Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/eBe2bIViN8BnCroQJeerDT-beQA.roa
File: eBe2bIViN8BnCroQJeerDT-beQA.roa (raw, json)
Hash identifier: SYsx7sut2XlVaZXNUPQyVLybT3cW0lJChH1AMKmpg2U=
Subject key identifier: 78:17:B6:6C:85:62:37:C0:67:0A:BA:10:25:E7:AB:0D:3F:9B:79:00
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 0182EE0B6D2A32E514DA8C736A68F9B73F11
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/eBe2bIViN8BnCroQJeerDT-beQA.roa
Signing time: Tue 30 Aug 2022 09:18:22 +0000
ROA not before: Tue 30 Aug 2022 09:18:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207620
IP address blocks: 185.249.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:0b:6d:2a:32:e5:14:da:8c:73:6a:68:f9:b7:3f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Aug 30 09:18:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7817b66c856237c0670aba1025e7ab0d3f9b7900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:a1:e7:eb:c9:95:dc:3c:77:47:cc:81:31:
63:90:7f:7e:b0:73:e0:12:9a:2e:ec:74:30:ef:11:
01:f6:d0:45:6a:2e:36:fb:8f:c3:b0:1a:6d:dc:8e:
72:ce:0b:d2:66:89:ae:94:bc:f5:90:5b:70:a0:6c:
af:8b:f6:fb:b6:d1:76:b7:66:3c:ce:45:df:2b:40:
8b:17:be:03:25:d2:4c:fb:38:42:0d:ff:4f:cf:bd:
78:ad:eb:30:d1:1b:16:b8:e1:a8:61:39:f5:f6:d8:
02:e1:de:18:87:c1:38:4c:c9:32:d9:44:a8:a3:90:
75:6a:3e:3b:60:5d:ab:14:c4:46:56:b5:94:3c:a6:
1a:05:4c:3e:c8:14:8e:1c:08:3b:b3:a4:8e:6c:89:
ec:b8:e9:ed:f4:20:47:4b:d1:53:1a:9d:af:02:05:
4e:9f:19:47:68:1e:93:7c:f1:4c:3b:35:e5:20:49:
ef:c2:9e:d2:a2:db:f8:96:31:16:ec:77:e2:f0:ea:
05:38:93:2e:06:66:1b:2e:a6:af:35:1a:4f:78:7d:
83:e4:2a:a1:66:83:5d:f0:84:53:1d:d3:9e:54:71:
dd:48:d9:72:57:6f:8f:83:b4:34:a2:4d:c9:a2:64:
2b:26:a6:d3:ea:cc:85:43:d9:97:ba:35:47:10:72:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:17:B6:6C:85:62:37:C0:67:0A:BA:10:25:E7:AB:0D:3F:9B:79:00
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/eBe2bIViN8BnCroQJeerDT-beQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:50:f6:1d:16:23:75:00:64:dc:da:11:9c:bb:de:bc:a2:16:
66:8a:a9:6d:f9:27:20:cd:1c:e6:e3:3d:df:6f:a1:4d:97:72:
4a:84:3c:73:28:bc:9d:58:26:ec:76:bb:7d:9c:d1:6e:ff:0f:
b2:a5:f3:b6:61:28:6d:71:46:be:fa:3d:03:12:b0:5e:f2:ac:
2e:62:a6:41:4d:61:b9:ab:d5:a8:7a:0b:f3:b3:3b:cf:2f:58:
4c:68:6e:68:2e:3c:23:22:fd:4f:17:f1:d4:aa:8f:a2:2c:f7:
cd:fe:d1:95:77:7d:b0:42:1b:63:39:fe:e5:d8:f6:94:84:0d:
b5:d0:06:31:c8:48:e9:85:bc:3b:ff:59:e9:4f:8a:eb:d8:02:
cd:1b:27:b5:9d:90:fb:e8:33:7b:70:e2:80:ef:51:c1:58:09:
c4:e5:96:05:95:86:27:44:02:69:03:b4:9e:ef:52:e4:bb:fa:
47:8b:e0:75:c6:a4:10:fc:ec:cb:fa:7a:f1:84:a7:41:7e:0d:
cb:b4:82:28:e8:0f:a6:3a:f8:44:13:83:eb:b9:43:2d:64:72:
44:40:ec:df:ff:59:4a:c9:35:9a:0c:8d:c2:b1:22:4e:71:60:
c5:13:df:7d:1d:56:e2:d5:2c:65:af:d7:dd:a4:1f:a7:0e:48:
4d:d9:66:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:10 2025 by rpki-client