Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/R2bvvx6ZnHiw8P6r0l_cH1lO4uE.roa
File: R2bvvx6ZnHiw8P6r0l_cH1lO4uE.roa (raw, json)
Hash identifier: XoE3XSMS630B7297hmBNy4cVJ3dPuGYcoMIeELWG/ck=
Subject key identifier: 47:66:EF:BF:1E:99:9C:78:B0:F0:FE:AB:D2:5F:DC:1F:59:4E:E2:E1
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 018572B43A0A65FF8BD8D0A712B3ADAC07CD
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/R2bvvx6ZnHiw8P6r0l_cH1lO4uE.roa
Signing time: Mon 02 Jan 2023 13:38:11 +0000
ROA not before: Mon 02 Jan 2023 13:38:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24972
IP address blocks: 195.244.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:3a:0a:65:ff:8b:d8:d0:a7:12:b3:ad:ac:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 2 13:38:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4766efbf1e999c78b0f0feabd25fdc1f594ee2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:8c:8e:d1:3a:b5:b0:2d:8f:0e:b2:62:ec:
5f:15:7c:9e:26:55:d6:00:ac:27:3a:d1:2f:ba:94:
67:b2:a3:12:c6:62:eb:83:c8:60:ae:b2:d0:a1:38:
83:4e:c1:22:89:f2:33:ed:60:04:73:a8:8f:1a:76:
a4:d9:76:ba:d9:ce:9b:6a:70:82:e0:44:4b:ac:ba:
ae:2f:76:88:0c:20:6f:de:73:63:21:2d:6b:83:a6:
2d:50:4e:c9:97:c9:d3:88:4c:01:01:ab:db:ad:fb:
5f:bb:fa:9d:49:08:d0:a8:b9:58:91:2a:80:fe:23:
0f:8e:a5:b2:80:ca:9c:30:0c:a0:7b:7b:a1:ad:66:
a4:a2:30:7d:ec:87:7a:b7:2d:76:c7:4c:5b:7f:c3:
75:0e:a8:6b:63:e3:d0:de:e0:9e:d4:45:6a:de:d5:
35:87:a0:a4:c0:cb:80:5d:db:25:5a:37:78:13:d2:
0a:da:35:cb:a4:08:dc:d1:09:77:1c:ff:49:11:2c:
cf:59:7e:05:6b:78:95:1b:86:13:ec:27:6d:60:be:
f4:97:18:d1:25:87:0d:5f:7c:e0:93:89:f2:3a:6d:
74:dc:75:fc:8a:a0:31:7d:8e:14:13:21:f5:8b:f1:
19:11:82:a2:1e:99:5a:0a:67:4d:08:01:28:3d:70:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:66:EF:BF:1E:99:9C:78:B0:F0:FE:AB:D2:5F:DC:1F:59:4E:E2:E1
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/R2bvvx6ZnHiw8P6r0l_cH1lO4uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.157.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b3:a2:9c:13:18:74:ed:2a:ae:1e:04:27:ae:6a:8f:39:41:
c1:57:85:66:18:58:d2:24:3d:fc:e5:04:01:32:36:31:97:a9:
76:80:1f:ae:6e:5b:82:27:d9:a8:9e:0e:e0:28:d4:af:93:a9:
92:dd:eb:35:4b:ca:a9:39:67:15:06:50:b7:6e:88:2b:bd:77:
fc:49:20:ff:a5:7d:a4:f8:cc:13:cc:07:e6:e6:11:d3:6f:35:
fc:66:7f:4a:0c:2e:29:18:15:f9:58:49:40:8f:bb:18:1d:d6:
55:3a:00:1f:ee:d7:2e:98:90:17:5f:4f:b3:6e:79:2c:13:57:
b2:8f:90:24:83:2e:38:b5:06:03:2c:bb:46:2a:42:31:ef:79:
23:6f:77:db:1c:78:f5:50:6d:6c:35:98:18:3a:86:56:ca:43:
31:f9:80:11:10:0c:61:27:6a:3d:8e:5f:31:5e:f2:94:8b:0e:
6f:59:69:b6:bd:78:ca:c5:c6:cf:5d:a7:c1:67:34:c7:9b:63:
b2:fb:9c:70:1a:a2:e1:97:2c:37:ed:5d:8f:fe:ce:2b:f6:2a:
56:56:0c:f9:5a:17:59:32:02:12:76:cb:dd:19:da:1f:eb:94:
5f:8b:74:c7:4a:0e:86:a6:5e:12:33:af:a3:81:77:27:2d:6d:
7a:23:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:00:33 2025 by rpki-client