Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/2MnST3OuHjTgDoDDeoELEWd8nuA.roa
File: 2MnST3OuHjTgDoDDeoELEWd8nuA.roa (raw, json)
Hash identifier: xAvo3CwW4cwUV2nLLUUBrjURfPq5YY57SLrPwP7Gffo=
Subject key identifier: D8:C9:D2:4F:73:AE:1E:34:E0:0E:80:C3:7A:81:0B:11:67:7C:9E:E0
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 0183361CA695CF9A98322890CDABAD3FB1C9
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/2MnST3OuHjTgDoDDeoELEWd8nuA.roa
Signing time: Tue 13 Sep 2022 09:09:50 +0000
ROA not before: Tue 13 Sep 2022 09:09:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197171
IP address blocks: 195.246.124.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:1c:a6:95:cf:9a:98:32:28:90:cd:ab:ad:3f:b1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Sep 13 09:09:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8c9d24f73ae1e34e00e80c37a810b11677c9ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:dc:78:87:ca:4b:20:95:90:7d:4a:59:48:
fd:c0:18:c8:93:ef:10:84:35:62:51:e8:1e:20:ca:
93:77:af:0c:96:32:9b:a6:06:bd:ef:75:35:e6:39:
61:ea:1f:43:73:aa:5d:a0:e2:2c:47:34:9a:47:78:
a8:52:8b:3d:c8:d7:b8:11:a3:f4:df:e4:a2:1a:67:
c6:2f:53:a8:2e:70:9f:2b:a7:c1:bd:ae:2b:0a:bc:
c5:6c:2b:3c:33:26:34:4f:33:a2:d9:be:75:7b:be:
00:6c:05:d9:e5:b4:43:03:78:ab:a3:03:88:7f:16:
56:37:47:c6:ad:69:a0:d4:6a:89:10:7e:c7:89:f8:
70:5e:e6:ee:73:f2:93:21:16:ea:86:7e:1f:26:8e:
4f:90:ca:5c:75:52:91:a0:48:fc:65:89:1b:0e:95:
97:a2:06:4b:a5:52:58:55:2f:d2:04:66:57:bd:22:
b0:da:01:54:b9:87:1c:ee:85:01:98:b2:52:c4:bb:
c0:b3:e0:af:3b:34:bb:cc:07:a6:9d:b0:0e:ba:d0:
db:71:f7:48:c6:c2:3f:fc:79:a8:a7:62:e3:1c:61:
47:3b:0d:fb:b6:83:22:43:d1:5c:ff:a2:80:a2:44:
16:a9:76:f6:02:e2:bb:65:44:8d:19:10:4f:44:27:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C9:D2:4F:73:AE:1E:34:E0:0E:80:C3:7A:81:0B:11:67:7C:9E:E0
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/2MnST3OuHjTgDoDDeoELEWd8nuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:a6:1e:8f:59:7e:e4:99:a4:26:eb:db:38:2d:1f:cb:57:7d:
78:ab:60:be:56:07:99:45:75:70:f9:e2:27:a1:81:b0:38:23:
3a:f3:fb:b9:ff:ef:34:7e:c3:05:0b:55:55:8c:08:41:51:23:
2b:aa:8e:9c:14:51:6f:aa:38:ff:bb:ae:40:8e:c9:3e:d7:c5:
3c:d8:2f:bf:8c:fb:d9:f3:e0:b8:06:a9:38:17:f8:e9:7e:ca:
eb:d6:04:3b:e8:d3:c2:ec:88:f1:63:f3:ef:2a:44:80:e2:76:
12:56:25:01:6f:96:48:bc:8e:42:15:2d:e5:ed:36:e9:7d:e9:
78:ae:17:fc:61:d3:fb:7e:16:0d:83:6e:37:e3:9a:ea:3e:6a:
a4:fd:b2:3a:a3:9e:e2:2e:8e:43:13:81:72:92:f0:e1:b2:9d:
74:ad:96:20:e0:35:3f:ac:63:53:6f:29:81:08:d1:f6:3e:6b:
e4:23:90:55:2e:93:1e:c4:a9:da:23:c1:46:3b:39:f9:73:2e:
a8:76:d3:d2:66:c6:7e:1f:0b:b3:67:ee:a4:fd:3b:8e:33:76:
f8:a7:cb:3a:e8:22:24:88:ea:34:dd:7b:f9:2d:3e:e3:91:01:
5f:7b:d2:57:cb:e2:89:84:46:d6:88:37:67:85:25:03:c0:53:
8f:c1:7b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:43 2025 by rpki-client