a1:96:b1:6e:46:9c:e3:08:7d:e6:77:
1f:73:50:8a:2b:80:97:af:3e:56:b3:e4:a9:dd:42:cd:f9:18:
8e:cb:52:ec:f3:06:2d:8f:38:6f:1a:40:4b:4f:4c:1e:f3:68:
9c:27:59:2a:24:38:66:e6:34:25:1c:e8:2d:98:bf:b8:af:3a:
f9:1a:a1:dc:19:82:49:b7:f4:eb:47:08:04:e3:c4:10:84:ee:
ad:37:f4:eb:aa:d3:32:8c:08:d7:0d:e0:01:c8:74:80:59:10:
8a:b9:a6:87:ae:ce:97:66:5c:4d:ed:ef:6e:38:17:2b:1a:98:
a5:30:e2:ba:03:5b:9c:a4:76:c9:f9:d2:c8:15:a1:dd:36:5c:
9b:8c:51:b8:40:4e:d9:f0:6d:00:f5:0e:bb:09:3e:6d:11:34:
ac:c4:42:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:11 2025 by rpki-client