Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/jwTB1Eh6MDsSSEKZcS8NZTjc8FM.roa
File: jwTB1Eh6MDsSSEKZcS8NZTjc8FM.roa (raw, json)
Hash identifier: HZIBntOTVsPHPIu2HTGmgWEiebRjxpz2jbXZsBjEXi4=
Subject key identifier: 8F:04:C1:D4:48:7A:30:3B:12:48:42:99:71:2F:0D:65:38:DC:F0:53
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E7880DE20504EEE80DB289581CCAB
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/jwTB1Eh6MDsSSEKZcS8NZTjc8FM.roa
Signing time: Mon 02 Jan 2023 08:34:48 +0000
ROA not before: Mon 02 Jan 2023 08:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61270
IP address blocks: 82.144.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:78:80:de:20:50:4e:ee:80:db:28:95:81:cc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f04c1d4487a303b12484299712f0d6538dcf053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:25:9f:a2:55:7a:ea:19:45:35:8c:d6:e0:
49:5e:a9:e4:ef:0d:1d:70:e5:3c:40:22:68:08:52:
7f:d2:85:e8:0f:8f:75:61:a3:9f:ee:ca:4d:ef:a5:
cf:e1:71:a7:79:b5:c3:ad:7e:35:19:19:ad:2e:0a:
7f:5b:db:af:86:c7:ad:32:7f:a3:2a:5a:17:e3:17:
82:92:2f:65:de:4d:51:3e:aa:c7:36:f1:c0:62:aa:
63:5c:37:9c:eb:3a:15:29:6a:2e:71:bb:45:4c:2b:
8b:59:49:b8:e6:dd:02:84:cb:3c:f2:1a:9c:ac:6b:
65:3e:74:cd:4d:b4:be:a9:54:d2:d9:f0:06:55:f6:
1f:54:f5:83:d2:51:38:b7:db:8b:23:fc:a4:91:7a:
dd:b9:4e:51:5d:18:06:52:5a:14:45:f3:7c:50:5d:
8b:91:e6:19:32:e1:7c:62:99:51:b0:8d:2d:7d:be:
3b:ee:35:a1:83:f7:0b:a9:cb:82:d2:1b:7f:fe:f9:
5a:c4:3f:85:dc:90:5f:73:f9:a3:49:5c:10:6c:75:
7b:68:d9:6f:2c:9a:dd:71:87:2c:4e:83:5b:a5:c3:
b3:27:43:ba:25:a5:3c:19:17:3d:05:ca:cc:8d:d4:
35:9e:47:cd:40:90:d2:14:b7:6b:81:2f:a5:04:fe:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:04:C1:D4:48:7A:30:3B:12:48:42:99:71:2F:0D:65:38:DC:F0:53
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/jwTB1Eh6MDsSSEKZcS8NZTjc8FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.187.0/24
Signature Algorithm: sha256WithRSAEncryption
70:03:cd:4b:a8:d6:46:bf:e2:f9:a4:73:96:bb:23:38:bd:a8:
d9:79:f3:5f:9a:33:40:ad:43:5a:e4:b4:86:87:36:fc:9b:00:
98:ee:28:45:dd:04:dc:fc:a7:7f:19:73:c1:d6:c2:cd:2e:15:
a2:68:42:bf:46:ae:44:bf:4d:03:83:9c:32:99:cf:c4:0a:df:
a6:db:ab:45:c8:dc:7c:56:22:2b:7b:c1:ef:7e:77:ad:be:61:
62:ca:c0:ab:ac:48:bb:22:9e:fe:58:06:2d:96:99:59:ca:c9:
8c:e9:c9:91:04:7e:d1:14:d4:db:b1:d6:b1:1f:b2:43:cb:86:
6d:a5:1f:ba:54:ce:bb:b5:ae:22:95:b0:e7:59:24:e5:97:e9:
77:c3:73:c8:90:a4:f6:71:fa:99:56:57:96:0c:f0:a5:16:a2:
b9:89:1a:d1:f1:1a:e9:32:24:99:0d:e5:93:3d:ba:d1:a1:4a:
73:6b:ab:2f:19:94:c3:fe:15:3b:6f:04:aa:70:ab:74:77:3a:
cb:ac:c3:b8:f5:8a:9f:25:86:d5:66:d5:12:a1:2d:fb:e7:e0:
ee:8c:81:46:cb:ed:7c:5f:5c:78:63:99:e8:fa:7d:40:bc:22:
d3:6f:59:fd:7c:98:f3:cf:2f:3c:f5:c1:de:3b:8c:43:a4:e3:
42:fb:ee:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:13 2025 by rpki-client