Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Im1MTR1G05jj-AEWwaDnvWO1H4Y.roa
File: Im1MTR1G05jj-AEWwaDnvWO1H4Y.roa (raw, json)
Hash identifier: DuVeFWlicaJH2hF63+/BVKx2T/+QgqjkfVvM2jSEUmE=
Subject key identifier: 22:6D:4C:4D:1D:46:D3:98:E3:F8:01:16:C1:A0:E7:BD:63:B5:1F:86
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B12CA845F16DF2FAD0D1F748DEE9FF96A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Im1MTR1G05jj-AEWwaDnvWO1H4Y.roa
Signing time: Mon 09 Oct 2023 04:55:43 +0000
ROA not before: Mon 09 Oct 2023 04:55:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 195.58.37.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
195.133.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:12:ca:84:5f:16:df:2f:ad:0d:1f:74:8d:ee:9f:f9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 9 04:55:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=226d4c4d1d46d398e3f80116c1a0e7bd63b51f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:f4:a8:7c:79:06:0e:eb:cd:31:f3:ef:24:
9f:4b:a7:52:87:ca:36:bb:bb:fe:61:fc:66:c6:51:
d1:8e:ea:dd:7c:67:e1:51:d4:85:00:90:bb:2e:6f:
d3:f4:fe:07:b7:24:7e:c2:a8:ae:f8:6d:3d:50:98:
b3:89:40:6e:92:49:cf:7f:16:f2:b1:b4:10:8c:2a:
dd:d0:77:ba:f9:20:cd:fc:2e:e3:22:86:0b:2c:5e:
aa:3a:b4:37:d1:f0:73:80:d4:b8:a9:16:59:b5:a0:
55:1f:8f:e6:fd:c4:bb:b0:0c:20:7b:29:49:04:b6:
e3:6e:c5:4c:60:4a:04:6c:be:df:40:93:ca:0d:56:
20:8c:a1:40:a2:f7:e6:fd:b6:18:e9:3a:bd:cb:7e:
e7:9d:63:9e:d2:eb:d0:88:ea:ed:8b:5a:ee:90:a0:
82:f3:c9:87:be:d2:31:4f:6e:22:d0:d3:6c:5e:cb:
d0:e0:be:90:b6:0b:f2:ae:82:26:8c:b3:8e:e8:52:
53:8b:eb:9d:d8:35:16:86:21:6f:95:93:dc:02:ae:
4b:6a:3a:34:bd:d1:bc:ee:dc:5f:4a:43:a3:59:ad:
af:69:ef:b2:d3:14:a5:1f:05:b5:19:75:a0:68:38:
2d:f3:89:6e:92:46:80:ff:08:04:f2:97:73:76:68:
6e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:4C:4D:1D:46:D3:98:E3:F8:01:16:C1:A0:E7:BD:63:B5:1F:86
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Im1MTR1G05jj-AEWwaDnvWO1H4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.37.0/24
195.133.61.0/24
195.133.63.0/24
212.192.246.0/24
Signature Algorithm: sha256WithRSAEncryption
64:04:f4:84:64:2d:f8:57:d2:9e:8e:6e:76:db:46:ac:86:94:
dd:4e:ac:c6:81:3d:08:24:28:9e:c6:da:81:0c:99:5f:b4:a0:
85:f5:4a:e7:dc:52:0d:8a:f2:a5:89:76:96:db:08:70:a9:5c:
d9:51:85:ee:e1:e3:d7:35:36:43:ff:ab:40:f9:d9:46:11:1a:
f8:cb:42:59:b0:40:9a:8a:76:f4:61:13:e2:84:f7:7f:94:6c:
d2:f8:25:e8:71:4a:0f:2f:5c:08:f5:a2:38:2a:27:c0:c7:91:
c7:58:05:f0:ee:be:33:c3:85:45:83:47:fd:e2:42:03:19:9d:
2c:30:e6:3c:7b:8f:98:1a:08:ac:7e:a5:1f:ca:44:dd:99:18:
bd:7a:a1:60:33:5c:fd:54:24:e0:80:37:a9:2c:16:4b:b4:87:
cf:14:4c:98:8d:f5:b0:06:43:ea:38:db:e2:63:b0:39:24:ad:
c9:55:8a:3c:19:78:11:95:81:7d:44:a3:e3:c6:79:6f:35:45:
b7:4b:93:1a:f5:e9:1b:83:45:a3:b4:41:7d:94:01:9a:c1:c4:
b6:81:a4:28:a9:8c:f0:a8:99:7e:3f:8c:de:d4:36:85:a0:49:
27:1f:d3:d7:ed:3e:81:84:ee:12:41:5d:77:9a:57:13:28:e6:
62:42:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:14:53 2025 by rpki-client