Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xGnsqAeT0-Qknc_P8p9B1g9NloY.roa
File: xGnsqAeT0-Qknc_P8p9B1g9NloY.roa (raw, json)
Hash identifier: gZwpue9Cvir9eKxlxeeytp9pgPJOxZ4wg4ESDyYuXik=
Subject key identifier: C4:69:EC:A8:07:93:D3:E4:24:9D:CF:CF:F2:9F:41:D6:0F:4D:96:86
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C60A927
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xGnsqAeT0-Qknc_P8p9B1g9NloY.roa
Signing time: Thu 03 Mar 2022 10:31:16 +0000
ROA not before: Thu 03 Mar 2022 10:31:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 195.179.240.0/22 maxlen: 22
195.179.244.0/22 maxlen: 22
195.179.252.0/22 maxlen: 22
195.179.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207661351 (0xc60a927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Mar 3 10:31:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c469eca80793d3e4249dcfcff29f41d60f4d9686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:c8:1f:a1:44:e9:62:e8:5c:a9:8b:b0:fe:
b3:48:92:13:5d:3a:99:b2:70:86:cd:51:20:dd:9f:
44:69:69:72:6b:56:08:ff:db:09:5b:70:20:5d:85:
5d:b2:b8:db:aa:b6:73:2b:58:88:c0:88:38:9f:da:
ac:a8:c1:1f:c6:88:90:7d:31:1a:4c:22:5c:27:1c:
ce:d1:26:60:0e:90:a8:1e:33:66:2b:46:09:44:10:
6c:8a:3a:38:af:e0:f5:3f:ee:f7:67:a8:79:c4:e7:
ea:c2:81:c2:f3:81:3e:46:51:82:12:c7:73:d2:b9:
63:92:4a:8d:83:e4:6c:5b:0f:b9:ce:77:50:93:3f:
da:2e:a6:8e:e2:8a:6a:10:8e:3a:a6:24:ca:51:09:
93:43:da:c0:25:14:5e:2f:52:b3:8b:96:2f:20:c2:
2b:2d:c0:64:fb:e2:5f:b5:55:0f:ec:7b:4f:e2:0a:
55:ce:e6:93:27:a8:69:d8:db:ac:d8:fc:90:05:4c:
af:1f:70:ec:fb:6a:98:06:7c:b7:4f:85:67:4d:4e:
4b:57:50:8c:2a:47:48:c5:9c:9a:ba:64:29:1f:51:
5b:70:ce:61:6c:31:f3:51:00:05:a4:8d:e6:a1:ec:
05:32:d0:6f:f5:d9:0a:56:34:cb:d3:7b:10:25:eb:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:69:EC:A8:07:93:D3:E4:24:9D:CF:CF:F2:9F:41:D6:0F:4D:96:86
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xGnsqAeT0-Qknc_P8p9B1g9NloY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:c6:00:c7:3c:3b:b8:90:3a:25:9e:b2:e8:a3:23:5f:5a:23:
5e:4a:72:68:48:fc:8d:5d:88:89:45:fa:e8:77:6f:bd:d5:76:
4c:d8:d2:04:dd:18:73:53:e0:91:47:5d:3b:db:71:d0:1c:58:
e1:75:aa:b6:c0:b7:5b:ac:1b:61:45:8a:23:28:49:bc:e6:98:
43:b7:d3:04:f6:2c:6d:c3:bf:d6:6b:d7:78:e0:77:83:ce:17:
83:61:c7:e2:88:d7:64:86:28:1b:4d:1b:fb:eb:94:b8:fd:54:
07:f2:3c:0a:2b:1c:8e:65:35:b4:8d:41:31:b2:3a:f3:c4:8f:
26:ad:7f:e1:91:26:b2:39:80:54:c1:cb:74:99:94:ee:61:ec:
f2:2d:19:38:05:2b:40:dd:6c:93:37:41:07:c2:4b:1b:84:87:
85:b5:11:ec:a3:50:e5:ec:ca:fa:59:a1:c2:23:89:7e:98:f0:
77:3a:ba:ba:d1:3f:dc:89:19:49:30:7f:cb:08:32:68:88:5e:
af:ef:29:b1:f0:d5:eb:2f:eb:9a:2e:56:b0:d2:7e:3e:5f:45:
d2:bc:4e:92:50:55:8f:7e:5c:0e:17:34:ba:1d:84:89:96:e1:
7a:b1:7e:e1:1c:14:12:98:f3:3e:a0:1d:55:23:45:13:6f:a6:
8a:22:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:17 2025 by rpki-client