Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/ow3aR1HIyyLs0nr03hB_kKb5zlg.roa
File: ow3aR1HIyyLs0nr03hB_kKb5zlg.roa (raw, json)
Hash identifier: cG9vCYXtilCG/vgyTdsl6hM6MWT2MRf2E7lM784YJjA=
Subject key identifier: A3:0D:DA:47:51:C8:CB:22:EC:D2:7A:F4:DE:10:7F:90:A6:F9:CE:58
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 0183B0D628DDA90464760049FE7EDE7E374B
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/ow3aR1HIyyLs0nr03hB_kKb5zlg.roa
Signing time: Fri 07 Oct 2022 05:06:08 +0000
ROA not before: Fri 07 Oct 2022 05:06:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36007
IP address blocks: 113.30.149.0/24 maxlen: 24
113.30.148.0/24 maxlen: 24
113.30.151.0/24 maxlen: 24
113.30.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b0:d6:28:dd:a9:04:64:76:00:49:fe:7e:de:7e:37:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Oct 7 05:06:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a30dda4751c8cb22ecd27af4de107f90a6f9ce58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:4d:45:9c:52:57:19:fe:b1:8f:8e:e1:6f:
9a:f3:37:cb:cc:d9:a7:a4:55:30:fa:cb:c0:6a:bf:
c3:d5:a6:a4:13:b6:8e:c4:34:2f:f3:0b:82:56:82:
71:e5:cc:dc:66:93:23:19:d0:ad:32:c1:f0:26:33:
27:15:38:78:e2:b1:7d:24:20:84:79:87:41:5e:b4:
ea:4d:2f:21:d5:f2:2f:75:2f:ea:b1:91:93:eb:36:
58:36:14:b6:16:2c:96:20:76:7e:0d:0c:81:11:7f:
be:10:f5:ee:81:89:31:69:88:5a:4f:6d:42:ab:d9:
6d:92:73:df:93:f8:f3:24:de:b6:41:7a:2e:f7:91:
d8:dc:da:1f:c5:9c:b2:5c:a6:4f:ab:39:1f:57:e1:
12:ae:c2:dd:95:86:12:13:f0:a0:61:a7:b3:69:85:
fe:2c:39:6a:ee:85:5b:9a:2c:c5:f0:69:55:ec:3f:
32:fe:f0:da:e5:23:ff:e5:5b:ea:dc:a8:30:aa:92:
b6:86:57:e2:7d:d5:92:e0:4c:db:86:47:cc:55:7c:
18:1d:2a:14:f6:19:2f:2b:80:b8:de:a4:90:c3:23:
09:2b:31:cb:d6:78:bc:4b:71:97:8e:07:73:c3:de:
e6:6d:a9:4c:5e:b3:96:ff:71:52:a5:1b:9b:34:11:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:DA:47:51:C8:CB:22:EC:D2:7A:F4:DE:10:7F:90:A6:F9:CE:58
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/ow3aR1HIyyLs0nr03hB_kKb5zlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.30.148.0/22
Signature Algorithm: sha256WithRSAEncryption
57:bf:bd:0d:97:6a:3e:93:90:c2:e0:33:7a:00:b8:28:77:2a:
f7:31:fd:d4:49:0a:44:76:d0:45:aa:ab:e6:c4:19:f6:5f:3b:
e1:d8:77:d7:d3:37:38:0e:fb:2b:76:db:43:86:7e:e7:0a:38:
c3:29:a7:b2:07:1c:8b:e7:a1:27:46:ce:f2:5a:90:37:9a:44:
09:66:6a:3a:4b:92:5a:30:7d:55:2e:15:1b:ad:61:69:ca:c6:
da:78:8d:1c:4a:d2:de:a1:80:0c:7b:fc:a4:55:96:a8:3d:76:
b8:eb:1c:fa:3d:d4:cb:f0:65:8c:b6:3f:21:a7:21:83:5d:45:
b3:48:b7:b0:f2:56:b7:ad:d2:9f:21:2d:cd:e3:21:3f:51:4f:
62:bc:d8:f5:ec:d9:0a:c4:1d:9c:b2:0b:38:0c:cb:f2:03:76:
c2:bf:dc:c2:83:c9:34:68:93:2f:b2:fe:b8:b0:4c:4b:65:2f:
76:75:89:ae:ce:56:d9:c4:1f:54:b4:0c:51:4d:1e:e3:0c:74:
e8:ee:2a:3d:b3:f0:93:23:e6:07:fe:85:48:57:b5:5f:1c:01:
17:bb:bb:65:a7:a5:9b:61:cf:ea:6b:48:7d:a9:f7:e7:70:f9:
2e:f9:32:45:9f:ad:ad:18:d4:8b:35:4f:68:77:cc:03:54:d7:
68:1f:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:00:20 2025 by rpki-client