Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/no9p-kvFEqpjbJbtJfqklxfYI3s.roa
File: no9p-kvFEqpjbJbtJfqklxfYI3s.roa (raw, json)
Hash identifier: K8CjXBquV+St30+0L9b+/U3Y/5VPuV48oymAWZt27F8=
Subject key identifier: 9E:8F:69:FA:4B:C5:12:AA:63:6C:96:ED:25:FA:A4:97:17:D8:23:7B
Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial: 0182D336254B126B51ED36FB371F616C635B
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/no9p-kvFEqpjbJbtJfqklxfYI3s.roa
Signing time: Thu 25 Aug 2022 04:15:17 +0000
ROA not before: Thu 25 Aug 2022 04:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208257
IP address blocks: 185.251.70.0/24 maxlen: 24
2a0f:6a00::/29 maxlen: 29
2a0f:f200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d3:36:25:4b:12:6b:51:ed:36:fb:37:1f:61:6c:63:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Validity
Not Before: Aug 25 04:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e8f69fa4bc512aa636c96ed25faa49717d8237b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:4d:d9:4b:d3:35:a9:a2:16:6e:ee:c5:d3:
f9:41:d2:cd:f0:bb:44:9c:a1:79:b5:4f:d0:2a:a0:
35:2c:c1:d1:6b:53:a9:c6:46:c7:ef:9d:02:6b:b1:
8a:03:c6:95:8b:02:c5:ea:1f:95:9a:fa:08:e7:19:
c3:2a:1d:5b:4f:76:24:22:02:7a:f8:4d:45:96:2c:
df:49:a5:fc:d3:d5:ea:6a:b3:96:3b:aa:fd:9f:5c:
0d:03:06:96:01:9e:77:d3:07:3d:e1:59:44:22:15:
29:74:d7:7f:a9:e9:c2:4d:df:d3:fb:f1:dd:5f:57:
5f:8a:8a:bc:b7:bb:81:88:67:fb:68:de:86:08:42:
91:bd:a2:f2:5f:32:b7:f4:97:23:72:84:6d:31:b5:
15:6e:e0:93:5c:c5:09:ce:44:71:0b:92:5d:9d:23:
b6:ba:71:c5:15:50:54:79:ba:8d:0c:ca:78:7c:fb:
b0:9c:ab:5d:91:e8:de:b6:bd:17:8d:24:89:be:a3:
be:a6:3a:c1:91:e0:89:f9:7c:a7:79:69:63:67:30:
ec:28:88:12:02:81:13:36:47:9d:7c:0b:6b:5c:2d:
0a:cc:5f:82:5a:72:19:5e:5b:57:94:01:d7:94:68:
43:87:bc:6d:14:02:9c:59:dd:ac:67:99:d7:2b:4f:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:69:FA:4B:C5:12:AA:63:6C:96:ED:25:FA:A4:97:17:D8:23:7B
X509v3 Authority Key Identifier:
keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/no9p-kvFEqpjbJbtJfqklxfYI3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.70.0/24
IPv6:
2a0f:6a00::/29
2a0f:f200::/29
Signature Algorithm: sha256WithRSAEncryption
c2:a3:22:58:96:b3:0c:fd:8c:46:02:b5:0d:b8:ae:66:63:d4:
99:cc:64:13:c3:cd:ef:a7:2a:53:a9:62:37:e2:d4:73:6b:fd:
b2:7f:c2:a1:d0:b4:0d:15:d9:7d:4a:8f:5e:5a:50:74:fb:d5:
78:79:07:12:5f:a0:83:b8:c0:32:47:c0:13:d0:3e:3b:de:20:
1e:b1:ff:f2:c1:24:46:db:89:2d:8a:4e:21:30:c7:ea:ac:81:
66:42:8f:eb:a5:72:57:a6:c0:69:29:1a:21:54:53:fb:71:4d:
ee:d4:5c:6a:79:c1:e9:c4:f7:64:5f:a6:c2:8d:03:c7:f5:e0:
45:fd:dd:2c:e8:03:1b:65:aa:bc:8a:10:87:f9:95:b6:bd:27:
fd:1a:a3:b8:3a:36:d6:c6:07:00:a0:3d:ed:66:6c:29:32:bc:
da:3f:bb:a9:2c:8e:3b:ae:ee:9d:83:c2:61:33:48:b8:a1:77:
73:8b:c9:b5:4a:e2:d4:57:47:ed:59:af:b0:d8:7c:c6:c1:05:
6c:ba:ef:ef:b8:1d:72:f0:9a:16:a4:ef:9b:bd:c6:44:68:53:
0e:24:68:d8:e7:ac:9b:ef:1f:dc:c0:69:36:34:7b:2f:77:64:
b4:bb:13:46:d7:77:73:f4:32:25:1c:96:d8:d3:df:14:2f:c2:
2f:90:e7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:10 2025 by rpki-client