Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/2CeTqscQKjlehWBqR40fLOi3ylE.roa
File: 2CeTqscQKjlehWBqR40fLOi3ylE.roa (raw, json)
Hash identifier: mTtXu0KSgMqbcYU89NaqS6rVM/1HWkDuRzlvFhSWyhY=
Subject key identifier: D8:27:93:AA:C7:10:2A:39:5E:85:60:6A:47:8D:1F:2C:E8:B7:CA:51
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 0D88068E
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/2CeTqscQKjlehWBqR40fLOi3ylE.roa
Signing time: Sat 01 Jan 2022 15:01:06 +0000
ROA not before: Sat 01 Jan 2022 15:01:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43754
IP address blocks: 84.47.232.0/21 maxlen: 21
84.47.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227018382 (0xd88068e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 15:01:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d82793aac7102a395e85606a478d1f2ce8b7ca51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:17:69:a9:cf:20:3c:7c:ab:84:3e:60:ab:
e0:7b:58:fb:9b:2e:be:1d:3e:1c:26:3e:b2:a6:ad:
1d:33:bf:c2:59:9e:86:c3:ea:8c:5f:e6:63:59:1d:
cd:fe:db:48:a2:ac:0e:f0:d1:2a:ff:e7:3b:af:2e:
18:8a:ea:da:d3:9d:f1:a4:7b:7c:7c:3c:66:19:6e:
d4:65:a2:b2:81:39:06:42:69:11:8c:2a:35:b6:1d:
e4:c4:9b:6b:f0:8c:5d:da:29:1d:10:98:0e:71:a5:
1f:53:32:b0:c3:e9:8c:75:d3:a5:f5:eb:52:09:b4:
2a:a8:79:64:6a:0b:5b:29:2f:a3:68:36:4b:92:af:
22:89:86:ab:b0:96:bf:f1:02:6c:de:8d:cc:3d:f2:
f9:b7:a3:37:9c:d7:88:4e:9c:f1:6f:6e:6a:e6:bd:
11:03:2b:2d:c4:ae:12:c2:f9:b7:64:13:09:47:ea:
42:74:5e:6a:dc:ff:53:b0:b0:5f:e2:56:63:cc:29:
14:86:7a:35:00:fd:3b:f4:50:91:f8:74:2a:0d:4a:
0b:49:e8:bf:f3:53:3f:fa:2a:5a:75:6c:2c:4e:f5:
71:4c:62:b7:68:44:e8:01:c1:7d:56:11:47:da:56:
d7:7b:da:ce:b2:96:93:47:03:f1:19:e2:06:78:cc:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:93:AA:C7:10:2A:39:5E:85:60:6A:47:8D:1F:2C:E8:B7:CA:51
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/2CeTqscQKjlehWBqR40fLOi3ylE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.232.0/21
Signature Algorithm: sha256WithRSAEncryption
cd:8b:35:98:0b:84:30:26:00:97:9b:2b:1c:a6:81:43:f4:d9:
52:8a:4b:59:70:dc:20:34:fd:b6:15:a0:0e:71:b3:c0:5f:bf:
1f:53:48:ea:29:c7:62:28:9b:f3:bf:98:77:97:b6:32:8e:32:
a0:23:4f:31:b6:94:02:7f:61:23:49:d6:d1:cc:5c:92:6d:2c:
30:23:9c:33:65:7e:4e:41:1c:02:ea:36:ba:2b:c4:0c:f0:af:
74:dc:5f:41:10:2f:ac:09:7a:3d:d4:66:2f:f8:27:ba:81:94:
52:d8:37:4a:86:67:2b:30:52:d6:da:34:8f:91:6e:81:cd:96:
56:a4:d3:18:0b:bd:f6:f7:b9:a3:ce:5f:ad:12:20:18:2d:c2:
0b:18:79:fb:26:bc:b9:ab:f8:88:5e:63:73:1a:2d:f7:9f:22:
31:e8:c3:fd:b6:e7:43:d6:67:7c:f3:ec:af:18:71:e1:91:8a:
84:54:a3:fa:9b:22:e6:08:7e:22:a0:46:da:a3:cc:6d:56:d1:
69:e6:12:74:42:59:2f:b7:fe:91:69:fd:ca:c5:d5:32:42:a8:
84:74:91:10:e3:b6:d3:6e:b6:f2:f4:b6:67:20:6f:09:74:9c:
63:f1:f5:58:1a:82:e6:c4:c8:9c:03:45:71:d5:f9:f2:65:de:
61:83:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:13 2025 by rpki-client