Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0T3De9O44XNrmh1Pne9fH5euJsg.roa
File: 0T3De9O44XNrmh1Pne9fH5euJsg.roa (raw, json)
Hash identifier: X7J5/lwqye+hWWk8WNGXjaymKM2kafgyTcG6xoF1LqQ=
Subject key identifier: D1:3D:C3:7B:D3:B8:E1:73:6B:9A:1D:4F:9D:EF:5F:1F:97:AE:26:C8
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 04E86AB5
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0T3De9O44XNrmh1Pne9fH5euJsg.roa
Signing time: Wed 13 Apr 2022 07:25:45 +0000
ROA not before: Wed 13 Apr 2022 07:25:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 185.95.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82340533 (0x4e86ab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Apr 13 07:25:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d13dc37bd3b8e1736b9a1d4f9def5f1f97ae26c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:57:33:80:9d:3d:43:5d:27:8a:7d:b3:de:
96:d0:b5:95:b0:44:22:62:35:53:c6:ac:e0:0d:df:
67:c2:ae:8f:d6:57:49:40:ab:15:df:bc:88:93:ea:
9b:2b:d5:61:eb:97:a3:5a:e0:7e:da:e0:fd:97:82:
a3:fa:21:7c:9d:68:5a:36:07:3f:e2:b7:75:57:33:
d6:b1:a3:54:73:4c:28:c1:9f:89:b7:45:21:86:dc:
e6:73:21:b3:9b:4f:32:16:bd:e5:6d:44:a8:02:c0:
2f:5d:b8:31:8e:67:19:ab:1d:ad:e2:fc:e2:03:73:
cd:ff:12:71:74:8b:f9:51:4b:5f:c0:21:db:6a:4d:
3b:f2:53:d7:52:30:f1:87:33:35:2c:2c:0f:3e:6c:
de:a7:ff:75:45:8a:d3:e4:81:fc:8e:3f:c7:28:1a:
9e:55:02:8b:35:9a:4e:3b:1c:20:32:60:50:ff:4b:
69:7e:71:58:40:38:04:92:e1:53:ea:07:50:f0:66:
f5:49:7c:a7:83:a4:ed:a6:e1:b0:8d:78:87:af:ef:
da:a0:84:ae:38:6d:79:93:8c:19:65:f3:9f:8b:3c:
30:e3:86:78:b1:95:c5:6c:bf:53:6f:48:2d:c7:8c:
43:10:5f:e8:3f:ba:78:be:0c:ba:c3:e4:51:5e:92:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3D:C3:7B:D3:B8:E1:73:6B:9A:1D:4F:9D:EF:5F:1F:97:AE:26:C8
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0T3De9O44XNrmh1Pne9fH5euJsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.156.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4f:0a:43:f6:bb:1d:90:c7:0f:d0:46:b1:7c:01:fc:7c:32:
f8:8d:06:d6:e4:e7:2e:64:fc:3d:1d:85:52:f6:05:b9:7a:9e:
11:d3:f7:45:91:aa:0c:47:72:c5:74:0b:34:59:23:50:03:9d:
d6:ab:dd:1f:14:0e:e6:b6:77:d4:d8:be:7f:ee:66:5f:cf:6d:
7b:1e:52:07:b9:0a:ee:6c:5d:5e:dd:5d:06:b0:cc:66:48:e0:
01:93:aa:ce:d4:49:c6:3e:d0:bd:ee:46:a4:9e:bd:0a:f8:3c:
a4:52:1e:70:01:af:cd:d3:d3:3c:c3:86:36:1f:15:27:ec:47:
bc:92:23:b5:88:f0:36:51:d1:99:bc:76:63:3f:60:8a:89:27:
f2:dc:71:8e:ae:02:e5:f2:2d:08:82:d6:78:e3:53:f0:01:8f:
df:a2:e5:44:07:d2:95:66:47:77:15:06:15:3b:d5:9d:0e:71:
5b:a1:bb:3a:70:0a:b4:bc:5f:35:de:72:7d:10:78:e0:c8:c8:
5a:6d:96:a7:f1:32:73:4e:5d:59:83:01:a4:66:d9:33:37:90:
0c:c2:20:81:62:45:81:df:a2:de:f0:a1:21:4a:bb:60:fb:c8:
da:eb:f6:ca:79:70:8d:22:dd:0f:36:aa:ff:5b:ad:aa:9f:9d:
fd:0c:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:57 2025 by rpki-client