Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bME-Ck9ngZUD4wiuwCGdr0hc6dg.roa
File: bME-Ck9ngZUD4wiuwCGdr0hc6dg.roa (raw, json)
Hash identifier: 6mGO4ONLeHQh/Uhdw4Z+EmayHF8Nula7tRYATBtsBHY=
Subject key identifier: 6C:C1:3E:0A:4F:67:81:95:03:E3:08:AE:C0:21:9D:AF:48:5C:E9:D8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018659DFF060E2C894156FABEE27EE46008C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bME-Ck9ngZUD4wiuwCGdr0hc6dg.roa
Signing time: Thu 16 Feb 2023 10:58:13 +0000
ROA not before: Thu 16 Feb 2023 10:58:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208001
IP address blocks: 194.71.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:df:f0:60:e2:c8:94:15:6f:ab:ee:27:ee:46:00:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 16 10:58:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cc13e0a4f67819503e308aec0219daf485ce9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b4:a9:6a:9c:f5:5e:dc:a5:34:e9:4c:0a:09:
05:cd:b6:55:be:96:1a:81:68:e9:23:92:62:25:51:
25:c0:50:e0:1d:82:8a:58:68:10:6b:4b:6f:82:cd:
fd:55:78:22:39:b5:a8:85:09:aa:a9:b6:fe:53:c5:
8b:57:7f:77:1e:1e:ae:c6:3d:a1:d5:20:02:b1:7d:
7d:62:9a:9b:f5:bc:ab:c8:af:b0:fd:17:05:84:37:
d6:e5:63:70:08:d3:db:ea:67:b1:60:a2:0f:b8:48:
50:87:c3:64:7c:a9:82:0d:cf:58:1a:03:47:df:7a:
1c:f8:ea:2f:51:b3:6b:29:c1:55:4a:14:e9:ea:2e:
8c:53:45:b4:92:77:ae:57:4e:c3:18:d5:74:35:88:
ae:c8:1f:1f:de:31:c6:4d:43:93:dc:e2:c3:c5:a3:
01:78:f6:ca:4c:70:f2:e5:a4:f2:f2:be:ff:17:80:
0a:6c:2c:ab:76:2a:e1:d3:42:9f:64:f2:98:b9:76:
a0:8b:85:73:c9:53:a2:e4:0f:8f:ec:7f:20:64:6f:
25:04:4f:cb:36:4b:df:12:f2:04:94:f1:ea:dd:b1:
01:1a:59:c2:99:49:d2:2c:34:eb:02:69:68:36:f6:
c4:36:8f:1c:29:c3:97:22:6e:1e:6b:a9:3f:20:8f:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C1:3E:0A:4F:67:81:95:03:E3:08:AE:C0:21:9D:AF:48:5C:E9:D8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bME-Ck9ngZUD4wiuwCGdr0hc6dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.122.0/24
Signature Algorithm: sha256WithRSAEncryption
53:89:98:71:8d:98:99:11:37:a7:df:c1:e9:b3:62:53:cf:9c:
74:04:d5:92:a3:12:e8:3a:b9:64:63:65:5b:da:fe:43:a7:88:
93:98:33:28:02:a5:68:49:9a:6a:91:64:2c:50:42:c2:16:bc:
87:a6:af:26:fa:58:b3:32:02:03:20:13:1a:fd:68:5d:fb:08:
cc:df:46:cf:d3:bf:5c:a5:f5:1a:a0:75:a6:90:36:ef:35:82:
77:a2:1a:e4:b0:20:60:8a:ea:c6:db:6a:96:a2:35:eb:0d:0d:
43:82:0a:2a:e2:17:4b:68:04:63:9e:63:8b:44:69:90:01:bf:
ad:a7:65:99:d0:82:2a:27:ae:2e:b3:8d:94:77:94:71:a4:d6:
b4:a3:7c:55:3d:22:ca:81:60:e8:b8:2c:fa:91:9d:99:1a:b9:
fa:cb:3f:53:81:2c:ff:da:e1:29:e0:31:1c:60:9a:4e:ee:37:
46:3c:b2:38:35:9e:ce:a1:26:48:59:21:8f:c7:99:98:bd:a5:
fc:3e:6b:3a:10:d6:04:a9:69:6f:d3:91:34:31:e0:5a:97:80:
05:7a:9d:bf:b7:f5:cc:ae:65:73:f9:d0:b6:b5:0a:54:e5:a3:
0c:5f:24:c0:48:48:2a:74:9c:4c:56:1d:37:80:e6:6c:91:64:
15:54:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:03 2025 by rpki-client