Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210912.roa
File: AS210912.roa (raw, json)
Hash identifier: Mj4ZCjq3VomKCNHtppQfqarIPn+iTdHe8SOjJP0MAvs=
Subject key identifier: FA:2C:45:B2:59:52:00:54:5A:3D:31:31:C5:D9:D9:4F:B5:FC:DC:27
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2903BD1E5FA1D9CAC1424B483D69DD2CE43AEAFB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210912.roa
Signing time: Sat 10 Jun 2023 16:44:56 +0000
ROA not before: Sat 10 Jun 2023 16:39:56 +0000
ROA not after: Sat 08 Jun 2024 16:44:56 +0000
asID: 210912
IP address blocks: 181.214.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:03:bd:1e:5f:a1:d9:ca:c1:42:4b:48:3d:69:dd:2c:e4:3a:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 10 16:39:56 2023 GMT
Not After : Jun 8 16:44:56 2024 GMT
Subject: CN=FA2C45B2595200545A3D3131C5D9D94FB5FCDC27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:91:d8:74:62:5d:50:30:da:67:da:5b:83:
2d:3b:12:43:d2:fd:34:da:3b:cb:01:87:94:1c:d8:
fc:15:90:f6:4c:d4:72:96:99:b2:3c:c2:a6:39:36:
02:6e:37:6f:ec:ad:4a:d6:74:5a:49:83:62:12:0b:
5f:d6:13:f2:7b:8f:51:aa:2c:0e:06:e6:a7:59:2a:
39:41:77:37:04:97:af:36:5a:9b:a1:6b:58:5b:68:
8e:3e:b0:4b:e8:93:40:e7:57:1e:ce:0c:c5:ea:f1:
92:fd:24:12:60:36:ee:cb:99:7e:f8:d2:10:a2:6a:
93:46:d3:2f:8b:94:49:98:52:a1:a0:a5:82:07:56:
c0:05:a8:c4:6e:0f:1d:a7:dc:5b:8d:8b:0c:87:ba:
3f:cb:a1:90:6c:41:ca:8d:48:84:73:1c:e4:2d:75:
10:a9:76:ce:77:fa:1c:ac:9a:9c:63:47:32:d8:64:
f6:29:53:82:00:30:1e:3a:f4:4e:87:95:be:64:81:
70:64:73:e9:3d:d5:e6:31:c3:1d:57:77:06:af:20:
da:9d:fd:44:dc:eb:23:d4:ac:df:12:59:42:d9:3c:
34:64:4b:50:c0:04:fc:89:0f:9c:46:e8:65:a8:ef:
3a:87:77:7f:2d:5e:0a:42:a6:6d:b7:27:4a:5b:1f:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2C:45:B2:59:52:00:54:5A:3D:31:31:C5:D9:D9:4F:B5:FC:DC:27
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ed:a9:39:41:d6:da:fc:06:d3:34:ac:5e:66:2a:06:dc:53:
76:34:94:12:db:48:93:49:17:fb:88:36:79:38:1d:8e:04:84:
56:d6:39:18:8f:ca:af:f9:6f:5f:5b:19:fa:4e:56:61:b4:b2:
d7:fe:2a:ee:13:da:be:d0:a8:95:6b:a7:52:2f:a2:ae:62:f7:
89:7b:7f:07:30:6f:8c:08:bc:9f:1a:c1:37:71:0b:42:61:c5:
10:59:63:ab:b6:58:c7:b3:5a:cb:3d:ef:a2:57:25:4a:c0:db:
8a:e0:fc:b5:9a:03:c0:bc:a2:71:a8:ce:71:48:3b:8b:10:f4:
0f:12:b1:f4:ed:9a:79:81:46:68:de:5f:26:4e:b0:a7:47:14:
d0:84:bd:83:2c:39:92:e3:69:d3:29:74:ac:ff:4f:a9:92:42:
34:4c:8e:ec:0c:a4:7b:b2:7c:17:55:1a:18:ae:d9:13:e7:d9:
10:09:29:82:69:af:9d:3c:dc:2e:9b:60:52:9f:30:e6:df:a3:
87:0f:a5:b7:05:b6:f6:c6:87:ab:c2:6f:c7:44:69:fa:cd:62:
50:e7:61:4f:46:f6:e9:ba:47:40:e1:00:df:a7:8b:1a:29:6f:
ac:d9:69:64:fa:76:95:71:12:b7:49:7a:8a:e5:27:fe:0f:e5:
fb:c1:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:01 2025 by rpki-client