Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/SBNn29EXm8bd8kgcLLplNwbAxAw.roa
File: SBNn29EXm8bd8kgcLLplNwbAxAw.roa (raw, json)
Hash identifier: 07I+UxO2Ktg3WaesEwpiSqRq+YTpf0jRef2e6YCHAvk=
Subject key identifier: 48:13:67:DB:D1:17:9B:C6:DD:F2:48:1C:2C:BA:65:37:06:C0:C4:0C
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0188528F216B661C37A2D8FF99712681A2E4
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/SBNn29EXm8bd8kgcLLplNwbAxAw.roa
Signing time: Thu 25 May 2023 10:58:11 +0000
ROA not before: Thu 25 May 2023 10:58:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210995
IP address blocks: 195.53.239.0/24 maxlen: 24
195.76.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:8f:21:6b:66:1c:37:a2:d8:ff:99:71:26:81:a2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: May 25 10:58:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=481367dbd1179bc6ddf2481c2cba653706c0c40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:1d:64:f9:41:94:ba:45:de:3e:04:28:b2:
f6:8a:aa:5c:37:1b:a3:02:ee:2b:5a:3c:f3:1a:bc:
14:09:4f:49:b9:cf:b1:b8:58:86:a4:2d:6e:d3:8f:
91:0e:7d:4a:c0:4a:11:bc:c9:92:12:56:67:b8:60:
20:a6:ee:99:04:2e:7b:ed:6b:9c:e0:64:c3:cc:38:
e4:88:95:bf:22:5d:f2:00:81:03:e1:06:b9:91:1e:
21:63:60:f4:9b:d1:4a:72:f4:83:c4:41:8a:89:d2:
56:5e:2c:72:2f:72:a7:68:25:8f:ae:04:16:cc:1d:
a4:c3:5a:6e:9f:72:1d:1d:a6:b4:a9:6a:26:ee:a4:
2d:3c:76:45:b8:41:6c:6b:1d:ad:05:bf:de:b3:54:
ca:e6:62:ad:3e:49:7b:fc:9d:4a:4f:f7:3e:ec:19:
38:2a:e5:c7:f2:d1:cc:88:d1:ea:59:8e:4a:db:e8:
25:1e:88:26:72:6c:5a:ae:8f:f5:41:d3:da:ca:ab:
3f:f9:45:24:a9:93:f4:d4:39:30:46:33:a0:84:23:
de:05:e9:9d:99:2a:78:ba:de:b3:16:66:8d:1e:64:
38:37:43:31:91:a8:23:9e:f9:49:4b:59:82:78:1a:
95:8d:65:75:e8:11:ef:65:0c:cb:a7:71:4d:39:50:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:13:67:DB:D1:17:9B:C6:DD:F2:48:1C:2C:BA:65:37:06:C0:C4:0C
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/SBNn29EXm8bd8kgcLLplNwbAxAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.53.239.0/24
195.76.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c9:e9:3b:f7:ac:ed:72:ed:ce:f4:a5:28:ce:b7:c0:06:41:
d2:23:0e:2d:75:18:0b:31:57:0c:34:49:f1:58:52:ed:1c:5a:
83:c8:e3:b8:5b:eb:84:b1:34:ea:e0:0e:b8:27:e1:2f:20:89:
49:64:6c:e8:c5:bf:07:fa:01:7c:20:1e:5b:bc:96:66:87:4a:
79:87:8f:e7:78:b3:41:f8:88:22:f6:12:22:4f:3d:35:8e:04:
11:e7:1a:af:2e:f7:47:ea:bf:47:b2:36:36:11:4c:3d:ec:0c:
47:72:ff:0f:9b:ee:73:a9:1b:d8:46:59:38:19:71:57:4b:f5:
4b:be:cf:b7:75:65:4c:0c:ef:39:10:97:d7:03:98:49:79:ad:
7f:1d:1a:d1:ed:39:90:5e:1d:4e:24:d1:c5:58:93:f9:f3:5b:
8a:17:bf:98:15:95:db:28:85:c9:75:9e:1f:c8:26:e0:58:ca:
e0:1f:9a:23:01:f5:a3:23:ac:5e:a5:1a:34:88:d2:89:2f:07:
9d:16:86:4e:1e:1e:c4:83:6d:d3:e2:98:58:5b:5e:c8:2e:a4:
23:5a:c3:1b:f0:12:a6:5a:42:56:c3:fe:35:cc:83:fd:b4:50:
98:06:0e:5e:0b:6c:f0:5c:ae:ca:3e:b4:e6:b2:e2:d8:86:48:
c4:84:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:13 2025 by rpki-client