Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ku-hN64j543MW82brbAtxtbzkz0.roa
File: ku-hN64j543MW82brbAtxtbzkz0.roa (raw, json)
Hash identifier: R5b09S8pRuOf6l/V3TvbDwvwX/cV95KSXog5n2OnQlo=
Subject key identifier: 92:EF:A1:37:AE:23:E7:8D:CC:5B:CD:9B:AD:B0:2D:C6:D6:F3:93:3D
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E7A60BD27834C10DB28CC24B6C8A6
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ku-hN64j543MW82brbAtxtbzkz0.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200900
IP address blocks: 195.184.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7a:60:bd:27:83:4c:10:db:28:cc:24:b6:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92efa137ae23e78dcc5bcd9badb02dc6d6f3933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b0:bb:06:bd:97:46:6c:b3:7b:e0:73:3c:66:
86:7f:65:5d:b8:c4:2d:f6:ed:a6:0e:12:26:7c:3e:
05:f6:83:70:de:f3:3d:47:93:fd:1a:5d:ac:10:87:
91:0e:01:f6:8f:ba:6e:e9:52:99:12:5b:8f:c3:04:
b2:e7:67:7a:20:3a:72:26:9c:c2:d6:0e:59:1c:43:
29:85:37:7a:1b:d2:64:2d:c5:48:73:b3:3f:51:e3:
81:ac:53:26:fd:d8:33:fc:6a:c3:1d:f8:e9:3d:03:
35:28:04:e6:f9:dc:88:82:d3:ac:cf:5d:fa:c0:71:
88:a6:97:9c:8c:81:f6:e7:71:6d:d0:86:77:d9:5e:
87:01:94:0f:ed:73:50:11:f0:1d:f7:5a:0b:b4:99:
50:43:d2:ec:94:b0:75:b8:89:c4:52:0d:5e:90:3a:
b0:41:d6:bc:7d:65:22:0c:80:c0:07:36:13:10:42:
48:de:81:c7:a2:0d:f8:59:d8:7f:15:1b:17:04:82:
61:89:f1:bd:26:9e:b9:05:9a:31:c0:ee:9c:1d:f8:
32:a2:65:32:96:4a:ea:3f:3b:6c:6a:02:ec:ac:84:
44:3d:ec:da:7a:82:c9:e3:70:aa:d5:99:e5:25:08:
48:ae:9b:5f:0c:d1:f0:61:57:a3:ce:14:08:66:45:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EF:A1:37:AE:23:E7:8D:CC:5B:CD:9B:AD:B0:2D:C6:D6:F3:93:3D
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ku-hN64j543MW82brbAtxtbzkz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.27.0/24
Signature Algorithm: sha256WithRSAEncryption
68:bb:74:37:a6:e4:3f:23:75:bb:5e:7f:9a:9c:96:4f:d8:f7:
b3:8f:33:b4:ce:2c:c5:01:87:f4:cd:64:6a:f4:73:7e:84:97:
f4:85:cf:e4:e3:dd:f4:9c:d1:7e:ef:49:7e:5f:28:85:be:e6:
e9:48:be:5e:77:31:97:f3:a3:b9:0e:32:81:4d:c0:3d:1f:21:
76:1a:54:dc:c8:62:f4:34:55:c9:cb:2d:1d:68:5a:e4:17:2a:
ed:0a:44:f1:e6:72:b8:32:c0:a7:3a:0c:d1:ef:ff:c8:2a:14:
94:a2:29:3e:ce:8a:1a:e4:09:e9:85:0b:85:c3:49:e0:dc:ea:
20:c8:e6:7c:bb:a0:c1:c2:b8:68:f7:2e:13:f4:e1:56:45:4d:
ee:5f:ca:2c:c9:c4:7b:8e:0c:0d:7f:b6:25:03:e8:e0:86:3f:
d1:ce:95:07:c2:7a:38:5f:09:1b:0c:50:d4:f2:d4:a1:3c:38:
84:10:78:9b:b2:e6:d3:15:43:2d:7e:76:c1:ef:f1:03:d7:d4:
eb:63:60:6b:b2:74:fc:5d:ee:3f:d4:a1:b7:02:75:a0:c5:8c:
22:5b:06:d0:c0:d6:18:ba:22:1a:d8:fc:25:57:37:a2:89:81:
c3:90:90:37:58:8a:e5:66:aa:54:67:d7:9f:56:0e:31:e1:cc:
78:00:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:25 2025 by rpki-client