Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/cBE2-1vT-C_tPaHx60keIL3AK2E.roa
File: cBE2-1vT-C_tPaHx60keIL3AK2E.roa (raw, json)
Hash identifier: ee/Rh5AgOpJpkGk231DQO4ln/26SNZi6vNHuwucBoJ0=
Subject key identifier: 70:11:36:FB:5B:D3:F8:2F:ED:3D:A1:F1:EB:49:1E:20:BD:C0:2B:61
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 01856BB7FEBBBE03A4681FACE8C768D49B13
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/cBE2-1vT-C_tPaHx60keIL3AK2E.roa
Signing time: Sun 01 Jan 2023 05:04:58 +0000
ROA not before: Sun 01 Jan 2023 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41828
IP address blocks: 195.47.228.0/24 maxlen: 24
91.185.192.0/19 maxlen: 19
2a02:840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:fe:bb:be:03:a4:68:1f:ac:e8:c7:68:d4:9b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Jan 1 05:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=701136fb5bd3f82fed3da1f1eb491e20bdc02b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:37:1b:01:e3:be:90:6b:63:6e:5f:4f:83:
ce:5a:49:58:30:ca:1d:b1:8d:02:de:05:80:e6:e3:
71:f8:bf:71:ef:43:7a:cf:00:d4:2d:cd:06:a4:88:
62:a9:fb:a9:c5:7b:cd:36:45:fd:0f:8b:95:b4:5f:
33:be:42:ff:d2:61:a2:48:17:6a:7c:06:96:a1:b4:
92:1f:e2:1c:53:f7:40:d4:fd:d0:57:f8:11:ff:80:
5b:35:d5:71:b3:3e:a5:6a:4b:89:ff:bb:92:fe:92:
cd:86:6e:bc:b2:03:bf:9b:4a:97:3e:58:60:07:4c:
4b:e3:a5:4b:8b:7e:80:0c:b3:ba:b5:b0:16:61:ad:
8e:36:25:ac:97:45:97:52:bf:97:9d:37:50:3a:07:
14:d5:65:ef:a4:e4:0f:15:cb:85:23:79:04:25:48:
81:4d:87:9b:a1:42:38:53:f2:a7:de:b1:f3:cc:cc:
d5:61:c2:cc:24:c8:fc:7d:cd:5b:d5:65:1f:6c:eb:
f8:3e:e7:d6:f8:84:58:08:b9:f6:90:b0:09:97:f9:
b0:9b:3b:35:63:c8:f9:4b:b0:80:18:a8:6a:50:c8:
ad:ea:29:6f:3e:52:fa:b1:d2:aa:24:3d:c9:5b:c8:
3a:c7:31:38:0a:13:5d:38:38:9c:77:b5:a4:2f:6b:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:36:FB:5B:D3:F8:2F:ED:3D:A1:F1:EB:49:1E:20:BD:C0:2B:61
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/cBE2-1vT-C_tPaHx60keIL3AK2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.185.192.0/19
195.47.228.0/24
IPv6:
2a02:840::/32
Signature Algorithm: sha256WithRSAEncryption
4e:74:9c:cd:ed:a5:55:59:a0:e4:29:77:da:b1:08:85:d1:a4:
bd:c8:6a:01:0e:eb:22:ad:ce:68:c5:0e:70:d4:75:25:39:0f:
b2:2b:5a:28:d4:34:16:72:31:77:cb:b6:e8:e0:f6:16:80:06:
bc:2c:63:20:66:d5:68:7b:05:be:a8:12:a1:25:6f:eb:48:43:
4d:d7:fb:8c:83:65:e7:27:7e:35:69:c4:df:2c:2f:46:78:d0:
68:8b:c2:4e:fe:90:8d:ba:5d:f0:15:6e:f7:0b:9b:97:69:42:
c9:fb:8f:d2:38:d7:64:21:22:e7:b8:cd:84:97:02:45:c2:4f:
ea:01:a5:52:3f:42:af:d7:28:7b:63:5b:57:af:1f:e6:d7:12:
e4:aa:fb:41:7a:dd:49:e7:b6:f3:5b:9d:70:f1:48:c0:6e:28:
7f:82:79:e2:91:ca:80:bd:28:1a:55:00:5b:d9:eb:35:8d:3e:
9d:ef:1f:53:9b:0f:ca:c1:a0:e0:60:c1:aa:bd:dc:39:bb:63:
3e:0d:bc:68:11:b5:d0:fc:f8:25:29:f1:fb:e5:9d:de:f8:ee:
24:98:0b:6e:fa:a5:1f:ee:9b:73:06:e1:16:ef:25:f3:4d:17:
a2:d0:de:21:f5:de:4b:b4:8f:54:0b:a4:3f:2f:eb:9c:9a:f5:
10:16:6d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:23:49 2025 by rpki-client