Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/chY7Q8lG08al_I8lbx-u2m8A0Yw.roa
File: chY7Q8lG08al_I8lbx-u2m8A0Yw.roa (raw, json)
Hash identifier: rAucGSR+nMWuuP67JQpOnVZYgidFHUoeYwBKs/A9tdY=
Subject key identifier: 72:16:3B:43:C9:46:D3:C6:A5:FC:8F:25:6F:1F:AE:DA:6F:00:D1:8C
Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial: 018B239BD8D417EC90F6ED122AB0318F7C0D
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/chY7Q8lG08al_I8lbx-u2m8A0Yw.roa
Signing time: Thu 12 Oct 2023 11:18:17 +0000
ROA not before: Thu 12 Oct 2023 11:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199484
IP address blocks: 212.101.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:9b:d8:d4:17:ec:90:f6:ed:12:2a:b0:31:8f:7c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Validity
Not Before: Oct 12 11:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72163b43c946d3c6a5fc8f256f1faeda6f00d18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:62:74:4e:0d:6b:46:64:66:ff:09:7f:f0:67:
7c:03:5c:12:d8:52:59:5e:f0:3f:92:3b:2e:37:a4:
cb:f2:66:d6:3f:fb:81:2f:9e:c9:c6:66:64:9e:b1:
7f:ef:87:e0:86:1b:26:ac:c7:79:78:4b:21:b4:9a:
2d:0c:d2:a1:cd:4c:d8:a5:56:bd:d3:e5:60:f8:6f:
0e:0a:d4:a3:5b:df:85:0e:c5:fb:0d:58:8e:71:8b:
fb:bb:74:66:c1:d8:8d:33:e7:f9:eb:7e:39:0e:78:
c2:63:cb:27:cf:86:3d:ca:09:59:91:1f:73:12:ff:
d3:67:fb:1a:83:fd:22:d6:32:2f:d7:f9:2d:b5:88:
d7:54:6c:55:a4:fc:5e:1b:27:f4:bd:8a:c5:b0:c0:
01:3b:57:09:34:97:c0:3d:1c:96:9d:22:1e:9b:63:
1a:77:89:8b:61:27:83:c1:50:29:1f:1a:57:95:95:
8e:2f:2d:27:ab:6d:49:ce:80:a6:ba:38:ae:33:a8:
c3:7d:9f:1d:05:16:6a:30:02:fb:80:b2:6f:4d:99:
56:17:05:79:30:c7:7d:e1:10:36:96:04:eb:43:f1:
76:2f:f3:f6:b6:78:91:76:33:d2:f6:8d:c9:2d:6b:
67:a8:b3:39:c6:74:b7:c5:6b:7e:50:fc:d5:52:cc:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:3B:43:C9:46:D3:C6:A5:FC:8F:25:6F:1F:AE:DA:6F:00:D1:8C
X509v3 Authority Key Identifier:
keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/chY7Q8lG08al_I8lbx-u2m8A0Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.101.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:22:c5:c0:a1:62:31:7d:a4:ec:46:4e:f4:8c:86:a5:cd:fb:
49:4e:80:46:1c:7d:2b:ab:ef:a8:22:d4:fa:dc:f2:32:08:73:
12:4c:4f:16:18:bb:b3:28:80:71:cb:e9:40:72:70:e4:03:47:
e7:a6:b3:ca:1e:d2:ec:66:96:70:19:9f:e9:05:53:27:7d:f4:
c0:69:3f:a7:ac:15:91:68:02:88:cc:81:10:b1:90:63:23:f3:
6d:d8:f4:2b:c8:ba:c3:90:0c:56:2c:86:2f:ad:07:cb:ad:6c:
a3:fa:0e:a4:eb:5c:2f:e4:42:82:67:f6:e6:36:4c:08:fb:98:
21:ef:a5:cb:34:74:33:a5:31:fe:c4:0d:40:8d:5b:d2:8c:af:
61:80:1a:3f:60:3d:63:2c:9d:cb:32:47:f1:6b:f2:f9:35:28:
b8:a7:e9:9d:25:6c:ea:21:2e:0f:5a:6a:85:55:1d:9b:e1:89:
99:78:33:91:2f:b3:0c:93:84:44:c5:e0:3f:b5:40:52:36:51:
ab:98:44:05:19:68:01:79:19:b2:17:bb:33:93:78:f3:21:27:
e2:4e:9c:2f:70:38:43:6f:3d:13:52:58:19:3f:89:4d:c8:13:
41:58:3d:d6:c6:77:36:9c:14:34:9d:d6:21:c3:fc:2c:3c:4e:
53:77:f8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:18:25 2025 by rpki-client