Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/bjDeYI1EtuCh4N_j3xxlm4ts1jk.roa
File: bjDeYI1EtuCh4N_j3xxlm4ts1jk.roa (raw, json)
Hash identifier: lKrqUh491vpkSCrOrS/PW2jIBgfNxX/zo7N/IkzkLHM=
Subject key identifier: 6E:30:DE:60:8D:44:B6:E0:A1:E0:DF:E3:DF:1C:65:9B:8B:6C:D6:39
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 01856F42F5E6FF7B737C3102A3A10F0D71C1
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/bjDeYI1EtuCh4N_j3xxlm4ts1jk.roa
Signing time: Sun 01 Jan 2023 21:35:37 +0000
ROA not before: Sun 01 Jan 2023 21:35:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9033
IP address blocks: 194.59.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:f5:e6:ff:7b:73:7c:31:02:a3:a1:0f:0d:71:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jan 1 21:35:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e30de608d44b6e0a1e0dfe3df1c659b8b6cd639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:24:5d:7c:be:e5:67:eb:5f:ab:ae:36:ca:95:
3f:bc:63:b9:94:2b:55:13:bd:de:1b:0a:55:97:6f:
57:f0:4d:91:81:b8:1d:28:c6:f3:38:2e:b7:ed:95:
bd:d7:3a:5d:11:fb:da:1f:51:9b:54:5c:f1:48:52:
d7:2d:c3:00:36:4d:98:d6:a7:e3:1d:ff:44:32:c3:
90:5a:0e:c6:10:14:f3:81:67:62:aa:34:46:3c:dc:
f6:c7:09:2f:6c:cd:05:f1:46:04:5b:ed:d7:90:0d:
4e:62:b0:ee:8c:89:0f:ca:a1:58:b5:b3:d8:cb:24:
51:f9:ed:9d:b5:51:65:6e:8f:db:3e:34:6b:69:5c:
12:91:f4:e1:98:7e:04:c1:f5:1c:8e:1a:0e:09:8e:
b1:ee:f4:15:92:8b:8a:c7:46:99:e7:38:b5:77:f8:
39:ae:e9:67:1a:30:64:2f:a5:a0:89:01:bb:cc:41:
db:78:88:64:e0:73:1e:97:32:cc:c2:94:48:22:21:
7d:8e:5e:02:1e:27:16:4c:5a:23:4f:38:0a:9c:42:
74:02:e4:cb:c9:85:b8:6f:29:cd:ba:07:05:1d:c8:
b9:ed:b0:ac:57:9f:68:1f:dc:5c:57:be:06:f6:85:
0f:7c:8c:2d:b7:cb:30:cb:6e:37:5f:0b:9a:e2:ef:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:30:DE:60:8D:44:B6:E0:A1:E0:DF:E3:DF:1C:65:9B:8B:6C:D6:39
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/bjDeYI1EtuCh4N_j3xxlm4ts1jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.191.0/24
Signature Algorithm: sha256WithRSAEncryption
30:6d:0b:19:b0:9e:b7:95:b5:b7:76:3d:9e:0f:e0:de:78:6a:
23:d5:51:0b:f7:48:0c:1d:38:fd:d0:15:75:78:42:2e:36:01:
7b:bf:47:1e:9a:99:15:12:e2:ec:19:71:e1:e1:cb:11:85:ff:
cb:58:08:48:fa:1b:3e:fb:b1:7d:b8:fd:c7:b5:fa:a1:79:3a:
ac:b8:ca:68:60:24:50:f2:de:af:bf:23:22:ed:4c:20:fc:a3:
90:57:4b:3a:50:df:de:4d:39:19:23:0b:db:44:32:4d:1c:a6:
52:25:d3:3e:ae:9c:44:e0:7a:9e:2f:a7:1a:ac:8f:c9:93:f1:
56:f0:b4:24:79:99:9f:10:8e:3a:78:b5:b3:f0:f4:9a:cf:c0:
fc:af:6f:f2:36:b6:5c:bc:de:fe:32:20:ab:21:a6:60:22:18:
50:ba:5d:dd:19:a4:e2:db:91:c7:a7:7d:e6:90:8b:77:00:35:
9f:60:de:cb:cf:93:d4:49:a3:cf:af:cf:f6:9f:1c:24:73:2c:
35:f3:81:7d:4d:2f:80:e7:86:99:a1:70:28:1d:76:3a:51:0b:
e5:06:8c:94:aa:66:0b:03:5f:b2:08:3c:8a:8f:03:bf:21:cb:
3e:26:d8:ef:e3:bb:5e:62:0c:54:3a:f9:54:f0:3e:1b:81:52:
1f:9b:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:42:40 2025 by rpki-client