Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/BbeFv-Kp8L7AHQkcnv9OXrXPkQg.roa
File: BbeFv-Kp8L7AHQkcnv9OXrXPkQg.roa (raw, json)
Hash identifier: lP6xEanhvy4fCjw/VHv+fPjANNMqkcB421eKtMw7NK8=
Subject key identifier: 05:B7:85:BF:E2:A9:F0:BE:C0:1D:09:1C:9E:FF:4E:5E:B5:CF:91:08
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 2D9C0A4D
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/BbeFv-Kp8L7AHQkcnv9OXrXPkQg.roa
Signing time: Sat 01 Jan 2022 04:59:21 +0000
ROA not before: Sat 01 Jan 2022 04:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47696
IP address blocks: 194.8.96.0/19 maxlen: 25
194.145.64.0/19 maxlen: 25
2a01:8180::/36 maxlen: 42
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765200973 (0x2d9c0a4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 04:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05b785bfe2a9f0bec01d091c9eff4e5eb5cf9108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:83:ba:dc:77:28:5c:0e:91:2e:65:a6:78:
35:a3:49:72:2f:3d:8f:f2:10:d7:89:e0:e2:25:0e:
f1:29:49:cb:b8:36:fd:b1:e9:e8:86:f9:b1:30:ef:
e6:d2:01:5b:b1:87:56:72:f4:d0:60:61:8e:ef:fd:
b1:76:5a:76:2c:08:52:a0:46:ad:03:a5:4a:7a:55:
1d:be:09:72:8f:3a:4e:52:89:27:be:f2:90:cd:5d:
0d:61:1e:7e:7d:2d:57:e5:8b:0b:06:f4:2d:c5:26:
9c:6a:66:ba:21:89:35:63:3f:91:1b:b9:b3:93:41:
be:44:d0:28:e2:a9:a9:5b:52:80:20:b5:29:9e:c4:
db:fc:67:42:26:22:2a:45:a4:5c:2d:95:39:cf:10:
26:44:0e:2d:69:ff:6a:b9:2c:c5:cb:14:34:02:e4:
40:53:7c:91:95:05:7e:68:43:aa:80:66:0e:3d:54:
f5:14:65:68:7e:08:a9:8d:48:0d:b4:1a:7b:1f:43:
ec:24:f9:60:72:cc:67:29:3c:47:46:25:6b:3d:51:
ba:d3:54:32:79:db:a4:06:a0:60:59:01:1d:5b:40:
8b:c1:4f:3e:5d:e8:30:28:ad:79:56:d3:80:d6:28:
e1:ca:dc:a3:ee:db:68:94:f9:59:68:8f:52:fe:da:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:85:BF:E2:A9:F0:BE:C0:1D:09:1C:9E:FF:4E:5E:B5:CF:91:08
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/BbeFv-Kp8L7AHQkcnv9OXrXPkQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.96.0/19
194.145.64.0/19
IPv6:
2a01:8180::/36
Signature Algorithm: sha256WithRSAEncryption
09:c3:44:ef:d8:21:47:2c:10:c9:c8:43:3e:26:af:7f:44:ee:
41:d0:4c:5c:0e:d1:c5:f1:35:47:3c:79:4f:78:d1:70:af:20:
d0:7d:83:8a:1d:a6:f0:cd:9e:ae:e1:6f:15:8a:3b:3d:d1:4f:
72:d0:d3:0f:94:99:48:68:31:24:51:14:fc:b8:d7:98:73:82:
ed:63:0e:33:35:12:19:b5:84:5f:bb:d4:bb:09:8b:94:7f:4a:
fa:ad:e3:0b:ef:dd:89:23:35:b5:42:a0:4a:75:ed:6c:12:30:
f3:01:a2:0a:2b:3f:bc:3f:a9:a0:6e:c7:71:d6:a0:bd:01:7b:
23:2b:e4:12:48:4e:79:b2:e0:f0:28:1d:82:b3:ac:b4:e2:8b:
8e:fa:54:57:81:f6:1b:60:be:c8:65:15:48:9e:a6:5f:01:d0:
df:ff:db:5f:4e:4e:5f:60:aa:db:ae:3d:cf:8c:e0:54:4d:a9:
11:6a:81:42:7d:53:51:cc:20:3e:44:70:b3:b1:58:97:5b:1f:
dc:71:5e:ac:64:2d:19:59:ab:28:0a:62:68:9d:3a:bc:4d:b6:
22:26:05:10:39:00:51:4d:ef:f7:0f:63:60:a1:2b:55:1c:25:
35:47:da:a9:46:d9:5e:7b:3e:9c:db:fe:ee:09:7e:69:57:43:
9e:9c:90:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:49 2025 by rpki-client