Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/bS4TbN9x5PzDnz1qM_FWqW99FbY.roa
File: bS4TbN9x5PzDnz1qM_FWqW99FbY.roa (raw, json)
Hash identifier: rCRq6kh5SvQlG9moXQRnCCCg3qD8TTv30EM+nFiGduw=
Subject key identifier: 6D:2E:13:6C:DF:71:E4:FC:C3:9F:3D:6A:33:F1:56:A9:6F:7D:15:B6
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01BED19B
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/bS4TbN9x5PzDnz1qM_FWqW99FbY.roa
Signing time: Sat 01 Jan 2022 09:55:07 +0000
ROA not before: Sat 01 Jan 2022 09:55:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 139.28.136.0/24 maxlen: 24
195.206.111.0/24 maxlen: 24
195.206.110.0/24 maxlen: 24
92.119.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29282715 (0x1bed19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 1 09:55:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d2e136cdf71e4fcc39f3d6a33f156a96f7d15b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:82:16:a9:7e:44:ef:14:8a:c2:34:45:a1:
ab:a4:26:7d:62:5d:47:fb:11:ec:81:40:72:24:f8:
7d:67:55:c7:ea:7f:44:5b:db:17:27:dd:33:5e:ad:
04:dc:aa:63:40:83:1f:ce:20:4e:ff:82:20:c1:26:
98:d1:45:88:75:95:03:a6:bc:ea:a5:dd:0b:81:9e:
27:07:61:16:5a:a0:00:a6:f6:b5:2a:1f:61:cd:73:
1f:64:40:ac:08:d1:d1:bc:d8:d8:8e:01:df:39:0f:
a2:61:1b:7b:a7:10:74:78:5a:b9:5e:6d:25:7d:12:
b7:76:9f:4d:94:0b:ee:18:93:c2:ec:3e:19:86:99:
24:77:17:1c:4d:b8:7d:8b:0d:fb:36:5d:eb:59:f7:
5c:b6:b6:c8:3d:1f:82:84:50:7f:68:ba:2b:88:6d:
74:b9:21:ba:9a:b3:bd:85:08:64:68:9d:73:e2:20:
8a:b8:83:a7:20:ed:e4:b2:78:6b:41:56:a3:54:e1:
50:ae:16:98:22:24:3f:63:97:03:ac:cd:67:c9:a3:
e4:9e:0c:66:78:25:43:cc:21:f6:4d:ee:61:b4:6e:
34:2e:15:38:62:63:ef:03:d0:ed:a3:1f:43:d8:9e:
e9:e9:93:fd:9c:73:0a:32:65:62:77:9e:cb:41:3d:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2E:13:6C:DF:71:E4:FC:C3:9F:3D:6A:33:F1:56:A9:6F:7D:15:B6
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/bS4TbN9x5PzDnz1qM_FWqW99FbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.183.0/24
139.28.136.0/24
195.206.110.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:8b:29:ac:61:27:24:2c:67:a5:4c:05:cf:50:24:9d:7d:95:
c6:30:3d:fd:67:a5:31:7d:64:2e:99:97:36:ff:60:67:6d:94:
24:2a:6f:6a:07:bd:3c:3c:ff:24:6c:1e:4c:5d:1e:71:05:1f:
ce:a7:af:dd:d9:0e:8a:26:40:7f:74:28:21:e1:d6:c2:cf:63:
07:81:97:3d:ec:be:ab:96:7e:3b:b1:16:49:30:cc:d2:0f:51:
0d:81:9e:fb:ac:1d:75:bd:db:b3:42:f2:cd:2e:48:93:5c:24:
78:0c:5d:e2:15:14:95:72:7b:bd:27:55:74:49:ed:d7:e4:8e:
d7:78:95:85:1c:5d:04:50:eb:28:6e:f2:34:15:14:5e:4d:a9:
3f:86:2f:a1:76:35:6a:0b:c0:55:31:ef:90:43:73:eb:58:c6:
5d:10:b9:22:32:df:d8:fc:a7:88:72:b9:ac:b9:cd:08:d6:66:
16:20:82:88:87:76:00:16:e5:c7:e0:dc:d0:40:c5:69:2c:7f:
11:36:1a:ba:87:08:ba:81:13:d2:5f:bd:6c:3d:e0:fd:e2:24:
28:42:11:8e:cb:8a:2f:d2:2f:a4:15:65:47:ba:42:4a:83:10:
b6:d2:4f:11:4f:29:4c:e4:f0:e4:88:71:ec:9a:e0:84:f0:4d:
c9:94:d8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:52 2025 by rpki-client