Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/nNaabxwkKCsZgRmPuedvzbJP8fs.roa
File: nNaabxwkKCsZgRmPuedvzbJP8fs.roa (raw, json)
Hash identifier: Cs5TAVJlGejwUSFnfGoGLpGx0ohJz1ImmPnOgxDApNo=
Subject key identifier: 9C:D6:9A:6F:1C:24:28:2B:19:81:19:8F:B9:E7:6F:CD:B2:4F:F1:FB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018572FA58865E0805D050F7D06627D43C4D
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/nNaabxwkKCsZgRmPuedvzbJP8fs.roa
Signing time: Mon 02 Jan 2023 14:54:47 +0000
ROA not before: Mon 02 Jan 2023 14:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16203
IP address blocks: 213.170.41.0/24 maxlen: 24
213.170.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:58:86:5e:08:05:d0:50:f7:d0:66:27:d4:3c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 14:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cd69a6f1c24282b1981198fb9e76fcdb24ff1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:2d:62:d7:d0:a4:01:c7:d1:dc:02:83:11:
49:d3:e6:10:e4:99:33:76:f4:8c:83:51:52:2c:99:
87:9c:d5:2c:1d:89:0f:4f:ae:96:d6:59:9a:0c:81:
41:f9:49:09:75:7c:36:2e:3c:5b:8a:df:1f:22:80:
ef:26:d1:ee:58:82:db:92:e1:d4:d4:70:8e:9b:fb:
71:52:7c:46:77:31:ad:e0:fc:c6:34:92:f9:49:0d:
33:67:1d:c6:66:da:24:92:9d:d6:e9:47:16:2a:1f:
e9:a6:5e:91:c1:35:92:d0:1f:40:64:14:28:23:99:
63:5d:51:a9:17:cd:b6:50:ba:41:06:fb:e9:a6:64:
03:87:17:59:bc:55:6e:47:e3:b2:be:94:b9:a2:53:
62:32:f5:76:f6:fb:a5:90:f2:15:95:43:b6:8e:7b:
46:61:f2:02:b9:88:6c:f4:71:12:46:32:0b:a1:7e:
45:33:c9:c0:22:ed:b6:20:a0:9d:c7:23:7a:21:14:
9d:37:da:f5:1c:f5:95:46:3c:8a:1b:ec:ff:9b:49:
49:7d:e0:27:cd:7d:b1:13:5d:70:40:be:8c:a4:51:
44:c0:99:da:1c:60:55:60:dc:6c:60:51:fb:13:9d:
b7:54:db:db:c2:62:0d:72:e5:ae:30:99:37:5c:e5:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D6:9A:6F:1C:24:28:2B:19:81:19:8F:B9:E7:6F:CD:B2:4F:F1:FB
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/nNaabxwkKCsZgRmPuedvzbJP8fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.41.0/24
213.170.46.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a5:55:5e:b4:4c:f2:b3:7c:00:74:f7:f8:02:fe:15:4a:b3:
00:f7:d0:a8:9a:c8:1f:2f:4e:e7:31:67:53:89:10:01:07:37:
29:45:3d:6a:12:60:f0:38:e7:e8:98:0e:51:7e:cb:89:36:1b:
fe:db:93:7a:a0:9d:fd:33:6e:d8:d6:f0:f9:6f:d2:e0:16:20:
f6:6c:8b:ab:f0:ef:e4:7b:28:26:ae:6c:30:8c:b7:4c:de:ed:
4c:80:46:c8:17:d0:32:02:63:73:44:ac:86:96:58:41:7f:2d:
ea:ce:8f:8f:d8:c7:8d:27:6e:c0:d6:10:22:8a:1e:c7:f6:8c:
03:5f:65:90:bc:8c:e6:fb:f0:6e:20:c7:61:7b:2a:f1:7d:56:
72:d8:02:d3:c1:95:73:c7:9e:48:ae:bb:a6:41:b4:a2:59:fe:
a0:47:cf:81:97:40:2a:90:20:02:b1:85:49:ce:e6:a0:c4:b4:
d0:e5:89:a3:6d:fa:de:bc:07:b8:12:b9:80:20:16:4b:89:e5:
ac:c9:53:b5:0e:d7:bf:99:fe:8a:11:68:71:d9:dc:e0:79:4f:
f6:6f:cf:05:32:02:55:b2:42:c2:9b:45:b6:01:5a:6b:c8:56:
a3:a1:f8:36:48:10:fe:0e:d2:e5:f4:a6:a6:7c:45:7b:57:5d:
a4:ea:59:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:28 2025 by rpki-client