Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208068.roa
File: AS208068.roa (raw, json)
Hash identifier: kdC5miKaWs0WGKQzkUblgTYx+aIky0diwLTszcMUOcU=
Subject key identifier: F4:A1:4A:CB:55:55:48:47:AF:EB:86:7F:57:F9:9B:E8:E9:2D:CC:AE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6774AC42BC0C140D02F4A6A6FA05EDBF5885C5D4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208068.roa
Signing time: Thu 18 May 2023 00:00:07 +0000
ROA not before: Wed 17 May 2023 23:55:07 +0000
ROA not after: Thu 16 May 2024 00:00:07 +0000
asID: 208068
IP address blocks: 181.214.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:74:ac:42:bc:0c:14:0d:02:f4:a6:a6:fa:05:ed:bf:58:85:c5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 17 23:55:07 2023 GMT
Not After : May 16 00:00:07 2024 GMT
Subject: CN=F4A14ACB55554847AFEB867F57F99BE8E92DCCAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:0a:1e:54:f8:05:17:62:cf:e9:a9:04:dd:
46:36:0c:0e:fb:e7:dc:83:75:65:b3:16:92:de:ef:
d4:66:f7:4c:4c:1d:60:d3:c5:03:f8:e1:2f:38:69:
64:31:a5:05:ae:08:04:bb:76:fb:3a:72:4c:af:d4:
89:75:c7:1d:09:73:38:b4:a1:6a:6c:f9:4f:fb:d3:
62:51:9c:f5:99:fb:f9:ef:1b:62:8e:8b:30:71:12:
4e:17:12:65:fe:73:4b:68:94:11:6e:1a:78:93:3c:
22:89:86:57:e2:5c:06:0b:74:55:33:57:c5:21:85:
b2:2f:14:38:2e:3f:48:2e:07:2e:cf:d6:ae:78:01:
6a:a1:77:18:8c:51:93:b8:d6:3b:bb:b9:77:cb:26:
38:1c:be:bc:37:f0:7c:ae:0a:d2:13:f0:3a:8c:93:
06:df:23:56:20:91:f3:d0:84:b2:81:43:d8:45:6a:
c9:c6:e2:3f:46:54:f3:02:9a:a0:0c:b8:69:9b:4b:
ab:97:2c:0e:0b:64:d5:f0:69:6e:36:d7:13:b9:fd:
d6:93:7a:ea:0e:22:e8:e0:f9:7c:7c:51:ad:28:ce:
f0:96:09:e4:f9:bc:22:24:17:4c:5f:a9:de:d4:4c:
99:fc:c3:19:b9:83:a7:91:74:58:b7:77:9e:1c:44:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A1:4A:CB:55:55:48:47:AF:EB:86:7F:57:F9:9B:E8:E9:2D:CC:AE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:eb:66:5f:82:48:14:5c:59:45:20:19:ee:92:34:0a:b8:9d:
b6:79:6f:be:fb:c2:a6:5d:d0:dd:c5:71:5b:46:57:50:60:89:
2a:e4:fe:a8:97:e3:71:4a:3c:5f:a2:1d:3f:17:cc:ed:72:17:
03:62:ba:e4:fe:4e:31:db:02:f1:60:f7:5f:dc:57:0d:39:83:
ec:f5:d7:e0:3e:ac:42:1c:87:99:e1:c9:91:33:dd:11:15:41:
fe:0c:ba:09:b9:f3:80:95:89:ef:fb:10:db:8a:09:b1:81:0b:
0f:40:4d:78:02:4c:78:f9:4b:bb:99:9d:7f:1b:4d:c2:c2:22:
fa:75:97:46:45:81:83:1f:3c:d9:84:70:a1:c6:72:5e:f5:3e:
e0:6a:e0:54:05:c9:82:80:e8:cd:10:28:e5:b3:b8:bb:6d:18:
2a:ce:ab:10:02:90:8c:22:c7:bf:73:6b:81:92:ad:e6:e9:ed:
71:83:bc:df:ee:a4:77:7f:c4:f7:30:de:2d:5d:53:a9:1e:02:
c5:25:be:0e:99:57:6e:06:61:08:a9:a2:06:0c:4a:97:19:61:
b1:f6:15:8d:bb:45:d2:88:30:c9:97:18:c9:b4:21:05:87:d4:
45:85:73:c4:9e:38:95:22:4a:69:50:b0:28:4a:24:fb:d6:fe:
05:8a:82:35
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZ3SsQrwMFA0C9Kam+gXtv1iFxdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA1MTcyMzU1MDdaFw0yNDA1MTYwMDAwMDdaMDMxMTAvBgNV
BAMTKEY0QTE0QUNCNTU1NTQ4NDdBRkVCODY3RjU3Rjk5QkU4RTkyRENDQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQwoeVPgFF2LP6akE3UY2DA77
59yDdWWzFpLe79Rm90xMHWDTxQP44S84aWQxpQWuCAS7dvs6ckyv1Il1xx0Jczi0
oWps+U/702JRnPWZ+/nvG2KOizBxEk4XEmX+c0tolBFuGniTPCKJhlfiXAYLdFUz
V8UhhbIvFDguP0guBy7P1q54AWqhdxiMUZO41ju7uXfLJjgcvrw38HyuCtIT8DqM
kwbfI1YgkfPQhLKBQ9hFasnG4j9GVPMCmqAMuGmbS6uXLA4LZNXwaW421xO5/daT
euoOIujg+Xx8Ua0ozvCWCeT5vCIkF0xfqd7UTJn8wxm5g6eRdFi3d54cRPMzAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU9KFKy1VVSEev64Z/V/mb6OktzK4wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA4MDY4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdYZ
MA0GCSqGSIb3DQEBCwUAA4IBAQBv62ZfgkgUXFlFIBnukjQKuJ22eW+++8KmXdDd
xXFbRldQYIkq5P6ol+NxSjxfoh0/F8ztchcDYrrk/k4x2wLxYPdf3FcNOYPs9dfg
PqxCHIeZ4cmRM90RFUH+DLoJufOAlYnv+xDbigmxgQsPQE14Akx4+Uu7mZ1/G03C
wiL6dZdGRYGDHzzZhHChxnJe9T7gauBUBcmCgOjNECjls7i7bRgqzqsQApCMIse/
c2uBkq3m6e1xg7zf7qR3f8T3MN4tXVOpHgLFJb4OmVduBmEIqaIGDEqXGWGx9hWN
u0XSiDDJlxjJtCEFh9RFhXPEnjiVIkppULAoSiT71v4FioI1
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:53 2025 by rpki-client