Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/2tVzqNBTFFD_e0hSJxFppxEinfY.roa
File: 2tVzqNBTFFD_e0hSJxFppxEinfY.roa (raw, json)
Hash identifier: sKtorl/2Mbt6d0kv1EIc+jZuYWB0nhGM0POdyd2jCvI=
Subject key identifier: DA:D5:73:A8:D0:53:14:50:FF:7B:48:52:27:11:69:A7:11:22:9D:F6
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 1656126C
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/2tVzqNBTFFD_e0hSJxFppxEinfY.roa
Signing time: Sat 01 Jan 2022 05:05:17 +0000
ROA not before: Sat 01 Jan 2022 05:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59576
IP address blocks: 176.241.252.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374739564 (0x1656126c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jan 1 05:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dad573a8d0531450ff7b4852271169a711229df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:75:23:99:20:0f:05:47:d8:db:a6:d6:00:
07:7a:52:3b:d0:3f:eb:df:44:4c:4e:91:d3:a9:d7:
77:c6:8d:7f:45:a7:76:a5:0b:75:1d:a4:fe:20:be:
03:fe:5a:10:a1:dd:3a:30:51:51:a0:92:ca:52:36:
1c:0c:c3:05:62:2d:96:5b:47:d3:69:08:3f:fc:17:
48:a8:ca:35:24:5f:b7:63:4e:52:46:d8:c3:ae:66:
62:b2:4a:dc:e7:30:a7:4c:e3:c8:26:dc:8b:ee:28:
1c:5e:79:a0:d9:d7:fc:d7:8a:66:8c:be:80:8c:63:
93:8b:93:ad:8e:d7:1b:03:e0:83:c7:4b:b0:4d:a5:
a2:df:06:22:73:a4:f4:ed:c1:d6:eb:51:32:a1:1a:
6e:24:3a:7a:78:cb:9f:38:3f:53:65:55:a4:b1:ea:
49:35:db:67:42:75:ca:fb:0e:cf:79:23:90:a9:ff:
79:8a:14:ed:77:e3:9d:70:ad:c2:74:34:e2:51:37:
45:3d:70:d7:64:27:8d:c0:33:8b:2a:61:01:41:a3:
72:00:8f:e0:c8:d1:5f:fe:e4:aa:fb:8c:ec:8d:8b:
23:9a:c0:cf:b5:c8:bf:67:46:0d:6b:b9:69:98:34:
64:1a:4b:16:03:af:5d:ca:95:98:d1:68:2b:79:ad:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D5:73:A8:D0:53:14:50:FF:7B:48:52:27:11:69:A7:11:22:9D:F6
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/2tVzqNBTFFD_e0hSJxFppxEinfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.252.0/23
Signature Algorithm: sha256WithRSAEncryption
66:21:a6:85:90:0d:6f:4c:b3:45:77:eb:38:e9:c6:6c:e4:08:
b7:bb:dc:b6:b0:26:28:b9:1b:5c:bc:db:ff:24:96:68:f6:6e:
8b:15:00:f1:a2:dd:c0:dd:6a:f9:7f:ec:20:b8:63:4d:d4:37:
5d:5c:bf:d5:35:37:79:9c:1e:ed:00:8e:1d:ca:40:3a:8a:d6:
4c:ba:57:11:f3:a0:54:bd:a4:7b:3c:1b:ea:d8:90:fc:90:70:
80:3c:2b:c2:2d:8a:6b:06:80:da:35:70:ac:4e:fa:6a:db:26:
53:a7:bd:d2:f1:1c:6f:1d:ca:02:6c:f5:c9:bb:8c:92:70:1b:
d4:e2:49:f8:85:4c:bc:6e:0a:70:b2:07:71:45:24:4d:35:0a:
94:c7:33:51:53:c6:0f:9f:90:68:d8:40:68:fd:68:ab:c9:7b:
e7:38:fc:5a:03:22:00:05:4e:6a:98:38:df:b0:0d:07:4a:8e:
06:3a:65:b4:ce:89:84:fe:e2:15:dc:9f:79:5e:91:67:dc:de:
ba:37:fb:da:39:a0:b7:f8:7a:ca:51:05:eb:1a:11:0b:2c:75:
9a:4f:aa:ef:c0:70:92:29:d9:fd:02:cb:51:79:7b:a0:d0:b1:
fe:8c:5a:c8:ba:9b:5f:56:9a:12:5f:0e:eb:0d:fa:d6:4e:49:
d3:55:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:00 2025 by rpki-client