Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/2fJdEaRFUe67GhSiaUFGj2pvaJQ.roa
File: 2fJdEaRFUe67GhSiaUFGj2pvaJQ.roa (raw, json)
Hash identifier: +tlkhxpQHgbi5Gu9i2lZjhxnMBcZyzGNimEbzl59Tl8=
Subject key identifier: D9:F2:5D:11:A4:45:51:EE:BB:1A:14:A2:69:41:46:8F:6A:6F:68:94
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 054B4944
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/2fJdEaRFUe67GhSiaUFGj2pvaJQ.roa
Signing time: Sat 01 Jan 2022 14:58:25 +0000
ROA not before: Sat 01 Jan 2022 14:58:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210526
IP address blocks: 185.179.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88820036 (0x54b4944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 14:58:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9f25d11a44551eebb1a14a26941468f6a6f6894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:29:d8:f0:7a:22:07:de:37:c6:5a:16:fd:
a6:a2:44:e6:39:c8:18:8a:ed:cb:ee:6b:08:bb:c2:
d2:72:88:a3:a1:a4:a0:52:61:1e:1e:74:fe:e9:87:
c9:15:2f:38:f4:29:e6:27:74:42:4d:6b:a5:ee:94:
58:ba:3c:9f:27:ae:a8:ee:4e:df:00:9c:78:29:df:
0e:1a:7d:5c:a0:4b:e9:50:0a:f4:ff:7c:96:64:31:
95:ca:04:16:7b:28:a8:b8:74:45:27:d6:8c:d4:4e:
e1:f0:a1:3b:3f:8f:a3:97:bd:d4:70:3d:e7:61:01:
7e:1b:33:3a:ba:de:1e:25:23:93:06:a9:2e:1d:f1:
0e:85:89:3a:1d:23:60:6f:10:ae:45:e9:58:78:95:
fe:49:3a:1e:da:3e:64:40:5d:da:47:b2:c6:93:64:
f4:27:79:4c:a3:40:8f:33:25:49:e7:90:a5:68:1f:
96:b0:eb:0c:ab:63:2d:48:18:e6:d7:9c:fb:67:7b:
60:e3:9e:6d:e0:aa:78:04:57:75:bd:f4:e4:2a:13:
a1:62:3a:4f:c1:3f:ad:2d:f1:4c:6a:5c:51:51:af:
56:c3:c0:aa:f1:0d:8a:30:b3:79:af:01:c8:29:41:
64:3d:a2:ee:6f:43:05:d9:14:15:24:c3:7d:b4:06:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F2:5D:11:A4:45:51:EE:BB:1A:14:A2:69:41:46:8F:6A:6F:68:94
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/2fJdEaRFUe67GhSiaUFGj2pvaJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:56:90:9f:ce:c3:aa:21:c9:e0:85:bc:2f:ab:39:87:2c:0d:
fd:2a:84:ec:44:85:72:a3:4e:a2:68:f3:fe:c8:4c:2d:a6:6c:
5b:19:a1:17:71:6d:34:e8:1e:ad:a0:16:d9:b8:06:e3:01:a6:
6e:b8:b4:fc:8b:a7:00:bc:61:ee:39:87:1a:79:65:51:6c:5d:
a1:cd:03:f8:89:02:fb:24:20:6c:11:2a:c8:ac:58:48:82:9d:
54:48:3b:bd:cf:4f:86:bc:e1:60:b8:e5:e5:a7:17:05:bd:13:
59:55:ec:57:04:dd:a6:14:ad:fa:53:91:93:4f:04:dd:8d:2f:
ea:ab:78:57:2d:1c:a6:a7:90:0c:3a:10:85:71:88:d0:e5:75:
32:35:14:30:63:4e:05:1b:fd:a7:af:64:94:9c:79:91:85:af:
45:52:0d:7d:45:77:c0:b4:4c:cc:41:fb:94:f3:0e:90:cd:57:
b4:f9:e1:c7:e3:fa:74:37:52:f3:5d:34:1c:c3:1a:84:9f:2f:
8c:0c:18:73:b6:1e:a4:77:6e:2c:1f:5d:eb:d2:b8:42:2c:dc:
43:6e:ae:d9:83:ea:78:e0:ef:a8:35:13:0d:44:c5:f2:08:eb:
31:60:78:e2:b8:e7:6c:82:a8:a4:cf:dc:97:36:88:ca:97:0a:
68:37:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:48 2025 by rpki-client