Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/7dnQ44GldidZWr_ZyZ0BB-6NweY.roa
File: 7dnQ44GldidZWr_ZyZ0BB-6NweY.roa (raw, json)
Hash identifier: hYLS3ZA41tmWWah7HmZx7V4gnYzyFTv+ygjaSkfnFsk=
Subject key identifier: ED:D9:D0:E3:81:A5:76:27:59:5A:BF:D9:C9:9D:01:07:EE:8D:C1:E6
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 0182EEA27D444655F83C81E34B02E8228A6F
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/7dnQ44GldidZWr_ZyZ0BB-6NweY.roa
Signing time: Tue 30 Aug 2022 12:03:22 +0000
ROA not before: Tue 30 Aug 2022 12:03:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50689
IP address blocks: 195.210.0.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:a2:7d:44:46:55:f8:3c:81:e3:4b:02:e8:22:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Aug 30 12:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edd9d0e381a57627595abfd9c99d0107ee8dc1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:47:cf:1d:3f:a6:1b:11:78:6f:0f:77:30:
f1:3d:27:7c:1d:0d:5c:23:40:d7:e5:c6:2d:37:27:
50:a5:05:cf:12:a3:ed:cc:2e:81:38:e4:75:19:18:
52:d1:e6:35:bf:59:04:b9:c5:d1:c6:8d:43:92:68:
43:b6:26:20:84:a1:3a:c2:69:17:01:78:c7:42:92:
3e:41:8b:02:b1:e5:b4:8b:ad:73:a4:a4:7a:f8:4f:
e3:e6:ca:81:27:9f:68:f1:f5:e6:d4:c1:97:4d:c5:
33:f0:e1:73:16:31:33:5e:c7:2d:12:50:e0:5e:b7:
5c:6c:7e:a2:0e:c6:32:6f:ee:d6:22:9c:8c:d0:0a:
c6:2a:1d:cf:91:9f:12:15:c0:35:4d:24:35:3e:1a:
f0:7a:f5:46:13:31:17:0f:4e:ed:1e:17:9a:c9:95:
0c:37:67:ab:56:33:a7:60:04:53:70:d7:93:17:aa:
c1:6c:28:51:27:6c:98:ff:b1:38:c1:d8:b7:d7:2d:
23:ed:b7:f2:06:4a:85:0d:c8:24:33:c7:36:e9:8f:
bf:b5:4a:39:67:c4:98:ec:9b:17:74:50:1c:84:34:
ac:95:b4:2e:5c:ef:ca:b0:20:4a:e5:a6:26:97:5c:
86:37:92:25:99:f4:e3:8f:db:54:2a:a6:21:c3:0a:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:D0:E3:81:A5:76:27:59:5A:BF:D9:C9:9D:01:07:EE:8D:C1:E6
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/7dnQ44GldidZWr_ZyZ0BB-6NweY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:d0:93:21:e5:a3:49:ed:24:bd:f8:e9:92:21:4d:87:0c:46:
66:72:77:72:19:70:bb:ad:79:b2:27:1f:eb:e5:f1:b7:4b:f5:
88:f8:79:df:c3:7a:c4:79:be:f2:2e:99:3f:4c:b4:7b:38:00:
19:a9:12:6d:a3:c3:a9:68:b7:da:59:16:9d:e9:be:cc:95:b9:
48:91:41:cf:17:f3:03:4e:bd:a2:15:a2:00:1d:84:ae:b0:dc:
20:05:bb:c0:df:9f:8e:12:dd:ba:4e:78:4f:98:2e:c9:70:f4:
ae:05:cb:e7:f8:d6:bc:90:c2:8b:29:7a:5e:ca:a4:ca:e5:91:
6d:47:e0:f9:f2:c3:85:9f:7d:c4:66:1b:06:0c:93:4b:91:7c:
e7:06:07:c5:66:a3:af:92:87:a2:76:22:7a:8a:59:2f:6c:d8:
71:24:ee:97:39:5f:d1:19:6d:b8:15:35:bf:4c:3a:3f:13:27:
6b:13:84:2f:59:52:ff:b6:07:fc:2d:81:74:b8:84:8d:a4:bc:
f0:48:42:39:55:36:06:bf:8a:02:f4:16:d3:4c:59:4a:b9:3c:
85:8b:85:dc:78:14:84:6d:f6:65:9c:48:e8:a9:70:89:c5:30:
25:69:f3:1e:23:e3:e8:6f:1e:15:92:93:4c:bf:fe:fc:2e:e6:
61:7d:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:49:05 2025 by rpki-client