Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/2APNfwCdF1EzIRyIjTIYwMyLK-o.roa
File: 2APNfwCdF1EzIRyIjTIYwMyLK-o.roa (raw, json)
Hash identifier: t1BeqVBE9nbIYWlD4nAEXo6lciIwSt6NCF2YRaATkrI=
Subject key identifier: D8:03:CD:7F:00:9D:17:51:33:21:1C:88:8D:32:18:C0:CC:8B:2B:EA
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 084E8C4F
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/2APNfwCdF1EzIRyIjTIYwMyLK-o.roa
Signing time: Sat 01 Jan 2022 12:57:48 +0000
ROA not before: Sat 01 Jan 2022 12:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209770
IP address blocks: 213.232.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139365455 (0x84e8c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: Jan 1 12:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d803cd7f009d175133211c888d3218c0cc8b2bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:32:68:a5:a1:9e:11:2a:b1:fe:68:01:e5:
ff:c4:b5:d1:a7:04:f0:3a:52:0b:25:7f:e5:39:6d:
ff:1a:15:c4:ba:be:a2:09:d4:b1:85:a9:b9:c0:ac:
bb:8b:fc:40:3d:f6:8f:af:e4:95:be:f3:3e:b8:a2:
fb:ee:be:0c:f9:e9:8c:9c:2b:d5:b5:dd:13:3c:64:
54:0b:a5:00:a2:06:63:6a:dc:a2:4b:a3:bc:66:74:
47:d9:47:3e:9b:68:a2:aa:36:28:ef:df:2d:d7:a2:
04:6c:86:8b:cf:07:4a:15:f9:74:47:39:a1:62:ef:
44:4f:64:ba:5c:83:bf:c8:08:27:2b:20:d7:3e:75:
45:b1:36:84:11:53:28:31:2b:8a:50:69:99:20:40:
b4:b5:73:e4:67:15:cf:a4:b2:49:db:4e:0d:ae:8f:
de:e1:18:94:36:b7:14:c6:39:82:d6:16:88:56:38:
63:ff:7f:e0:6e:11:22:d4:4a:41:e2:79:89:b5:cb:
91:e9:2a:54:15:b3:e8:56:f1:5e:97:c5:69:ee:36:
90:6c:44:c8:fd:6b:14:26:0b:aa:2b:1d:d9:50:56:
6d:20:84:21:41:ce:61:2e:fb:ee:9c:62:22:ad:0c:
0f:5e:77:c9:f1:cc:92:02:43:59:b6:2f:3c:70:1c:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:03:CD:7F:00:9D:17:51:33:21:1C:88:8D:32:18:C0:CC:8B:2B:EA
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/2APNfwCdF1EzIRyIjTIYwMyLK-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:b6:3f:0e:f7:a5:18:f5:5e:e6:3b:c1:75:94:3a:a9:ab:f4:
29:23:ca:6b:61:f8:c4:a7:00:c9:ed:5e:b1:0f:b7:ec:ff:b9:
18:5c:48:a9:f4:2e:65:62:6a:a7:4b:84:6c:2a:d5:27:78:22:
aa:13:cf:12:d1:a0:63:ee:f9:2c:d0:22:79:a3:de:e3:62:f0:
7b:a2:f2:92:5d:3c:62:fb:b6:8f:ce:f9:10:2b:93:4f:2b:20:
c1:73:cc:8b:c7:5c:c7:0c:aa:8a:66:a0:af:9d:cd:73:91:b4:
91:c5:52:e3:89:a3:5d:f3:82:6e:e6:13:c2:ec:fa:6c:b2:13:
de:40:fc:cd:31:3c:c5:f8:59:aa:23:ce:87:11:39:76:06:b3:
1d:3c:1b:2e:31:1a:28:be:9e:21:ab:c7:36:4b:86:be:71:c2:
36:47:fb:52:e3:f8:a3:c3:17:27:c7:97:e1:4c:71:b2:ca:86:
5c:8d:e2:d5:02:ad:af:d7:95:b9:65:79:61:33:e1:c8:78:dc:
cf:57:db:19:fe:08:d2:4c:43:39:b3:15:d2:10:5f:22:b9:62:
e7:46:4f:bf:33:a1:21:ee:4d:49:9b:50:23:11:31:30:21:e6:
4d:7f:87:ea:cb:f6:8b:22:78:81:03:e1:23:4e:3d:ea:21:d6:
35:9d:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:32 2025 by rpki-client