Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/189dhsP-kZ2LP-5IXbjkh9BhnDU.roa
File: 189dhsP-kZ2LP-5IXbjkh9BhnDU.roa (raw, json)
Hash identifier: rEhSTQwpGWCKYMWItJ0jytxsB9JPv8v8CZaVC3jGlhg=
Subject key identifier: D7:CF:5D:86:C3:FE:91:9D:8B:3F:EE:48:5D:B8:E4:87:D0:61:9C:35
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 01893F685D606CC1A4787AE85A30840FBBF1
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/189dhsP-kZ2LP-5IXbjkh9BhnDU.roa
Signing time: Mon 10 Jul 2023 10:45:51 +0000
ROA not before: Mon 10 Jul 2023 10:45:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213291
IP address blocks: 195.242.16.0/20 maxlen: 24
2a13:5947::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:68:5d:60:6c:c1:a4:78:7a:e8:5a:30:84:0f:bb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Jul 10 10:45:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7cf5d86c3fe919d8b3fee485db8e487d0619c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:37:af:9d:35:83:2e:30:0a:36:e4:d7:a7:
93:a4:a3:ea:d3:30:9b:e9:bb:7e:95:6e:50:5e:0b:
a2:cb:13:bd:db:7e:da:68:5d:fc:f2:4e:af:79:e4:
10:78:21:d6:18:c7:95:28:45:b6:80:7a:cb:ce:db:
3b:0d:2b:20:7a:37:c9:0d:46:34:bb:b9:a3:fb:99:
7e:e2:1b:d8:d1:b3:35:de:96:33:09:59:5b:0a:2b:
42:48:d0:c7:f2:39:34:ea:55:5d:db:49:70:19:75:
fb:7c:66:2f:46:a4:29:b5:72:56:63:26:20:e3:3f:
0d:32:29:58:9f:c6:15:c3:55:83:db:53:32:b4:d1:
ae:54:da:ba:47:f9:d3:12:d5:a7:5e:77:18:f5:f5:
66:f5:10:39:2f:05:e3:fc:21:46:a8:84:d0:d6:80:
9d:7f:b5:fb:f5:c3:54:25:b9:3c:fd:e2:a2:c1:8e:
4a:b2:17:f2:e0:2d:04:ce:fd:cf:a9:c6:19:d4:ba:
de:13:78:09:ad:f3:a2:30:30:be:18:a0:de:08:69:
06:5b:a5:a6:31:f2:1d:3c:7a:80:92:06:9c:b7:9b:
c8:4f:da:6c:38:20:26:5d:81:92:0d:18:1a:b7:0f:
f3:5a:38:02:54:ca:67:29:90:92:6e:41:b5:21:41:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:5D:86:C3:FE:91:9D:8B:3F:EE:48:5D:B8:E4:87:D0:61:9C:35
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/189dhsP-kZ2LP-5IXbjkh9BhnDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.16.0/20
IPv6:
2a13:5947::/40
Signature Algorithm: sha256WithRSAEncryption
38:21:a2:f1:73:b1:ba:e2:98:4d:ae:2f:4c:5d:d9:f8:55:dc:
67:6a:bb:83:12:99:b2:f0:72:0b:2d:4e:a8:7c:65:b0:d5:73:
8d:49:57:22:1b:7d:9d:58:ef:4b:50:b1:69:6b:11:bd:3d:fa:
d3:29:ec:14:3f:96:aa:06:e8:a1:95:58:cc:b2:77:25:20:a2:
7f:17:94:d0:70:eb:39:f5:a6:9b:14:8f:71:a1:19:6b:2d:0f:
ce:1c:6c:7e:60:3a:c7:5b:35:1a:8b:57:ab:ef:aa:1e:3e:32:
85:36:86:ea:17:d9:cd:43:1e:28:40:3a:a1:43:f2:31:32:b3:
98:84:88:a0:2e:f7:1a:5d:c9:f6:6f:d3:56:54:46:b1:27:d4:
17:ed:ff:b0:70:fe:cf:c7:25:86:a7:d3:8b:f7:16:bc:7c:36:
84:09:b3:f6:98:cf:97:a0:bb:ae:74:90:b9:36:d4:4c:dd:78:
8c:13:b4:29:bd:6e:d5:a5:e3:c1:06:a1:8c:dd:0c:27:1e:44:
92:88:15:dc:6b:ef:3a:85:b4:73:a5:e2:10:e8:43:b3:45:be:
79:0d:78:36:d9:5d:ca:ea:68:cb:cb:4c:74:c7:53:6c:d9:8f:
9e:7f:fb:f7:5d:4a:ce:b9:53:eb:8a:be:6b:91:5d:29:d9:52:
a7:42:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:11:54 2025 by rpki-client