Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/AUpJA5aFSpeXrvRox1y0xYopIdI.roa
File: AUpJA5aFSpeXrvRox1y0xYopIdI.roa (raw, json)
Hash identifier: pmt2ewrWqhfJQrvYcIH8nZkT8pfNMBmAX40GtFOZTbY=
Subject key identifier: 01:4A:49:03:96:85:4A:97:97:AE:F4:68:C7:5C:B4:C5:8A:29:21:D2
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 131C97AE
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/AUpJA5aFSpeXrvRox1y0xYopIdI.roa
Signing time: Mon 14 Mar 2022 15:54:03 +0000
ROA not before: Mon 14 Mar 2022 15:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12849
IP address blocks: 213.57.16.0/22 maxlen: 22
141.226.236.0/23 maxlen: 23
141.226.238.0/23 maxlen: 23
213.57.103.0/24 maxlen: 24
213.57.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320640942 (0x131c97ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Mar 14 15:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=014a490396854a9797aef468c75cb4c58a2921d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:f9:e6:a9:ca:85:4a:9b:60:14:03:5e:8f:
d6:98:82:69:9a:02:59:f2:e5:4e:68:55:a6:d5:71:
31:0e:86:56:91:b4:29:3d:27:fd:cb:74:52:93:3f:
fd:71:ea:b2:c9:14:ee:4b:02:5c:48:5b:43:7a:5b:
dc:52:f1:a4:1a:af:db:df:26:db:23:1e:be:38:5f:
14:91:7f:0e:d1:b0:c3:7a:f2:f9:0f:88:6b:6b:1e:
4a:53:16:a9:03:c4:33:ae:98:59:a3:41:53:d3:e8:
61:d6:72:8f:d4:ef:87:e9:36:3a:28:eb:6d:6e:bc:
38:78:47:8e:00:a9:5a:82:5b:f0:9b:3a:15:f1:24:
c2:46:60:a2:c6:f2:a9:f0:4f:be:eb:02:24:5e:62:
f1:9d:d0:f0:45:d5:fe:f2:47:a4:40:fe:19:6d:22:
72:13:c3:a0:f4:54:2c:f4:81:e6:57:93:14:8f:d2:
65:84:aa:2f:78:11:95:f4:eb:c6:17:b9:7d:57:29:
63:50:93:20:1c:ff:42:78:7a:9c:50:16:8e:9a:15:
18:ac:06:bc:52:75:3e:8d:9d:f7:3f:30:35:c7:bf:
fc:22:80:f2:71:51:0b:c2:6f:d0:36:ab:c6:99:65:
1b:7d:ae:fe:e9:da:ac:8b:58:7c:85:47:50:77:67:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4A:49:03:96:85:4A:97:97:AE:F4:68:C7:5C:B4:C5:8A:29:21:D2
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/AUpJA5aFSpeXrvRox1y0xYopIdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.236.0/22
213.57.10.0/24
213.57.16.0/22
213.57.103.0/24
Signature Algorithm: sha256WithRSAEncryption
43:38:89:10:ab:10:1a:2f:06:52:23:0a:40:d5:c9:07:6c:69:
57:59:9c:65:22:d0:0f:02:03:db:d6:32:35:3f:ab:01:ba:9c:
19:ad:c8:7d:c4:f0:a9:7b:61:6f:28:24:c7:06:41:90:a0:dc:
bb:67:9c:ac:bc:f2:91:66:e8:50:85:7e:f3:bd:c0:0d:28:1f:
e0:3e:82:06:00:ad:e0:2b:7b:09:5a:ac:2f:3b:ae:4f:d9:b3:
6b:54:a2:d6:47:00:f3:6c:4e:ee:f4:72:94:47:82:ab:c7:b7:
c3:75:4e:6f:06:bf:aa:4c:10:38:a4:ef:0b:3e:4c:db:ce:86:
b5:fd:fc:41:1f:6e:7e:a4:e1:23:8e:93:66:42:20:f5:88:6e:
08:47:c5:02:35:32:06:aa:81:f7:fe:34:8c:f2:48:e9:6f:6a:
79:dc:95:63:bf:53:0b:fd:9f:e6:a5:b1:34:07:dc:fc:53:91:
46:06:0c:46:e8:01:c6:ca:b3:aa:49:dc:c0:07:4f:05:6f:3e:
3b:48:f2:95:a3:d4:ae:27:49:0a:98:a2:ae:aa:66:8e:22:11:
d9:82:0e:0c:65:c6:bf:b5:41:1c:8d:79:35:58:50:e7:96:7b:
8a:2e:49:31:dc:a3:f6:26:34:f2:f7:76:a3:29:e2:f6:d1:b7:
5b:ef:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:42 2025 by rpki-client