Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/_pG2Njx0VCzevnZ4ANgluDEEUY0.roa
File: _pG2Njx0VCzevnZ4ANgluDEEUY0.roa (raw, json)
Hash identifier: brY+8x7IzDz5PjRCKutxjuA0rsEUK8fPacjPIc6uLwc=
Subject key identifier: FE:91:B6:36:3C:74:54:2C:DE:BE:76:78:00:D8:25:B8:31:04:51:8D
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 01856C53C58B150F5AC50CFBFFF693A7E2CA
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/_pG2Njx0VCzevnZ4ANgluDEEUY0.roa
Signing time: Sun 01 Jan 2023 07:55:07 +0000
ROA not before: Sun 01 Jan 2023 07:55:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210983
IP address blocks: 213.232.205.0/24 maxlen: 24
2a11:1d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:c5:8b:15:0f:5a:c5:0c:fb:ff:f6:93:a7:e2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Jan 1 07:55:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe91b6363c74542cdebe767800d825b83104518d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:8b:64:65:0f:d4:a2:fe:f1:32:0d:29:36:
d7:84:67:eb:28:33:4e:b0:74:0e:b8:21:23:27:f1:
c9:77:47:51:41:24:a5:59:a3:23:ac:69:23:c0:a4:
aa:02:4a:29:0d:ce:93:ca:cb:b3:56:64:47:a2:dd:
1a:f7:91:68:be:ed:14:b2:c1:73:8a:8f:b0:84:a4:
a4:64:80:c7:c3:4a:87:1c:be:b2:32:fb:c3:b3:c4:
dc:85:31:d6:36:8b:19:22:64:3b:8d:69:6c:cb:96:
66:16:20:a1:ea:a2:70:6b:83:7c:e3:6a:ce:13:69:
8e:33:7a:85:41:85:bc:ba:da:db:89:8b:68:d6:bb:
ec:91:ed:72:df:b3:f1:9b:cb:d4:6f:06:73:00:cf:
08:d1:8d:29:0f:b0:44:88:94:07:d6:b1:0b:13:a8:
1c:dd:b0:1d:59:f3:33:98:6e:7e:cc:63:9f:78:1c:
fe:3e:5a:ff:5e:03:b8:a2:c8:51:95:9e:cb:72:77:
66:71:6d:98:68:ee:9d:1b:ba:aa:7a:fe:c5:2e:7d:
b2:28:c8:29:50:67:68:0e:cc:2a:c4:c6:f4:39:66:
13:01:b8:c0:b8:8f:2e:98:5a:78:6a:34:7c:0c:29:
9e:7e:c8:b3:b7:2b:59:0b:09:b3:42:4b:5e:78:01:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:B6:36:3C:74:54:2C:DE:BE:76:78:00:D8:25:B8:31:04:51:8D
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/_pG2Njx0VCzevnZ4ANgluDEEUY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.205.0/24
IPv6:
2a11:1d00::/29
Signature Algorithm: sha256WithRSAEncryption
76:07:62:15:8f:d0:74:2e:b8:8d:72:c8:f4:fb:56:db:a0:ab:
93:04:ae:0c:f0:c0:db:37:71:51:b8:11:7a:96:b1:04:dd:98:
4d:5a:21:6b:b8:e2:3d:11:75:c4:af:97:02:8d:a3:50:41:fd:
5f:ce:62:b9:52:96:63:8f:20:22:e7:d5:e2:b7:27:f1:f5:bc:
fc:7e:f9:d1:15:f7:b8:f1:54:f0:17:f3:4d:23:d7:f2:67:32:
aa:cf:91:11:bb:78:29:fc:a8:e7:0b:f3:67:69:5c:a7:16:f4:
29:f4:a4:42:01:c4:5e:7b:17:c3:ed:d0:33:61:8e:08:76:7e:
e5:41:7a:bc:37:df:fb:b3:c9:d4:06:23:db:d6:21:35:55:4b:
62:cd:a6:98:5d:00:1c:a1:89:5e:85:3d:d0:98:48:75:3d:9a:
30:4a:5b:bd:45:35:46:e0:fc:0a:66:27:12:18:24:d5:a6:be:
fc:cf:9e:0e:8c:ad:36:5a:58:f5:0c:aa:9e:7b:ed:bf:11:9b:
a6:bd:16:4f:8f:61:5e:1b:09:45:ec:de:f2:8f:75:43:08:17:
2e:bb:07:50:9b:d1:e9:e5:26:96:8b:43:72:1c:ca:14:cd:d5:
3e:e8:e6:4d:11:0a:22:4e:72:af:36:a4:ec:67:21:36:05:d6:
c2:2d:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:03:04 2025 by rpki-client