Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/2l60AWenvk3f_hnjtzWr6yaSxJI.roa
File: 2l60AWenvk3f_hnjtzWr6yaSxJI.roa (raw, json)
Hash identifier: 98xEU5yy4+OBJC2nFK4NlpVebVqZriWjfJLfM3pPJZQ=
Subject key identifier: DA:5E:B4:01:67:A7:BE:4D:DF:FE:19:E3:B7:35:AB:EB:26:92:C4:92
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 2D997D84
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/2l60AWenvk3f_hnjtzWr6yaSxJI.roa
Signing time: Sat 01 Jan 2022 04:59:20 +0000
ROA not before: Sat 01 Jan 2022 04:59:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24989
IP address blocks: 194.8.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765033860 (0x2d997d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 04:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da5eb40167a7be4ddffe19e3b735abeb2692c492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:34:25:f7:fe:23:b5:ef:b8:a9:b5:fe:b3:
46:51:e9:ad:d1:9b:40:8f:ae:9c:e9:9a:14:85:23:
62:bb:83:09:4f:2b:a5:86:4c:ea:5d:aa:00:d1:3b:
4f:09:18:68:73:87:89:1c:ed:fa:0a:bc:2f:86:f2:
06:9e:7f:18:6d:4a:f6:57:29:a2:d1:c7:af:6f:4a:
f8:fc:b1:eb:07:e8:1d:13:b8:1a:36:75:70:5e:43:
e3:eb:25:c0:cc:25:7a:89:0d:52:98:67:38:f4:e9:
c2:9e:d4:38:44:4f:6c:56:f2:7d:75:d1:06:51:af:
ee:7a:c8:75:2c:91:8b:0a:ea:e3:95:e6:9a:3a:cf:
ce:c1:0f:f3:d5:4f:28:6c:5c:f5:12:6a:cb:70:d6:
4e:76:3a:51:49:4f:f8:13:ff:b5:e6:b4:1a:ec:e3:
67:83:10:8a:18:6b:e7:4c:03:22:5b:3d:3f:48:1c:
5e:8f:99:6b:c4:00:1a:ff:6a:11:4c:8d:15:82:c5:
42:2b:7c:43:0e:05:31:3c:b4:07:5b:ec:11:43:8b:
1a:94:7c:ed:31:4e:21:e9:40:7c:7e:be:6c:d7:a5:
ba:0b:15:f8:62:c7:76:04:14:32:66:89:25:22:b5:
35:e4:8a:31:5b:c8:01:20:13:3a:78:f0:85:87:c6:
a8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5E:B4:01:67:A7:BE:4D:DF:FE:19:E3:B7:35:AB:EB:26:92:C4:92
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/2l60AWenvk3f_hnjtzWr6yaSxJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.123.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ff:f0:6b:b0:04:9d:ed:e9:ed:e7:a8:1d:1e:4e:75:54:7e:
05:1f:f6:a5:fc:6c:c0:3f:3f:69:6f:40:2e:fa:05:ed:3c:22:
94:cc:62:fb:77:18:04:c8:d3:25:99:d7:7f:75:82:66:c3:88:
3b:88:76:01:1c:dc:26:8f:78:3d:0a:01:4f:b7:e4:45:37:36:
55:ae:eb:8c:a2:d7:7d:b2:fa:fc:79:79:96:38:d4:7b:08:92:
dc:e8:ac:fc:fe:18:31:f5:85:5b:5a:0c:05:7e:5b:5c:6a:6e:
bc:bf:24:93:e1:08:a2:42:de:62:00:d8:5d:0d:c0:e6:31:15:
c5:9e:21:09:b5:6e:92:02:00:e7:90:a1:87:ec:39:a4:4d:03:
e6:ca:2b:40:87:2a:ac:b3:4d:ac:b7:17:5c:ee:2b:95:e6:3e:
98:7d:97:f8:6b:c3:b7:61:c8:09:ec:b5:36:54:cd:f1:92:3d:
b9:d7:db:6e:da:d0:6f:f7:42:16:8b:1b:3f:00:d2:76:8d:17:
bf:f1:31:f1:f8:cf:5a:09:df:dd:f7:ca:e1:dd:6f:09:59:1b:
f0:78:5c:88:c1:3a:46:c8:86:4a:bb:d4:fc:b7:cc:21:df:d7:
0c:cd:bb:ef:1b:d6:fb:ea:50:2f:77:23:62:c0:6d:f9:1f:16:
8e:34:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:23 2025 by rpki-client