Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/BADhxyBFYzuPJ2RN3XBzp99Dy4Q.roa
File: BADhxyBFYzuPJ2RN3XBzp99Dy4Q.roa (raw, json)
Hash identifier: qxeQKHtWbmTw2F30w9lbksQmyoiwhBZCR54q+ZuTYjo=
Subject key identifier: 04:00:E1:C7:20:45:63:3B:8F:27:64:4D:DD:70:73:A7:DF:43:CB:84
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 045593D7
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/BADhxyBFYzuPJ2RN3XBzp99Dy4Q.roa
Signing time: Tue 01 Mar 2022 08:39:29 +0000
ROA not before: Tue 01 Mar 2022 08:39:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39626
IP address blocks: 195.246.227.0/24 maxlen: 24
2001:7f8:16::/64 maxlen: 64
2001:7f8:16::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72717271 (0x45593d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Mar 1 08:39:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0400e1c72045633b8f27644ddd7073a7df43cb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:80:e1:f9:26:f9:36:66:56:d0:e4:0a:33:
03:7b:38:a4:ab:2d:ed:c6:81:dd:e9:05:90:37:73:
ff:9f:2e:67:ce:18:da:02:1f:c6:44:ea:0c:cf:6e:
2a:e1:b8:d5:65:76:38:84:f2:bb:77:07:f4:b4:70:
9c:f4:58:58:f5:02:cf:8f:8c:0f:05:d8:68:b4:e2:
9e:4f:9b:31:07:31:5c:08:59:4c:e2:f8:52:28:28:
45:8d:f3:2f:a1:50:ac:0f:4f:b0:9a:ea:69:f6:77:
f8:fd:e9:82:69:a8:ec:c4:87:c1:55:f1:2c:73:7f:
fc:e9:25:c8:e4:58:ab:61:f2:6d:f8:cf:57:4e:a2:
58:8a:6f:62:d2:54:b9:a0:68:48:2f:a1:8d:b6:09:
42:4d:a7:14:fe:a4:33:32:5d:62:34:93:0b:42:e6:
5b:1c:3a:ca:41:0b:3a:eb:bd:46:a8:80:0c:8a:9d:
20:e8:af:25:c5:3e:85:0d:9d:c1:8d:62:6b:97:75:
c4:67:ee:cc:a4:95:25:27:88:8d:d8:e1:23:ee:b7:
36:35:80:d1:b7:1d:62:10:ac:1a:d3:c7:e8:eb:8d:
6a:4a:b5:58:22:fd:44:5e:d1:96:ef:86:c2:0c:db:
97:be:a0:01:b3:c8:92:72:79:34:58:3d:43:0d:bb:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:E1:C7:20:45:63:3B:8F:27:64:4D:DD:70:73:A7:DF:43:CB:84
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/BADhxyBFYzuPJ2RN3XBzp99Dy4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.227.0/24
IPv6:
2001:7f8:16::/48
Signature Algorithm: sha256WithRSAEncryption
5b:22:fd:7d:36:02:63:42:fa:44:30:11:12:4a:58:0e:c4:da:
36:72:1a:82:78:5f:34:e5:67:9a:6e:74:a9:8b:6a:8a:b0:5c:
52:1e:b9:2a:82:f5:9c:b1:a1:c8:c1:8b:41:82:42:ce:05:dd:
e2:18:5b:aa:80:b0:7a:c9:28:fc:b0:68:f0:c7:b4:dd:aa:fe:
66:29:d5:04:6f:84:3b:eb:6b:2a:6b:be:81:a1:8e:f5:35:7e:
97:9f:d3:c9:64:16:ea:4c:3e:17:2c:d2:b1:08:9d:59:c7:1e:
55:60:51:d4:99:42:02:a7:4c:58:aa:10:5e:89:28:71:20:ae:
a1:37:8b:b5:6c:13:ec:e7:69:d6:31:5e:87:d1:32:ff:ce:8b:
70:12:36:96:04:a1:3a:3c:88:f4:48:e0:2f:6f:28:d1:31:fa:
e3:af:53:90:17:98:09:2e:6b:c8:6c:2f:4d:d1:bd:0a:33:c8:
30:26:d3:01:dd:b9:3a:0c:8d:96:cd:26:84:e4:a7:3b:1b:00:
73:1e:0b:43:fb:46:c6:66:9a:8d:e8:cc:92:2a:20:b9:1b:be:
0c:30:3b:8b:86:2d:04:bf:10:8a:82:c0:cd:37:88:85:87:ac:
52:a7:8a:3c:4d:4f:be:d6:d0:e4:32:e9:ba:1d:24:61:3f:fb:
df:75:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:14:55 2025 by rpki-client