Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/y7PU1U0jdrVyIC-jzBgCvaU6g3A.roa
File: y7PU1U0jdrVyIC-jzBgCvaU6g3A.roa (raw, json)
Hash identifier: u23dRhzPomSGm45jqtyKJ1xwU+XSr3nm86d4I1Z8DIM=
Subject key identifier: CB:B3:D4:D5:4D:23:76:B5:72:20:2F:A3:CC:18:02:BD:A5:3A:83:70
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 0182439040C1847242462230666FFCA2BB61
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/y7PU1U0jdrVyIC-jzBgCvaU6g3A.roa
Signing time: Thu 28 Jul 2022 06:48:23 +0000
ROA not before: Thu 28 Jul 2022 06:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204548
IP address blocks: 113.30.190.0/24 maxlen: 24
113.30.191.0/24 maxlen: 24
212.115.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:90:40:c1:84:72:42:46:22:30:66:6f:fc:a2:bb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Jul 28 06:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbb3d4d54d2376b572202fa3cc1802bda53a8370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:7a:d8:2f:f3:d6:23:75:e8:d7:f9:5c:7f:
4f:94:11:cc:72:af:8d:4c:bb:f1:d8:d8:fd:c2:95:
bd:8b:3b:d2:5a:fb:c5:bf:56:70:09:ea:43:fa:bf:
b2:24:01:a9:b2:69:b3:b4:16:04:da:7e:dc:73:52:
50:20:01:27:ac:fc:07:9a:62:fe:b8:03:7d:87:37:
51:0b:1a:fb:7e:17:86:46:d3:b3:cf:77:7c:24:88:
a7:e0:86:59:f1:41:3f:68:6b:b2:08:1a:4a:0f:f2:
79:30:86:78:41:7d:14:d2:0c:6a:6d:a1:c0:ce:19:
d6:47:c6:f2:34:2c:f5:8b:be:a1:74:87:9c:ac:95:
37:ef:7a:30:36:83:1f:14:70:12:ae:83:ac:70:1d:
74:55:dd:39:0a:a8:49:c3:a4:8d:90:57:49:ca:1d:
ed:97:d3:42:2d:73:da:06:22:59:c2:db:21:49:d7:
a0:29:92:8f:64:db:36:25:9a:8e:40:18:dd:62:20:
f6:fd:5e:9d:10:f2:13:aa:17:9c:43:5c:ba:08:1a:
fa:87:b0:7c:70:d6:c3:0c:f1:7f:0a:cb:83:1d:0a:
4e:ad:6a:c7:01:20:b0:ca:0b:38:62:aa:b1:7f:fd:
d3:d8:fc:e9:2c:1e:c3:07:41:dc:95:ea:e2:61:63:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B3:D4:D5:4D:23:76:B5:72:20:2F:A3:CC:18:02:BD:A5:3A:83:70
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/y7PU1U0jdrVyIC-jzBgCvaU6g3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.30.190.0/23
212.115.110.0/24
Signature Algorithm: sha256WithRSAEncryption
06:14:c0:2b:dd:51:42:55:75:52:89:c7:10:31:4e:03:80:73:
1b:e3:f0:cb:d0:60:b1:96:f2:d8:e3:fb:d6:e9:14:59:46:b2:
d8:20:51:fc:1c:ab:2a:a1:c2:d6:21:3a:7f:ec:2b:e3:e5:3f:
27:24:34:75:da:2c:61:2b:a2:02:7c:0b:b0:5f:9e:5d:53:f7:
7b:f7:2f:6e:ec:69:3e:50:8a:9a:8a:77:97:0a:dc:6d:6d:8e:
6e:32:cc:b1:89:dc:5c:e7:fc:45:bf:a2:9d:1d:06:9e:7a:ea:
b1:61:b4:42:92:b4:b1:20:a7:40:83:cd:f9:13:2f:5f:d8:02:
79:1d:c4:fd:60:0b:2a:2b:26:b1:e2:bc:46:c0:f4:a0:17:2c:
e0:79:0b:35:3c:66:92:6d:2c:24:21:95:08:37:ea:5b:32:be:
a8:29:97:20:c0:64:ce:38:c4:1f:23:eb:7c:fd:6f:2b:ec:1f:
2e:35:61:19:fa:94:ad:9d:1e:d2:41:31:ec:f2:34:c1:a6:73:
e5:a1:c8:18:cc:d5:36:a9:80:44:07:c0:ed:3d:29:05:a0:4e:
ac:ed:a4:bb:20:54:c7:c5:a8:d8:44:97:df:47:97:6c:00:c7:
95:f6:56:c4:fd:63:58:3d:54:dd:38:f1:e4:33:23:d0:ba:c9:
98:d1:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:40:54 2025 by rpki-client