Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/b5UdoCjuIxzNZJF8Y6Vkpq7-flw.roa
File: b5UdoCjuIxzNZJF8Y6Vkpq7-flw.roa (raw, json)
Hash identifier: LE8A5sCEov6wprPP3BrI2qfulsD+rqNKMfleAdM7lU8=
Subject key identifier: 6F:95:1D:A0:28:EE:23:1C:CD:64:91:7C:63:A5:64:A6:AE:FE:7E:5C
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 018571D7BB173A807070BA9913125108FC07
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/b5UdoCjuIxzNZJF8Y6Vkpq7-flw.roa
Signing time: Mon 02 Jan 2023 09:37:21 +0000
ROA not before: Mon 02 Jan 2023 09:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 134.221.0.0/16 maxlen: 16
192.43.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:bb:17:3a:80:70:70:ba:99:13:12:51:08:fc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Jan 2 09:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f951da028ee231ccd64917c63a564a6aefe7e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:18:d6:9e:30:57:c0:15:25:c4:85:6a:47:
08:7c:9a:fa:42:58:57:70:e8:b3:7a:20:6f:40:68:
92:82:6a:2c:25:28:48:8c:42:f7:5e:cb:61:a4:79:
54:cd:2a:90:51:6f:02:22:05:84:ed:df:8f:05:eb:
6f:eb:fe:a1:51:e6:02:a0:ae:71:82:95:92:3b:dd:
33:91:c9:98:8c:9b:e4:44:b3:63:00:65:e7:62:32:
32:16:06:d8:01:7c:d2:b2:a6:69:0a:6e:a2:e0:35:
41:52:80:48:ae:de:4a:5a:75:b4:c5:12:45:38:41:
cd:a7:f1:ac:9b:b1:b2:f5:b3:a3:2f:30:e1:4a:d0:
2f:a3:b4:e1:13:50:a1:11:f4:b5:66:b3:b9:cd:01:
58:21:13:73:ee:a6:93:f8:c8:b4:ea:6b:5a:81:c1:
26:17:0f:e2:8a:d0:6b:31:a8:e7:6d:34:bf:4c:b6:
b8:36:39:36:56:2d:0e:c9:4b:a8:1d:6c:bb:9c:98:
98:ad:5b:ba:3c:c3:b4:36:68:70:26:a4:b6:d2:73:
dd:48:f1:d7:4d:e4:3e:02:50:9c:8d:fd:98:d4:cc:
6f:79:d9:9d:f6:ef:95:9c:96:27:c1:08:8c:06:c0:
a5:c2:8c:dd:e0:89:e1:82:c5:31:58:c0:8c:f0:5f:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:95:1D:A0:28:EE:23:1C:CD:64:91:7C:63:A5:64:A6:AE:FE:7E:5C
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/b5UdoCjuIxzNZJF8Y6Vkpq7-flw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.221.0.0/16
192.43.212.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b0:3d:68:74:bb:c6:24:38:b6:a8:40:84:ea:49:87:d3:1e:
7f:19:11:85:80:27:e3:dc:54:c9:8b:34:1f:1b:53:63:51:a3:
07:0c:ed:cb:cb:45:c9:92:c4:b4:86:58:58:0f:e4:e0:de:94:
da:27:01:17:69:98:3b:53:a9:cd:72:0e:1f:15:90:89:92:3e:
41:d9:7f:e6:6c:7b:b2:a2:a2:27:a7:15:f9:ce:97:04:84:1e:
6d:5a:81:88:92:c1:01:87:de:1f:65:1f:9a:84:8a:a8:10:a7:
14:26:20:8e:5b:be:14:1a:97:ff:e7:5d:51:f1:97:2b:2d:78:
16:18:5a:92:ca:de:38:db:91:57:e3:17:23:40:01:3d:62:e7:
36:e3:29:2a:76:74:23:02:bb:f5:99:a0:3c:0b:b3:01:9d:96:
31:cd:75:1e:80:48:6b:88:61:a6:39:34:d7:b3:b6:e9:42:7b:
db:5f:cb:f7:99:65:73:eb:71:09:62:34:a4:25:0b:fa:0d:bb:
3e:14:3c:3e:c5:38:7e:84:ae:20:ba:e5:9c:a4:bc:77:2d:d3:
d8:2e:f1:4b:1b:22:e9:cb:69:2b:59:12:c3:a6:6e:b9:8b:3a:
7e:60:1f:8a:81:57:56:ce:a7:0e:68:c7:45:6d:b7:0e:32:b0:
74:58:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:04 2025 by rpki-client