Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/f2e270Oe3pTAVYjspCljIxRxfIE.roa
File: f2e270Oe3pTAVYjspCljIxRxfIE.roa (raw, json)
Hash identifier: zkWkUFyTG4W5vtM/KmaXgiwHpp61yDyaC/76WXQldx0=
Subject key identifier: 7F:67:B6:EF:43:9E:DE:94:C0:55:88:EC:A4:29:63:23:14:71:7C:81
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 01858987937BDF076F519E49C9594AC74717
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/f2e270Oe3pTAVYjspCljIxRxfIE.roa
Signing time: Sat 07 Jan 2023 00:00:41 +0000
ROA not before: Sat 07 Jan 2023 00:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 692
IP address blocks: 64.224.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:89:87:93:7b:df:07:6f:51:9e:49:c9:59:4a:c7:47:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Jan 7 00:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f67b6ef439ede94c05588eca429632314717c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:b1:43:b4:99:cc:89:d3:6e:75:f5:7b:80:
78:f4:f0:78:a2:63:32:c6:d3:df:b6:a7:b3:ed:8f:
ff:f9:38:1b:7e:7a:1f:70:25:3f:f0:c1:68:18:a2:
2e:9a:2b:12:f5:88:7d:d9:f0:c9:61:5c:bc:27:a2:
27:3d:9c:4d:50:02:e3:e6:b5:2f:a9:00:5f:a2:4b:
b2:b5:08:cd:67:d1:f6:73:1a:d4:10:3d:2c:32:e4:
b6:7d:74:d0:bb:36:75:fc:fb:26:e6:8b:6c:a3:b2:
75:cc:24:fe:cf:2f:c9:44:5a:5f:c1:1d:59:e5:d3:
eb:43:8a:60:84:dc:8a:17:af:d9:e7:b8:f0:dc:33:
87:fb:7c:8f:82:0f:21:67:c5:66:f7:22:5c:57:24:
e5:2b:1c:da:98:84:a8:71:43:e6:3f:c6:3f:9b:2a:
34:31:df:fa:73:ef:0c:a8:2d:8e:da:b9:12:7c:10:
81:2d:50:30:3c:d7:da:f5:fa:f0:1a:8e:78:03:4e:
91:96:f2:3f:e8:ea:c9:80:20:9f:5a:12:5f:f2:99:
d7:2e:1b:d0:5d:ad:76:d8:49:e1:82:be:fe:0f:f0:
12:e8:73:53:6c:40:19:bf:87:13:17:fc:e5:7d:29:
1f:34:a4:cf:c8:25:e3:29:71:cb:ca:ba:cd:1f:79:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:B6:EF:43:9E:DE:94:C0:55:88:EC:A4:29:63:23:14:71:7C:81
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/f2e270Oe3pTAVYjspCljIxRxfIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.224.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:04:e5:5e:cd:88:55:01:c0:4b:28:f2:62:8b:a9:e9:7c:cf:
14:4e:7e:b0:38:f8:64:ea:ee:1a:77:05:dd:8c:11:9f:2b:67:
70:59:4a:97:9c:96:98:78:dd:8b:e3:b0:49:cf:cf:6d:c1:e1:
60:27:a3:e8:08:c8:76:24:5c:a6:34:15:57:aa:05:ea:5f:a8:
a2:64:bc:7b:c2:01:bb:a3:b5:7f:4f:37:96:de:c3:7c:08:82:
7e:a0:78:c1:3d:7a:96:83:58:8b:bc:cb:53:a8:8d:f7:3f:48:
c8:24:72:60:5b:7c:05:86:99:07:b3:ba:52:ef:cd:11:83:fe:
aa:a3:56:89:38:3f:0c:40:40:3c:19:90:58:81:c6:2b:55:a7:
c4:17:3c:46:29:27:3f:5b:49:74:29:d2:5f:16:5c:b2:5a:84:
6a:04:e5:ad:5c:92:de:08:0e:d8:5a:f0:2a:42:ef:1b:65:cf:
6d:fa:8f:60:59:fb:b2:26:07:5b:81:5a:49:73:ad:d8:ec:3a:
07:7c:68:79:4e:24:fd:63:93:20:a0:71:d3:22:32:a4:11:a8:
f5:66:d6:99:eb:13:74:18:41:df:18:50:e8:1f:4c:bb:00:0f:
87:79:47:0f:d3:16:46:d7:7f:53:09:97:e2:61:eb:dc:05:4b:
2f:32:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:09 2025 by rpki-client