Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CgVqf7PiUpTdKe3Lw9KI82CY_nE.roa
File: CgVqf7PiUpTdKe3Lw9KI82CY_nE.roa (raw, json)
Hash identifier: Lq2UN5+O6MFlwE/vGm8CGoHUKayQZ0cvff9vtyxMM5I=
Subject key identifier: 0A:05:6A:7F:B3:E2:52:94:DD:29:ED:CB:C3:D2:88:F3:60:98:FE:71
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E7769575E4FBEEC27F48FFDFE7B86
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CgVqf7PiUpTdKe3Lw9KI82CY_nE.roa
Signing time: Mon 02 Jan 2023 08:34:48 +0000
ROA not before: Mon 02 Jan 2023 08:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49090
IP address blocks: 82.144.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:77:69:57:5e:4f:be:ec:27:f4:8f:fd:fe:7b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a056a7fb3e25294dd29edcbc3d288f36098fe71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:85:59:45:a6:c4:3c:50:56:16:be:a8:d1:df:
6e:a3:92:e8:ee:ed:15:26:2c:14:aa:e1:9d:0b:9c:
1c:7a:df:39:6c:55:b7:10:0c:ce:fc:d4:e5:d4:c6:
db:c5:31:c1:4d:42:70:06:71:89:b5:dc:2e:04:13:
1a:f1:66:35:86:3f:47:9a:19:24:80:2f:3c:51:8e:
66:c1:72:59:dd:a7:3c:a6:0d:6e:77:1d:7d:1a:de:
f7:f7:dd:50:a1:6c:2b:79:7f:b8:dd:00:67:fa:12:
94:c3:51:96:7b:ed:35:ab:e9:36:10:30:f9:f8:50:
a5:49:2d:76:9b:06:50:50:a7:4e:d5:64:03:30:b2:
0e:bc:a0:60:2e:95:d2:10:7c:db:0a:ea:05:3c:a8:
43:df:85:3f:cc:14:77:2e:4f:9a:3b:49:a6:fd:8a:
d7:f8:4d:be:2a:18:d2:f9:11:d5:de:ce:68:34:ee:
73:d8:d4:48:6a:15:21:07:6f:ef:31:ce:16:a6:9c:
20:93:88:70:ba:d0:6b:d9:4c:95:32:a0:5c:57:18:
f2:f6:a4:ee:7f:ee:2f:75:94:b0:ec:b0:2d:00:e9:
ad:df:65:1e:9f:2e:49:1a:cb:97:9a:fa:54:d0:55:
71:32:d2:e2:42:d3:20:c8:f8:81:f9:3e:af:b0:2b:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:6A:7F:B3:E2:52:94:DD:29:ED:CB:C3:D2:88:F3:60:98:FE:71
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CgVqf7PiUpTdKe3Lw9KI82CY_nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.184.0/24
Signature Algorithm: sha256WithRSAEncryption
72:63:75:97:4f:38:5d:c9:00:a1:ef:4f:b8:48:3b:cb:00:3f:
b6:86:bf:91:ff:5a:cb:c2:29:97:fe:e4:66:fd:bb:a5:0c:a0:
50:72:c4:19:ac:a4:3f:e1:17:b4:1a:7d:37:dd:f9:52:ea:61:
70:12:62:0b:cb:c5:3c:95:38:ad:b6:6a:f3:2a:e1:30:e7:35:
9a:71:ea:73:61:03:e5:de:79:d8:98:87:4b:3c:eb:72:85:c0:
ad:18:1e:e4:fe:d6:ab:78:46:88:16:41:66:13:d8:55:bf:9a:
0b:43:e7:90:01:57:53:ee:59:3c:d6:e8:ec:89:50:bf:63:4f:
85:40:a6:d3:40:df:a9:46:1b:7d:ef:b9:86:f1:27:9d:24:45:
ab:17:e3:25:a5:de:67:c1:e5:cd:40:fb:ed:6e:ca:7f:d8:43:
54:b4:4b:42:b7:4c:8b:24:5c:f0:3e:7d:8e:3f:57:d8:61:3f:
ab:ca:c4:5e:bb:3f:c8:ec:4e:e2:09:83:ae:e5:db:e2:72:b8:
04:4a:95:3d:0b:96:46:13:02:f9:90:f5:0f:f8:57:3d:15:b8:
d8:8c:df:37:9b:f6:30:f0:84:44:a2:fa:a3:e6:2b:b4:5b:a5:
74:8e:19:7a:93:60:f7:40:e7:e6:4f:75:ca:04:18:38:9b:65:
5f:a3:89:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:57:21 2025 by rpki-client