Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/Bs7ZfLU-xFVEN7aeADzD4hJN3Pc.roa
File: Bs7ZfLU-xFVEN7aeADzD4hJN3Pc.roa (raw, json)
Hash identifier: ENTzD7L1v3oqOlUeUSTViW3/q0YTMt2q4COEK7VS+Ic=
Subject key identifier: 06:CE:D9:7C:B5:3E:C4:55:44:37:B6:9E:00:3C:C3:E2:12:4D:DC:F7
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 018B0884348525AC9CD1F26E321B5E4E7FA8
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/Bs7ZfLU-xFVEN7aeADzD4hJN3Pc.roa
Signing time: Sat 07 Oct 2023 05:02:43 +0000
ROA not before: Sat 07 Oct 2023 05:02:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 94.247.137.0/24 maxlen: 24
185.235.230.0/24 maxlen: 24
2001:678:e30::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:08:84:34:85:25:ac:9c:d1:f2:6e:32:1b:5e:4e:7f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Oct 7 05:02:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06ced97cb53ec4554437b69e003cc3e2124ddcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:15:16:ec:50:7a:b4:1b:16:d7:bd:d5:1c:
8c:e0:73:6f:dd:eb:b5:09:b3:29:ee:7f:91:e2:09:
5b:bb:fb:e6:71:7f:5e:95:f4:50:b0:d5:ab:71:fc:
a5:60:6b:9c:a9:8f:ef:25:3e:8e:ec:fd:d3:38:16:
9c:36:40:69:2f:a4:dd:ab:97:52:31:18:27:dc:0b:
b9:51:d9:f8:97:07:a9:a0:3c:b3:87:32:49:0b:47:
78:e1:00:a3:4b:92:6a:2f:ce:2d:5c:f1:95:be:2f:
25:14:21:cc:ce:fe:a1:ca:08:7a:56:fa:f5:93:95:
2c:08:4e:c5:c8:15:9c:be:2f:0a:de:8e:c5:a6:a8:
49:e9:a1:11:91:7d:5c:1f:9b:0b:d5:45:06:31:6d:
11:c4:3a:64:95:f7:01:d0:51:2d:7c:2e:96:4e:25:
7a:c4:5a:34:a9:c3:79:85:5f:23:cd:64:05:95:0f:
ff:4a:a5:67:5b:20:05:79:25:67:d1:1e:31:f5:87:
f7:c1:a5:e8:60:f3:ce:46:e3:0f:32:e8:25:5c:2d:
79:44:b3:b6:6f:f9:a2:20:08:b6:97:0c:55:3f:c8:
d6:bc:3d:6a:31:b6:0a:01:91:32:27:e0:31:6e:bf:
cf:9d:db:96:29:97:85:60:d3:13:eb:1d:d7:56:b3:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:D9:7C:B5:3E:C4:55:44:37:B6:9E:00:3C:C3:E2:12:4D:DC:F7
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/Bs7ZfLU-xFVEN7aeADzD4hJN3Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.137.0/24
185.235.230.0/24
IPv6:
2001:678:e30::/48
Signature Algorithm: sha256WithRSAEncryption
4b:9c:ef:e3:0d:aa:6d:1a:a9:16:a8:fb:b2:a4:d4:9c:64:80:
5e:57:72:cf:17:1b:29:97:30:41:5d:f5:b9:e4:47:4d:ef:78:
65:7c:4b:f7:fd:da:92:75:01:a7:29:15:69:d2:33:30:f8:22:
ef:a4:13:c9:2a:d4:77:4f:20:f4:3d:7e:d8:a6:e0:c8:87:5b:
6f:98:36:e4:38:67:a6:e9:70:21:49:cf:e7:8d:70:45:b7:44:
84:8e:ff:48:0d:af:cf:cf:c3:e3:7c:99:7b:fc:e2:2f:20:fe:
e3:a5:cb:b4:d2:60:81:f1:8a:93:77:3b:dc:2e:4a:95:54:10:
00:88:3c:10:f3:07:7b:6b:4b:da:41:02:bb:34:9b:89:a5:92:
a9:49:bb:18:81:19:2c:92:58:88:8f:79:f1:05:46:1f:19:4c:
bb:01:bc:31:7a:c7:d6:ee:61:5b:13:81:e0:21:c3:11:23:ea:
1b:f8:cd:24:d9:09:f2:20:98:cd:f9:8d:8f:7e:e3:1b:b7:e9:
41:d8:24:9a:62:bb:f7:64:66:30:62:57:2a:7c:c8:da:85:1d:
91:55:ed:8e:e6:56:3e:79:f4:3f:a2:71:ef:94:8e:4e:60:bd:
92:be:d0:84:64:65:8c:19:89:b4:07:89:25:e1:ea:4f:e4:10:
68:c6:ed:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:57 2025 by rpki-client