Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/brHygEC2jubC4PRqEsuHjwrzaXs.roa
File: brHygEC2jubC4PRqEsuHjwrzaXs.roa (raw, json)
Hash identifier: Nh96o4efNwqO5A2FWGwgEAODFjFJ6Yd8+xrwmTTPqWw=
Subject key identifier: 6E:B1:F2:80:40:B6:8E:E6:C2:E0:F4:6A:12:CB:87:8F:0A:F3:69:7B
Certificate issuer: /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Certificate serial: 01856B9C7FF9E9DF2FE817B07AA8A53E732E
Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/brHygEC2jubC4PRqEsuHjwrzaXs.roa
Signing time: Sun 01 Jan 2023 04:34:56 +0000
ROA not before: Sun 01 Jan 2023 04:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6867
IP address blocks: 147.52.0.0/16 maxlen: 16
192.103.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:7f:f9:e9:df:2f:e8:17:b0:7a:a8:a5:3e:73:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Validity
Not Before: Jan 1 04:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eb1f28040b68ee6c2e0f46a12cb878f0af3697b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:96:94:11:19:82:79:e9:81:c9:0a:6a:7d:
f2:e5:8c:90:f1:0c:62:b0:9d:d9:4d:61:fd:24:d6:
54:bd:d3:ed:e3:87:a4:b1:47:32:96:ed:21:ef:c9:
3d:39:54:0a:cc:a6:16:6b:56:c4:91:42:14:6d:59:
d5:1e:db:86:23:f8:6e:46:e3:15:bc:d4:1b:33:1d:
68:47:6a:a1:40:7a:d1:f4:f2:e5:e4:2e:31:f8:17:
ff:58:09:27:b8:4b:85:05:11:ba:43:00:1d:84:92:
7b:dd:f5:f9:e4:63:d0:a2:3d:c6:6f:e2:ce:e0:e4:
b1:42:b6:a8:14:76:b6:42:14:72:99:ed:9e:31:79:
04:13:c5:26:7e:be:76:5d:9d:bd:16:22:52:c2:e9:
c0:0d:a2:ca:13:23:b6:53:dd:2c:d6:38:d5:1b:ad:
8b:c5:b0:bd:1c:42:bc:95:9b:1e:d2:1b:2c:f4:41:
da:46:79:dc:d9:e5:88:98:16:b0:b6:be:34:52:85:
b6:04:2e:5f:86:de:a4:0d:a8:f9:94:d1:f6:5f:17:
d7:0c:20:f2:60:47:9d:10:dd:40:f3:b7:36:3b:37:
da:23:7f:53:d5:3b:f6:94:52:4f:9b:47:91:07:e7:
72:52:bc:c5:5f:f2:bc:ab:da:14:c1:54:9f:02:3c:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B1:F2:80:40:B6:8E:E6:C2:E0:F4:6A:12:CB:87:8F:0A:F3:69:7B
X509v3 Authority Key Identifier:
keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/brHygEC2jubC4PRqEsuHjwrzaXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.52.0.0/16
192.103.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:46:cd:44:5b:e4:3d:5a:24:5e:11:7a:1a:b6:94:8e:c7:70:
d4:17:bb:9b:64:c3:4a:3c:bf:fc:02:bc:5c:d9:28:b9:33:1a:
57:fd:01:c6:30:53:8c:f1:74:b4:da:c0:cd:ad:a0:b5:c8:bc:
7b:6b:75:f6:56:bd:d6:e6:99:69:9c:9e:96:e6:ec:0a:93:d6:
27:32:5c:a6:91:58:ca:2b:ad:4b:08:8a:72:a6:42:79:6e:ec:
38:91:23:b3:c3:1f:c3:56:29:d0:33:d3:f1:8f:6d:e3:a4:d8:
e8:c0:33:26:3c:36:7d:fe:d9:00:cc:f9:f3:99:ea:e9:a0:13:
3d:e3:c9:cc:2e:bf:12:35:ff:74:44:16:cd:22:f9:63:fb:1a:
b9:87:ac:e3:00:13:a2:a6:be:1f:5e:4e:98:cd:e6:2f:8b:33:
f1:36:fc:ec:21:89:e7:7e:9e:e3:6e:cc:29:11:f8:0c:5b:77:
8a:e7:e2:cb:5a:2b:0d:ed:52:cf:73:c3:f9:99:5a:fd:9a:b2:
e1:33:60:b3:1b:0e:92:b9:77:36:0b:84:58:04:51:7d:01:99:
37:78:31:42:be:95:73:c3:06:a5:db:e5:bf:83:01:cd:af:6e:
b6:cd:f4:7e:d5:64:af:ea:b9:3c:dd:9b:b8:da:c8:41:12:07:
e0:f5:8e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:51 2025 by rpki-client