Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/B2h44s-_8gzC14wXSGoPyTnpRjU.roa
File: B2h44s-_8gzC14wXSGoPyTnpRjU.roa (raw, json)
Hash identifier: kk+fhMngyklmCXYt2uTasTNLXfy8tyfjFjTmqvzVJz4=
Subject key identifier: 07:68:78:E2:CF:BF:F2:0C:C2:D7:8C:17:48:6A:0F:C9:39:E9:46:35
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 1A074DE3
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/B2h44s-_8gzC14wXSGoPyTnpRjU.roa
Signing time: Sat 01 Jan 2022 07:04:20 +0000
ROA not before: Sat 01 Jan 2022 07:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51224
IP address blocks: 194.13.70.0/24 maxlen: 24
194.13.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436686307 (0x1a074de3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Jan 1 07:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=076878e2cfbff20cc2d78c17486a0fc939e94635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:8c:da:a9:9a:77:63:52:4d:84:5f:2b:9f:
d8:64:05:55:70:57:df:6e:23:8e:79:68:bf:33:7f:
55:f7:6d:e4:95:ff:38:38:33:77:95:67:a1:e2:c0:
24:ae:44:bf:98:20:7c:61:40:d4:4e:bb:18:0f:fa:
b1:1a:70:bd:ec:4d:80:e1:ae:c2:d4:c6:97:d4:0a:
2a:0b:1e:5b:67:ce:2c:dd:28:a8:71:da:0b:6d:97:
0f:20:52:e6:75:c2:51:77:d6:d2:40:ce:b1:30:32:
07:27:ac:e7:29:41:d7:e6:cd:4e:8b:5e:7b:d7:a2:
93:77:0b:c8:8f:82:e6:ce:1d:ee:ed:01:c5:35:99:
66:47:9e:1d:49:2a:d3:34:64:7f:58:6f:fb:4a:52:
91:d7:b8:85:4d:10:78:b3:79:b9:26:6b:66:83:5e:
99:95:46:96:9a:46:47:39:0f:43:fb:21:e1:47:79:
0f:c3:ee:39:8e:07:e0:56:02:1a:9e:1f:08:05:49:
e3:46:96:85:d6:69:ae:43:8a:a8:8f:34:6a:22:12:
4e:b1:5c:dd:bd:4f:0f:dc:cb:a2:92:c5:a3:14:23:
80:e6:af:51:42:8f:3b:83:66:4c:7e:bf:a6:fe:e4:
cb:2e:ab:d1:e0:08:b7:83:6c:66:cc:1a:bd:20:e7:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:68:78:E2:CF:BF:F2:0C:C2:D7:8C:17:48:6A:0F:C9:39:E9:46:35
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/B2h44s-_8gzC14wXSGoPyTnpRjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.70.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:4e:ed:9f:c6:44:12:d1:ff:98:19:a5:0f:c1:db:65:f5:3e:
ba:94:a6:85:09:70:da:aa:0f:24:97:09:d8:fa:b6:11:e2:5f:
47:99:cf:07:21:c4:75:d4:a8:8e:f4:69:be:9d:12:d2:53:ef:
0c:1a:7c:04:38:2d:88:1e:71:fe:89:b8:97:17:09:fb:3b:b3:
c4:41:71:58:59:71:bb:31:97:b0:3c:0e:12:dc:4d:55:ed:6b:
54:97:72:cf:a6:31:71:bc:2d:b7:96:27:a1:bf:47:4f:29:ee:
7e:9b:3c:41:cc:fe:38:da:d6:da:32:28:a2:61:59:ef:d0:6a:
b2:c9:a7:b3:ae:f0:85:37:23:0e:e4:5b:6e:1d:b1:0f:d9:67:
45:ad:fa:57:a0:d2:70:5f:17:8d:24:97:55:93:0b:99:b8:57:
1c:1d:01:c8:cb:a2:dd:2d:3c:85:dd:58:3e:c1:95:ac:bc:a0:
16:05:e8:a5:66:68:23:1d:e1:44:7f:66:4d:d5:60:97:5f:86:
ae:45:f6:69:6f:bb:6d:4d:27:d3:71:4c:a6:16:21:c2:14:ce:
f1:c9:7c:88:dd:17:fb:02:8f:e4:66:3d:cd:3e:65:ad:42:3c:
a9:1d:39:b6:bd:87:95:1f:b0:28:80:e6:f2:30:8d:40:08:da:
eb:e2:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:51 2025 by rpki-client