Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/bpnZucT4HTcKi-Xpf6nu8L6RDV8.roa
File: bpnZucT4HTcKi-Xpf6nu8L6RDV8.roa (raw, json)
Hash identifier: p2N5P7T7cP7/GOmwF5xdFwWTnDaaX2oQ+YdakXzvkx4=
Subject key identifier: 6E:99:D9:B9:C4:F8:1D:37:0A:8B:E5:E9:7F:A9:EE:F0:BE:91:0D:5F
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE66DDBA9886CE84A7B181A45DD4D30
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/bpnZucT4HTcKi-Xpf6nu8L6RDV8.roa
Signing time: Sun 01 Jan 2023 10:35:18 +0000
ROA not before: Sun 01 Jan 2023 10:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202843
IP address blocks: 185.60.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:6d:db:a9:88:6c:e8:4a:7b:18:1a:45:dd:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e99d9b9c4f81d370a8be5e97fa9eef0be910d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:39:b6:4c:81:07:a3:3f:1d:82:3f:7d:e7:
2c:07:3b:0c:4a:50:61:ba:dc:21:78:d5:3b:c1:d9:
84:4d:84:aa:93:c1:3f:0b:81:98:30:14:ac:86:f5:
8b:71:6a:5c:54:44:86:92:33:f8:8b:98:fe:bb:ec:
83:ce:ae:bf:ad:13:0d:87:92:ba:e8:9b:b3:00:20:
f0:23:bd:41:51:af:68:b5:1a:06:dc:b7:f4:59:f5:
57:71:bd:e2:84:99:17:97:04:f2:32:e5:3a:88:89:
4d:fd:e7:d9:8e:27:8b:4f:b2:e4:92:1d:be:19:d5:
2f:62:83:5f:8d:b8:2f:24:d2:36:95:f5:46:16:63:
11:a7:e0:54:94:8c:03:84:50:2e:f6:2a:a1:ac:0c:
af:57:d3:92:67:60:a6:6d:33:f9:4c:0c:0f:a7:af:
a7:b6:47:f9:63:69:78:5d:39:af:ea:c2:5d:05:04:
3b:88:77:c6:e7:55:ac:90:b3:c4:ec:30:20:70:98:
93:6f:7e:31:4e:d2:80:d6:dd:cf:93:a9:f0:a4:24:
f9:0a:a9:24:39:96:6f:47:ed:45:f9:11:07:7a:95:
5a:f6:19:03:7b:32:b9:b9:c4:32:d0:7e:d8:68:a9:
b1:c9:fc:d2:55:0c:10:a8:27:15:97:64:e7:a6:8a:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:D9:B9:C4:F8:1D:37:0A:8B:E5:E9:7F:A9:EE:F0:BE:91:0D:5F
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/bpnZucT4HTcKi-Xpf6nu8L6RDV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:23:9b:32:b7:9f:0d:54:d2:e6:71:2c:5d:47:69:c0:cc:07:
18:6f:d7:25:55:74:ec:6d:7b:57:90:fc:90:82:7e:ef:42:f3:
0c:29:be:50:d0:00:93:ee:13:71:d1:14:1a:58:46:34:9c:4c:
be:99:02:7a:25:25:ad:a6:94:0a:4c:80:b6:92:7f:ad:3d:7e:
b6:f5:60:84:65:15:53:da:f2:9b:c0:24:3a:07:30:69:5c:ae:
35:4e:d1:24:3f:05:26:87:26:01:a9:09:48:5c:57:c2:f6:79:
9f:e8:99:18:e1:3d:cb:2c:bc:2e:06:d9:37:67:9f:3b:a7:fd:
94:e0:40:46:b7:10:79:64:0b:71:6a:4b:bf:f5:bc:44:89:c1:
54:1d:37:91:e8:f2:3b:73:7c:97:32:85:fb:2f:aa:a7:59:91:
fe:bc:72:98:cd:72:42:67:94:2a:f9:e8:cf:23:3a:81:77:4d:
94:f2:7a:ac:ac:fb:58:fb:f8:23:10:9e:37:48:29:23:65:81:
26:d9:c4:ea:65:d1:cc:eb:e2:a6:1c:b4:df:0e:e1:9d:59:bb:
72:8a:f4:18:d8:6b:9c:4e:4d:da:b2:c9:c6:1f:68:98:70:81:
e2:93:7f:82:93:03:e3:ae:e8:4c:34:e8:91:35:c5:41:f3:e8:
e0:68:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:31 2025 by rpki-client