Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/2bnebLyxKEz385_tJJveJ4SSA5Y.roa
File: 2bnebLyxKEz385_tJJveJ4SSA5Y.roa (raw, json)
Hash identifier: YPvUUF872dfY5p48fIA5jqZFfHzbGaix2NuAkiSn5eM=
Subject key identifier: D9:B9:DE:6C:BC:B1:28:4C:F7:F3:9F:ED:24:9B:DE:27:84:92:03:96
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 352639D8
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/2bnebLyxKEz385_tJJveJ4SSA5Y.roa
Signing time: Sat 01 Jan 2022 10:56:42 +0000
ROA not before: Sat 01 Jan 2022 10:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48137
IP address blocks: 84.11.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891697624 (0x352639d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Jan 1 10:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9b9de6cbcb1284cf7f39fed249bde2784920396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:29:9d:f0:03:a8:4a:d9:de:24:88:66:80:
af:34:80:05:92:6e:c5:3c:70:66:78:e5:ae:3a:ff:
90:16:c0:89:50:79:20:89:43:87:f5:ee:dd:c5:6f:
ed:63:06:c3:a9:63:c8:f3:ca:ee:11:e7:69:54:d4:
d2:6b:2b:2b:db:4b:95:b1:c8:cd:59:58:2a:a4:76:
4c:c6:0c:9a:a4:eb:f5:24:aa:e0:6e:ba:eb:b2:95:
f1:84:9a:08:11:a2:18:15:e6:04:5f:72:03:13:ab:
8f:31:97:ab:10:01:ed:41:5e:8f:1c:ed:bd:85:33:
3b:13:c4:01:a7:1d:7c:9c:cd:01:64:2f:f9:48:e7:
77:42:97:1a:69:16:11:37:61:fa:02:bc:04:fa:af:
d3:db:3a:b0:56:5a:3a:3b:4b:fe:e0:1f:68:0c:6a:
79:eb:d4:9f:8e:04:75:f6:73:af:55:12:79:e3:83:
37:89:ba:07:c3:59:d3:cb:e5:c5:94:0e:06:59:56:
de:aa:22:a4:23:83:b9:51:3a:49:f1:46:a0:3e:47:
01:45:76:b8:e9:7a:56:03:fb:1e:16:ef:c9:37:71:
1f:21:00:ff:38:43:7a:ff:82:28:96:20:6f:e4:a7:
ca:f5:5e:48:b3:32:5a:65:3c:52:42:20:b1:5b:06:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:DE:6C:BC:B1:28:4C:F7:F3:9F:ED:24:9B:DE:27:84:92:03:96
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/2bnebLyxKEz385_tJJveJ4SSA5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.11.248.0/24
Signature Algorithm: sha256WithRSAEncryption
92:50:e6:68:21:33:bd:05:06:0b:f7:e7:b4:5a:66:e5:33:28:
8a:e9:59:32:87:cf:38:e4:7b:41:94:68:74:ab:e0:28:4f:cb:
29:73:08:ba:02:5d:b7:7e:b8:88:2e:99:20:04:bf:79:aa:02:
17:76:b5:a5:68:e0:9b:73:62:d8:46:72:f3:e8:b1:99:0f:5a:
d1:06:59:ea:75:93:99:f2:9e:76:e4:c3:a0:75:06:0f:64:a4:
b1:8f:03:9d:2d:02:0d:f1:47:ac:bf:42:0a:fe:09:32:cc:26:
78:c5:cd:bb:c5:f5:d0:f4:dd:47:d0:e7:76:ac:39:cb:d4:ae:
61:9a:bd:66:b4:73:d4:1f:d8:36:ed:83:59:83:00:30:94:10:
5b:b0:57:56:a3:5f:c9:c9:2e:29:32:7c:fe:7c:6d:91:3c:fb:
7d:7f:f7:82:8b:33:d5:b9:30:ae:fd:ee:ad:5d:3e:30:e6:97:
57:5b:20:6e:b0:66:e9:d0:bc:0c:bd:16:20:4d:88:4c:8a:29:
f2:e8:27:1a:a3:11:2b:b3:a7:10:f6:88:4f:41:06:21:5e:f2:
07:18:1a:8f:6e:fa:7f:95:2f:42:90:b2:38:8e:02:a2:48:65:
d6:e2:26:fb:8e:8d:c9:57:4c:e4:c7:b4:92:6e:ed:a5:be:6f:
2e:5c:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:31 2025 by rpki-client