Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/B6_5iuhZOUwh7hNl1sdfjtpQVJU.roa
File: B6_5iuhZOUwh7hNl1sdfjtpQVJU.roa (raw, json)
Hash identifier: 9WP7P3PV+xvUmb6w+S58LYH6P+HzZMyUuvgGwz82GR8=
Subject key identifier: 07:AF:F9:8A:E8:59:39:4C:21:EE:13:65:D6:C7:5F:8E:DA:50:54:95
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 018571FA3405C50F534EA795B212542061A0
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/B6_5iuhZOUwh7hNl1sdfjtpQVJU.roa
Signing time: Mon 02 Jan 2023 10:15:00 +0000
ROA not before: Mon 02 Jan 2023 10:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207199
IP address blocks: 37.140.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:34:05:c5:0f:53:4e:a7:95:b2:12:54:20:61:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: Jan 2 10:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07aff98ae859394c21ee1365d6c75f8eda505495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:9c:03:b5:14:ff:a6:9a:cd:0f:d6:48:c2:
e2:d9:9c:d4:5e:01:b0:15:8a:d6:e9:81:18:fd:57:
4f:bb:39:7d:91:36:b2:3a:c3:7d:a6:df:1e:13:a0:
06:dc:08:18:26:4a:f9:1c:d2:2e:46:92:ba:4e:c3:
11:2e:24:ed:4a:ea:1a:e3:dc:be:6e:7f:1d:9d:65:
ff:5e:0f:d8:d4:67:05:7e:2b:75:7a:a2:f9:fe:64:
58:2c:4f:9b:56:6a:82:21:c5:66:cb:f9:78:fc:69:
e7:65:f5:78:c3:a8:95:66:90:a0:47:36:bc:43:1a:
3a:e6:4a:cf:b0:a9:ec:cf:36:cd:d1:b6:f3:c6:24:
2e:ce:e3:84:be:ce:73:03:c5:d2:87:ad:45:be:c2:
0b:35:fd:e5:f5:a9:23:fb:c2:8c:36:17:10:9b:77:
9f:a6:42:f1:6a:ca:f0:2f:45:ee:f4:98:52:ce:fd:
fe:03:84:04:05:16:12:eb:65:ac:aa:be:66:de:76:
80:e8:45:00:79:19:c6:31:b6:36:16:cc:a2:19:b2:
17:f0:57:fb:71:7b:cb:fd:41:7d:a9:45:d8:85:2c:
5d:e3:4f:09:f1:9f:7b:0d:ea:3e:90:62:e5:5b:a4:
a8:9b:56:4d:81:96:cf:1e:e6:c6:19:28:a6:7f:85:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:F9:8A:E8:59:39:4C:21:EE:13:65:D6:C7:5F:8E:DA:50:54:95
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/B6_5iuhZOUwh7hNl1sdfjtpQVJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.219.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4c:b8:7e:f5:02:d2:b7:c5:41:6c:7f:75:df:6f:d2:72:95:
9d:e3:13:43:2e:c6:7e:6c:50:9b:c3:b7:f7:79:f8:a7:aa:2c:
41:be:03:08:a3:21:71:f6:25:c9:75:21:5a:6a:c5:7c:93:ce:
38:ef:ed:43:6e:ba:3c:a4:97:3c:3c:ec:01:ec:03:57:25:01:
3f:a9:c4:10:d9:48:f9:90:aa:c7:d3:3c:04:fb:26:16:06:db:
b9:95:18:24:e2:d3:12:15:b0:b5:19:4a:38:99:98:b4:1f:17:
86:b7:7d:98:ae:58:be:c4:2e:b7:65:f1:0f:84:b5:73:ce:07:
a6:fb:db:63:d9:53:75:ca:30:49:36:5a:47:b5:3f:20:00:36:
1b:a1:12:65:e4:e1:0d:7b:33:19:b1:65:63:af:8c:b6:8a:ec:
60:98:1d:da:96:d3:f8:5a:ce:c3:f3:f4:9b:91:b1:45:22:a0:
7d:7e:ca:ef:57:b5:43:37:a9:f5:1e:e0:45:74:ed:28:ef:b1:
71:b6:e1:a3:59:d5:05:35:17:8d:77:e4:a5:c5:b4:76:e2:c2:
de:30:2b:1a:98:dc:82:04:a0:31:94:ac:36:78:1d:88:97:8a:
fd:db:68:66:7d:99:24:d1:9a:8d:36:7f:bb:f8:b6:69:ff:61:
7a:1e:b9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:48 2025 by rpki-client