Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/IefbkxkypCNfU9ug_C8dd22cHwc.roa
File: IefbkxkypCNfU9ug_C8dd22cHwc.roa (raw, json)
Hash identifier: PfTZWRYPHPIbMiyNWMmBQrQRo4JbGAkzMdAKmZKCkIU=
Subject key identifier: 21:E7:DB:93:19:32:A4:23:5F:53:DB:A0:FC:2F:1D:77:6D:9C:1F:07
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 07A333B9
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/IefbkxkypCNfU9ug_C8dd22cHwc.roa
Signing time: Thu 24 Mar 2022 17:19:53 +0000
ROA not before: Thu 24 Mar 2022 17:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211025
IP address blocks: 213.155.169.0/24 maxlen: 24
212.14.48.0/24 maxlen: 24
213.155.172.0/24 maxlen: 24
213.155.170.0/23 maxlen: 23
212.14.54.0/24 maxlen: 24
213.155.177.0/24 maxlen: 24
213.155.181.0/24 maxlen: 24
213.155.186.0/23 maxlen: 23
212.14.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128136121 (0x7a333b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Mar 24 17:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21e7db931932a4235f53dba0fc2f1d776d9c1f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:eb:9f:af:40:ae:5b:5e:fc:28:d4:42:c5:
ec:42:19:47:7a:96:cc:19:4d:49:c7:f6:1f:26:bf:
92:b3:cb:94:b4:bf:86:26:cc:ed:14:b5:5b:af:fc:
c6:f0:87:4e:1b:02:b6:99:aa:0d:30:81:47:7a:d2:
48:fe:70:1e:19:5e:ce:36:92:24:e6:4c:5d:37:7f:
d5:b8:f1:a6:73:31:9e:6a:21:87:c4:54:d0:31:96:
82:e2:bc:78:a9:14:38:7d:8e:ce:10:4b:e2:ae:dd:
ae:25:fd:ef:65:93:f9:8a:8b:6c:e4:44:52:16:78:
05:40:26:26:64:de:1b:6f:f7:2a:fd:b1:f0:f3:d2:
5d:8a:f6:58:6d:3a:78:8a:b7:58:61:a0:53:87:be:
27:89:67:8f:ac:81:bd:d7:52:c5:06:9a:55:88:b1:
a4:e1:e0:59:39:f0:f0:cb:8b:02:13:d7:63:e7:cd:
a2:30:e6:b3:f3:c4:5f:17:5d:64:2c:b1:89:17:97:
00:7b:ef:36:75:d8:db:fa:c1:06:98:af:ef:d8:eb:
97:cb:25:ac:ab:8c:01:0a:16:d7:94:a5:34:5e:72:
47:ea:63:a9:c6:5d:e7:57:8d:c3:7d:4c:b3:88:74:
a9:5e:38:e5:9c:d4:bf:93:e2:db:66:1b:39:52:19:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E7:DB:93:19:32:A4:23:5F:53:DB:A0:FC:2F:1D:77:6D:9C:1F:07
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/IefbkxkypCNfU9ug_C8dd22cHwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.14.48.0/24
212.14.54.0/24
212.14.59.0/24
213.155.169.0-213.155.172.255
213.155.177.0/24
213.155.181.0/24
213.155.186.0/23
Signature Algorithm: sha256WithRSAEncryption
77:bc:4e:54:59:bc:9f:71:cd:25:2c:40:7b:1f:bf:54:9c:bd:
0a:09:fd:21:21:fa:4e:4c:87:99:e0:0c:f9:b3:7e:ab:dd:ff:
38:e2:99:33:1e:7f:57:5f:aa:23:88:95:cb:9f:3a:97:69:37:
82:0c:7f:ed:04:21:47:01:23:b3:fd:35:e7:21:4c:e8:7a:a8:
bd:32:e7:58:b0:ec:8e:d1:58:e6:2a:47:00:f7:50:72:e4:d1:
a1:a6:42:6e:06:03:5b:c0:c0:94:25:ae:62:a8:fc:5e:4b:35:
37:46:b7:af:e7:c8:39:f1:38:79:af:7e:f8:50:cc:88:33:0e:
7e:3a:cb:5d:c2:ba:53:ea:04:cc:d2:fb:31:07:96:49:9c:76:
50:ee:6f:d6:98:87:0a:75:6d:4b:0e:6e:40:64:5a:c9:96:22:
3d:51:1d:42:e3:ad:0c:0e:88:c5:20:5b:2f:1e:c1:99:51:d6:
70:0e:8b:a2:19:8f:12:4a:2a:dc:23:c3:8b:03:3f:26:42:14:
b1:7d:3e:e3:8c:41:c6:26:b6:a9:06:2a:95:e0:23:4c:84:32:
15:c0:15:39:79:25:02:64:04:c2:20:27:18:56:33:f6:73:1f:
ef:70:e7:d0:77:e5:2c:28:84:9c:a3:4d:79:38:7b:f8:71:0b:
f8:f3:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:30 2025 by rpki-client