Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/qJ2wlLRiJL0W_njYwp-jXeOIAc8.roa
File: qJ2wlLRiJL0W_njYwp-jXeOIAc8.roa (raw, json)
Hash identifier: G768s7WnBAon7F5frbS6PYukjQpcoPtJHsbwqa34ym4=
Subject key identifier: A8:9D:B0:94:B4:62:24:BD:16:FE:78:D8:C2:9F:A3:5D:E3:88:01:CF
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 1272C304
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/qJ2wlLRiJL0W_njYwp-jXeOIAc8.roa
Signing time: Sat 01 Jan 2022 00:57:24 +0000
ROA not before: Sat 01 Jan 2022 00:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12849
IP address blocks: 213.57.16.0/22 maxlen: 22
213.57.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309510916 (0x1272c304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Jan 1 00:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a89db094b46224bd16fe78d8c29fa35de38801cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:30:56:04:5e:16:56:12:01:7c:9b:7f:e4:
87:c3:de:9f:0e:05:96:62:8d:6d:38:f8:68:ab:e0:
ea:16:f4:0b:1f:70:c2:fb:8d:12:a3:fc:72:75:a6:
2c:86:eb:48:34:a1:6b:b0:18:1f:ae:d2:a4:78:d6:
8e:3e:70:48:1d:d3:4e:fe:aa:80:dc:ae:f0:37:d0:
85:99:fb:dc:2d:2c:8a:8d:bc:cf:a0:03:1b:f7:b1:
3e:3f:c8:b2:01:b6:47:7f:ea:51:28:9f:4d:bd:68:
7c:5c:97:71:39:b4:11:6c:bb:7e:de:d9:db:1e:4c:
81:1d:df:a5:21:0e:91:17:c5:11:09:3b:b8:73:0f:
88:78:cf:7f:37:43:5d:12:32:d0:6b:74:d8:65:e1:
f4:0e:7c:ba:00:2a:50:92:8d:70:f3:3f:9f:f8:95:
3a:f9:e4:69:7d:6b:65:af:94:66:b6:67:86:fd:49:
71:bf:b6:e3:99:a8:0b:a0:7f:7b:2b:eb:fc:f5:63:
38:75:db:e2:6b:78:3a:ff:d7:f0:4e:dc:26:56:73:
74:8b:bd:3c:99:55:e8:1e:c8:0a:ea:c4:25:7b:5b:
04:24:07:f5:32:61:d6:a8:9c:c2:c4:5a:49:c0:c8:
2f:ce:ab:52:9c:09:20:bc:af:7e:18:f8:9d:4d:e4:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:B0:94:B4:62:24:BD:16:FE:78:D8:C2:9F:A3:5D:E3:88:01:CF
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/qJ2wlLRiJL0W_njYwp-jXeOIAc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.57.10.0/24
213.57.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:75:99:c2:47:cd:89:cf:4e:2e:d2:b7:09:c5:ba:72:68:85:
d9:a3:9a:68:86:1d:38:b5:a4:fc:13:3c:84:2e:49:6b:7c:ea:
2c:02:93:e0:3a:ba:ca:2f:0c:b4:c0:ce:42:87:4d:1a:ef:49:
af:4c:db:ae:c8:8d:31:72:ad:8d:20:95:35:30:2b:29:61:78:
c3:ca:ef:6e:47:60:84:8a:96:58:85:ad:21:3e:ef:2c:e9:65:
44:f5:f7:de:43:e7:80:cc:0b:b3:f2:2e:08:9f:d7:eb:c7:d2:
cb:10:b9:b1:70:37:44:cd:6b:64:6d:a1:88:e9:bd:68:6d:d7:
82:e3:78:e1:a1:6f:5f:c2:e9:02:d2:3f:34:36:16:29:6b:dd:
a3:62:67:c2:ce:29:7a:9d:6a:34:83:09:cb:17:fd:38:f3:50:
ac:9a:58:15:16:90:e7:d2:d8:e7:79:f9:2d:3f:ee:20:2c:78:
b7:c3:d4:35:9e:48:f3:9c:46:ba:02:d8:12:d8:55:0c:24:10:
a5:c2:3b:d6:64:58:bd:5f:e2:e4:07:46:8c:6b:63:6b:09:17:
4f:2d:6d:4b:45:b3:bf:9d:ea:65:34:c4:41:5f:97:da:f8:b3:
c4:19:77:5f:18:51:ba:a5:05:cb:9d:4f:70:09:ac:ac:08:a8:
a1:59:fc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:37 2025 by rpki-client