Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/2byaJHLc-jjg_LKiMjzuMZx0vOk.roa
File: 2byaJHLc-jjg_LKiMjzuMZx0vOk.roa (raw, json)
Hash identifier: 8lUT4nzU1MPTgJ0Ua+kbqLQKp7dBa1PhHwZYiEHY0Dc=
Subject key identifier: D9:BC:9A:24:72:DC:FA:38:E0:FC:B2:A2:32:3C:EE:31:9C:74:BC:E9
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 0187713804BB2D23EA11A04D910F088B57FB
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/2byaJHLc-jjg_LKiMjzuMZx0vOk.roa
Signing time: Tue 11 Apr 2023 16:48:29 +0000
ROA not before: Tue 11 Apr 2023 16:48:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12357
IP address blocks: 185.195.179.0/24 maxlen: 24
185.195.178.0/24 maxlen: 24
185.195.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:71:38:04:bb:2d:23:ea:11:a0:4d:91:0f:08:8b:57:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Apr 11 16:48:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9bc9a2472dcfa38e0fcb2a2323cee319c74bce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:78:1f:d3:c9:bc:d7:59:b0:9b:df:c1:fa:
c3:3e:5e:cd:81:21:87:9f:ad:48:6a:65:1b:cd:85:
04:29:39:dc:2c:f4:cb:4f:88:3a:ac:ee:01:16:d2:
50:f3:57:86:49:03:44:5d:31:97:f5:fa:89:47:b1:
e9:09:3b:6c:b5:27:80:26:fd:e1:3a:7a:a5:22:3d:
9c:2e:f8:9c:9b:c1:a4:f7:53:a8:17:6e:78:67:47:
c8:88:4d:5f:7d:9e:b7:a8:a7:07:30:82:3b:3a:6c:
fc:e3:28:6d:18:35:28:07:23:a4:98:43:5c:e1:09:
ee:b7:fc:4f:96:7a:b7:63:d6:12:12:28:39:18:cd:
fe:86:df:41:0d:93:51:6d:6b:55:4e:8b:48:4d:6b:
2b:01:04:5e:96:9b:b3:a0:9d:cc:ef:c9:36:df:20:
86:e3:3f:23:5b:af:33:ba:b3:12:88:2b:32:54:3f:
7a:ca:0e:63:c1:0d:21:2f:1f:d6:f1:be:7a:7b:cc:
0e:65:8c:f2:f8:a0:7e:b2:b7:a9:90:ca:79:f3:e2:
64:bb:1d:51:d3:fe:f2:ad:c5:fd:79:f6:6c:e4:c8:
47:af:f3:b0:c7:f5:f2:4e:96:16:94:58:ee:1d:4c:
c4:34:d0:cc:c0:ef:d8:7a:cf:12:08:25:c2:81:a5:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BC:9A:24:72:DC:FA:38:E0:FC:B2:A2:32:3C:EE:31:9C:74:BC:E9
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/2byaJHLc-jjg_LKiMjzuMZx0vOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.177.0-185.195.179.255
Signature Algorithm: sha256WithRSAEncryption
8f:27:b6:c6:f0:a1:58:a6:51:80:0f:5a:d6:4c:ca:76:28:4c:
c0:0e:56:4f:15:d9:3c:3f:89:3a:9b:c6:a1:2b:f4:7b:49:4d:
b6:ec:ef:0e:f1:d1:0d:62:44:3f:82:09:6f:c7:64:b7:74:2b:
f5:bb:31:57:f0:37:c0:80:19:62:18:30:b9:18:dd:b1:f3:e6:
37:eb:ca:59:42:3e:f0:70:8c:91:65:7e:67:62:91:2f:0b:a7:
ca:1c:24:54:b6:92:40:99:87:07:9c:36:4d:f2:7b:fc:2e:ec:
7f:b7:1b:7a:01:68:dc:bc:00:ca:15:ca:4b:4b:f6:ad:5b:48:
cb:4f:88:ab:09:c4:c8:53:3c:2e:ba:02:a4:df:ff:5d:7d:1d:
31:ba:f0:fc:c3:60:12:4c:ec:c2:05:5e:39:eb:4e:ef:83:7f:
9e:f3:1e:19:03:78:bb:6d:4d:66:33:7d:4f:00:ce:50:ec:2f:
ad:97:e1:08:cb:b2:38:c9:ae:e9:01:46:8f:97:82:54:61:2b:
f6:38:b3:7a:9b:b1:c1:83:16:ec:2f:45:f5:23:ce:92:fe:bd:
94:ca:97:46:f3:22:f2:6d:a7:74:5c:49:88:a5:09:48:a2:f3:
2e:33:02:70:0c:1b:4a:50:a3:6e:2a:00:53:fc:46:07:ed:33:
8c:d8:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:48 2025 by rpki-client