Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/aD1lP1pMCkopP56f5j5yqWdYaDM.roa
File: aD1lP1pMCkopP56f5j5yqWdYaDM.roa (raw, json)
Hash identifier: JgPuq8pZ91SDaxHAvYlyE6SM0wMO+hMOdtTPeSskzrY=
Subject key identifier: 68:3D:65:3F:5A:4C:0A:4A:29:3F:9E:9F:E6:3E:72:A9:67:58:68:33
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 03D2A9ED
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/aD1lP1pMCkopP56f5j5yqWdYaDM.roa
Signing time: Sun 22 May 2022 15:05:28 +0000
ROA not before: Sun 22 May 2022 15:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211921
IP address blocks: 176.103.212.0/24 maxlen: 24
176.103.213.0/24 maxlen: 24
176.103.215.0/24 maxlen: 24
176.103.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64137709 (0x3d2a9ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: May 22 15:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=683d653f5a4c0a4a293f9e9fe63e72a967586833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:e0:c6:1d:70:1c:cd:c4:29:b8:79:a2:3b:
e1:63:9e:d3:37:7c:e2:bb:8a:da:72:cb:0c:26:25:
df:aa:c2:b2:61:4c:ac:dc:10:58:77:a5:b9:5f:46:
11:17:90:9a:cc:b3:f0:be:37:8d:83:92:64:ed:c0:
f6:85:aa:10:f4:ff:2c:c6:3f:c8:4a:1b:9a:72:71:
ca:19:aa:7d:79:d9:75:1b:33:77:65:c6:c9:02:16:
a7:c2:c0:e8:bb:45:86:82:04:4c:e8:5d:23:84:fb:
35:da:7e:09:b4:5d:d1:0f:a0:9b:8d:43:8f:41:66:
3d:57:62:b9:f2:3b:e0:6a:3a:e8:9d:61:9f:a7:13:
39:e0:70:94:2b:d6:2e:3c:d0:01:02:08:7a:fa:ea:
1a:e1:e1:85:8e:d0:24:db:f1:77:f6:f8:6f:15:ee:
3c:d9:da:be:64:26:e1:62:9b:30:e9:e4:57:cf:1d:
7c:a8:77:4f:88:dc:75:21:75:8c:aa:87:fa:47:ec:
17:c8:c1:e9:82:05:64:c9:f7:f7:61:54:c9:22:f9:
55:af:76:c0:38:f0:d9:41:85:95:d3:16:36:4c:b8:
20:20:14:b1:5c:8e:3d:07:84:e8:fc:d6:81:e7:99:
a3:bf:bd:b3:1e:f3:62:30:f6:a3:6c:75:bb:54:78:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3D:65:3F:5A:4C:0A:4A:29:3F:9E:9F:E6:3E:72:A9:67:58:68:33
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/aD1lP1pMCkopP56f5j5yqWdYaDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:7e:b1:e8:b8:7a:ac:f4:27:a5:bc:db:60:0a:d7:dd:7c:c5:
01:76:04:88:e4:4a:bb:4e:ed:f7:ad:27:b1:9a:47:af:26:e6:
0e:e4:21:26:f8:eb:47:3c:a8:d6:48:0a:8d:ae:01:cd:ca:fd:
72:31:fc:3f:72:92:aa:7d:09:c5:3f:1b:44:80:ad:60:c5:5f:
92:39:14:a8:b8:41:b4:0f:fa:5c:28:8c:df:71:8d:3f:de:ba:
f3:79:bf:e6:39:f8:ac:5e:dd:73:4f:a0:cd:90:03:5e:17:f3:
59:a2:18:48:e7:8c:b7:3e:58:e0:03:e7:c8:11:7c:1d:9a:0f:
96:be:1b:aa:1b:9a:94:97:e5:4a:d8:53:e9:f4:ae:07:32:ac:
df:7d:14:d6:2a:0c:80:98:f9:06:b5:17:df:4d:58:1d:04:b5:
e3:f7:e6:c3:64:3a:5e:73:2d:dd:fa:71:7c:60:c3:79:de:8e:
2d:37:43:9d:8f:db:80:f4:4c:5f:30:ef:0c:c9:da:b1:c8:1b:
64:83:b4:a6:37:1e:66:8c:27:fc:6a:3d:fe:ac:1d:45:01:e3:
55:de:72:d4:99:ca:e9:60:23:c7:92:38:60:3c:51:d0:08:1e:
2f:e0:56:6c:e1:59:48:27:0e:a9:d8:5e:47:c9:06:e3:22:05:
6a:b0:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:05 2025 by rpki-client