Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/hkXX8d7e2qdQtJdaEfenIzGfpAo.roa
File: hkXX8d7e2qdQtJdaEfenIzGfpAo.roa (raw, json)
Hash identifier: /wy6uNimLEzill6pPKsZiznjhoXd2vTx8yJbt7NpH34=
Subject key identifier: 86:45:D7:F1:DE:DE:DA:A7:50:B4:97:5A:11:F7:A7:23:31:9F:A4:0A
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 1758903F
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/hkXX8d7e2qdQtJdaEfenIzGfpAo.roa
Signing time: Sat 01 Jan 2022 16:03:57 +0000
ROA not before: Sat 01 Jan 2022 16:03:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202637
IP address blocks: 188.213.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391680063 (0x1758903f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8645d7f1dededaa750b4975a11f7a723319fa40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:a4:f9:9e:de:84:2e:a4:96:0a:9f:29:84:
23:a2:29:49:b5:4f:19:b5:e1:14:1a:fd:aa:29:01:
c4:a1:b3:e5:bf:17:2a:91:f6:1b:43:6c:58:b6:71:
f4:f6:04:4b:c8:5d:52:34:6f:59:29:2f:87:ef:69:
35:6d:2b:f4:c2:ed:63:7b:43:61:86:11:e8:ae:f5:
b2:b9:de:56:3f:cf:85:51:6f:f5:4f:64:82:c8:4d:
50:59:07:b3:14:42:2e:fe:d6:79:52:86:e3:c7:11:
2f:e2:93:2e:fc:8c:39:de:94:d8:10:48:e8:a5:1c:
51:26:20:e8:8a:06:33:1c:a6:39:77:26:c1:fd:8e:
d2:87:a6:ae:39:e8:bb:04:1e:81:e8:bb:9b:c1:02:
c8:b8:c9:c0:5d:ab:75:ba:5a:f2:e1:e8:4c:1c:15:
aa:f0:82:db:44:9c:d4:5c:32:8f:44:38:69:e6:5d:
2b:0b:5e:b0:95:96:d2:29:14:94:8b:4d:e2:a0:2f:
ed:50:3d:07:dc:8c:fc:ac:3e:52:95:60:37:29:31:
e8:4a:ab:8c:64:e5:cb:b1:65:ff:b1:5b:02:14:6e:
3f:82:7a:3e:dd:9e:e0:0a:f0:f3:ce:8d:b2:30:8e:
9c:68:cf:0b:f7:59:6a:f8:b5:c8:84:55:8f:87:b4:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:45:D7:F1:DE:DE:DA:A7:50:B4:97:5A:11:F7:A7:23:31:9F:A4:0A
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/hkXX8d7e2qdQtJdaEfenIzGfpAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.48.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d5:b8:41:83:fb:ae:7c:2d:73:b9:0f:76:cb:eb:7e:35:65:
f1:b5:2f:d1:c3:20:99:aa:d1:a1:33:83:02:50:93:de:13:dd:
35:0a:66:b1:72:1c:48:08:e1:22:c9:37:a0:00:3b:ce:6b:a7:
f2:52:84:84:8d:4d:ce:20:52:e5:b5:e3:70:62:77:7a:4a:40:
75:4c:c6:3e:92:78:d7:d1:ae:81:c7:14:a5:13:25:5b:97:ec:
60:43:ac:7a:31:80:8d:8c:53:2c:0b:3e:9d:41:31:b1:f4:40:
41:73:f4:32:3f:8b:ee:6f:12:ae:54:4c:91:62:0c:ad:0a:d0:
1c:ac:75:ea:96:d5:c1:ef:ca:cd:ab:a7:3c:65:30:d4:7f:30:
12:54:10:7e:74:3d:b8:12:7e:e9:2a:fc:42:dc:24:37:1b:59:
a7:88:6f:84:92:54:12:3a:a4:41:2f:83:38:54:51:d1:89:32:
7d:ce:32:bf:08:94:7c:b8:b3:dd:4b:da:7f:29:88:d7:15:2d:
cc:e3:6a:27:2c:67:6c:bc:98:84:27:16:03:f1:91:63:08:3a:
cf:29:4b:18:32:18:a7:29:75:ea:e3:5f:5f:bf:9b:c7:8a:cc:
ef:d8:03:0d:2e:aa:90:b1:a0:0c:2b:8e:30:85:31:e0:cc:d9:
07:33:75:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:38 2025 by rpki-client