Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/n7Euk9Sp8_BV75v2Kv-mnBfaAhs.roa
File: n7Euk9Sp8_BV75v2Kv-mnBfaAhs.roa (raw, json)
Hash identifier: pxBuQfFeGQXfICFeNgyjEG0sIlZ+5oe0kAzCXgjFbzM=
Subject key identifier: 9F:B1:2E:93:D4:A9:F3:F0:55:EF:9B:F6:2A:FF:A6:9C:17:DA:02:1B
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 042A1455
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/n7Euk9Sp8_BV75v2Kv-mnBfaAhs.roa
Signing time: Sat 01 Jan 2022 10:58:19 +0000
ROA not before: Sat 01 Jan 2022 10:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209836
IP address blocks: 213.232.124.0/24 maxlen: 24
185.126.201.0/24 maxlen: 24
213.232.125.0/24 maxlen: 24
185.126.200.0/24 maxlen: 24
213.232.127.0/24 maxlen: 24
213.232.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69866581 (0x42a1455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Jan 1 10:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fb12e93d4a9f3f055ef9bf62affa69c17da021b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:8a:e2:71:ee:d4:8f:86:de:6a:a9:99:9d:
99:5f:19:8b:c3:83:fd:6c:8b:fc:9e:ef:3e:90:46:
54:a8:8a:62:1e:c2:a6:57:11:b5:f4:2f:8b:97:f5:
8c:ae:09:06:6d:92:86:17:7d:b5:49:4b:9e:04:a0:
47:90:3c:a8:30:b0:a5:77:ef:04:8a:2f:b9:d1:fb:
f2:92:32:c0:48:31:6c:8f:2d:20:ec:fc:0e:69:e0:
45:ec:eb:79:68:34:cf:bb:df:fd:b2:06:92:7b:32:
33:5b:8d:e6:62:6f:42:b1:d6:06:4a:f5:f9:80:28:
55:21:fa:99:51:92:d1:04:68:76:10:9a:b4:a2:52:
5c:3f:28:85:67:96:f2:ba:86:6f:15:b3:ca:39:46:
26:b1:4a:33:49:76:13:79:d6:e5:a2:46:dc:59:ef:
33:3c:d5:14:f4:1a:f5:1d:c1:68:77:62:e5:ae:fd:
f7:0b:ae:81:12:9a:35:da:48:ee:14:0d:60:86:1e:
b2:86:dd:58:57:3b:7e:c3:26:9b:b7:72:91:8f:ab:
be:ea:97:a7:4d:e6:d3:53:38:e7:d0:0f:3b:1d:d1:
fb:10:e3:29:54:79:6b:67:bb:15:17:6a:de:8d:4a:
2c:98:ac:da:b8:ba:fe:fc:c9:6f:6e:e1:35:61:0f:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:2E:93:D4:A9:F3:F0:55:EF:9B:F6:2A:FF:A6:9C:17:DA:02:1B
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/n7Euk9Sp8_BV75v2Kv-mnBfaAhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.200.0/23
213.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
53:81:47:d5:f3:70:c8:00:f8:bf:b9:e1:65:36:09:03:95:29:
ee:75:11:83:a7:09:86:e0:17:03:e9:aa:a2:a6:12:5e:05:49:
6e:3b:22:6d:f5:d4:80:cf:f7:b8:51:28:94:2e:e9:b6:8a:ae:
59:bb:13:c4:77:79:95:cd:c1:19:7d:fc:85:08:2e:23:69:2c:
68:cc:1d:7e:7a:7a:e6:0c:03:b6:73:cc:64:84:95:e3:d0:85:
0d:0c:76:a7:b1:c5:ef:7d:34:3a:e5:a0:83:8d:55:73:d3:a9:
d8:73:80:46:2c:95:7b:17:e0:c4:9e:ed:aa:15:cf:5f:b0:d1:
e7:58:42:fc:87:4b:22:19:ad:32:2b:2b:9c:dd:de:73:a6:06:
2f:4f:bf:c3:32:49:e8:a6:79:61:ad:de:1b:3f:30:2e:da:35:
34:6c:3b:14:c5:fa:33:4c:fe:a3:40:0f:1c:cc:8e:4a:c3:b1:
33:6d:2c:da:fa:8a:1b:fc:7e:4b:de:6d:d8:91:c2:e0:e0:6f:
00:c4:3c:0a:8b:4d:55:de:39:fd:40:76:37:21:db:73:bc:1e:
c0:76:af:42:7c:cb:29:76:11:cb:d3:88:df:ae:59:c3:cb:c2:
47:c8:f6:fe:34:cf:2e:52:cb:e8:e5:1d:2a:5c:85:23:98:0c:
8a:6d:b0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:18 2025 by rpki-client