Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/8pHbsxNUBezfW3o7CxTXm2E_FZg.roa
File: 8pHbsxNUBezfW3o7CxTXm2E_FZg.roa (raw, json)
Hash identifier: Xmkhaqq/3fJrhmji8YEsIFcjiljsbWAbV7q6gsc6zX4=
Subject key identifier: F2:91:DB:B3:13:54:05:EC:DF:5B:7A:3B:0B:14:D7:9B:61:3F:15:98
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 01856D01CD8E35A4757981135D42A2CE357A
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/8pHbsxNUBezfW3o7CxTXm2E_FZg.roa
Signing time: Sun 01 Jan 2023 11:05:12 +0000
ROA not before: Sun 01 Jan 2023 11:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204501
IP address blocks: 195.72.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:cd:8e:35:a4:75:79:81:13:5d:42:a2:ce:35:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 11:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f291dbb3135405ecdf5b7a3b0b14d79b613f1598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:dd:1e:81:9c:e4:11:65:a6:ce:82:05:7b:
63:80:67:85:89:10:7f:76:87:c2:39:a4:37:8a:8b:
61:c3:25:08:bf:12:70:9f:a4:96:e2:f7:ae:c6:48:
77:f4:d3:35:32:d9:18:fb:51:a3:ad:6c:a0:77:7b:
5e:97:de:95:31:9a:f8:60:a1:ab:b6:34:3f:ae:2e:
55:95:65:09:d2:63:1c:e0:30:b4:fb:50:93:43:98:
f1:a5:d5:e5:35:ce:be:72:33:eb:37:19:6a:26:ac:
a7:2e:a6:a3:f7:92:6a:f0:1a:d9:c1:2f:63:8e:4b:
c4:cc:23:3c:46:15:95:6a:7d:8a:ff:07:bb:27:7b:
47:de:f6:39:0a:e7:3d:f4:ef:82:e2:9a:7d:79:97:
af:2a:22:f1:ac:7e:4c:30:65:70:49:ae:17:f5:cd:
14:ae:30:e1:20:da:88:ee:f6:58:fa:05:54:35:0a:
5a:8b:5f:bf:5b:48:05:f6:12:3e:db:08:44:09:c1:
f6:12:be:66:d2:04:1b:fa:c4:e2:e9:4b:5d:8d:da:
0a:c2:ca:9c:53:57:87:da:26:6b:72:75:78:68:a4:
c6:26:59:29:df:08:f5:23:61:9b:e1:5f:ed:31:9f:
7f:a1:35:17:7c:6c:ae:46:e4:ed:1b:41:43:18:3e:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:91:DB:B3:13:54:05:EC:DF:5B:7A:3B:0B:14:D7:9B:61:3F:15:98
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/8pHbsxNUBezfW3o7CxTXm2E_FZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fc:d8:12:4a:e6:a8:cd:38:b3:e7:95:18:60:4e:94:b4:f2:
a2:16:e9:7d:40:36:10:63:a0:d7:df:e8:c4:83:17:9c:28:5f:
a3:22:f0:27:21:a5:fc:76:e9:2a:73:64:ab:76:16:bb:d2:84:
38:53:07:20:f0:b8:da:61:7c:82:db:6b:6e:02:e6:79:f5:63:
25:45:e4:d1:eb:db:ea:ae:24:ed:e8:06:f7:4f:28:c8:8c:1b:
9a:b0:bd:0e:3a:bd:18:4c:73:3b:e4:71:4d:42:d9:f1:c0:0e:
fb:c5:da:a1:87:48:b1:04:a1:0e:0d:5a:a4:ff:04:21:7b:c2:
ed:8c:50:6c:f4:81:81:96:4e:cd:5e:75:77:ee:5d:72:d5:1b:
e8:9a:ec:67:50:ac:67:12:b0:c3:8b:11:dd:47:fc:a9:13:22:
6f:8f:7d:92:99:ac:91:29:b2:5c:ea:29:e8:b7:c7:de:18:40:
11:b8:90:4d:44:87:a4:48:b6:ef:51:7e:64:d1:35:f9:4a:ac:
b9:f7:19:a1:7b:99:c9:24:30:40:8a:3a:f2:d6:4b:14:57:9a:
d4:0e:63:8b:a3:07:89:d0:f7:a0:db:2e:78:e0:1e:7c:de:70:
1c:f8:4e:f7:a2:c8:8c:82:4f:b2:a9:b2:45:1a:49:ca:d0:09:
da:41:ae:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:26 2025 by rpki-client